$ rpki-client -vvf rpkica.twnic.tw/rpki/CARLWATCH/0/6A8F810EB0BF683DFCA74C403A7B03D37E16F268.mft File: 6A8F810EB0BF683DFCA74C403A7B03D37E16F268.mft (raw, json) Hash identifier: aCQa32JG6sOC0jWzLM14Ge3qeiWiecdX1ykoxEMShZo= Subject key identifier: 82:BC:75:95:00:9B:11:4A:80:9B:40:C4:5E:FE:66:A8:C7:16:0D:9A Authority key identifier: 6A:8F:81:0E:B0:BF:68:3D:FC:A7:4C:40:3A:7B:03:D3:7E:16:F2:68 Certificate issuer: /CN=6A8F810EB0BF683DFCA74C403A7B03D37E16F268 Certificate serial: 1522C6EA76E8312191C5A6FE6244C65AC1919BDD Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6A8F810EB0BF683DFCA74C403A7B03D37E16F268.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CARLWATCH/0/6A8F810EB0BF683DFCA74C403A7B03D37E16F268.mft Manifest number: 81 Signing time: Fri 14 Aug 2026 14:12:01 +0000 Manifest this update: Fri 14 Aug 2026 14:07:01 +0000 Manifest next update: Sat 15 Aug 2026 17:52:01 +0000 Files and hashes: 1: 6A8F810EB0BF683DFCA74C403A7B03D37E16F268.crl (hash: +q31jopmsh5ZpKdmPeRwm7N5tZk0GVM1qjPb46GhIfA=) 2: 3130332e3136312e362e302f32332d3234203d3e203231383539.roa (hash: uWZD4+YbW51xLCVpXbXAANNn4P9xs+4KtJrLiouzkvQ=) 3: 3130332e3136312e362e302f32332d3234203d3e20313331363138.roa (hash: HW3fNW9yAqboou7jAhk1cKMCcOPZDWYktjmxy1gjfvo=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CARLWATCH/0/6A8F810EB0BF683DFCA74C403A7B03D37E16F268.crl rsync://rpkica.twnic.tw/rpki/CARLWATCH/0/6A8F810EB0BF683DFCA74C403A7B03D37E16F268.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6A8F810EB0BF683DFCA74C403A7B03D37E16F268.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 15 Aug 2026 17:52:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:22:c6:ea:76:e8:31:21:91:c5:a6:fe:62:44:c6:5a:c1:91:9b:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A8F810EB0BF683DFCA74C403A7B03D37E16F268 Validity Not Before: Aug 14 14:07:01 2026 GMT Not After : Aug 15 17:52:01 2026 GMT Subject: CN=82BC7595009B114A809B40C45EFE66A8C7160D9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:88:6e:de:d1:23:36:15:41:84:c4:5b:a2:e7: e4:b8:3f:30:eb:a2:d0:6a:d0:cb:52:78:7d:6d:f0: 72:3f:3e:e6:c0:24:85:70:14:5d:fb:88:31:09:7b: ad:bf:d6:f1:93:21:7a:23:19:9d:27:9f:f1:4d:1e: 50:72:7f:68:4a:e2:53:9a:f7:9e:53:07:5c:c3:5e: 47:3f:e8:e8:ff:82:b9:ce:2b:eb:eb:1b:ea:22:b1: 0f:e1:ea:16:2d:ef:28:ac:0e:90:5b:58:2c:a9:92: f2:fe:fc:12:cd:e6:6c:60:09:67:a3:d9:e1:89:c8: 7c:9f:f7:e5:73:79:f9:8c:2f:7f:b8:0b:5a:c0:4a: 64:41:bf:1b:79:c1:b6:c8:90:dd:90:94:c4:43:ea: a2:2b:2b:92:27:90:6b:e7:05:31:35:8b:9c:a5:41: b7:dc:df:9a:d6:2f:6c:55:16:8d:1b:7e:ef:22:5e: 06:53:b6:41:e0:ca:77:d8:89:af:c1:79:e2:ff:7e: 24:e8:8d:77:6b:c9:43:4e:fb:52:fe:6d:09:92:2a: 8a:55:82:01:db:a7:85:78:7d:f7:0f:96:63:86:5c: 52:3b:30:ee:72:31:c8:02:da:b2:07:24:f6:1d:5e: f5:e3:96:f0:60:d3:e6:5b:e4:38:6e:c6:3a:7b:82: fd:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:BC:75:95:00:9B:11:4A:80:9B:40:C4:5E:FE:66:A8:C7:16:0D:9A X509v3 Authority Key Identifier: keyid:6A:8F:81:0E:B0:BF:68:3D:FC:A7:4C:40:3A:7B:03:D3:7E:16:F2:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CARLWATCH/0/6A8F810EB0BF683DFCA74C403A7B03D37E16F268.