$ rpki-client -vvvf rpkica.twnic.tw/rpki/DOWNWIN/0/A067A95CB7882938BA5EE0BF9E47C2E030EDF6FB.mft File: A067A95CB7882938BA5EE0BF9E47C2E030EDF6FB.mft (raw, json) Hash identifier: 6sacSU/LlB1ydFsJ11+sSdQg0i/dyt6BUiW/7dyzt6I= Subject key identifier: 5C:51:FE:A1:8E:03:5F:F7:1A:F8:5C:18:B8:63:E8:1D:D1:E7:18:C7 Authority key identifier: A0:67:A9:5C:B7:88:29:38:BA:5E:E0:BF:9E:47:C2:E0:30:ED:F6:FB Certificate issuer: /CN=A067A95CB7882938BA5EE0BF9E47C2E030EDF6FB Certificate serial: 2A530C83EC8F11169650FDF6E767F7FAE7E8521A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A067A95CB7882938BA5EE0BF9E47C2E030EDF6FB.cer Subject info access: rsync://rpkica.twnic.tw/rpki/DOWNWIN/0/A067A95CB7882938BA5EE0BF9E47C2E030EDF6FB.mft Manifest number: C4 Signing time: Mon 05 Oct 2026 04:21:41 +0000 Manifest this update: Mon 05 Oct 2026 04:16:41 +0000 Manifest next update: Tue 06 Oct 2026 06:48:41 +0000 Files and hashes: 1: A067A95CB7882938BA5EE0BF9E47C2E030EDF6FB.crl (hash: RH51dwQTQVHLMqueyUPGgjfC1owx2/8oFZk8+d/0y2s=) 2: 3130332e3131382e3134382e302f32332d3332203d3e20313331313439.roa (hash: 37E46pfPxEq9A4RxL1D37D3fAAtA0Gnx6vMhsNaTo4A=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/DOWNWIN/0/A067A95CB7882938BA5EE0BF9E47C2E030EDF6FB.crl rsync://rpkica.twnic.tw/rpki/DOWNWIN/0/A067A95CB7882938BA5EE0BF9E47C2E030EDF6FB.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A067A95CB7882938BA5EE0BF9E47C2E030EDF6FB.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 17:19:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:53:0c:83:ec:8f:11:16:96:50:fd:f6:e7:67:f7:fa:e7:e8:52:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A067A95CB7882938BA5EE0BF9E47C2E030EDF6FB Validity Not Before: Oct 5 04:16:41 2026 GMT Not After : Oct 6 06:48:41 2026 GMT Subject: CN=5C51FEA18E035FF71AF85C18B863E81DD1E718C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a8:dd:8b:46:70:34:0b:60:5b:93:17:d4:c0: 76:ae:51:a8:9d:b8:93:d3:b8:e3:92:16:46:65:fd: 95:0e:e2:42:84:51:79:67:f5:75:8d:dc:3d:09:41: 52:31:ee:71:2b:02:b0:92:43:9a:cf:99:c6:ae:7f: fa:a0:85:1d:a8:c2:c9:ae:4f:f2:82:fc:b6:b1:97: 74:01:de:2a:6f:af:d2:9e:d1:43:5c:c1:60:47:0a: d7:c0:d2:3d:ae:c4:0e:38:ea:c0:61:8f:35:42:46: a8:e3:79:a5:ad:0e:ed:3c:9a:97:19:74:ae:6f:28: a2:ae:1a:3a:f1:64:c0:af:0c:9d:92:76:94:7a:48: cd:b7:fd:44:66:4e:8f:c1:e4:86:28:5e:ae:71:d7: 45:e2:38:13:cd:1f:1b:f7:64:3e:76:87:20:1d:da: fe:0e:8c:76:81:eb:91:f5:13:fd:0d:43:23:28:53: 84:2d:db:6e:c5:83:f4:cb:94:5c:98:ca:b0:9f:97: 02:75:4b:fb:28:32:58:0d:40:7b:2f:86:83:91:a8: 51:32:07:c4:7d:1a:7d:cd:b2:92:16:c0:12:28:96: f3:61:79:f2:7b:84:ab:51:68:cf:f0:84:01:31:7e: be:83:fc:3e:58:39:fd:cc:c6:24:f5:41:ec:ad:02: cb:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:51:FE:A1:8E:03:5F:F7:1A:F8:5C:18:B8:63:E8:1D:D1:E7:18:C7 X509v3 Authority Key Identifier: keyid:A0:67:A9:5C:B7:88:29:38:BA:5E:E0:BF:9E:47:C2:E0:30:ED:F6:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/DOWNWIN/0/A067A95CB7882938BA5EE0BF9E47C2E030EDF6FB.