$ rpki-client -vvf rpkica.twnic.tw/rpki/WANIN/0/101B0A7F90D58731E9618DC432438C8BFDB28AF4.mft File: 101B0A7F90D58731E9618DC432438C8BFDB28AF4.mft (raw, json) Hash identifier: lPrAzTtwfqSUY/Y5fLr4lC581/lPfeKl1szHydl2fUU= Subject key identifier: 4C:5C:EC:BF:04:88:BD:25:17:C9:E2:B3:AA:38:BB:A4:F5:8D:C9:4B Authority key identifier: 10:1B:0A:7F:90:D5:87:31:E9:61:8D:C4:32:43:8C:8B:FD:B2:8A:F4 Certificate issuer: /CN=101B0A7F90D58731E9618DC432438C8BFDB28AF4 Certificate serial: 46DD58417133F9CAB53329E2168E300DAEA1FA9B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/101B0A7F90D58731E9618DC432438C8BFDB28AF4.cer Subject info access: rsync://rpkica.twnic.tw/rpki/WANIN/0/101B0A7F90D58731E9618DC432438C8BFDB28AF4.mft Manifest number: 0A Signing time: Wed 13 May 2026 09:37:52 +0000 Manifest this update: Wed 13 May 2026 09:32:52 +0000 Manifest next update: Thu 14 May 2026 11:39:52 +0000 Files and hashes: 1: 3130332e3133302e3132362e302f32342d3234203d3e20313331363336.roa (hash: TLjcZQcFu7MKcP1kT7lAPY8o3wjcQeXfdOkLoUquYVA=) 2: 3130332e3133302e3132372e302f32342d3234203d3e20313331363336.roa (hash: FnT/XgOP5REsMrJKvplqM9/TZ2tdCkQ9b4citLvn+6U=) 3: 3130332e3133302e3132342e302f32322d3234203d3e20313331363336.roa (hash: 7MNXU7sfreKdDoH2cxg35XbGCH5NeuOsP993lyzfqsc=) 4: 323430333a623963303a3a2f33322d3438203d3e20313331363336.roa (hash: E288eui5EN66onNVEK7Y344pLWOHjEel/MAK2S1bEhQ=) 5: 3130332e3133302e3132352e302f32342d3234203d3e20313331363336.roa (hash: FraePq7gvqKVgRVRs1hOCUPexz3gSr4BPRhnGrHTV3o=) 6: 3130332e3133302e3132342e302f32342d3234203d3e20313331363336.roa (hash: VXtVToak1u7PW+U+n97OPXO4Dchb6DLpI7qRdjvNc0Q=) 7: 3231312e37362e3138382e302f32332d3234203d3e20313331363336.roa (hash: oaNsp11upkBZ+JGYlmo3nCJ8dB+RQUZt5gJM6iJrwHk=) 8: 101B0A7F90D58731E9618DC432438C8BFDB28AF4.crl (hash: wpy2wE+1bbKXpZyI6cIWizsjKQ/pTfuAZJa5FZAZL7U=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/WANIN/0/101B0A7F90D58731E9618DC432438C8BFDB28AF4.crl rsync://rpkica.twnic.tw/rpki/WANIN/0/101B0A7F90D58731E9618DC432438C8BFDB28AF4.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/101B0A7F90D58731E9618DC432438C8BFDB28AF4.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:39:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:dd:58:41:71:33:f9:ca:b5:33:29:e2:16:8e:30:0d:ae:a1:fa:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=101B0A7F90D58731E9618DC432438C8BFDB28AF4 Validity Not Before: May 13 09:32:52 2026 GMT Not After : May 14 11:39:52 2026 GMT Subject: CN=4C5CECBF0488BD2517C9E2B3AA38BBA4F58DC94B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:35:98:bb:22:87:a2:53:a3:26:a6:30:07:38: 64:88:cd:e8:6d:2b:36:3e:7c:cf:e3:9e:33:83:80: 95:82:0b:2c:e7:bf:3d:29:aa:b8:dc:0d:2c:10:05: 06:16:c4:9f:09:e7:23:aa:e4:e5:67:5d:05:9e:74: 53:06:bd:c3:87:ff:1b:16:3f:cf:d2:f1:7b:49:8c: a9:31:a2:6b:cf:44:2a:20:87:0a:83:40:d6:82:81: d8:68:18:0c:7a:b9:c3:e0:11:7a:3e:2e:e1:0d:d5: a2:79:47:b7:e3:4e:bc:bb:f6:9b:e3:ca:ee:3b:8a: c8:5e:a7:b1:b0:89:e7:4c:12:d9:42:ff:06:2f:b6: 73:9d:e1:5c:78:52:c3:be:cb:0d:ce:fd:a8:23:b9: 33:3d:28:56:10:ce:84:bb:10:f5:08:f2:29:a6:0e: 4e:ec:bd:91:b8:87:7e:28:b3:ea:fd:d0:06:3c:f1: 07:7f:aa:3b:cc:7a:e8:3e:55:22:18:9b:11:ff:c4: