$ rpki-client -vvf rpkica.twnic.tw/rpki/CKMATES/0/3D576C4841082805B3CDBD7337F3963A8833174B.mft File: 3D576C4841082805B3CDBD7337F3963A8833174B.mft (raw, json) Hash identifier: R0MQWQft3pvGL1dUutrF9sJKgNlpYIHBHVm8RmiQmes= Subject key identifier: 56:12:D1:92:6F:0C:D8:77:24:D0:EE:6F:9B:80:DC:A0:11:2D:68:54 Authority key identifier: 3D:57:6C:48:41:08:28:05:B3:CD:BD:73:37:F3:96:3A:88:33:17:4B Certificate issuer: /CN=3D576C4841082805B3CDBD7337F3963A8833174B Certificate serial: 58994FAC68DFE1CD92665764D4DEBB384B1EB06C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3D576C4841082805B3CDBD7337F3963A8833174B.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CKMATES/0/3D576C4841082805B3CDBD7337F3963A8833174B.mft Manifest number: 87 Signing time: Fri 14 Aug 2026 16:17:17 +0000 Manifest this update: Fri 14 Aug 2026 16:12:17 +0000 Manifest next update: Sat 15 Aug 2026 19:46:17 +0000 Files and hashes: 1: 3130332e3131392e3231342e302f32342d3234203d3e20313333333735.roa (hash: /UvybhcLKT1KK1desdUWoCsOTWNrRkdvIjVquH9d4MA=) 2: 3130332e3131392e3231342e302f32342d3234203d3e20313339363337.roa (hash: BkQPXEKbvmbpHuwtKiewh9JYhpq3BksNtpHsw33H1fI=) 3: 3D576C4841082805B3CDBD7337F3963A8833174B.crl (hash: fDx0bx9QZISgQqbZGSi5WIZDis9ygHS17+DJ9Wboayg=) 4: 3130332e3131392e3231322e302f32322d3234203d3e20313333373437.roa (hash: zPQusnanznelCXG1KdOD21zkqA+VphGwDoshIYxRbJ0=) 5: 3130332e3131392e3231342e302f32342d3234203d3e20313331363239.roa (hash: ATTGrI+LdxvHy7tZZvIf74Pi92V/OccZmHc6iAFqFXM=) 6: 3130332e3131392e3231332e302f32342d3234203d3e20313331363239.roa (hash: EJjmwH6YAXPBMwmijz6eL3wQvRP4K1M4tTn06rZJrIA=) 7: 3130332e3131392e3231352e302f32342d3234203d3e20313339363337.roa (hash: jPTm5d5SYsezMtn+BRkYU2/hKNSbQfuFpXU/01PcOeQ=) 8: 3130332e3131392e3231332e302f32342d3234203d3e203136353039.roa (hash: PL2cz2Hbk/JdNHMN06li8HzqoQzLhVGaxZWqRcHi6hM=) 9: 3130332e3131392e3231322e302f32322d3234203d3e20313331363239.roa (hash: eXsmebarUaems23bSj2ZcVD8dLS2085WCpxoaq88x4M=) 10: 3130332e3131392e3231332e302f32342d3234203d3e203134363138.roa (hash: sldyxDcFqyW0yrBmnmv5iDOduZFppPbQvxaSJnOI1Vw=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CKMATES/0/3D576C4841082805B3CDBD7337F3963A8833174B.crl rsync://rpkica.twnic.tw/rpki/CKMATES/0/3D576C4841082805B3CDBD7337F3963A8833174B.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3D576C4841082805B3CDBD7337F3963A8833174B.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 15 Aug 2026 19:46:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:99:4f:ac:68:df:e1:cd:92:66:57:64:d4:de:bb:38:4b:1e:b0:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D576C4841082805B3CDBD7337F3963A8833174B Validity Not Before: Aug 14 16:12:17 2026 GMT Not After : Aug 15 19:46:17 2026 GMT Subject: CN=5612D1926F0CD87724D0EE6F9B80DCA0112D6854 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:bb:ac:c0:cc:19:eb:df:4a:90:5b:1c:77:7c: ea:30:27:e6:f4:9e:32:ae:69:70:eb:19:1d:03:59: bb:a2:45:82:1f:b6:17:97:f0:f1:11:63:87:e0:5e: af:0d:f5:71:a9:46:30:39:3e:48:38:94:da:ae:ac: aa:cb:2c:fb:e6:ca:a6:23:8b:b2:e8:26:77:6b:3c: b9:c2:85:a8:98:d9:fe:e1:16:e3:28:89:43:4f:38: 45:da:47:43:24:8c:60:af:87:16:7f:aa:9e:56:86: ab:fd:d5:d8:60:01:b3:41:f3:1a:40:50:47:90:73: ee:08:f2:20:98:51:68:b8:01:20:20:d0:f5:66:25: 15:b3:db:ba:8d:79:8f:af:66:53:c9:ae:99:8a:d8: 33:dd:a8:d1:08:21:33:20:6c:3b:e4:e5:34:d6:a0: 