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A067A95CB7882938BA5EE0BF9E47C2E030EDF6FB.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DOWNWIN/0/A067A95CB7882938BA5EE0BF9E47C2E030EDF6FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:e0:e4:88:a6:ef:0b:2c:27:61:ab:9b:1b:3f:bc:22:6a:13: 30:53:7c:79:06:d3:54:0b:48:c6:0b:1d:99:f7:03:19:28:60: e8:c3:ff:75:68:ce:aa:25:f9:e2:43:77:b2:6d:9b:89:a6:1a: 27:13:c3:ed:5d:08:c3:0d:08:01:44:e0:2d:e3:53:e2:c6:e1: 6d:bd:9c:a5:6c:b3:12:34:41:b8:cb:ff:68:60:21:a3:5d:0a: 2b:e7:c9:ae:91:d9:92:19:0d:e7:84:94:40:0a:55:80:67:75: 64:50:e0:a8:d4:54:3b:4d:0e:4c:21:03:17:69:24:c6:80:5a: 6d:c8:8f:9b:6d:ec:14:01:12:0c:c2:06:6f:d1:65:78:02:80: 3f:e2:a8:4b:61:3c:55:da:e9:61:a6:76:c9:46:ad:4b:f1:0d: e1:09:55:21:8a:a9:42:1e:87:63:7b:8f:73:f0:8a:50:1f:56: 5a:7d:2f:01:11:63:84:b5:98:aa:f9:fe:0a:5d:44:45:e5:10: c0:76:03:56:25:3a:53:c0:96:28:9d:22:7e:39:96:b7:c6:22: 7c:c6:e0:ef:43:87:12:e8:e5:78:37:f7:a8:93:42:a1:e6:01: 1e:53:5f:89:ab:45:46:61:cc:7e:3e:8e:12:a0:dc:ae:0f:d1: 71:8d:77:36 -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIUKlMMg+yPERaWUP3252f3+ufoUhowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTA2N0E5NUNCNzg4MjkzOEJBNUVFMEJGOUU0N0MyRTAz MEVERjZGQjAeFw0yNjEwMDUwNDE2NDFaFw0yNjEwMDYwNjQ4NDFaMDMxMTAvBgNV BAMTKDVDNTFGRUExOEUwMzVGRjcxQUY4NUMxOEI4NjNFODFERDFFNzE4QzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+qN2LRnA0C2BbkxfUwHauUaid uJPTuOOSFkZl/ZUO4kKEUXln9XWN3D0JQVIx7nErArCSQ5rPmcauf/qghR2owsmu T/KC/Laxl3QB3ipvr9Ke0UNcwWBHCtfA0j2uxA446sBhjzVCRqjjeaWtDu08mpcZ dK5vKKKuGjrxZMCvDJ2SdpR6SM23/URmTo/B5IYoXq5x10XiOBPNHxv3ZD52hyAd 2v4OjHaB65H1E/0NQyMoU4Qt227Fg/TLlFyYyrCflwJ1S/soMlgNQHsvhoORqFEy B8R9Gn3NspIWwBIolvNhefJ7hKtRaM/whAExfr6D/D5YOf3MxiT1QeytAstVAgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQUXFH+oY4DX/ca+FwYuGPoHdHnGMcwHwYDVR0j BBgwFoAUoGepXLeIKTi6XuC/nkfC4DDt9vswDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRE9XTldJ Ti8wL0EwNjdBOTVDQjc4ODI5MzhCQTVFRTBCRjlFNDdDMkUwMzBFREY2RkIuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvQTA2N0E5NUNCNzg4MjkzOEJBNUVFMEJGOUU0 N0MyRTAzMEVERjZGQi5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0RPV05XSU4vMC9BMDY3QTk1Q0I3 ODgyOTM4QkE1RUUwQkY5RTQ3QzJFMDMwRURGNkZCLm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC+DkiKbv CywnYaubGz+8ImoTMFN8eQbTVAtIxgsdmfcDGShg6MP/dWjOqiX54kN3sm2biaYa JxPD7V0Iww0IAUTgLeNT4sbhbb2cpWyzEjRBuMv/aGAho10KK+fJrpHZkhkN54SU QApVgGd1ZFDgqNRUO00OTCEDF2kkxoBabciPm23sFAESDMIGb9FleAKAP+KoS2E8 VdrpYaZ2yUatS/EN4QlVIYqpQh6HY3uPc/CKUB9WWn0vARFjhLWYqvn+Cl1EReUQ wHYDViU6U8CWKJ0ifjmWt8YifMbg70OHEujleDf3qJNCoeYBHlNfiatFRmHMfj6O EqDcrg/RcY13Ng== -----END CERTIFICATE-----Generated at Mon Oct 5 08:11:05 2026 by rpki-client