$ rpki-client -vvvf rpkica.twnic.tw/rpki/DOWTEK/1/E68C4C103029B84142A5CAB3EFB852FDC1A39BB0.mft File: E68C4C103029B84142A5CAB3EFB852FDC1A39BB0.mft (raw, json) Hash identifier: t79BIgVRma5j4tTEX6AxsvpQNTeZZunB92LrOZMBlRk= Subject key identifier: 2D:6A:02:A6:2C:0D:CB:E3:F7:AE:2D:6D:6B:53:79:1D:C5:30:E4:98 Authority key identifier: E6:8C:4C:10:30:29:B8:41:42:A5:CA:B3:EF:B8:52:FD:C1:A3:9B:B0 Certificate issuer: /CN=E68C4C103029B84142A5CAB3EFB852FDC1A39BB0 Certificate serial: 6FDDC5443227ED6FB000F0FAF3CD14E1B358EB15 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E68C4C103029B84142A5CAB3EFB852FDC1A39BB0.cer Subject info access: rsync://rpkica.twnic.tw/rpki/DOWTEK/1/E68C4C103029B84142A5CAB3EFB852FDC1A39BB0.mft Manifest number: 9E Signing time: Fri 18 Sep 2026 19:50:48 +0000 Manifest this update: Fri 18 Sep 2026 19:45:48 +0000 Manifest next update: Sat 19 Sep 2026 19:50:48 +0000 Files and hashes: 1: 323430323a363432303a3a2f33322d3438203d3e20313331363330.roa (hash: oxQPGNBMj2CJJd3CtDlG2Tl/miuEDB0GkZlm0cd0pJk=) 2: E68C4C103029B84142A5CAB3EFB852FDC1A39BB0.crl (hash: pO+5KVZ/n0KxcalTkfFR9J3LfokBHqSjKbTDsR3SrRk=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/DOWTEK/1/E68C4C103029B84142A5CAB3EFB852FDC1A39BB0.crl rsync://rpkica.twnic.tw/rpki/DOWTEK/1/E68C4C103029B84142A5CAB3EFB852FDC1A39BB0.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E68C4C103029B84142A5CAB3EFB852FDC1A39BB0.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Sep 2026 19:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:dd:c5:44:32:27:ed:6f:b0:00:f0:fa:f3:cd:14:e1:b3:58:eb:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E68C4C103029B84142A5CAB3EFB852FDC1A39BB0 Validity Not Before: Sep 18 19:45:48 2026 GMT Not After : Sep 19 19:50:48 2026 GMT Subject: CN=2D6A02A62C0DCBE3F7AE2D6D6B53791DC530E498 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f5:24:80:e7:1c:c5:c7:58:4e:a8:2a:1b:83: bd:11:a4:17:03:a7:34:e3:21:bb:7d:53:87:86:95: 57:2f:3b:77:d4:23:a6:48:99:e0:3e:95:71:1f:8f: 02:3a:17:f6:0d:17:3b:50:45:79:38:de:ab:07:a8: fd:9a:c5:04:88:b9:ec:41:06:05:37:b4:b1:5a:e4: 52:ca:86:98:ca:cb:2c:e4:57:49:d2:76:d8:2e:a6: d5:e0:45:dc:b0:63:87:c6:5c:d3:57:95:ab:07:ae: a2:7d:60:49:8b:56:0d:2b:d0:ca:5b:63:c6:94:31: 66:a7:1f:11:14:90:28:23:1f:71:d0:a0:e9:45:89: 51:16:97:52:7b:64:7e:b1:41:d3:54:bb:86:ca:ed: 23:10:1c:a9:19:6e:99:e6:89:99:7d:9c:8a:10:55: 8a:4f:3c:db:93:b9:36:9b:00:d8:26:9e:21:c8:e5: 87:2e:04:9e:00:99:7f:2b:74:d1:ae:dd:87:f1:4e: 8b:32:03:f3:13:05:b1:9e:8c:df:58:b4:a8:9d:3d: 29:06:12:7d:53:63:ca:80:a6:ba:24:2b:5d:26:50: 53:9c:bd:fd:a5:06:fa:03:d7:cf:8f:d1:34:0d:47: 1f:be:7f:fd:94:e2:32:78:a4:18:42:87:cf:41:c9: 30:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:6A:02:A6:2C:0D:CB:E3:F7:AE:2D:6D:6B:53:79:1D:C5:30:E4:98 X509v3 Authority Key Identifier: keyid:E6:8C:4C:10:30:29:B8:41:42:A5:CA:B3:EF:B8:52:FD:C1:A3:9B:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/DOWTEK/1/E68C4C103029B84142A5CAB3EFB852FDC1A39BB0.