$ rpki-client -vvf rpkica.twnic.tw/rpki/ZUSO/1/9CDE503CCE370A39E157F8519ACF1A47727CC1C3.mft File: 9CDE503CCE370A39E157F8519ACF1A47727CC1C3.mft (raw, json) Hash identifier: 8N+fUABnLi8T1Gf74NHn4XNqJC3MuRhs6Z7Teo02cYo= Subject key identifier: A6:C7:1D:E0:D3:A6:23:55:30:58:5D:00:B3:A1:92:CA:48:E9:8C:A7 Authority key identifier: 9C:DE:50:3C:CE:37:0A:39:E1:57:F8:51:9A:CF:1A:47:72:7C:C1:C3 Certificate issuer: /CN=9CDE503CCE370A39E157F8519ACF1A47727CC1C3 Certificate serial: 79A1F89EA80F742C8A0B0F0481DFCD94B5AE0AF8 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/9CDE503CCE370A39E157F8519ACF1A47727CC1C3.cer Subject info access: rsync://rpkica.twnic.tw/rpki/ZUSO/1/9CDE503CCE370A39E157F8519ACF1A47727CC1C3.mft Manifest number: 84 Signing time: Fri 14 Aug 2026 17:02:37 +0000 Manifest this update: Fri 14 Aug 2026 16:57:37 +0000 Manifest next update: Sat 15 Aug 2026 18:24:37 +0000 Files and hashes: 1: 9CDE503CCE370A39E157F8519ACF1A47727CC1C3.crl (hash: oNDjdIbk4r8dHOO0SJ6UYJt9R4v4TPIsoVZpSifBqFI=) 2: 3133382e3235322e31332e302f32342d3234203d3e20313331363338.roa (hash: ZxFVwcoOUjiuOptQUvoMY0HJlqBq+tEMKJCTrxaADFk=) 3: 3133382e3235322e31322e302f32332d3234203d3e203633393030.roa (hash: T1G4LI5dLLgbVaIvhEyF4d3yTLg74BSvJymMPoiXRRs=) 4: 3133382e3235322e31322e302f32342d3234203d3e203633393030.roa (hash: M8obdGIsjRO1zF80aPiV/zHcUxXnNPdWJ9IvgOv18N0=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/ZUSO/1/9CDE503CCE370A39E157F8519ACF1A47727CC1C3.crl rsync://rpkica.twnic.tw/rpki/ZUSO/1/9CDE503CCE370A39E157F8519ACF1A47727CC1C3.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/9CDE503CCE370A39E157F8519ACF1A47727CC1C3.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 15 Aug 2026 18:24:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:a1:f8:9e:a8:0f:74:2c:8a:0b:0f:04:81:df:cd:94:b5:ae:0a:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CDE503CCE370A39E157F8519ACF1A47727CC1C3 Validity Not Before: Aug 14 16:57:37 2026 GMT Not After : Aug 15 18:24:37 2026 GMT Subject: CN=A6C71DE0D3A6235530585D00B3A192CA48E98CA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:a9:61:f2:81:82:e6:79:2f:48:84:bc:d6:6b: 35:e2:8d:19:f6:d7:97:2e:e5:af:80:70:39:57:d5: b0:fb:9c:b9:65:ce:ed:fd:ea:c3:5a:2f:c2:cc:da: 71:09:3a:8f:d6:45:d4:fa:a9:e3:61:49:c3:4f:c9: 83:eb:5a:a6:85:8c:9b:90:cc:70:4b:67:60:cf:87: 19:b7:0e:8b:7c:cc:48:c8:2f:cf:7b:bc:79:04:7a: f5:d4:8a:7c:a9:08:40:60:e3:dd:b7:48:0c:7e:1c: 4c:3b:fe:43:98:1d:2d:c6:86:23:63:9f:18:1e:77: f6:b6:26:68:34:cf:6d:18:f3:36:52:dc:58:a6:2e: b4:d3:65:a1:9b:1c:ec:5b:26:fc:03:aa:a5:3a:a0: 74:e6:a0:4b:f5:aa:15:44:b4:77:33:72:2e:2c:50: 5c:c6:8a:4e:3c:d8:ef:a7:82:8d:86:ef:18:e1:68: 25:c6:37:c6:29:d1:cf:de:35:db:c3:c9:ef:a5:b1: 93:0f:b7:7a:06:92:0a:b0:e5:95:85:3a:5c:ad:b6: d0:8f:b6:91:af:17:8f:9c:fc:4d:09:08:77:87:f8: 1b:34:f1:bb:d2:d2:18:39:84:52:b2:89:7b:ea:88: 51:1f:d4:4f:0d:d3:2e:f0:35:59:cd:d2:9c:81:cb: 74:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:C7:1D:E0:D3:A6:23:55:30:58:5D:00:B3:A1:92:CA:48:E9:8C:A7 X509v3 Authority Key Identifier: keyid:9C:DE:50:3C:CE:37:0A:39:E1:57:F8:51:9A:CF:1A:47:72:7C:C1:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/ZUSO/1/9CDE503CCE370A39E157F8519ACF1A47727CC1C3.