$ rpki-client -vvvf rpkica.twnic.tw/rpki/DCC1223342/0/67919719E801E94CCA89D7569D37B67D252A261F.mft File: 67919719E801E94CCA89D7569D37B67D252A261F.mft (raw, json) Hash identifier: jQCkR6qL+rYiB+BN5MynUI17huJcsCXEGlEae+7l3Rw= Subject key identifier: 57:33:2F:84:D2:B8:7E:1C:6F:DF:C9:E6:3C:07:C5:03:93:9F:DF:05 Authority key identifier: 67:91:97:19:E8:01:E9:4C:CA:89:D7:56:9D:37:B6:7D:25:2A:26:1F Certificate issuer: /CN=67919719E801E94CCA89D7569D37B67D252A261F Certificate serial: 511BAB65975D706F21E6DE20E48D363421F69C0B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/67919719E801E94CCA89D7569D37B67D252A261F.cer Subject info access: rsync://rpkica.twnic.tw/rpki/DCC1223342/0/67919719E801E94CCA89D7569D37B67D252A261F.mft Manifest number: C4 Signing time: Sat 03 Oct 2026 11:59:58 +0000 Manifest this update: Sat 03 Oct 2026 11:54:58 +0000 Manifest next update: Sun 04 Oct 2026 13:30:58 +0000 Files and hashes: 1: 67919719E801E94CCA89D7569D37B67D252A261F.crl (hash: ApOvWt2UyYVjERLqFOpI9+2F5u21PqA16iSvvYHQgG0=) 2: 323430303a353065303a3a2f33322d3634203d3e203633383933.roa (hash: W+Ffc6VUEComE7wKXCSRqfcLvgJdlvoiPW+6XMV3r6s=) 3: 3130332e3138302e31382e302f32332d3234203d3e203633383933.roa (hash: YHu6xUiyV20ecZfxOWBbvKCz1hQvQ5fZsJlGMsXnUjk=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/DCC1223342/0/67919719E801E94CCA89D7569D37B67D252A261F.crl rsync://rpkica.twnic.tw/rpki/DCC1223342/0/67919719E801E94CCA89D7569D37B67D252A261F.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/67919719E801E94CCA89D7569D37B67D252A261F.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 13:30:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:1b:ab:65:97:5d:70:6f:21:e6:de:20:e4:8d:36:34:21:f6:9c:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67919719E801E94CCA89D7569D37B67D252A261F Validity Not Before: Oct 3 11:54:58 2026 GMT Not After : Oct 4 13:30:58 2026 GMT Subject: CN=57332F84D2B87E1C6FDFC9E63C07C503939FDF05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:23:59:74:3f:82:b4:5b:58:19:50:cb:d1:28: 50:df:7a:ca:82:20:10:2c:e0:af:d5:b4:17:1f:7e: d9:95:20:1d:e7:fc:7d:07:0a:54:c0:4f:a9:b8:e7: e9:98:42:ad:6b:bd:36:a1:dc:4b:df:db:a5:f7:38: af:59:b2:c7:3e:d9:0a:04:b5:51:bd:94:4a:52:e3: 6d:6a:39:77:58:56:fc:93:27:91:4b:77:50:74:01: cc:17:a0:e3:93:8f:33:9b:6c:6d:9d:6e:1f:dd:7e: 0b:dc:d5:cb:be:b2:f4:50:48:2f:ed:09:cc:58:bc: 9d:7b:05:3c:42:59:a6:ca:95:91:69:42:5f:03:66: 8a:8f:28:e1:b6:95:b3:d7:4b:aa:2e:03:b4:82:ba: e1:c2:29:42:52:17:39:5d:eb:a0:55:e4:0a:cb:b8: d0:4d:83:d8:33:4f:27:16:54:40:45:48:2a:5c:83: ab:fe:74:de:61:78:7e:12:7e:3b:9b:2f:b2:5c:92: 60:9e:41:51:04:95:4a:34:c9:0e:1b:aa:07:cd:45: 3f:ea:bd:9a:3b:e2:84:21:87:22:7a:23:2c:d2:5a: cf:cc:84:af:73:6f:c4:51:20:a8:4d:2a:4f:22:10: 40:30:2f:ef:2d:66:b9:b4:ec:b4:f8:99:9c:0b:39: 98:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:33:2F:84:D2:B8:7E:1C:6F:DF:C9:E6:3C:07:C5:03:93:9F:DF:05 X509v3 Authority Key Identifier: keyid:67:91:97:19:E8:01:E9:4C:CA:89:D7:56:9D:37:B6:7D:25:2A:26:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/DCC1223342/0/67919719E801E94CCA89D7569D37B67D252A261F.