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E68C4C103029B84142A5CAB3EFB852FDC1A39BB0.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DOWTEK/1/E68C4C103029B84142A5CAB3EFB852FDC1A39BB0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:f6:7f:e0:50:53:51:c6:e1:ef:58:06:1d:6a:53:c3:97:1d: d1:08:91:98:96:04:d3:e8:95:68:8e:c9:76:83:fd:c2:90:e5: 2a:11:12:54:74:42:3d:91:1d:84:a9:e5:dd:9c:d4:af:72:a2: 0a:7d:07:ae:05:2a:26:32:75:73:6f:04:99:36:76:4f:d1:99: bd:9b:8c:1b:e9:1d:10:e3:6d:52:e9:26:60:5e:c2:86:2c:a0: db:c2:f4:84:93:97:70:0e:17:c8:be:6b:9c:cd:ff:38:b3:ec: 9e:64:c3:3b:30:bf:e7:15:41:05:75:91:45:56:a0:b2:4c:a2: 87:af:56:74:f4:68:53:c4:ef:52:84:4f:52:a7:a5:a0:68:c1: e1:1c:40:da:5e:44:f2:73:8a:d4:f8:a1:9e:c9:fd:b9:7c:40: 08:a6:79:d5:28:56:64:38:73:5c:2b:04:ea:24:07:a3:3e:1c: df:b8:f8:21:61:c1:ea:d3:f5:b5:1a:04:08:cf:13:57:e4:17: 8a:1e:a6:a0:1d:17:e8:b1:7a:e9:10:4c:b8:4b:05:4a:49:10: 13:26:f9:d2:7a:d2:bc:cc:57:43:c7:01:89:e5:85:c2:46:6d: f0:1f:fe:6f:b3:e2:88:a0:12:28:d2:f7:f7:74:a6:c6:62:13: e6:b6:8f:fb -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUb93FRDIn7W+wAPD6880U4bNY6xUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTY4QzRDMTAzMDI5Qjg0MTQyQTVDQUIzRUZCODUyRkRD MUEzOUJCMDAeFw0yNjA5MTgxOTQ1NDhaFw0yNjA5MTkxOTUwNDhaMDMxMTAvBgNV BAMTKDJENkEwMkE2MkMwRENCRTNGN0FFMkQ2RDZCNTM3OTFEQzUzMEU0OTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG9SSA5xzFx1hOqCobg70RpBcD pzTjIbt9U4eGlVcvO3fUI6ZImeA+lXEfjwI6F/YNFztQRXk43qsHqP2axQSIuexB BgU3tLFa5FLKhpjKyyzkV0nSdtguptXgRdywY4fGXNNXlasHrqJ9YEmLVg0r0Mpb Y8aUMWanHxEUkCgjH3HQoOlFiVEWl1J7ZH6xQdNUu4bK7SMQHKkZbpnmiZl9nIoQ VYpPPNuTuTabANgmniHI5YcuBJ4AmX8rdNGu3YfxTosyA/MTBbGejN9YtKidPSkG En1TY8qAprokK10mUFOcvf2lBvoD18+P0TQNRx++f/2U4jJ4pBhCh89ByTANAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQULWoCpiwNy+P3ri1ta1N5HcUw5JgwHwYDVR0j BBgwFoAU5oxMEDApuEFCpcqz77hS/cGjm7AwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRE9XVEVL LzEvRTY4QzRDMTAzMDI5Qjg0MTQyQTVDQUIzRUZCODUyRkRDMUEzOUJCMC5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMS9FNjhDNEMxMDMwMjlCODQxNDJBNUNBQjNFRkI4 NTJGREMxQTM5QkIwLmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRE9XVEVLLzEvRTY4QzRDMTAzMDI5 Qjg0MTQyQTVDQUIzRUZCODUyRkRDMUEzOUJCMC5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBADX2f+BQU1HG 4e9YBh1qU8OXHdEIkZiWBNPolWiOyXaD/cKQ5SoRElR0Qj2RHYSp5d2c1K9yogp9 B64FKiYydXNvBJk2dk/Rmb2bjBvpHRDjbVLpJmBewoYsoNvC9ISTl3AOF8i+a5zN /ziz7J5kwzswv+cVQQV1kUVWoLJMooevVnT0aFPE71KET1KnpaBoweEcQNpeRPJz itT4oZ7J/bl8QAimedUoVmQ4c1wrBOokB6M+HN+4+CFhwerT9bUaBAjPE1fkF4oe pqAdF+ixeukQTLhLBUpJEBMm+dJ60rzMV0PHAYnlhcJGbfAf/m+z4oigEijS9/d0 psZiE+a2j/s= -----END CERTIFICATE-----Generated at Sat Sep 19 07:37:37 2026 by rpki-client