90:9b:ae:20:8e:6e:76:25:18:39:94:17:b5:8e:a0: 0b:17:69:e7:32:86:14:d2:97:8c:a9:5c:be:95:8b: cb:93:ad:2e:f5:ec:7b:b3:2a:22:0e:c7:a4:93:08: 3c:5e:b2:9f:39:cb:1e:11:bf:cd:3b:c0:f1:dc:01: 05:45:6c:7e:90:99:4a:4d:ee:8b:1a:90:49:9b:9e: 2d:be:5f:24:00:0f:62:14:b2:4a:ba:eb:57:f2:db: 47:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:12:D1:92:6F:0C:D8:77:24:D0:EE:6F:9B:80:DC:A0:11:2D:68:54 X509v3 Authority Key Identifier: keyid:3D:57:6C:48:41:08:28:05:B3:CD:BD:73:37:F3:96:3A:88:33:17:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CKMATES/0/3D576C4841082805B3CDBD7337F3963A8833174B.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3D576C4841082805B3CDBD7337F3963A8833174B.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CKMATES/0/3D576C4841082805B3CDBD7337F3963A8833174B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:8f:05:2c:de:40:fe:c3:01:ca:71:aa:3e:c0:7d:37:38:eb: 86:e2:d2:74:05:da:95:1e:8d:db:ce:57:24:5c:4f:43:f8:a8: 96:9f:88:58:a7:d8:fb:86:80:27:b2:51:f1:36:ed:aa:bb:82: 6d:a0:2e:eb:0c:f4:cf:87:16:bf:fe:32:36:8b:65:02:f8:c9: 58:f8:cc:e4:aa:9d:ff:23:94:80:7f:78:03:f6:aa:4e:fa:2d: 62:ba:f8:8b:ef:5b:99:d3:25:69:1c:b4:0d:e5:f4:f3:d5:db: 0a:18:76:45:af:c9:5c:e0:14:f7:56:31:90:1b:08:31:eb:a1: 9c:0a:ed:5e:74:69:4d:e3:6e:76:2c:49:85:d2:8e:2d:65:45: 86:6c:72:09:aa:cd:22:d7:42:e3:00:95:40:7c:4f:35:a0:79: 84:ed:54:b5:8b:c0:3f:33:c7:25:4f:93:50:f5:af:3a:72:c8: f1:f5:c2:a3:e1:0e:96:c6:b4:cc:12:5b:aa:a6:ab:0f:c3:70: 97:ef:07:c5:00:1b:ba:59:5f:94:be:4f:95:6d:af:2c:e0:0c: ba:10:c3:99:7d:b5:1d:f8:aa:21:8c:fa:34:8c:22:5b:60:72: b8:bc:97:17:ad:cb:3f:94:a6:b4:13:09:dd:d8:0d:b6:c7:56: dd:2f:2f:14 -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIUWJlPrGjf4c2SZldk1N67OEsesGwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q1NzZDNDg0MTA4MjgwNUIzQ0RCRDczMzdGMzk2M0E4 ODMzMTc0QjAeFw0yNjA4MTQxNjEyMTdaFw0yNjA4MTUxOTQ2MTdaMDMxMTAvBgNV BAMTKDU2MTJEMTkyNkYwQ0Q4NzcyNEQwRUU2RjlCODBEQ0EwMTEyRDY4NTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnu6zAzBnr30qQWxx3fOowJ+b0 njKuaXDrGR0DWbuiRYIftheX8PERY4fgXq8N9XGpRjA5Pkg4lNqurKrLLPvmyqYj i7LoJndrPLnChaiY2f7hFuMoiUNPOEXaR0MkjGCvhxZ/qp5Whqv91dhgAbNB8xpA UEeQc+4I8iCYUWi4ASAg0PVmJRWz27qNeY+vZlPJrpmK2DPdqNEIITMgbDvk5TTW oJCbriCObnYlGDmUF7WOoAsXaecyhhTSl4ypXL6Vi8uTrS717HuzKiIOx6STCDxe sp85yx4Rv807wPHcAQVFbH6QmUpN7osakEmbni2+XyQAD2IUskq661fy20chAgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQUVhLRkm8M2Hck0O5vm4DcoBEtaFQwHwYDVR0j BBgwFoAUPVdsSEEIKAWzzb1zN/OWOogzF0swDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0tNQVRF Uy8wLzNENTc2QzQ4NDEwODI4MDVCM0NEQkQ3MzM3RjM5NjNBODgzMzE3NEIuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvM0Q1NzZDNDg0MTA4MjgwNUIzQ0RCRDczMzdG Mzk2M0E4ODMzMTc0Qi5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0NLTUFURVMvMC8zRDU3NkM0ODQx MDgyODA1QjNDREJENzMzN0YzOTYzQTg4MzMxNzRCLm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIY8FLN5A /sMBynGqPsB9NzjrhuLSdAXalR6N285XJFxPQ/iolp+IWKfY+4aAJ7JR8TbtqruC baAu6wz0z4cWv/4yNotlAvjJWPjM5Kqd/yOUgH94A/aqTvotYrr4i+9bmdMlaRy0 DeX089XbChh2Ra/JXOAU91YxkBsIMeuhnArtXnRpTeNudixJhdKOLWVFhmxyCarN ItdC4wCVQHxPNaB5hO1UtYvAPzPHJU+TUPWvOnLI8fXCo+EOlsa0zBJbqqarD8Nw l+8HxQAbullflL5PlW2vLOAMuhDDmX21HfiqIYz6NIwiW2ByuLyXF63LP5SmtBMJ 3dgNtsdW3S8vFA== -----END CERTIFICATE-----Generated at Sat Aug 15 05:38:02 2026 by rpki-client