ac:99:f1:8b:58:ad:e0:81:7c:86:e7:03:e7:5a:e0: 78:64:0b:22:59:85:b3:79:78:15:49:14:83:b1:38: 02:f7:7b:ec:f6:16:a9:e5:c5:80:68:06:f4:12:e2: a0:e2:21:49:7a:57:28:3e:70:f2:59:7e:ae:8d:aa: b0:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:5C:EC:BF:04:88:BD:25:17:C9:E2:B3:AA:38:BB:A4:F5:8D:C9:4B X509v3 Authority Key Identifier: keyid:10:1B:0A:7F:90:D5:87:31:E9:61:8D:C4:32:43:8C:8B:FD:B2:8A:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/WANIN/0/101B0A7F90D58731E9618DC432438C8BFDB28AF4.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/101B0A7F90D58731E9618DC432438C8BFDB28AF4.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/WANIN/0/101B0A7F90D58731E9618DC432438C8BFDB28AF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:72:c9:38:28:6e:3b:d7:28:43:64:96:33:d8:4d:f5:41:61: 9c:3b:dc:e5:6f:a9:5c:88:02:ca:27:2c:a7:9c:0a:b1:a5:d3: d7:b5:fe:d5:cf:bc:ba:f4:28:8a:fb:58:30:d7:58:4e:36:72: 66:0b:13:2a:59:ae:22:d9:ff:f3:9a:44:9b:c8:c5:ac:7b:25: 99:23:07:10:e7:f6:df:91:c4:cd:05:20:5b:5b:a2:70:b2:18: 4c:71:6f:42:d8:76:d1:fa:c0:37:01:bc:5e:8c:9b:98:d7:a5: 23:af:bc:37:b1:6a:1d:58:6b:fe:33:b9:df:a4:7d:c5:40:c3: 99:28:ec:01:dd:ae:3a:bb:1b:3c:d0:3a:25:7d:7f:7a:b1:09: a6:3d:76:31:fa:bc:54:b9:0f:c3:53:21:fa:55:19:8c:cc:b0: b6:88:0b:22:b1:3d:63:a8:40:b3:82:21:7f:67:bf:e7:5c:47: 92:63:99:42:26:e1:09:ac:18:e8:c5:ba:db:9c:e4:a1:8b:00: 4c:e6:4b:65:40:50:49:52:54:ac:eb:80:e8:87:6c:5b:9a:91: f0:dc:99:a9:8a:c2:b9:05:3d:c1:c1:bb:60:59:42:aa:45:99: 97:a4:da:dd:c8:86:cf:b0:d5:ef:ea:78:86:b4:b0:c3:c3:cb: 90:09:c1:d1 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIURt1YQXEz+cq1MyniFo4wDa6h+pswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTAxQjBBN0Y5MEQ1ODczMUU5NjE4REM0MzI0MzhDOEJG REIyOEFGNDAeFw0yNjA1MTMwOTMyNTJaFw0yNjA1MTQxMTM5NTJaMDMxMTAvBgNV BAMTKDRDNUNFQ0JGMDQ4OEJEMjUxN0M5RTJCM0FBMzhCQkE0RjU4REM5NEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqNZi7IoeiU6MmpjAHOGSIzeht KzY+fM/jnjODgJWCCyznvz0pqrjcDSwQBQYWxJ8J5yOq5OVnXQWedFMGvcOH/xsW P8/S8XtJjKkxomvPRCoghwqDQNaCgdhoGAx6ucPgEXo+LuEN1aJ5R7fjTry79pvj yu47ishep7GwiedMEtlC/wYvtnOd4Vx4UsO+yw3O/agjuTM9KFYQzoS7EPUI8imm Dk7svZG4h34os+r90AY88Qd/qjvMeug+VSIYmxH/xKyZ8YtYreCBfIbnA+da4Hhk CyJZhbN5eBVJFIOxOAL3e+z2FqnlxYBoBvQS4qDiIUl6Vyg+cPJZfq6NqrDNAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUTFzsvwSIvSUXyeKzqji7pPWNyUswHwYDVR0j BBgwFoAUEBsKf5DVhzHpYY3EMkOMi/2yivQwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvV0FOSU4v MC8xMDFCMEE3RjkwRDU4NzMxRTk2MThEQzQzMjQzOEM4QkZEQjI4QUY0LmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzEwMUIwQTdGOTBENTg3MzFFOTYxOERDNDMyNDM4 QzhCRkRCMjhBRjQuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9XQU5JTi8wLzEwMUIwQTdGOTBENTg3 MzFFOTYxOERDNDMyNDM4QzhCRkRCMjhBRjQubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCScsk4KG471yhD ZJYz2E31QWGcO9zlb6lciALKJyynnAqxpdPXtf7Vz7y69CiK+1gw11hONnJmCxMq Wa4i2f/zmkSbyMWseyWZIwcQ5/bfkcTNBSBbW6JwshhMcW9C2HbR+sA3AbxejJuY 16Ujr7w3sWodWGv+M7nfpH3FQMOZKOwB3a46uxs80DolfX96sQmmPXYx+rxUuQ/D UyH6VRmMzLC2iAsisT1jqECzgiF/Z7/nXEeSY5lCJuEJrBjoxbrbnOShiwBM5ktl QFBJUlSs64Doh2xbmpHw3JmpisK5BT3BwbtgWUKqRZmXpNrdyIbPsNXv6niGtLDD w8uQCcHR -----END CERTIFICATE-----Generated at Wed May 13 20:33:41 2026 by rpki-client