$ rpki-client -vvvf rpkica.twnic.tw/rpki/CHINATRUST/0/8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D.mft File: 8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D.mft (raw, json) Hash identifier: FNUO8a+QG+LPlDlIMNTnEWtfTGuLvTN3bdp3Mj/wsg8= Subject key identifier: 1A:EF:66:10:F7:87:5F:FD:F7:65:26:1F:58:C8:F0:0D:9B:68:E8:EE Authority key identifier: 80:99:DF:C0:CF:C8:3C:5D:DF:D9:0C:A5:EA:31:4C:C9:A8:67:7F:2D Certificate issuer: /CN=8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D Certificate serial: 7A376B16C1E020B6889AC2D9C58253BB03D60DB6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CHINATRUST/0/8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D.mft Manifest number: C6 Signing time: Sat 03 Oct 2026 14:40:32 +0000 Manifest this update: Sat 03 Oct 2026 14:35:32 +0000 Manifest next update: Sun 04 Oct 2026 16:09:32 +0000 Files and hashes: 1: 3137352e3138342e3234302e302f32312d3234203d3e20313331313433.roa (hash: 0QQUBFrsQpXXTYt4aIh8/MbRTgI4V9RhZAxoH9bVt18=) 2: 323430353a333330303a3a2f33322d3936203d3e20313331313433.roa (hash: ZKiaer8NjI3ngd1EbZw69ZFOR2ZlmwyGwjPK8gzDQck=) 3: 3130332e3132362e3136342e302f32322d3234203d3e20313331313433.roa (hash: GE6WCLDpaYk350arhm6T0hTObeMU3HA8Pi8MilsnVwk=) 4: 8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D.crl (hash: fU0Ct1MptuanAPTTVjNc10n1//yxHlMfCsdVte0SLKk=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CHINATRUST/0/8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D.crl rsync://rpkica.twnic.tw/rpki/CHINATRUST/0/8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 04:17:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:37:6b:16:c1:e0:20:b6:88:9a:c2:d9:c5:82:53:bb:03:d6:0d:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D Validity Not Before: Oct 3 14:35:32 2026 GMT Not After : Oct 4 16:09:32 2026 GMT Subject: CN=1AEF6610F7875FFDF765261F58C8F00D9B68E8EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f6:ed:0e:01:91:c0:95:2e:c0:1c:b4:02:58: fe:89:3c:c2:d7:8c:92:3c:f4:28:75:4a:14:16:e0: 1d:2d:ff:de:b2:5d:79:bd:12:af:f3:65:d8:3b:5a: a0:f7:b1:04:a4:ad:11:5c:3b:d7:44:bf:b4:f4:9d: f9:6c:62:af:92:cd:7a:5d:2b:55:f2:47:e9:fc:48: fb:f7:49:45:94:b7:3a:9d:c0:62:ca:a8:b2:3f:7f: ec:f9:0d:46:35:e6:65:78:a2:02:9c:81:3d:2a:50: b3:36:8b:95:0c:5e:4d:da:b0:9a:0a:ab:49:05:04: b1:6f:d0:f5:b6:23:6b:9a:ec:23:8f:95:dc:a5:46: 15:2a:24:59:c3:5b:2c:d9:95:7a:3c:83:90:63:fb: a3:62:04:4b:96:06:91:53:8f:76:03:6a:5a:cd:c3: da:28:24:98:2d:5f:8f:e6:6b:46:0f:04:86:6f:e4: f0:e4:b2:2f:1b:40:8d:48:a5:60:ce:3d:1a:6f:93: 84:5e:b3:25:f9:47:e0:57:6c:d3:01:b5:8c:ad:89: 9f:42:d5:43:ae:9a:28:b7:b4:b3:e6:13:60:ed:73: 62:e3:ac:cd:1a:86:55:19:79:81:ec:c6:e5:d6:f8: 4f:0d:e4:a3:32:72:43:4b:37:b9:36:72:ab:1a:cb: a3:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:EF:66:10:F7:87:5F:FD:F7:65:26:1F:58:C8:F0:0D:9B:68:E8:EE