$ rpki-client -vvvf rpkica.twnic.tw/rpki/VOCOM/0/55042E416ADDC03A5164A7BFFDFF2C3BF285E697.mft File: 55042E416ADDC03A5164A7BFFDFF2C3BF285E697.mft (raw, json) Hash identifier: wWIoim0FY6T5Qn1kUThJBM5nNAk+KaRjQKj9dMhkcUk= Subject key identifier: 54:A4:EB:85:F7:2F:CD:8B:F4:15:D4:D1:1B:AA:11:4E:91:AF:7C:AC Authority key identifier: 55:04:2E:41:6A:DD:C0:3A:51:64:A7:BF:FD:FF:2C:3B:F2:85:E6:97 Certificate issuer: /CN=55042E416ADDC03A5164A7BFFDFF2C3BF285E697 Certificate serial: 25BBC503AB1A5F3BBF87C0E3C6F4FC869D8D56F7 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/55042E416ADDC03A5164A7BFFDFF2C3BF285E697.cer Subject info access: rsync://rpkica.twnic.tw/rpki/VOCOM/0/55042E416ADDC03A5164A7BFFDFF2C3BF285E697.mft Manifest number: CF Signing time: Sun 04 Oct 2026 11:05:18 +0000 Manifest this update: Sun 04 Oct 2026 11:00:18 +0000 Manifest next update: Mon 05 Oct 2026 13:55:18 +0000 Files and hashes: 1: 3130332e3137382e33362e302f32342d3234203d3e203633383937.roa (hash: 2azY5QpqkCNrePgWVeAMiXZ5eEir6bAcf/jcts5dKaA=) 2: 55042E416ADDC03A5164A7BFFDFF2C3BF285E697.crl (hash: n7olBhdE2NlA8hg78Y8K+ioDQwfqWSD7beA/FCjHZhg=) 3: 323430303a343436303a3a2f33322d3332203d3e203633383937.roa (hash: E17SRJCOW39t5BmRtT7oN3GTu5stDbJU5j3SmVWuYIY=) 4: 3130332e3137382e33372e302f32342d3234203d3e203633383937.roa (hash: dBLtMtWolWPZlDBlQNEYLj3mkdf7gjz7o7zCR6CwyI8=) 5: 3130332e3132372e3233372e302f32342d3234203d3e203633383937.roa (hash: hLL+Q2dyswUs44c6qgjOFEnwxGdXH4rlp2JBE4jLeaI=) 6: 3130332e3132372e3233392e302f32342d3234203d3e203633383937.roa (hash: RXB9NbnwUCoIODvg6FbjUt5jkhMEopd79EmJGHVqbuA=) 7: 3130332e3132372e3233382e302f32342d3234203d3e20323038393332.roa (hash: nt3GnjyC68uevHd0pUpAVGqFmziCH3936csURlgKs7c=) 8: 3130332e3137382e33362e302f32332d3233203d3e203633383937.roa (hash: TrUjkrPBuZfmFYv7xRBVx68uC1wSPuSMTE2msjPc8Oc=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/VOCOM/0/55042E416ADDC03A5164A7BFFDFF2C3BF285E697.crl rsync://rpkica.twnic.tw/rpki/VOCOM/0/55042E416ADDC03A5164A7BFFDFF2C3BF285E697.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/55042E416ADDC03A5164A7BFFDFF2C3BF285E697.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 22:23:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:bb:c5:03:ab:1a:5f:3b:bf:87:c0:e3:c6:f4:fc:86:9d:8d:56:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55042E416ADDC03A5164A7BFFDFF2C3BF285E697 Validity Not Before: Oct 4 11:00:18 2026 GMT Not After : Oct 5 13:55:18 2026 GMT Subject: CN=54A4EB85F72FCD8BF415D4D11BAA114E91AF7CAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:f2:34:32:95:79:1c:f2:b6:d7:7c:71:7c:62: 84:0c:4d:1a:db:0e:62:d6:fb:45:ac:3c:70:47:22: e7:09:44:c9:ef:09:94:0a:72:63:70:c8:ee:0d:b1: 97:08:3f:ce:61:c9:62:34:11:de:ee:23:ed:f7:0b: a5:95:66:65:93:24:6f:c6:92:51:2c:ae:c2:a0:64: b3:de:12:9b:79:05:44:85:66:b1:ef:fd:b8:cc:bf: d0:a6:88:28:c0:32:2e:5c:34:79:cb:f5:79:34:94: 8e:92:e0:a3:e0:4f:66:ed:6a:c4:f1:19:07:62:46: 79:57:32:a5:59:05:27:a1:85:60:01:76:ae:60:0b: ad:7f:de:fc:a5:c9:4d:30:d4:5e:a3:41:53:5f:4a: f3:c2:06:c7:c1:c5:e1:c9:44:55:4c:7a:ae:2d:c2: da:15:91:04:9a:69:dd:09:80:5b:94:81:e0:17:7b: a5:cd:11:ba:40:6d:9a:20:1c:4c:14:31:ff:56:e9: 