$ rpki-client -vvvf rpkica.twnic.tw/rpki/CARLWATCH/0/6A8F810EB0BF683DFCA74C403A7B03D37E16F268.mft File: 6A8F810EB0BF683DFCA74C403A7B03D37E16F268.mft (raw, json) Hash identifier: 7dD/tPIvbui3mexbshRJXoW+RxoeCkncHSmCf9Q2Qy8= Subject key identifier: 02:B8:0F:8C:31:DA:DE:A7:97:BA:1D:26:CF:62:B6:C1:CF:87:9E:8E Authority key identifier: 6A:8F:81:0E:B0:BF:68:3D:FC:A7:4C:40:3A:7B:03:D3:7E:16:F2:68 Certificate issuer: /CN=6A8F810EB0BF683DFCA74C403A7B03D37E16F268 Certificate serial: 2AF3525FFC73191C5174144E3A70A5E2790E8C2E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6A8F810EB0BF683DFCA74C403A7B03D37E16F268.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CARLWATCH/0/6A8F810EB0BF683DFCA74C403A7B03D37E16F268.mft Manifest number: C3 Signing time: Sat 03 Oct 2026 03:37:48 +0000 Manifest this update: Sat 03 Oct 2026 03:32:48 +0000 Manifest next update: Sun 04 Oct 2026 04:04:48 +0000 Files and hashes: 1: 3130332e3136312e362e302f32332d3234203d3e20313331363138.roa (hash: HW3fNW9yAqboou7jAhk1cKMCcOPZDWYktjmxy1gjfvo=) 2: 6A8F810EB0BF683DFCA74C403A7B03D37E16F268.crl (hash: Hmj3QX0x3DiihS+Gd8lCqD5piAMQMSviLkVTQWf7PZU=) 3: 3130332e3136312e362e302f32332d3234203d3e203231383539.roa (hash: uWZD4+YbW51xLCVpXbXAANNn4P9xs+4KtJrLiouzkvQ=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CARLWATCH/0/6A8F810EB0BF683DFCA74C403A7B03D37E16F268.crl rsync://rpkica.twnic.tw/rpki/CARLWATCH/0/6A8F810EB0BF683DFCA74C403A7B03D37E16F268.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6A8F810EB0BF683DFCA74C403A7B03D37E16F268.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 04:04:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:f3:52:5f:fc:73:19:1c:51:74:14:4e:3a:70:a5:e2:79:0e:8c:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A8F810EB0BF683DFCA74C403A7B03D37E16F268 Validity Not Before: Oct 3 03:32:48 2026 GMT Not After : Oct 4 04:04:48 2026 GMT Subject: CN=02B80F8C31DADEA797BA1D26CF62B6C1CF879E8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:12:05:d4:82:aa:52:d7:f5:31:6a:91:aa:ef: 80:d2:db:62:25:8e:03:0d:88:eb:6e:cd:66:98:10: 2a:df:96:c7:2d:89:72:ed:3b:b2:0a:b0:65:7b:fd: 13:4a:34:b8:9a:4d:4a:f9:63:0d:35:95:b9:08:80: 9a:b9:28:af:62:25:3c:9f:85:78:64:d2:1c:2d:7d: e8:2b:dc:96:77:fe:9b:80:4d:c1:a4:26:ec:dd:ff: 69:cd:4a:01:56:bf:6e:a6:b1:ce:ff:12:d4:25:7b: 1a:c5:b3:0a:68:42:fd:93:31:04:eb:f0:6f:47:88: 80:6d:b1:0d:09:db:a4:1b:72:e1:51:3c:fb:a3:d9: a8:4b:a1:44:68:54:f9:b5:f3:24:cd:64:7a:91:a4: d6:46:da:5c:96:c6:0b:5d:bf:a0:11:f1:87:d3:d5: fe:95:68:3f:33:77:e4:74:00:9e:76:5a:62:cd:f3: 55:a7:f5:99:88:f4:e8:6c:99:8a:ca:ca:03:84:a0: 85:59:98:3c:12:28:c6:4d:ec:fc:f2:b3:98:39:5a: 81:09:53:84:d8:09:4e:79:34:c7:ee:de:33:d1:6b: 0c:e3:c5:30:6b:38:04:29:2b:89:33:c2:3d:69:45: 9a:bd:fa:23:aa:b8:f8:16:7b:e5:1e:1f:8c:50:31: 9a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:B8:0F:8C:31:DA:DE:A7:97:BA:1D:26:CF:62:B6:C1:CF:87:9E:8E X509v3 Authority Key Identifier: keyid:6A:8F:81:0E:B0:BF:68:3D:FC:A7:4C:40:3A:7B:03:D3:7E:16:F2:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CARLWATCH/0/6A8F810EB0BF683DFCA74C403A7B03D37E16F268.