$ rpki-client -vvf rpkica.twnic.tw/rpki/ZAT/0/0291B733B1EED1AF7E817D958CE6F13A585F0695.mft File: 0291B733B1EED1AF7E817D958CE6F13A585F0695.mft (raw, json) Hash identifier: GC3cid1FTzIJexV7iFB8LlhbdG6sgL+n4EQI8QNBLxU= Subject key identifier: 08:E3:6B:97:75:A8:AD:37:11:70:FD:52:C8:B1:D8:D0:6A:0C:A4:0A Authority key identifier: 02:91:B7:33:B1:EE:D1:AF:7E:81:7D:95:8C:E6:F1:3A:58:5F:06:95 Certificate issuer: /CN=0291B733B1EED1AF7E817D958CE6F13A585F0695 Certificate serial: 27991F3719829B907898219677B5330FE9E3D191 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0291B733B1EED1AF7E817D958CE6F13A585F0695.cer Subject info access: rsync://rpkica.twnic.tw/rpki/ZAT/0/0291B733B1EED1AF7E817D958CE6F13A585F0695.mft Manifest number: 81 Signing time: Fri 14 Aug 2026 10:56:36 +0000 Manifest this update: Fri 14 Aug 2026 10:51:36 +0000 Manifest next update: Sat 15 Aug 2026 13:56:36 +0000 Files and hashes: 1: 0291B733B1EED1AF7E817D958CE6F13A585F0695.crl (hash: hHEsFRfWUD4nliG8AJZVYEunThB8I8EKmTCY3iCapds=) 2: 3231302e37392e3135312e302f32342d3234203d3e20323031323137.roa (hash: WRpRpWc9nNYJzvwhsCMAvWKmyMgtn7Z1UBftNahQj4c=) 3: 323430313a353561303a3a2f33322d3332203d3e203138303431.roa (hash: CrzulhqYuNBjNzDQRC8BOsQxP+QuAw4ZbCFe65kH3fw=) 4: 3231302e37392e3135302e302f32332d3234203d3e203138303431.roa (hash: XF9vSkheKC1NRFUS3alvj8iCKGl0+/ZaB+X31yisdf0=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/ZAT/0/0291B733B1EED1AF7E817D958CE6F13A585F0695.crl rsync://rpkica.twnic.tw/rpki/ZAT/0/0291B733B1EED1AF7E817D958CE6F13A585F0695.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0291B733B1EED1AF7E817D958CE6F13A585F0695.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 15 Aug 2026 13:56:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:99:1f:37:19:82:9b:90:78:98:21:96:77:b5:33:0f:e9:e3:d1:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0291B733B1EED1AF7E817D958CE6F13A585F0695 Validity Not Before: Aug 14 10:51:36 2026 GMT Not After : Aug 15 13:56:36 2026 GMT Subject: CN=08E36B9775A8AD371170FD52C8B1D8D06A0CA40A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5d:c9:c4:2b:14:e6:d9:e6:e3:11:00:3c:d7: b7:0d:e1:17:1e:19:d9:97:03:83:91:0b:68:cb:d4: a4:cc:56:80:79:49:7f:4a:e5:a5:40:55:83:9d:48: 26:e7:58:a3:74:2a:e1:73:f2:fd:a9:5a:15:99:8d: 1d:00:3d:9a:39:38:c7:b9:85:3e:22:54:29:88:89: 64:93:84:6e:7c:ea:2f:73:d0:59:78:1a:89:0b:5d: 20:63:cf:34:6c:a2:07:35:57:c7:5b:b2:53:7f:0f: 39:79:56:69:89:1f:cf:da:ba:a3:6d:d4:7e:da:72: c8:69:b2:3a:85:8d:50:7d:c8:e1:1a:3a:71:4a:69: 7b:36:07:18:e1:0a:a0:cd:09:80:55:a2:0a:c2:bc: bd:38:78:51:20:66:e0:0a:a5:4d:51:3a:df:c2:cd: a1:97:6e:ee:70:7e:78:f9:47:3f:39:f9:9d:aa:85: 21:0b:13:a8:38:8e:7a:ce:d1:f2:c2:0c:d3:73:62: d6:66:ac:24:67:b4:c2:0a:c9:43:8a:08:22:c4:e1: 09:e9:7a:32:4b:3c:bb:26:72:83:c2:a6:08:49:65: 5b:5a:89:b4:67:6f:98:f9:d4:dc:29:0c:06:e3:b8: 34:62:3a:78:22:70:b8:97:ea:27:8e:06:1c:41:a7: 43:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:E3:6B:97:75:A8:AD:37:11:70:FD:52:C8:B1:D8:D0:6A:0C:A4:0A X509v3 Authority Key Identifier: keyid:02:91:B7:33:B1:EE:D1:AF:7E:81:7D:95:8C:E6:F1:3A:58:5F:06:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/ZAT/0/0291B733B1EED1AF7E817D958CE6F13A585F0695.