X509v3 Authority Key Identifier: keyid:80:99:DF:C0:CF:C8:3C:5D:DF:D9:0C:A5:EA:31:4C:C9:A8:67:7F:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CHINATRUST/0/8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHINATRUST/0/8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:95:0b:25:c8:99:ab:6e:41:3b:4d:36:49:54:50:29:04:56: 35:70:30:3d:d6:bb:cc:d4:17:ba:42:fe:a9:bf:96:30:40:9c: f4:b7:a2:40:2f:b3:4e:38:02:15:79:1b:1e:eb:f3:14:df:c2: 5d:5f:ec:bb:b7:09:3f:e7:f8:fd:48:92:f0:aa:e2:82:ea:4f: 1f:88:8e:9c:36:ba:f4:d3:e6:55:20:83:ee:dd:85:4b:8d:45: 01:99:87:e7:98:09:7c:16:68:65:a3:f9:11:e2:7a:76:01:ee: 8f:bd:07:40:40:c5:d6:a1:9d:db:f4:a0:6f:35:41:4e:35:13: a2:29:cc:9c:7b:a6:81:4e:5c:ce:3d:9a:f5:c1:bd:15:12:1b: 18:a8:00:4c:e5:eb:6d:a8:80:3a:c7:2f:13:8e:3a:20:da:ad: 31:a2:f9:c7:fa:7b:b5:17:94:b5:7e:91:fe:7e:e0:ff:06:d9: e9:2b:1a:50:4d:5b:28:5c:6a:f5:67:97:91:7a:e3:b2:5e:2f: 3b:64:b1:95:3f:88:44:a3:1d:d8:fb:98:0f:4b:22:ce:fc:af: 7c:86:f4:ae:4e:50:79:74:53:bc:46:21:4a:4d:15:23:ba:15: 73:64:e5:fd:1e:b1:4c:ce:ad:ed:f4:1c:24:28:0d:12:63:bb: f8:c5:eb:d8 -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgIUejdrFsHgILaImsLZxYJTuwPWDbYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODA5OURGQzBDRkM4M0M1RERGRDkwQ0E1RUEzMTRDQzlB ODY3N0YyRDAeFw0yNjEwMDMxNDM1MzJaFw0yNjEwMDQxNjA5MzJaMDMxMTAvBgNV BAMTKDFBRUY2NjEwRjc4NzVGRkRGNzY1MjYxRjU4QzhGMDBEOUI2OEU4RUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCb9u0OAZHAlS7AHLQCWP6JPMLX jJI89Ch1ShQW4B0t/96yXXm9Eq/zZdg7WqD3sQSkrRFcO9dEv7T0nflsYq+SzXpd K1XyR+n8SPv3SUWUtzqdwGLKqLI/f+z5DUY15mV4ogKcgT0qULM2i5UMXk3asJoK q0kFBLFv0PW2I2ua7COPldylRhUqJFnDWyzZlXo8g5Bj+6NiBEuWBpFTj3YDalrN w9ooJJgtX4/ma0YPBIZv5PDksi8bQI1IpWDOPRpvk4ResyX5R+BXbNMBtYytiZ9C 1UOumii3tLPmE2Dtc2LjrM0ahlUZeYHsxuXW+E8N5KMyckNLN7k2cqsay6N7AgMB AAGjggH2MIIB8jAdBgNVHQ4EFgQUGu9mEPeHX/33ZSYfWMjwDZto6O4wHwYDVR0j BBgwFoAUgJnfwM/IPF3f2Qyl6jFMyahnfy0wDgYDVR0PAQH/BAQDAgeAMGcGA1Ud HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0hJTkFU UlVTVC8wLzgwOTlERkMwQ0ZDODNDNURERkQ5MENBNUVBMzE0Q0M5QTg2NzdGMkQu Y3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBLzEvODA5OURGQzBDRkM4M0M1RERGRDkwQ0E1 RUEzMTRDQzlBODY3N0YyRC5jZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzAL hlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0NISU5BVFJVU1QvMC84MDk5 REZDMENGQzgzQzVEREZEOTBDQTVFQTMxNENDOUE4Njc3RjJELm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA IpULJciZq25BO002SVRQKQRWNXAwPda7zNQXukL+qb+WMECc9LeiQC+zTjgCFXkb HuvzFN/CXV/su7cJP+f4/UiS8KrigupPH4iOnDa69NPmVSCD7t2FS41FAZmH55gJ fBZoZaP5EeJ6dgHuj70HQEDF1qGd2/SgbzVBTjUToinMnHumgU5czj2a9cG9FRIb GKgATOXrbaiAOscvE446INqtMaL5x/p7tReUtX6R/n7g/wbZ6SsaUE1bKFxq9WeX kXrjsl4vO2SxlT+IRKMd2PuYD0sizvyvfIb0rk5QeXRTvEYhSk0VI7oVc2Tl/R6x TM6t7fQcJCgNEmO7+MXr2A== -----END CERTIFICATE-----Generated at Sat Oct 3 20:10:50 2026 by rpki-client