$ rpki-client -vvvf rpkica.twnic.tw/rpki/CHUMMYTECH/1/28E1FD03C8B040A9874A90D4654322ACDFCA3407.mft File: 28E1FD03C8B040A9874A90D4654322ACDFCA3407.mft (raw, json) Hash identifier: AgtwOXpuObrR2VnCp/tHc6kb1XOoFENPY0gJMRuknEM= Subject key identifier: E3:C4:68:72:CC:34:30:13:6D:13:82:FE:BF:A1:DB:F3:5E:1B:0D:2B Authority key identifier: 28:E1:FD:03:C8:B0:40:A9:87:4A:90:D4:65:43:22:AC:DF:CA:34:07 Certificate issuer: /CN=28E1FD03C8B040A9874A90D4654322ACDFCA3407 Certificate serial: 46EF1D08F73DDD79BC9085402CE5FF4FEB96CB6A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/28E1FD03C8B040A9874A90D4654322ACDFCA3407.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CHUMMYTECH/1/28E1FD03C8B040A9874A90D4654322ACDFCA3407.mft Manifest number: C9 Signing time: Tue 06 Oct 2026 08:52:15 +0000 Manifest this update: Tue 06 Oct 2026 08:47:15 +0000 Manifest next update: Wed 07 Oct 2026 11:39:15 +0000 Files and hashes: 1: 3136302e3138372e3139382e302f32332d3234203d3e20313532363135.roa (hash: I6RgBeSwuI+mSenPcIlVAxSTnNAaaE4/xzzLMyb2FH0=) 2: 28E1FD03C8B040A9874A90D4654322ACDFCA3407.crl (hash: kILyY3yU6YaSCgLjJJbvISYM9lGf6f0QR2WRYa31F68=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CHUMMYTECH/1/28E1FD03C8B040A9874A90D4654322ACDFCA3407.crl rsync://rpkica.twnic.tw/rpki/CHUMMYTECH/1/28E1FD03C8B040A9874A90D4654322ACDFCA3407.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/28E1FD03C8B040A9874A90D4654322ACDFCA3407.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Oct 2026 03:58:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:ef:1d:08:f7:3d:dd:79:bc:90:85:40:2c:e5:ff:4f:eb:96:cb:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28E1FD03C8B040A9874A90D4654322ACDFCA3407 Validity Not Before: Oct 6 08:47:15 2026 GMT Not After : Oct 7 11:39:15 2026 GMT Subject: CN=E3C46872CC3430136D1382FEBFA1DBF35E1B0D2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:07:e9:2d:92:16:b4:86:a9:3d:78:64:b9:c1: 30:c2:23:60:c7:f0:f2:96:24:93:60:2e:26:da:80: 56:03:7e:fe:f5:c7:ce:60:e9:26:df:f9:fd:05:a7: 2e:31:76:18:b5:6d:c1:9e:35:a9:9d:43:a8:6c:12: 22:fa:58:ee:fa:5d:05:08:85:f9:37:97:20:87:c6: fb:df:61:d0:c7:11:c7:1d:bd:49:84:7e:d7:2f:f6: cd:41:e3:1c:dd:23:da:b8:0e:cf:64:a8:eb:5f:b6: dc:88:98:93:59:c2:1f:2f:08:31:60:0f:96:9b:15: 58:6f:fa:d2:01:3d:57:22:cf:32:0c:0f:85:21:55: 4b:a6:fc:25:eb:f4:54:66:b1:37:34:76:5e:a1:a3: 50:44:58:ac:43:d8:e6:4b:78:9a:7c:28:7c:68:cc: 1d:2e:7d:a1:3e:c2:56:c3:8b:6d:e8:ec:b6:76:32: 66:d0:16:9c:d1:5c:8d:a3:7a:e4:bd:cc:e2:81:ea: cb:6f:73:73:23:81:86:9b:c3:93:24:8d:8a:83:5d: 97:89:05:58:a6:51:c1:24:e2:17:25:21:22:4e:44: 66:26:80:96:3e:6a:86:86:42:a3:4f:f0:b7:0e:79: 76:fb:27:b2:21:52:b0:34:11:18:6f:56:28:36:a4: fb:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:C4:68:72:CC:34:30:13:6D:13:82:FE:BF:A1:DB:F3:5E:1B:0D:2B X509v3 Authority Key Identifier: keyid:28:E1:FD:03:C8:B0:40:A9:87:4A:90:D4:65:43:22:AC:DF:CA:34:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CHUMMYTECH/1/28E1FD03C8B040A9874A90D4654322ACDFCA3407.