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6A8F810EB0BF683DFCA74C403A7B03D37E16F268.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CARLWATCH/0/6A8F810EB0BF683DFCA74C403A7B03D37E16F268.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:b2:82:c7:f1:10:36:3a:6a:71:94:4f:6d:2e:52:f8:fb:37: 38:de:06:13:c2:2f:04:d9:23:79:a2:d8:d8:17:5e:33:81:8e: 9c:a3:e9:05:69:c7:74:7f:15:e0:67:5c:0a:ae:9c:c8:5f:af: da:ee:7b:5b:a7:9c:3c:69:cc:ab:35:c5:ed:2c:c6:df:11:2a: db:b2:0b:7c:e8:14:c8:b6:f2:0a:96:bd:79:5d:f9:96:73:04: 5a:d2:ed:80:67:08:90:c3:47:26:bb:c7:37:21:36:be:cb:2c: 28:9a:15:d5:3b:9c:48:df:9f:05:30:45:48:25:35:bc:9f:10: 3e:34:8d:5e:93:f3:b8:4c:3d:67:c2:af:9c:16:bf:1c:1d:04: 16:ff:9f:4f:5d:0b:70:31:33:78:6b:10:ab:6b:fb:96:8b:7f: e7:4d:32:0f:94:1f:a8:77:f8:81:4c:43:80:39:f6:d0:a7:bd: f0:35:84:64:68:e3:fc:64:2c:ee:cd:c1:8b:26:a7:78:bf:0c: 75:4c:11:0b:b1:ab:2c:fb:bd:83:20:00:fe:e3:92:2c:7b:c5: 4c:3e:1c:2a:07:1e:d3:f5:1c:83:75:b8:13:a6:2e:4e:b1:e6: 73:d9:1f:ad:db:c4:3a:79:73:fb:c4:63:91:f3:dc:e0:de:b0: da:da:9b:70 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUKvNSX/xzGRxRdBROOnCl4nkOjC4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkE4RjgxMEVCMEJGNjgzREZDQTc0QzQwM0E3QjAzRDM3 RTE2RjI2ODAeFw0yNjEwMDMwMzMyNDhaFw0yNjEwMDQwNDA0NDhaMDMxMTAvBgNV BAMTKDAyQjgwRjhDMzFEQURFQTc5N0JBMUQyNkNGNjJCNkMxQ0Y4NzlFOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9EgXUgqpS1/UxapGq74DS22Il jgMNiOtuzWaYECrflsctiXLtO7IKsGV7/RNKNLiaTUr5Yw01lbkIgJq5KK9iJTyf hXhk0hwtfegr3JZ3/puATcGkJuzd/2nNSgFWv26msc7/EtQlexrFswpoQv2TMQTr 8G9HiIBtsQ0J26QbcuFRPPuj2ahLoURoVPm18yTNZHqRpNZG2lyWxgtdv6AR8YfT 1f6VaD8zd+R0AJ52WmLN81Wn9ZmI9OhsmYrKygOEoIVZmDwSKMZN7Pzys5g5WoEJ U4TYCU55NMfu3jPRawzjxTBrOAQpK4kzwj1pRZq9+iOquPgWe+UeH4xQMZozAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUArgPjDHa3qeXuh0mz2K2wc+Hno4wHwYDVR0j BBgwFoAUao+BDrC/aD38p0xAOnsD034W8mgwDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0FSTFdB VENILzAvNkE4RjgxMEVCMEJGNjgzREZDQTc0QzQwM0E3QjAzRDM3RTE2RjI2OC5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMS82QThGODEwRUIwQkY2ODNERkNBNzRDNDAz QTdCMDNEMzdFMTZGMjY4LmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0FSTFdBVENILzAvNkE4Rjgx MEVCMEJGNjgzREZDQTc0QzQwM0E3QjAzRDM3RTE2RjI2OC5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBADmy gsfxEDY6anGUT20uUvj7NzjeBhPCLwTZI3mi2NgXXjOBjpyj6QVpx3R/FeBnXAqu nMhfr9rue1unnDxpzKs1xe0sxt8RKtuyC3zoFMi28gqWvXld+ZZzBFrS7YBnCJDD Rya7xzchNr7LLCiaFdU7nEjfnwUwRUglNbyfED40jV6T87hMPWfCr5wWvxwdBBb/ n09dC3AxM3hrEKtr+5aLf+dNMg+UH6h3+IFMQ4A59tCnvfA1hGRo4/xkLO7NwYsm p3i/DHVMEQuxqyz7vYMgAP7jkix7xUw+HCoHHtP1HIN1uBOmLk6x5nPZH63bxDp5 c/vEY5Hz3ODesNram3A= -----END CERTIFICATE-----Generated at Sat Oct 3 10:35:48 2026 by rpki-client