$ rpki-client -vvf rpkica.twnic.tw/rpki/ZUSO/1/9CDE503CCE370A39E157F8519ACF1A47727CC1C3.mft File: 9CDE503CCE370A39E157F8519ACF1A47727CC1C3.mft (raw, json) Hash identifier: FSGGtnVNPETXO0XJesg7TjZfFUwOnz+YE9N/SbIQinM= Subject key identifier: 96:9C:82:2D:34:87:36:37:33:61:B4:77:5A:8D:40:4B:9E:30:BF:2A Authority key identifier: 9C:DE:50:3C:CE:37:0A:39:E1:57:F8:51:9A:CF:1A:47:72:7C:C1:C3 Certificate issuer: /CN=9CDE503CCE370A39E157F8519ACF1A47727CC1C3 Certificate serial: 21BFF5C606B578069329AEA06D9CDF101620CF8C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/9CDE503CCE370A39E157F8519ACF1A47727CC1C3.cer Subject info access: rsync://rpkica.twnic.tw/rpki/ZUSO/1/9CDE503CCE370A39E157F8519ACF1A47727CC1C3.mft Manifest number: 0B Signing time: Fri 15 May 2026 11:41:58 +0000 Manifest this update: Fri 15 May 2026 11:36:58 +0000 Manifest next update: Sat 16 May 2026 14:02:58 +0000 Files and hashes: 1: 9CDE503CCE370A39E157F8519ACF1A47727CC1C3.crl (hash: 69TrFPPbmJbjhlQRulq6MHkzprp/WiK4CqL9o+JfDIQ=) 2: 3133382e3235322e31332e302f32342d3234203d3e20313331363338.roa (hash: ZxFVwcoOUjiuOptQUvoMY0HJlqBq+tEMKJCTrxaADFk=) 3: 3133382e3235322e31322e302f32332d3234203d3e203633393030.roa (hash: T1G4LI5dLLgbVaIvhEyF4d3yTLg74BSvJymMPoiXRRs=) 4: 3133382e3235322e31322e302f32342d3234203d3e203633393030.roa (hash: M8obdGIsjRO1zF80aPiV/zHcUxXnNPdWJ9IvgOv18N0=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/ZUSO/1/9CDE503CCE370A39E157F8519ACF1A47727CC1C3.crl rsync://rpkica.twnic.tw/rpki/ZUSO/1/9CDE503CCE370A39E157F8519ACF1A47727CC1C3.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/9CDE503CCE370A39E157F8519ACF1A47727CC1C3.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 16 May 2026 14:02:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:bf:f5:c6:06:b5:78:06:93:29:ae:a0:6d:9c:df:10:16:20:cf:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CDE503CCE370A39E157F8519ACF1A47727CC1C3 Validity Not Before: May 15 11:36:58 2026 GMT Not After : May 16 14:02:58 2026 GMT Subject: CN=969C822D348736373361B4775A8D404B9E30BF2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:06:40:47:b4:45:f4:6e:7b:cb:69:19:66:3f: 9e:aa:aa:a9:8e:fb:20:93:81:99:74:29:4a:ab:d7: c1:c2:29:f3:07:52:ca:c2:4b:c3:38:d4:7d:a0:89: d3:24:04:5c:b9:3f:a3:f3:30:58:31:b7:ce:11:4f: bc:c0:9b:8f:0a:1d:f7:af:e3:2f:4f:71:86:cb:69: e6:1f:58:ef:e2:04:f8:cd:00:c5:ce:6e:4b:6d:d0: d2:b2:d4:e1:0a:77:28:d4:54:ba:f7:58:a9:88:53: 09:7a:23:ae:f6:93:ab:78:2e:66:82:ba:b1:c3:d5: fb:29:30:cc:b1:6d:1b:3a:a3:53:03:60:2c:ae:2c: bf:4b:10:d3:40:a7:87:f9:d3:0a:89:fe:0c:41:77: 46:d5:50:cc:01:9e:7e:9f:7a:80:3c:f0:69:c6:0a: a1:88:bd:99:3a:0c:05:6e:32:fd:72:90:ea:c8:49: 28:7a:50:90:b0:42:14:61:83:91:1e:73:99:50:45: 3b:65:fd:b7:9c:5b:9a:fc:ae:aa:1a:99:ea:53:39: 58:59:cf:7f:bb:db:33:7a:e0:46:53:fc:16:e8:46: 0e:a4:80:5f:43:e8:c7:aa:16:be:3c:b2:29:ab:3f: f2:9e:25:f2:f1:95:15:d1:a2:99:67:16:83:88:94: a6:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:9C:82:2D:34:87:36:37:33:61:B4:77:5A:8D:40:4B:9E:30:BF:2A X509v3 Authority Key Identifier: keyid:9C:DE:50:3C:CE:37:0A:39:E1:57:F8:51:9A:CF:1A:47:72:7C:C1:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/ZUSO/1/9CDE503CCE370A39E157F8519ACF1A47727CC1C3.