$ rpki-client -vvvf rpkica.twnic.tw/rpki/DOWTEK/0/4DC8A0E80696AD1A2419ACE881334BE812506228.mft File: 4DC8A0E80696AD1A2419ACE881334BE812506228.mft (raw, json) Hash identifier: Ch6vSqAWAAVNsGuvw+pO7gP5xh04fBQmEXcwta2TuW4= Subject key identifier: B2:0D:0F:92:F7:FB:27:1E:F2:A5:A2:ED:87:1D:17:EC:15:9A:46:F5 Authority key identifier: 4D:C8:A0:E8:06:96:AD:1A:24:19:AC:E8:81:33:4B:E8:12:50:62:28 Certificate issuer: /CN=4DC8A0E80696AD1A2419ACE881334BE812506228 Certificate serial: 1D5F94DCA2D798F66DB69918038A69313586DE78 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/4DC8A0E80696AD1A2419ACE881334BE812506228.cer Subject info access: rsync://rpkica.twnic.tw/rpki/DOWTEK/0/4DC8A0E80696AD1A2419ACE881334BE812506228.mft Manifest number: E2 Signing time: Wed 04 Nov 2026 15:58:23 +0000 Manifest this update: Wed 04 Nov 2026 15:53:23 +0000 Manifest next update: Thu 05 Nov 2026 17:05:23 +0000 Files and hashes: 1: 3136322e342e3233362e302f32342d3234203d3e20323136313338.roa (hash: t0sxX/J7DHyA7+RMNuIhT3/1j3L5qbFI7k7wb/onnz8=) 2: 3136322e342e3233362e302f32342d3234203d3e20323032373336.roa (hash: rqIFLfCYjTacr84/afinxLOCwaaiUV1aCFWFsa89OVU=) 3: 3136322e342e3233372e302f32342d3234203d3e20323136343332.roa (hash: XlAgg0iH/qhn/41L/oFVvuvgpv9LVS3KL4NDhTFX9EY=) 4: 3136322e342e3233372e302f32342d3234203d3e20323034383434.roa (hash: zY07qsBW6jQWwXSeyJT/a/KdjcX7kqx0lKHP7Wz8JC8=) 5: 3136322e342e3233362e302f32342d3234203d3e20313937353337.roa (hash: rkewqH+q2MmefgvP9xLiHPbeb7043RwX6NEiRy6AeiQ=) 6: 4DC8A0E80696AD1A2419ACE881334BE812506228.crl (hash: lq3R3QVbOs1ABwePBuIv/b6zqXFjb7OQB+Yl5ON3wxs=) 7: 3136322e342e3233362e302f32332d3233203d3e20313331363330.roa (hash: W1CiJP1fcJGIBc6vJyxp+aVBKQhzLI93m00Pia4UGPk=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/DOWTEK/0/4DC8A0E80696AD1A2419ACE881334BE812506228.crl rsync://rpkica.twnic.tw/rpki/DOWTEK/0/4DC8A0E80696AD1A2419ACE881334BE812506228.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/4DC8A0E80696AD1A2419ACE881334BE812506228.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 17:05:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:5f:94:dc:a2:d7:98:f6:6d:b6:99:18:03:8a:69:31:35:86:de:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DC8A0E80696AD1A2419ACE881334BE812506228 Validity Not Before: Nov 4 15:53:23 2026 GMT Not After : Nov 5 17:05:23 2026 GMT Subject: CN=B20D0F92F7FB271EF2A5A2ED871D17EC159A46F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d3:ba:80:83:2e:aa:55:15:80:c7:eb:5a:8c: b8:b6:85:5c:66:46:15:e1:f3:8b:bd:fd:49:b1:8c: eb:01:65:96:70:97:fd:de:fd:af:84:30:c3:d8:8b: 8e:67:89:65:69:8f:b1:d2:df:e8:96:99:9b:cb:e2: 30:4a:20:12:67:08:70:72:17:b5:80:ea:20:f3:8b: 2f:ff:60:0c:64:cf:30:b7:3a:83:dc:3a:a5:b7:77: bb:7e:ea:d1:94:32:7d:63:ba:51:15:1f:9e:8b:09: d9:e8:3b:c4:f4:a0:1c:31:6a:1d:7f:74:76:29:32: e0:9c:7a:b4:05:31:70:15:ae:a5:4a:b2:66:30:9c: 4b:e0:73:20:e4:b0:5b:54:39:e3:c4:42:c5:c5:81: 82:ac:5f:31:79:40:2e:f3:67:4b:6d:23:5f:30:04: e6:44:95:fa:d5:19:b2:3c:3f:a6:ba:7a:07:39:a9: 9e:4b:8d:d8:e6:47:1a:83:0e:98:b8:00:73:c4:94: 68:0b:c3:1a:34:e6:56:14:2e:02:f0:2d:51:99:83: 53:78:e2:10:6d:fd:99:7d:83:b1:76:b8:c0:c8:cf: c5:e0:02:37:25:c9:9c:80:8b:2f:86:54:f1:29:9f: 2c:8e:37:31:50:53:18:82:41:fb:7c:e4:ac:88:c1: eb:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:0D:0F:92:F7:FB:27:1E:F2:A5:A2:ED:87:1D:17:EC:15:9A:46:F5 X509v3 Authority Key Identifier: keyid:4D:C8:A0:E8:06:96:AD:1A:24:19:AC:E8:81:33:4B:E8:12:50:62:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/DOWTEK/0/4DC8A0E80696AD1A2419ACE881334BE812506228.