$ rpki-client -vvvf rpkica.twnic.tw/rpki/AOTERNET/1/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.mft File: DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.mft (raw, json) Hash identifier: 1PcUeYgy1VqhnnbMuEeqgFCH5pf/cLHB7hm4SVu4sMk= Subject key identifier: 76:D5:89:57:BF:23:20:28:F5:6E:89:88:E9:13:F7:56:80:07:3F:A3 Authority key identifier: DB:E0:6A:5F:C5:A5:E2:89:AC:EB:48:7B:50:C5:EC:D3:B6:DE:23:4C Certificate issuer: /CN=DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C Certificate serial: 1EB3EE7200447DA37F9C5277030EBBABF26B5DA6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.cer Subject info access: rsync://rpkica.twnic.tw/rpki/AOTERNET/1/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.mft Manifest number: E3 Signing time: Mon 05 Oct 2026 15:04:36 +0000 Manifest this update: Mon 05 Oct 2026 14:59:36 +0000 Manifest next update: Tue 06 Oct 2026 17:24:36 +0000 Files and hashes: 1: 3134342e37392e3233362e302f32332d3234203d3e203138303430.roa (hash: swWMMhQXlSR0PFV4e85I459ba4C8/nyQkI/jb0Kgt70=) 2: 3134342e37392e3233372e302f32342d3332203d3e203138303430.roa (hash: r6p1Am50m6SY4C22THPfAzr++Eba9JH1Hgnd4WmFLsA=) 3: 3134342e37392e3233362e302f32342d3234203d3e203138303430.roa (hash: ZudjpagHov1aZlrdTbsVSXtYt3YeCsmSW4h5XCZ/uzs=) 4: 3134342e37392e3233362e302f32342d3332203d3e203138303430.roa (hash: 1FIFjMBcizShdvw6u5phvDGtZhnMBusqAuzpJLq+G90=) 5: DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.crl (hash: fZK4CYZXUie1vz5tD32csgzzEQ6f6S2TE2sS5Ic5CHE=) 6: 3134342e37392e3233372e302f32342d3234203d3e203138303430.roa (hash: YiNfhn2rfnFW/2M2Ag4d3OUBywy0FERwAc5K7Q8vyfc=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/AOTERNET/1/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.crl rsync://rpkica.twnic.tw/rpki/AOTERNET/1/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 Oct 2026 17:24:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:b3:ee:72:00:44:7d:a3:7f:9c:52:77:03:0e:bb:ab:f2:6b:5d:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C Validity Not Before: Oct 5 14:59:36 2026 GMT Not After : Oct 6 17:24:36 2026 GMT Subject: CN=76D58957BF232028F56E8988E913F75680073FA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:20:af:10:7b:61:20:20:29:07:90:9e:ee:a9: 54:ca:16:fa:99:a6:f8:98:68:84:4a:76:1a:86:72: 86:dc:a6:d2:82:d2:ed:92:34:72:a4:de:38:c8:78: 18:fd:c2:ab:76:d2:e4:20:7c:eb:fe:cd:a5:cb:fd: f6:6d:c9:a7:ca:c4:63:5d:f7:e8:09:c5:fe:b1:b4: 06:a1:77:68:51:5d:11:ab:7c:5f:46:78:33:f5:73: f9:cc:11:61:2a:0e:4d:15:ef:2c:fe:87:e3:f5:2a: 90:2d:9a:95:d5:c6:4a:de:a1:10:58:50:08:88:e5: 75:ec:74:3b:67:1e:16:43:da:38:aa:9c:ee:ec:4b: 38:cf:8f:4a:8b:2b:34:9d:e4:cd:96:c2:c6:5e:74: 5c:a0:1f:70:b9:a5:ff:6d:19:c2:e9:b9:7c:20:1b: d3:8d:95:c5:10:3b:ad:a2:5c:e0:cd:be:98:94:0c: 79:74:dd:57:95:9e:9c:43:06:05:41:f4:55:bd:ad: 6d:cf:4e:b4:f9:eb:3e:4d:28:40:dc:3c:e1:59:a4: dd:97:25:0f:be:a3:d4:af:03:3e:d7:2a:39:62:6e: 