$ rpki-client -vvvf rpkica.twnic.tw/rpki/CHINALIFE/0/CE5A8100BA0994A2B807F5F4FB741C528EEACCDD.mft File: CE5A8100BA0994A2B807F5F4FB741C528EEACCDD.mft (raw, json) Hash identifier: 0zbGe+2ccNBf+WA42fH4QjkcX/7G8THsM+8xRCj4UF8= Subject key identifier: AA:6B:7E:36:5A:15:A9:A3:0E:D1:84:26:75:46:1D:9D:C3:B6:60:0B Authority key identifier: CE:5A:81:00:BA:09:94:A2:B8:07:F5:F4:FB:74:1C:52:8E:EA:CC:DD Certificate issuer: /CN=CE5A8100BA0994A2B807F5F4FB741C528EEACCDD Certificate serial: 36B3E18681B254931B2821BA6B46B6D4118AEBB2 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE5A8100BA0994A2B807F5F4FB741C528EEACCDD.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CHINALIFE/0/CE5A8100BA0994A2B807F5F4FB741C528EEACCDD.mft Manifest number: C6 Signing time: Sat 03 Oct 2026 20:12:05 +0000 Manifest this update: Sat 03 Oct 2026 20:07:05 +0000 Manifest next update: Sun 04 Oct 2026 21:34:05 +0000 Files and hashes: 1: 3130332e3132332e3138382e302f32342d3234203d3e203138303432.roa (hash: VGG3iALCYmsIo1frTwJ57vcG6Z53Cw4xXzO8I+lKQrc=) 2: 3130332e3132332e3138392e302f32342d3234203d3e2039393234.roa (hash: ehfoOrBXE/RYfQPRqQV54VXyN1X6HRTFxmEyqkWRtOI=) 3: CE5A8100BA0994A2B807F5F4FB741C528EEACCDD.crl (hash: YXPwoNaCejwukGojY0JLTVn7XGa/8VrrX8w+EC7ul1M=) 4: 3130332e3132332e3139302e302f32342d3234203d3e2039393234.roa (hash: MkYfWxcvdtrJJbnLts1+66GKlU7GZ8ty9L0jiRzo53o=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CHINALIFE/0/CE5A8100BA0994A2B807F5F4FB741C528EEACCDD.crl rsync://rpkica.twnic.tw/rpki/CHINALIFE/0/CE5A8100BA0994A2B807F5F4FB741C528EEACCDD.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE5A8100BA0994A2B807F5F4FB741C528EEACCDD.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 21:34:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:b3:e1:86:81:b2:54:93:1b:28:21:ba:6b:46:b6:d4:11:8a:eb:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE5A8100BA0994A2B807F5F4FB741C528EEACCDD Validity Not Before: Oct 3 20:07:05 2026 GMT Not After : Oct 4 21:34:05 2026 GMT Subject: CN=AA6B7E365A15A9A30ED1842675461D9DC3B6600B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:1a:33:23:79:a0:b8:da:e0:af:96:fc:c8:e7: 24:bb:93:4f:26:00:71:c2:ea:0b:61:ce:bb:93:98: 82:e7:0d:c6:8f:61:71:e5:6d:00:1e:a0:a3:68:84: b7:cc:f5:c2:92:e0:b5:30:5a:d1:86:77:64:a8:79: 0b:41:81:8c:1d:73:89:7e:08:10:fb:20:6e:5d:b1: 2b:a4:8e:43:9d:d8:11:48:23:f5:c9:33:0d:11:12: 08:24:69:05:4d:73:4a:d0:d6:86:c4:c2:c1:dd:35: 2d:68:35:1b:a8:8c:15:85:f2:28:1b:07:38:a4:f5: 97:5b:5a:f7:4e:5f:4f:22:85:b4:8b:4b:b7:01:b5: 96:44:d4:b6:93:24:a7:d5:b4:32:99:e2:1a:a3:ac: 49:0b:44:e0:08:3e:f6:2e:a1:6a:53:8c:8d:72:f4: 74:2d:86:4e:61:05:b9:d0:75:28:e1:42:cb:43:65: 9a:da:9c:ae:ea:a8:4f:b6:06:55:0f:8a:46:40:1f: ac:d7:43:46:88:e3:a8:c9:d9:96:19:3f:fc:4d:b2: 14:0f:09:3c:47:83:73:91:36:93:1f:d3:39:e4:d3: e8:71:9c:64:fd:42:62:34:09:d9:d3:74:07:e8:fb: 5e:a4:9d:6e:33:a5:de:b0:7a:4b:7a:96:a7:d8:6f: 7f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:6B:7E:36:5A:15:A9:A3:0E:D1:84:26:75:46:1D:9D:C3:B6:60:0B X509v3 Authority Key Identifier: keyid:CE:5A:81:00:BA:09:94:A2:B8:07:F5:F4:FB:74:1C:52:8E:EA:CC:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CHINALIFE/0/CE5A8100BA0994A2B807F5F4FB741C528EEACCDD.