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/9CDE503CCE370A39E157F8519ACF1A47727CC1C3.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ZUSO/1/9CDE503CCE370A39E157F8519ACF1A47727CC1C3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:9f:2b:f8:8a:05:9d:b4:8f:e6:a3:94:d1:51:65:53:73:b4: 9e:7c:76:7f:18:fb:95:47:44:80:e9:fb:d7:23:41:03:41:25: c2:52:c4:81:5f:8c:85:ec:d9:01:64:55:aa:8e:94:35:e5:88: 2d:2d:b7:08:0d:69:59:8b:6e:70:3b:04:be:e6:fc:e2:a1:53: e4:c6:44:ed:97:a1:07:98:60:f5:a6:59:6c:7f:98:a6:96:da: 58:8c:74:56:d0:a5:b4:f6:ac:ce:ec:00:a4:dc:64:4a:6d:d0: 69:ba:5f:53:86:4c:21:5e:59:b2:4a:82:75:3e:0f:a3:55:68: ae:ea:31:15:73:96:a8:48:8f:4e:5a:fb:1b:9b:52:d2:21:bd: da:69:f9:10:67:2f:6c:c5:2e:e0:65:9e:ef:ad:b3:90:8c:a9: f5:18:bb:e0:eb:bd:2e:33:11:48:96:74:5e:0e:69:cc:03:37: be:28:3f:cb:fb:51:79:4b:fd:d6:78:ea:57:78:0e:77:57:94: e6:8a:22:48:4a:6f:7e:fe:9a:b7:db:b1:f3:e3:3c:e3:f5:6b: ba:c4:92:cc:88:d3:fe:b1:55:a1:5e:59:62:bf:a9:f3:d8:6b: 83:ed:af:82:ce:3f:d5:87:ec:40:84:65:36:b8:32:aa:f0:df: be:b5:c6:77 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUeaH4nqgPdCyKCw8Egd/NlLWuCvgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNERTUwM0NDRTM3MEEzOUUxNTdGODUxOUFDRjFBNDc3 MjdDQzFDMzAeFw0yNjA4MTQxNjU3MzdaFw0yNjA4MTUxODI0MzdaMDMxMTAvBgNV BAMTKEE2QzcxREUwRDNBNjIzNTUzMDU4NUQwMEIzQTE5MkNBNDhFOThDQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjqWHygYLmeS9IhLzWazXijRn2 15cu5a+AcDlX1bD7nLllzu396sNaL8LM2nEJOo/WRdT6qeNhScNPyYPrWqaFjJuQ zHBLZ2DPhxm3Dot8zEjIL897vHkEevXUinypCEBg4923SAx+HEw7/kOYHS3GhiNj nxged/a2Jmg0z20Y8zZS3FimLrTTZaGbHOxbJvwDqqU6oHTmoEv1qhVEtHczci4s UFzGik482O+ngo2G7xjhaCXGN8Yp0c/eNdvDye+lsZMPt3oGkgqw5ZWFOlytttCP tpGvF4+c/E0JCHeH+Bs08bvS0hg5hFKyiXvqiFEf1E8N0y7wNVnN0pyBy3QVAgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQUpscd4NOmI1UwWF0As6GSykjpjKcwHwYDVR0j BBgwFoAUnN5QPM43CjnhV/hRms8aR3J8wcMwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvWlVTTy8x LzlDREU1MDNDQ0UzNzBBMzlFMTU3Rjg1MTlBQ0YxQTQ3NzI3Q0MxQzMuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzAvOUNERTUwM0NDRTM3MEEzOUUxNTdGODUxOUFDRjFB NDc3MjdDQzFDMy5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1pVU08vMS85Q0RFNTAzQ0NFMzcwQTM5 RTE1N0Y4NTE5QUNGMUE0NzcyN0NDMUMzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoJ8r+IoFnbSP5qOU 0VFlU3O0nnx2fxj7lUdEgOn71yNBA0ElwlLEgV+MhezZAWRVqo6UNeWILS23CA1p WYtucDsEvub84qFT5MZE7ZehB5hg9aZZbH+YppbaWIx0VtCltPaszuwApNxkSm3Q abpfU4ZMIV5ZskqCdT4Po1VoruoxFXOWqEiPTlr7G5tS0iG92mn5EGcvbMUu4GWe 762zkIyp9Ri74Ou9LjMRSJZ0Xg5pzAM3vig/y/tReUv91njqV3gOd1eU5ooiSEpv fv6at9ux8+M84/VrusSSzIjT/rFVoV5ZYr+p89hrg+2vgs4/1YfsQIRlNrgyqvDf vrXGdw== -----END CERTIFICATE-----Generated at Sat Aug 15 10:23:22 2026 by rpki-client