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6A8F810EB0BF683DFCA74C403A7B03D37E16F268.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CARLWATCH/0/6A8F810EB0BF683DFCA74C403A7B03D37E16F268.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:9a:f6:2e:61:1b:c3:da:f6:85:ae:63:8a:06:29:7f:22:9e: 5c:50:af:ad:62:00:14:bd:51:91:70:2a:75:cb:53:7d:ad:28: 3b:ea:57:f8:fb:10:60:57:e5:0a:1a:dd:9e:2f:5d:0b:8e:10: 7d:9d:57:56:75:71:55:a3:5f:d9:ee:2b:ba:74:af:fb:3a:b8: 2f:31:d5:b1:bc:c7:36:10:68:8a:8e:1a:6e:f3:5e:7c:3c:cd: 0f:b4:f1:b5:a3:fd:3c:4f:6f:6c:82:cd:23:91:83:69:9d:f0: 98:94:6a:65:7a:f9:40:2e:d6:c8:c4:31:3d:52:89:f9:fd:d5: a0:d1:1b:81:8d:d5:88:89:9e:33:54:d6:81:a3:8f:8a:03:f0: 67:80:b8:d9:75:46:be:ac:62:95:93:af:dd:51:f6:54:fa:fe: 67:04:89:38:40:1c:ff:b6:b1:0d:28:02:90:22:d7:1d:94:8b: cd:9e:08:b0:db:64:ef:ec:76:34:f3:e7:c6:1e:04:db:0a:c1: e2:78:fe:eb:31:b8:1b:8a:00:3a:43:0c:b2:6c:91:2d:1f:2a: 6d:90:27:fc:e2:62:4f:c7:6f:1d:84:26:0a:6f:39:83:55:dc: 34:2b:21:1b:b3:1b:7d:5f:90:a9:5b:be:cd:e8:41:a3:83:02: ed:b8:52:d9 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUFSLG6nboMSGRxab+YkTGWsGRm90wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkE4RjgxMEVCMEJGNjgzREZDQTc0QzQwM0E3QjAzRDM3 RTE2RjI2ODAeFw0yNjA4MTQxNDA3MDFaFw0yNjA4MTUxNzUyMDFaMDMxMTAvBgNV BAMTKDgyQkM3NTk1MDA5QjExNEE4MDlCNDBDNDVFRkU2NkE4QzcxNjBEOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjiG7e0SM2FUGExFui5+S4PzDr otBq0MtSeH1t8HI/PubAJIVwFF37iDEJe62/1vGTIXojGZ0nn/FNHlByf2hK4lOa 955TB1zDXkc/6Oj/grnOK+vrG+oisQ/h6hYt7yisDpBbWCypkvL+/BLN5mxgCWej 2eGJyHyf9+VzefmML3+4C1rASmRBvxt5wbbIkN2QlMRD6qIrK5InkGvnBTE1i5yl Qbfc35rWL2xVFo0bfu8iXgZTtkHgynfYia/BeeL/fiTojXdryUNO+1L+bQmSKopV ggHbp4V4ffcPlmOGXFI7MO5yMcgC2rIHJPYdXvXjlvBg0+Zb5Dhuxjp7gv39AgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUgrx1lQCbEUqAm0DEXv5mqMcWDZowHwYDVR0j BBgwFoAUao+BDrC/aD38p0xAOnsD034W8mgwDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0FSTFdB VENILzAvNkE4RjgxMEVCMEJGNjgzREZDQTc0QzQwM0E3QjAzRDM3RTE2RjI2OC5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMS82QThGODEwRUIwQkY2ODNERkNBNzRDNDAz QTdCMDNEMzdFMTZGMjY4LmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0FSTFdBVENILzAvNkE4Rjgx MEVCMEJGNjgzREZDQTc0QzQwM0E3QjAzRDM3RTE2RjI2OC5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJea 9i5hG8Pa9oWuY4oGKX8inlxQr61iABS9UZFwKnXLU32tKDvqV/j7EGBX5Qoa3Z4v XQuOEH2dV1Z1cVWjX9nuK7p0r/s6uC8x1bG8xzYQaIqOGm7zXnw8zQ+08bWj/TxP b2yCzSORg2md8JiUamV6+UAu1sjEMT1Sifn91aDRG4GN1YiJnjNU1oGjj4oD8GeA uNl1Rr6sYpWTr91R9lT6/mcEiThAHP+2sQ0oApAi1x2Ui82eCLDbZO/sdjTz58Ye BNsKweJ4/usxuBuKADpDDLJskS0fKm2QJ/ziYk/Hbx2EJgpvOYNV3DQrIRuzG31f kKlbvs3oQaODAu24Utk= -----END CERTIFICATE-----Generated at Sat Aug 15 05:21:14 2026 by rpki-client