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/9CDE503CCE370A39E157F8519ACF1A47727CC1C3.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ZUSO/1/9CDE503CCE370A39E157F8519ACF1A47727CC1C3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:94:7e:c1:d5:67:75:b1:fc:7e:b5:da:75:41:96:6a:ef:ba: 6b:b7:3d:00:5a:80:85:8d:27:78:ff:8e:fc:9f:f2:35:87:ad: ae:83:45:cd:40:3e:5a:1c:d6:73:4c:b3:f5:11:f2:37:22:db: cf:f7:6f:cc:68:ec:a8:70:5a:b1:19:7f:4a:17:b3:31:db:99: 90:81:59:6c:33:fa:b4:23:62:94:63:aa:ab:e9:2f:ff:f4:0d: 76:58:49:eb:76:9b:3c:33:f7:a5:fb:6c:f4:55:9b:c0:b8:75: f2:7d:77:4d:91:fc:6c:f4:02:e8:e2:c9:be:d2:f2:a1:23:55: da:35:25:7e:36:9d:10:cd:90:8e:fb:a0:63:9f:c8:1e:bc:37: 8f:bb:05:8b:f5:f8:98:cb:f7:27:7c:f8:af:7e:8c:ac:ab:e6: 68:d7:cb:37:27:cb:c4:f9:0e:2e:2c:3b:67:a2:35:0d:3f:70: 70:82:20:ce:3f:2f:14:9d:8c:90:d9:6a:2b:d3:83:02:c5:5d: c9:0e:07:44:a1:fc:6b:31:b7:59:62:23:17:0f:f3:95:05:3f: 80:e0:c9:83:1c:da:95:9e:b0:84:f6:c7:2e:c8:c0:c7:af:b1: 26:dc:23:d4:56:a2:99:f0:e7:fa:4a:26:e9:65:bb:61:9c:92: 6a:60:a9:74 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUIb/1xga1eAaTKa6gbZzfEBYgz4wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNERTUwM0NDRTM3MEEzOUUxNTdGODUxOUFDRjFBNDc3 MjdDQzFDMzAeFw0yNjA1MTUxMTM2NThaFw0yNjA1MTYxNDAyNThaMDMxMTAvBgNV BAMTKDk2OUM4MjJEMzQ4NzM2MzczMzYxQjQ3NzVBOEQ0MDRCOUUzMEJGMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgBkBHtEX0bnvLaRlmP56qqqmO +yCTgZl0KUqr18HCKfMHUsrCS8M41H2gidMkBFy5P6PzMFgxt84RT7zAm48KHfev 4y9PcYbLaeYfWO/iBPjNAMXObktt0NKy1OEKdyjUVLr3WKmIUwl6I672k6t4LmaC urHD1fspMMyxbRs6o1MDYCyuLL9LENNAp4f50wqJ/gxBd0bVUMwBnn6feoA88GnG CqGIvZk6DAVuMv1ykOrISSh6UJCwQhRhg5Eec5lQRTtl/becW5r8rqoamepTOVhZ z3+72zN64EZT/BboRg6kgF9D6MeqFr48simrP/KeJfLxlRXRoplnFoOIlKZ9AgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQUlpyCLTSHNjczYbR3Wo1AS54wvyowHwYDVR0j BBgwFoAUnN5QPM43CjnhV/hRms8aR3J8wcMwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvWlVTTy8x LzlDREU1MDNDQ0UzNzBBMzlFMTU3Rjg1MTlBQ0YxQTQ3NzI3Q0MxQzMuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzAvOUNERTUwM0NDRTM3MEEzOUUxNTdGODUxOUFDRjFB NDc3MjdDQzFDMy5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1pVU08vMS85Q0RFNTAzQ0NFMzcwQTM5 RTE1N0Y4NTE5QUNGMUE0NzcyN0NDMUMzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAopR+wdVndbH8frXa dUGWau+6a7c9AFqAhY0neP+O/J/yNYetroNFzUA+WhzWc0yz9RHyNyLbz/dvzGjs qHBasRl/ShezMduZkIFZbDP6tCNilGOqq+kv//QNdlhJ63abPDP3pfts9FWbwLh1 8n13TZH8bPQC6OLJvtLyoSNV2jUlfjadEM2QjvugY5/IHrw3j7sFi/X4mMv3J3z4 r36MrKvmaNfLNyfLxPkOLiw7Z6I1DT9wcIIgzj8vFJ2MkNlqK9ODAsVdyQ4HRKH8 azG3WWIjFw/zlQU/gODJgxzalZ6whPbHLsjAx6+xJtwj1FaimfDn+kom6WW7YZyS amCpdA== -----END CERTIFICATE-----Generated at Sat May 16 04:53:41 2026 by rpki-client