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE5A8100BA0994A2B807F5F4FB741C528EEACCDD.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHINALIFE/0/CE5A8100BA0994A2B807F5F4FB741C528EEACCDD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:b5:d5:2a:72:bc:e1:43:0b:90:c9:48:a5:eb:7b:48:3c:eb: 03:26:c5:0e:54:cc:dc:8a:8c:86:c9:b2:c4:20:07:49:f3:af: 2e:37:3b:23:58:44:fe:d8:d0:10:57:c7:24:2b:a7:91:59:fe: e7:a4:47:b2:fb:c8:bd:2b:79:d3:4d:2c:fe:e4:2b:a3:97:70: c8:ec:3e:f1:2a:06:d3:79:c7:a5:49:00:87:2c:e1:ad:80:4d: e2:11:c3:89:bd:57:44:dc:6a:9a:f3:07:82:44:a9:a2:62:e8: 23:84:c3:80:14:29:59:1c:89:4a:f7:6d:a6:04:6e:2c:56:57: eb:fc:00:3a:c0:de:29:49:e0:94:85:21:14:71:8b:48:a2:9d: 38:e7:2d:2e:8f:c7:58:d9:45:94:12:cc:40:ac:e9:09:17:56: 8b:0d:ae:33:47:f8:e7:10:26:f1:ea:82:af:d7:27:c0:74:f1: 79:20:9e:30:bf:6e:a9:4c:8d:b8:44:fc:53:01:14:51:dd:e5: c5:ca:68:f0:bd:f1:f3:7c:de:03:7b:1e:0b:21:ba:35:78:48: e4:5a:7a:fe:3f:a1:fc:3a:f7:8f:9a:fc:fc:ac:86:e5:57:06: b8:54:c9:a6:f1:02:81:99:e6:5f:58:8d:d1:b2:99:c5:53:7b: 1e:c3:29:cf -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUNrPhhoGyVJMbKCG6a0a21BGK67IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0U1QTgxMDBCQTA5OTRBMkI4MDdGNUY0RkI3NDFDNTI4 RUVBQ0NERDAeFw0yNjEwMDMyMDA3MDVaFw0yNjEwMDQyMTM0MDVaMDMxMTAvBgNV BAMTKEFBNkI3RTM2NUExNUE5QTMwRUQxODQyNjc1NDYxRDlEQzNCNjYwMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaGjMjeaC42uCvlvzI5yS7k08m AHHC6gthzruTmILnDcaPYXHlbQAeoKNohLfM9cKS4LUwWtGGd2SoeQtBgYwdc4l+ CBD7IG5dsSukjkOd2BFII/XJMw0REggkaQVNc0rQ1obEwsHdNS1oNRuojBWF8igb Bzik9ZdbWvdOX08ihbSLS7cBtZZE1LaTJKfVtDKZ4hqjrEkLROAIPvYuoWpTjI1y 9HQthk5hBbnQdSjhQstDZZranK7qqE+2BlUPikZAH6zXQ0aI46jJ2ZYZP/xNshQP CTxHg3ORNpMf0znk0+hxnGT9QmI0CdnTdAfo+16knW4zpd6wekt6lqfYb3+rAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUqmt+NloVqaMO0YQmdUYdncO2YAswHwYDVR0j BBgwFoAUzlqBALoJlKK4B/X0+3QcUo7qzN0wDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0hJTkFM SUZFLzAvQ0U1QTgxMDBCQTA5OTRBMkI4MDdGNUY0RkI3NDFDNTI4RUVBQ0NERC5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMS9DRTVBODEwMEJBMDk5NEEyQjgwN0Y1RjRG Qjc0MUM1MjhFRUFDQ0RELmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0hJTkFMSUZFLzAvQ0U1QTgx MDBCQTA5OTRBMkI4MDdGNUY0RkI3NDFDNTI4RUVBQ0NERC5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBACy1 1SpyvOFDC5DJSKXre0g86wMmxQ5UzNyKjIbJssQgB0nzry43OyNYRP7Y0BBXxyQr p5FZ/uekR7L7yL0redNNLP7kK6OXcMjsPvEqBtN5x6VJAIcs4a2ATeIRw4m9V0Tc aprzB4JEqaJi6COEw4AUKVkciUr3baYEbixWV+v8ADrA3ilJ4JSFIRRxi0iinTjn LS6Px1jZRZQSzECs6QkXVosNrjNH+OcQJvHqgq/XJ8B08XkgnjC/bqlMjbhE/FMB FFHd5cXKaPC98fN83gN7HgshujV4SORaev4/ofw694+a/PyshuVXBrhUyabxAoGZ 5l9YjdGymcVTex7DKc8= -----END CERTIFICATE-----Generated at Sun Oct 4 17:03:15 2026 by rpki-client