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/67919719E801E94CCA89D7569D37B67D252A261F.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DCC1223342/0/67919719E801E94CCA89D7569D37B67D252A261F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:95:e4:81:30:3b:8b:04:15:19:2a:ed:c3:f5:cb:0c:ed:81: 07:59:96:18:70:51:77:1d:35:48:f3:f4:19:1c:3b:da:b3:8e: 78:fe:20:d6:a5:22:2e:45:63:68:b4:37:bb:20:ce:7a:d3:23: 83:35:ae:97:b6:be:f4:78:2b:db:97:e6:6b:80:d8:cc:0c:65: e8:95:21:7a:22:b3:7e:47:2f:7a:65:19:89:4d:11:40:ab:29: 5a:be:44:69:80:f0:41:0e:93:94:53:cc:27:6f:94:66:97:0d: 05:ef:9d:a3:e7:9e:79:5d:f4:a0:f6:c8:51:97:2c:37:ac:28: ec:3c:c8:8b:fe:85:85:cc:c5:dd:e4:01:5c:3e:10:21:e8:87: 2d:f1:bb:d5:be:ec:89:7e:d6:95:77:0c:21:21:87:94:85:2d: 62:fa:d3:0b:a5:1c:d6:21:ac:98:98:2f:b8:cd:43:ed:31:5f: 7d:19:92:2a:b2:7e:60:d4:de:be:64:f7:11:83:f2:2c:2c:51: e8:55:c6:47:66:1f:6a:f7:23:4e:bf:c2:e2:01:1c:3c:fb:f9: 67:af:07:93:30:cc:c1:76:30:e9:b1:75:12:2a:2a:1f:d5:65: f7:6e:0f:99:6a:b3:9e:5e:51:7a:9a:21:e4:82:f5:51:09:b5: fe:81:cb:b1 -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgIUURurZZddcG8h5t4g5I02NCH2nAswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjc5MTk3MTlFODAxRTk0Q0NBODlENzU2OUQzN0I2N0Qy NTJBMjYxRjAeFw0yNjEwMDMxMTU0NThaFw0yNjEwMDQxMzMwNThaMDMxMTAvBgNV BAMTKDU3MzMyRjg0RDJCODdFMUM2RkRGQzlFNjNDMDdDNTAzOTM5RkRGMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3I1l0P4K0W1gZUMvRKFDfesqC IBAs4K/VtBcfftmVIB3n/H0HClTAT6m45+mYQq1rvTah3Evf26X3OK9Zssc+2QoE tVG9lEpS421qOXdYVvyTJ5FLd1B0AcwXoOOTjzObbG2dbh/dfgvc1cu+svRQSC/t CcxYvJ17BTxCWabKlZFpQl8DZoqPKOG2lbPXS6ouA7SCuuHCKUJSFzld66BV5ArL uNBNg9gzTycWVEBFSCpcg6v+dN5heH4SfjubL7JckmCeQVEElUo0yQ4bqgfNRT/q vZo74oQhhyJ6IyzSWs/MhK9zb8RRIKhNKk8iEEAwL+8tZrm07LT4mZwLOZghAgMB AAGjggH2MIIB8jAdBgNVHQ4EFgQUVzMvhNK4fhxv38nmPAfFA5Of3wUwHwYDVR0j BBgwFoAUZ5GXGegB6UzKiddWnTe2fSUqJh8wDgYDVR0PAQH/BAQDAgeAMGcGA1Ud HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRENDMTIy MzM0Mi8wLzY3OTE5NzE5RTgwMUU5NENDQTg5RDc1NjlEMzdCNjdEMjUyQTI2MUYu Y3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBLzEvNjc5MTk3MTlFODAxRTk0Q0NBODlENzU2 OUQzN0I2N0QyNTJBMjYxRi5jZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzAL hlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0RDQzEyMjMzNDIvMC82Nzkx OTcxOUU4MDFFOTRDQ0E4OUQ3NTY5RDM3QjY3RDI1MkEyNjFGLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA fpXkgTA7iwQVGSrtw/XLDO2BB1mWGHBRdx01SPP0GRw72rOOeP4g1qUiLkVjaLQ3 uyDOetMjgzWul7a+9Hgr25fma4DYzAxl6JUheiKzfkcvemUZiU0RQKspWr5EaYDw QQ6TlFPMJ2+UZpcNBe+do+eeeV30oPbIUZcsN6wo7DzIi/6FhczF3eQBXD4QIeiH LfG71b7siX7WlXcMISGHlIUtYvrTC6Uc1iGsmJgvuM1D7TFffRmSKrJ+YNTevmT3 EYPyLCxR6FXGR2YfavcjTr/C4gEcPPv5Z68HkzDMwXYw6bF1EioqH9Vl924PmWqz nl5Repoh5IL1UQm1/oHLsQ== -----END CERTIFICATE-----Generated at Sun Oct 4 02:37:48 2026 by rpki-client