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/4DC8A0E80696AD1A2419ACE881334BE812506228.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DOWTEK/0/4DC8A0E80696AD1A2419ACE881334BE812506228.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:14:fa:a6:c1:bd:c2:28:e8:24:86:7f:94:7c:66:cb:40:7a: 0b:e9:24:a2:01:12:5d:42:e7:e9:2e:ef:bb:42:c9:8a:72:02: 1a:80:7a:ac:c1:04:14:8b:fe:74:e9:26:0c:c4:45:f7:49:43: 98:72:24:6f:85:05:bd:ce:5c:70:2c:17:9e:5a:cc:c2:e0:aa: 29:59:cd:a7:ac:dd:cd:a8:39:0c:b7:11:c5:31:c9:75:4e:a7: 83:5e:65:cb:e5:65:16:a5:49:71:85:92:bb:0c:ea:80:c6:21: 58:cc:a6:81:3e:74:33:12:2e:7a:bf:27:b3:c6:72:f8:8b:8d: 93:b4:81:08:77:dc:ad:3e:2e:99:9d:83:0b:58:1a:13:75:63: 20:bf:7c:59:6a:70:90:a2:5e:5a:ec:17:c0:4f:62:cd:aa:78: 2a:65:46:98:30:b2:56:34:36:49:c3:f7:15:81:08:d2:73:38: b6:b5:5c:d1:be:d6:69:f4:10:9d:79:85:18:62:f2:dd:33:3c: 1d:02:d6:d8:67:f9:91:98:a0:c7:27:08:01:d0:df:09:43:57: ab:68:90:ea:1f:c1:5c:bd:c2:7f:21:b2:cb:58:d1:ad:ed:e3: 54:51:1b:e4:2b:e7:09:f3:ad:0f:18:e2:07:cc:f6:39:99:3d: e3:26:b1:9d -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUHV+U3KLXmPZttpkYA4ppMTWG3ngwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERDOEEwRTgwNjk2QUQxQTI0MTlBQ0U4ODEzMzRCRTgx MjUwNjIyODAeFw0yNjExMDQxNTUzMjNaFw0yNjExMDUxNzA1MjNaMDMxMTAvBgNV BAMTKEIyMEQwRjkyRjdGQjI3MUVGMkE1QTJFRDg3MUQxN0VDMTU5QTQ2RjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC707qAgy6qVRWAx+tajLi2hVxm RhXh84u9/UmxjOsBZZZwl/3e/a+EMMPYi45niWVpj7HS3+iWmZvL4jBKIBJnCHBy F7WA6iDziy//YAxkzzC3OoPcOqW3d7t+6tGUMn1julEVH56LCdnoO8T0oBwxah1/ dHYpMuCcerQFMXAVrqVKsmYwnEvgcyDksFtUOePEQsXFgYKsXzF5QC7zZ0ttI18w BOZElfrVGbI8P6a6egc5qZ5LjdjmRxqDDpi4AHPElGgLwxo05lYULgLwLVGZg1N4 4hBt/Zl9g7F2uMDIz8XgAjclyZyAiy+GVPEpnyyONzFQUxiCQft85KyIwevVAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQUsg0Pkvf7Jx7ypaLthx0X7BWaRvUwHwYDVR0j BBgwFoAUTcig6AaWrRokGazogTNL6BJQYigwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRE9XVEVL LzAvNERDOEEwRTgwNjk2QUQxQTI0MTlBQ0U4ODEzMzRCRTgxMjUwNjIyOC5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMC80REM4QTBFODA2OTZBRDFBMjQxOUFDRTg4MTMz NEJFODEyNTA2MjI4LmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRE9XVEVLLzAvNERDOEEwRTgwNjk2 QUQxQTI0MTlBQ0U4ODEzMzRCRTgxMjUwNjIyOC5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAM8U+qbBvcIo 6CSGf5R8ZstAegvpJKIBEl1C5+ku77tCyYpyAhqAeqzBBBSL/nTpJgzERfdJQ5hy JG+FBb3OXHAsF55azMLgqilZzaes3c2oOQy3EcUxyXVOp4NeZcvlZRalSXGFkrsM 6oDGIVjMpoE+dDMSLnq/J7PGcviLjZO0gQh33K0+LpmdgwtYGhN1YyC/fFlqcJCi XlrsF8BPYs2qeCplRpgwslY0NknD9xWBCNJzOLa1XNG+1mn0EJ15hRhi8t0zPB0C 1thn+ZGYoMcnCAHQ3wlDV6tokOofwVy9wn8hsstY0a3t41RRG+Qr5wnzrQ8Y4gfM 9jmZPeMmsZ0= -----END CERTIFICATE-----Generated at Thu Nov 5 05:00:53 2026 by rpki-client