14:cc:c5:d1:7b:b2:f2:fb:7c:a1:a7:49:a6:f0:b5: d8:96:73:b2:f5:31:c1:eb:07:a5:e5:cb:53:d5:21: bf:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:D5:89:57:BF:23:20:28:F5:6E:89:88:E9:13:F7:56:80:07:3F:A3 X509v3 Authority Key Identifier: keyid:DB:E0:6A:5F:C5:A5:E2:89:AC:EB:48:7B:50:C5:EC:D3:B6:DE:23:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/AOTERNET/1/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/AOTERNET/1/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:eb:f4:ee:c8:d2:38:ab:5c:f9:d7:64:45:e2:2e:51:ff:13: fa:bf:2b:e1:e9:68:1a:03:57:8a:42:93:85:d2:10:d0:4c:c8: d4:68:eb:51:fe:e0:56:24:82:ee:7a:30:6b:2b:ad:68:f3:03: be:72:c0:0d:b4:29:40:89:de:ea:68:6f:a7:32:93:bd:07:c8: a3:94:81:d9:83:84:a0:a9:e4:a0:bd:37:c5:b4:d3:7b:3f:5d: b4:dd:c3:99:a2:59:f9:f2:bd:0c:2c:6e:7f:ae:98:d8:5d:c3: 7e:fa:d4:25:ed:00:64:2a:52:e7:2c:b9:e5:3b:62:2d:45:b8: c6:2f:86:74:fc:dd:a4:30:20:1f:6d:94:44:13:8c:7d:9d:a6: ff:46:4a:4d:36:3f:52:cf:69:db:04:a2:72:d9:73:13:3e:c1: bf:19:a3:55:f6:25:86:2c:b6:f6:1a:76:e9:8d:88:cf:b0:47: d6:5c:71:2c:e3:0f:62:25:2f:28:e8:f6:7c:e0:62:d4:13:c9: 35:e9:63:9e:9c:3b:fd:f0:81:4f:38:77:d8:88:d0:8a:c2:99: b8:f9:3a:c4:92:15:5a:aa:98:56:95:ba:9c:13:66:6e:21:31: 91:a2:d7:c0:df:61:a3:4d:60:1b:80:5c:ff:0d:4e:20:2c:91: 78:fd:52:5b -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUHrPucgBEfaN/nFJ3Aw67q/JrXaYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJFMDZBNUZDNUE1RTI4OUFDRUI0ODdCNTBDNUVDRDNC NkRFMjM0QzAeFw0yNjEwMDUxNDU5MzZaFw0yNjEwMDYxNzI0MzZaMDMxMTAvBgNV BAMTKDc2RDU4OTU3QkYyMzIwMjhGNTZFODk4OEU5MTNGNzU2ODAwNzNGQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoIK8Qe2EgICkHkJ7uqVTKFvqZ pviYaIRKdhqGcobcptKC0u2SNHKk3jjIeBj9wqt20uQgfOv+zaXL/fZtyafKxGNd 9+gJxf6xtAahd2hRXRGrfF9GeDP1c/nMEWEqDk0V7yz+h+P1KpAtmpXVxkreoRBY UAiI5XXsdDtnHhZD2jiqnO7sSzjPj0qLKzSd5M2WwsZedFygH3C5pf9tGcLpuXwg G9ONlcUQO62iXODNvpiUDHl03VeVnpxDBgVB9FW9rW3PTrT56z5NKEDcPOFZpN2X JQ++o9SvAz7XKjlibhTMxdF7svL7fKGnSabwtdiWc7L1McHrB6Xly1PVIb/PAgMB AAGjggHyMIIB7jAdBgNVHQ4EFgQUdtWJV78jICj1bomI6RP3VoAHP6MwHwYDVR0j BBgwFoAU2+BqX8Wl4oms60h7UMXs07beI0wwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQU9URVJO RVQvMS9EQkUwNkE1RkM1QTVFMjg5QUNFQjQ4N0I1MEM1RUNEM0I2REUyMzRDLmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8wL0RCRTA2QTVGQzVBNUUyODlBQ0VCNDg3QjUw QzVFQ0QzQjZERTIzNEMuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9BT1RFUk5FVC8xL0RCRTA2QTVG QzVBNUUyODlBQ0VCNDg3QjUwQzVFQ0QzQjZERTIzNEMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAx6/Tu yNI4q1z512RF4i5R/xP6vyvh6WgaA1eKQpOF0hDQTMjUaOtR/uBWJILuejBrK61o 8wO+csANtClAid7qaG+nMpO9B8ijlIHZg4SgqeSgvTfFtNN7P1203cOZoln58r0M LG5/rpjYXcN++tQl7QBkKlLnLLnlO2ItRbjGL4Z0/N2kMCAfbZREE4x9nab/RkpN Nj9Sz2nbBKJy2XMTPsG/GaNV9iWGLLb2GnbpjYjPsEfWXHEs4w9iJS8o6PZ84GLU E8k16WOenDv98IFPOHfYiNCKwpm4+TrEkhVaqphWlbqcE2ZuITGRotfA32GjTWAb gFz/DU4gLJF4/VJb -----END CERTIFICATE-----Generated at Tue Oct 6 08:39:20 2026 by rpki-client