$ rpki-client -vvf rpkica.twnic.tw/rpki/CCETECH/1/3BFFB675B95FCD73A993F3228774251092970E7B.mft File: 3BFFB675B95FCD73A993F3228774251092970E7B.mft (raw, json) Hash identifier: z78C6YedGXirsQ1lHfqQaN778mqmb9sp0D9eBhNwsb0= Subject key identifier: 2E:B1:9E:A5:C7:EE:AC:88:E6:78:01:87:A4:B9:0A:3F:60:BE:0A:96 Authority key identifier: 3B:FF:B6:75:B9:5F:CD:73:A9:93:F3:22:87:74:25:10:92:97:0E:7B Certificate issuer: /CN=3BFFB675B95FCD73A993F3228774251092970E7B Certificate serial: 327F932F3ACDF0B136A75B09A35B1EDD616F1A80 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/3BFFB675B95FCD73A993F3228774251092970E7B.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CCETECH/1/3BFFB675B95FCD73A993F3228774251092970E7B.mft Manifest number: 0A Signing time: Fri 15 May 2026 08:41:23 +0000 Manifest this update: Fri 15 May 2026 08:36:23 +0000 Manifest next update: Sat 16 May 2026 11:04:23 +0000 Files and hashes: 1: 3136302e32352e3130352e302f32342d3234203d3e20323038323233.roa (hash: YdBvwjNi4bXGDm/SLY5b1QLMeyyL4E2okhg4V5ia0DI=) 2: 3136302e32352e3130342e302f32342d3234203d3e20323038323233.roa (hash: /9BFFQzw0cKcAkYyhzrX90hfsn9yx3G5YlAAOT7vnaE=) 3: 3BFFB675B95FCD73A993F3228774251092970E7B.crl (hash: cx0NkNzDgyTcpZF2fAaYbOLEFgWDrj64NEEpWhtcOkQ=) 4: 3136302e32352e3130342e302f32332d3233203d3e20323038323233.roa (hash: 76EIdBl2ALW8D1iaU6elJyjtVPcLevkpSbCfYsK03xY=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CCETECH/1/3BFFB675B95FCD73A993F3228774251092970E7B.crl rsync://rpkica.twnic.tw/rpki/CCETECH/1/3BFFB675B95FCD73A993F3228774251092970E7B.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/3BFFB675B95FCD73A993F3228774251092970E7B.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 16 May 2026 11:04:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:7f:93:2f:3a:cd:f0:b1:36:a7:5b:09:a3:5b:1e:dd:61:6f:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3BFFB675B95FCD73A993F3228774251092970E7B Validity Not Before: May 15 08:36:23 2026 GMT Not After : May 16 11:04:23 2026 GMT Subject: CN=2EB19EA5C7EEAC88E6780187A4B90A3F60BE0A96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:53:38:b6:76:e0:b2:f3:85:52:05:ef:a1:78: a1:36:5f:96:fc:a0:38:28:d0:27:08:26:89:47:97: aa:09:ff:5d:4c:d4:3b:a3:5f:11:cf:43:a6:cb:14: be:23:81:25:ab:97:2c:fc:c5:bb:68:6b:30:1c:48: ca:75:45:9c:08:23:a4:e8:c9:6a:11:63:4f:b3:93: bb:48:53:8a:77:56:d7:a1:aa:5e:61:52:c2:58:a5: 10:1d:05:8d:32:e3:08:a1:05:4e:91:05:c0:2d:6f: b9:09:76:6e:9f:46:b9:84:d2:3c:cc:e9:67:f4:6d: e6:1f:8d:a3:c9:57:c5:54:4b:ac:36:fa:df:d4:77: 87:66:3a:db:6f:a5:52:f6:64:11:1d:b7:d4:5f:8b: 21:82:01:07:28:52:9d:a2:89:eb:49:68:c9:2e:c7: 6e:6a:0f:5f:fc:44:0d:64:00:3c:69:bd:0c:94:c7: ad:5f:2c:5a:96:ab:6b:80:27:b7:2d:cc:2c:0a:73: ad:da:fc:e2:e7:a2:fb:bf:f1:b5:72:a3:98:bc:f3: f6:72:7a:f2:6f:df:8b:99:04:51:04:41:e9:1e:9e: 50:9d:f0:1a:df:b9:3e:78:bf:55:e5:40:1b:7b:b9: 39:d8:f9:00:0a:74:af:e4:af:03:29:df:a8:99:86: 48:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:B1:9E:A5:C7:EE:AC:88:E6:78:01:87:A4:B9:0A:3F:60:BE:0A:96 X509v3 Authority Key Identifier: keyid:3B:FF:B6:75:B9:5F:CD:73:A9:93:F3:22:87:74:25:10:92:97:0E:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CCETECH/1/3BFFB675B95FCD73A993F3228774251092970E7B.