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/28E1FD03C8B040A9874A90D4654322ACDFCA3407.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHUMMYTECH/1/28E1FD03C8B040A9874A90D4654322ACDFCA3407.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:65:66:28:09:19:1f:64:58:86:49:0b:ba:2d:7c:e5:b9:b6: 00:4a:a7:8e:20:c4:10:e3:1c:6f:d6:5e:61:83:fc:89:14:14: 01:7a:3b:d8:27:67:68:1b:de:cd:5c:3d:85:c6:7d:04:60:d6: 6b:54:17:a5:55:e0:a7:b1:f2:8d:37:a0:46:8d:73:94:c9:3b: 0d:12:97:29:df:2c:5f:06:0c:77:fc:fe:40:b6:6e:08:6a:79: 8d:90:97:75:25:30:2d:d9:d3:85:bb:ba:1a:15:f6:99:08:56: 81:75:45:a2:03:80:47:8e:76:14:79:4b:f0:38:1a:0d:b4:34: 04:d6:30:bb:c3:be:5a:5e:44:e1:9e:51:c6:b0:04:3b:17:1f: 40:ae:b0:95:76:0b:36:13:7b:b3:ce:39:f9:90:51:2c:fb:84: f2:4b:8e:e4:fd:4b:29:04:13:94:84:3e:0f:d9:99:ca:69:0b: 9f:71:e8:79:f1:12:ba:7a:e3:05:68:69:22:58:8d:bb:67:36: 5b:38:c3:7a:d7:ef:79:0b:20:18:21:af:94:e1:2b:8f:8c:f9: a4:ab:f5:95:3c:ed:a1:e8:1b:0f:3f:72:3c:df:79:27:c3:e2: 1a:8c:5e:b6:3d:6a:50:8c:20:aa:77:37:9b:a1:78:45:dd:5e: fd:72:e6:9f -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgIURu8dCPc93Xm8kIVALOX/T+uWy2owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhFMUZEMDNDOEIwNDBBOTg3NEE5MEQ0NjU0MzIyQUNE RkNBMzQwNzAeFw0yNjEwMDYwODQ3MTVaFw0yNjEwMDcxMTM5MTVaMDMxMTAvBgNV BAMTKEUzQzQ2ODcyQ0MzNDMwMTM2RDEzODJGRUJGQTFEQkYzNUUxQjBEMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5B+ktkha0hqk9eGS5wTDCI2DH 8PKWJJNgLibagFYDfv71x85g6Sbf+f0Fpy4xdhi1bcGeNamdQ6hsEiL6WO76XQUI hfk3lyCHxvvfYdDHEccdvUmEftcv9s1B4xzdI9q4Ds9kqOtfttyImJNZwh8vCDFg D5abFVhv+tIBPVcizzIMD4UhVUum/CXr9FRmsTc0dl6ho1BEWKxD2OZLeJp8KHxo zB0ufaE+wlbDi23o7LZ2MmbQFpzRXI2jeuS9zOKB6stvc3MjgYabw5MkjYqDXZeJ BVimUcEk4hclISJORGYmgJY+aoaGQqNP8LcOeXb7J7IhUrA0ERhvVig2pPurAgMB AAGjggH2MIIB8jAdBgNVHQ4EFgQU48Rocsw0MBNtE4L+v6Hb814bDSswHwYDVR0j BBgwFoAUKOH9A8iwQKmHSpDUZUMirN/KNAcwDgYDVR0PAQH/BAQDAgeAMGcGA1Ud HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0hVTU1Z VEVDSC8xLzI4RTFGRDAzQzhCMDQwQTk4NzRBOTBENDY1NDMyMkFDREZDQTM0MDcu Y3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBLzAvMjhFMUZEMDNDOEIwNDBBOTg3NEE5MEQ0 NjU0MzIyQUNERkNBMzQwNy5jZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzAL hlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0NIVU1NWVRFQ0gvMS8yOEUx RkQwM0M4QjA0MEE5ODc0QTkwRDQ2NTQzMjJBQ0RGQ0EzNDA3Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA VWVmKAkZH2RYhkkLui185bm2AEqnjiDEEOMcb9ZeYYP8iRQUAXo72CdnaBvezVw9 hcZ9BGDWa1QXpVXgp7HyjTegRo1zlMk7DRKXKd8sXwYMd/z+QLZuCGp5jZCXdSUw LdnThbu6GhX2mQhWgXVFogOAR452FHlL8DgaDbQ0BNYwu8O+Wl5E4Z5RxrAEOxcf QK6wlXYLNhN7s845+ZBRLPuE8kuO5P1LKQQTlIQ+D9mZymkLn3HoefESunrjBWhp IliNu2c2WzjDetfveQsgGCGvlOErj4z5pKv1lTztoegbDz9yPN95J8PiGoxetj1q UIwgqnc3m6F4Rd1e/XLmnw== -----END CERTIFICATE-----Generated at Tue Oct 6 15:15:11 2026 by rpki-client