97:32:5b:a9:6b:60:c8:94:c8:ab:e7:ca:79:23:59: 22:f7:a3:e3:91:0f:e8:41:63:41:12:80:e1:02:d1: 88:5b:97:71:b2:42:42:5e:b7:cb:de:f2:69:81:3c: 0b:d9:46:af:2c:02:c6:90:0c:d2:11:e8:9b:70:9a: 48:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:A4:EB:85:F7:2F:CD:8B:F4:15:D4:D1:1B:AA:11:4E:91:AF:7C:AC X509v3 Authority Key Identifier: keyid:55:04:2E:41:6A:DD:C0:3A:51:64:A7:BF:FD:FF:2C:3B:F2:85:E6:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/VOCOM/0/55042E416ADDC03A5164A7BFFDFF2C3BF285E697.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/55042E416ADDC03A5164A7BFFDFF2C3BF285E697.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VOCOM/0/55042E416ADDC03A5164A7BFFDFF2C3BF285E697.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:1c:1c:ed:5a:43:12:43:dd:e3:0a:c9:38:8f:ce:47:9f:74: 7a:55:81:82:41:8c:f8:66:a3:4f:3c:ec:f7:ae:2a:a9:c0:1f: 50:61:c5:70:f7:87:33:0e:81:d7:20:83:c5:e1:b8:7a:d9:ba: 04:29:77:2b:a7:4f:1f:ce:5d:04:44:3f:c4:7f:be:da:92:72: cd:11:f6:44:15:55:5b:ee:4b:26:1b:8f:26:f5:5f:29:d6:f5: 39:5a:0e:39:bf:d6:66:01:12:0a:d0:93:af:5b:09:b5:30:73: 46:bb:6b:1d:b5:b5:23:f8:c4:15:4b:00:8d:5b:32:4b:8a:0b: ea:14:f5:73:f5:6b:8d:d3:2c:6c:67:2c:0a:9d:b0:17:0e:b8: fc:61:86:dd:96:83:71:25:27:a5:dd:28:93:45:86:df:81:8e: 02:f6:7c:e6:64:39:9c:14:c3:ca:a6:0c:06:e4:d9:ea:47:44: 94:17:55:c4:59:8f:d5:ae:6d:ea:c6:10:fe:8b:82:3e:ee:f4: 21:7e:6e:32:80:0f:4f:bd:c8:52:fa:ef:d3:ae:ad:74:30:de: ad:37:11:bb:c4:e3:e5:ed:0b:d6:5e:5d:1f:3f:4a:04:57:bd: 15:de:0e:7c:96:89:10:e7:41:11:ab:a2:63:f4:1d:38:01:76: aa:7c:a4:15 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUJbvFA6saXzu/h8DjxvT8hp2NVvcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTUwNDJFNDE2QUREQzAzQTUxNjRBN0JGRkRGRjJDM0JG Mjg1RTY5NzAeFw0yNjEwMDQxMTAwMThaFw0yNjEwMDUxMzU1MThaMDMxMTAvBgNV BAMTKDU0QTRFQjg1RjcyRkNEOEJGNDE1RDREMTFCQUExMTRFOTFBRjdDQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa8jQylXkc8rbXfHF8YoQMTRrb DmLW+0WsPHBHIucJRMnvCZQKcmNwyO4NsZcIP85hyWI0Ed7uI+33C6WVZmWTJG/G klEsrsKgZLPeEpt5BUSFZrHv/bjMv9CmiCjAMi5cNHnL9Xk0lI6S4KPgT2btasTx GQdiRnlXMqVZBSehhWABdq5gC61/3vylyU0w1F6jQVNfSvPCBsfBxeHJRFVMeq4t wtoVkQSaad0JgFuUgeAXe6XNEbpAbZogHEwUMf9W6ZcyW6lrYMiUyKvnynkjWSL3 o+ORD+hBY0ESgOEC0Yhbl3GyQkJet8ve8mmBPAvZRq8sAsaQDNIR6JtwmkhXAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUVKTrhfcvzYv0FdTRG6oRTpGvfKwwHwYDVR0j BBgwFoAUVQQuQWrdwDpRZKe//f8sO/KF5pcwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVk9DT00v MC81NTA0MkU0MTZBRERDMDNBNTE2NEE3QkZGREZGMkMzQkYyODVFNjk3LmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzU1MDQyRTQxNkFEREMwM0E1MTY0QTdCRkZERkYy QzNCRjI4NUU2OTcuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9WT0NPTS8wLzU1MDQyRTQxNkFEREMw M0E1MTY0QTdCRkZERkYyQzNCRjI4NUU2OTcubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBEHBztWkMSQ93j Csk4j85Hn3R6VYGCQYz4ZqNPPOz3riqpwB9QYcVw94czDoHXIIPF4bh62boEKXcr p08fzl0ERD/Ef77aknLNEfZEFVVb7ksmG48m9V8p1vU5Wg45v9ZmARIK0JOvWwm1 MHNGu2sdtbUj+MQVSwCNWzJLigvqFPVz9WuN0yxsZywKnbAXDrj8YYbdloNxJSel 3SiTRYbfgY4C9nzmZDmcFMPKpgwG5NnqR0SUF1XEWY/Vrm3qxhD+i4I+7vQhfm4y gA9PvchS+u/Trq10MN6tNxG7xOPl7QvWXl0fP0oEV70V3g58lokQ50ERq6Jj9B04 AXaqfKQV -----END CERTIFICATE-----Generated at Sun Oct 4 13:39:26 2026 by rpki-client