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/3BFFB675B95FCD73A993F3228774251092970E7B.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CCETECH/1/3BFFB675B95FCD73A993F3228774251092970E7B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:6e:2b:8e:20:8e:6c:42:42:87:2b:db:88:5c:08:3c:30:3c: 49:b0:9d:e9:74:16:f4:59:ad:63:a5:51:7c:c6:c2:e8:77:5b: cf:e6:8a:94:22:f9:d5:9d:b7:c3:52:35:21:b4:56:c6:2b:84: 30:59:57:17:3a:8f:23:53:55:2c:fa:3b:a0:75:09:cd:d5:22: ee:b5:80:f9:59:46:51:d4:10:c8:c6:9e:97:4a:e1:95:7d:2c: 57:74:c7:09:02:f2:a2:c9:6b:32:02:29:9c:73:8b:6a:d4:7e: 35:5d:75:ec:83:6b:7c:18:4d:99:ea:96:99:53:be:72:50:04: 3c:48:36:f8:76:67:1a:aa:5b:61:1a:14:ea:27:a1:c0:58:91: f8:20:68:b0:44:25:73:3a:f2:59:b4:6e:70:6f:4b:12:eb:21: 9c:29:d4:91:5d:4d:95:9d:6b:65:e3:fe:47:96:95:83:e0:53: 94:71:a8:6f:97:3b:51:a4:72:a5:f2:ce:4b:f6:75:58:eb:19: 14:10:e3:4d:4e:7b:5d:7c:c8:b3:dc:82:40:7f:54:4b:8c:92: 25:ac:b7:9d:d9:8d:96:16:d8:4b:8e:dd:8b:4f:a5:ee:72:7f: e6:69:0a:b6:b0:29:c5:23:1f:69:16:0a:80:49:c2:08:87:03: 06:b5:40:de -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIUMn+TLzrN8LE2p1sJo1se3WFvGoAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0JGRkI2NzVCOTVGQ0Q3M0E5OTNGMzIyODc3NDI1MTA5 Mjk3MEU3QjAeFw0yNjA1MTUwODM2MjNaFw0yNjA1MTYxMTA0MjNaMDMxMTAvBgNV BAMTKDJFQjE5RUE1QzdFRUFDODhFNjc4MDE4N0E0QjkwQTNGNjBCRTBBOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNUzi2duCy84VSBe+heKE2X5b8 oDgo0CcIJolHl6oJ/11M1DujXxHPQ6bLFL4jgSWrlyz8xbtoazAcSMp1RZwII6To yWoRY0+zk7tIU4p3Vtehql5hUsJYpRAdBY0y4wihBU6RBcAtb7kJdm6fRrmE0jzM 6Wf0beYfjaPJV8VUS6w2+t/Ud4dmOttvpVL2ZBEdt9RfiyGCAQcoUp2iietJaMku x25qD1/8RA1kADxpvQyUx61fLFqWq2uAJ7ctzCwKc63a/OLnovu/8bVyo5i88/Zy evJv34uZBFEEQekenlCd8BrfuT54v1XlQBt7uTnY+QAKdK/krwMp36iZhkjvAgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQULrGepcfurIjmeAGHpLkKP2C+CpYwHwYDVR0j BBgwFoAUO/+2dblfzXOpk/Mih3QlEJKXDnswDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0NFVEVD SC8xLzNCRkZCNjc1Qjk1RkNENzNBOTkzRjMyMjg3NzQyNTEwOTI5NzBFN0IuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzAvM0JGRkI2NzVCOTVGQ0Q3M0E5OTNGMzIyODc3 NDI1MTA5Mjk3MEU3Qi5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0NDRVRFQ0gvMS8zQkZGQjY3NUI5 NUZDRDczQTk5M0YzMjI4Nzc0MjUxMDkyOTcwRTdCLm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI24rjiCO bEJChyvbiFwIPDA8SbCd6XQW9FmtY6VRfMbC6Hdbz+aKlCL51Z23w1I1IbRWxiuE MFlXFzqPI1NVLPo7oHUJzdUi7rWA+VlGUdQQyMael0rhlX0sV3THCQLyoslrMgIp nHOLatR+NV117INrfBhNmeqWmVO+clAEPEg2+HZnGqpbYRoU6iehwFiR+CBosEQl czryWbRucG9LEushnCnUkV1NlZ1rZeP+R5aVg+BTlHGob5c7UaRypfLOS/Z1WOsZ FBDjTU57XXzIs9yCQH9US4ySJay3ndmNlhbYS47di0+l7nJ/5mkKtrApxSMfaRYK gEnCCIcDBrVA3g== -----END CERTIFICATE-----Generated at Sat May 16 04:55:13 2026 by rpki-client