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0291B733B1EED1AF7E817D958CE6F13A585F0695.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ZAT/0/0291B733B1EED1AF7E817D958CE6F13A585F0695.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:e3:61:d5:86:4f:ae:0f:d6:7f:64:8f:72:c3:ff:ee:43:c6: fd:03:5f:b9:a3:fa:3c:a6:86:ad:3c:93:7e:2b:d1:2d:91:e5: dc:4c:0f:41:62:99:9e:93:b0:cb:5c:54:df:13:81:30:a1:64: 7c:5b:5a:26:ed:a2:20:27:a3:98:69:11:2f:fc:ba:0a:47:b4: 78:70:ac:27:1f:77:67:b0:92:ca:39:53:f4:d2:f1:e2:28:eb: fa:25:97:21:a3:b4:59:b7:4b:13:4b:a3:e6:c2:de:bd:32:9b: 17:a2:e2:4d:ea:55:ab:ae:67:51:46:3a:9d:38:e9:83:79:27: f3:08:d1:d4:70:3c:23:44:bc:65:37:1e:74:26:ae:1e:7a:02: e0:ea:f6:e4:53:22:98:c4:42:5d:12:00:7a:f4:a1:ca:a8:31: c2:f8:b6:ee:a8:21:4d:a9:63:a0:75:4f:c6:a5:20:68:7e:e2: 1e:62:2e:ed:44:d1:1a:d5:37:9d:b0:65:ea:b9:5c:c4:a1:63: d3:cd:a2:18:5a:72:0f:ee:9f:79:e1:52:25:16:af:3b:83:7a: e4:f4:97:0a:ce:0f:63:f3:ab:42:76:79:56:70:38:31:05:2b: 81:2f:3a:a8:8c:6f:3c:74:f5:ed:e0:8b:ae:08:83:b4:77:32: eb:04:e4:ff -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUJ5kfNxmCm5B4mCGWd7UzD+nj0ZEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI5MUI3MzNCMUVFRDFBRjdFODE3RDk1OENFNkYxM0E1 ODVGMDY5NTAeFw0yNjA4MTQxMDUxMzZaFw0yNjA4MTUxMzU2MzZaMDMxMTAvBgNV BAMTKDA4RTM2Qjk3NzVBOEFEMzcxMTcwRkQ1MkM4QjFEOEQwNkEwQ0E0MEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0XcnEKxTm2ebjEQA817cN4Rce GdmXA4ORC2jL1KTMVoB5SX9K5aVAVYOdSCbnWKN0KuFz8v2pWhWZjR0APZo5OMe5 hT4iVCmIiWSThG586i9z0Fl4GokLXSBjzzRsogc1V8dbslN/Dzl5VmmJH8/auqNt 1H7acshpsjqFjVB9yOEaOnFKaXs2BxjhCqDNCYBVogrCvL04eFEgZuAKpU1ROt/C zaGXbu5wfnj5Rz85+Z2qhSELE6g4jnrO0fLCDNNzYtZmrCRntMIKyUOKCCLE4Qnp ejJLPLsmcoPCpghJZVtaibRnb5j51NwpDAbjuDRiOngicLiX6ieOBhxBp0NdAgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUCONrl3WorTcRcP1SyLHY0GoMpAowHwYDVR0j BBgwFoAUApG3M7Hu0a9+gX2VjObxOlhfBpUwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvWkFULzAv MDI5MUI3MzNCMUVFRDFBRjdFODE3RDk1OENFNkYxM0E1ODVGMDY5NS5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS8wMjkxQjczM0IxRUVEMUFGN0U4MTdEOTU4Q0U2RjEz QTU4NUYwNjk1LmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvWkFULzAvMDI5MUI3MzNCMUVFRDFBRjdF ODE3RDk1OENFNkYxM0E1ODVGMDY5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAKnjYdWGT64P1n9kj3LD /+5Dxv0DX7mj+jymhq08k34r0S2R5dxMD0FimZ6TsMtcVN8TgTChZHxbWibtoiAn o5hpES/8ugpHtHhwrCcfd2ewkso5U/TS8eIo6/ollyGjtFm3SxNLo+bC3r0ymxei 4k3qVauuZ1FGOp046YN5J/MI0dRwPCNEvGU3HnQmrh56AuDq9uRTIpjEQl0SAHr0 ocqoMcL4tu6oIU2pY6B1T8alIGh+4h5iLu1E0RrVN52wZeq5XMShY9PNohhacg/u n3nhUiUWrzuDeuT0lwrOD2Pzq0J2eVZwODEFK4EvOqiMbzx09e3gi64Ig7R3MusE 5P8= -----END CERTIFICATE-----Generated at Sat Aug 15 05:21:30 2026 by rpki-client