$ rpki-client -vvvf rpkica.twnic.tw/rpki/FANTASY/0/28E8C034945DF0971A657E251911BBA0B2819562.mft File: 28E8C034945DF0971A657E251911BBA0B2819562.mft (raw, json) Hash identifier: 2kgP3IEl4b6gGJy3LOy/yUeXhjynUOmwMSYOkHUNojw= Subject key identifier: C2:FE:B1:72:5E:43:4A:FC:AC:65:42:68:04:FB:26:2B:40:41:86:04 Authority key identifier: 28:E8:C0:34:94:5D:F0:97:1A:65:7E:25:19:11:BB:A0:B2:81:95:62 Certificate issuer: /CN=28E8C034945DF0971A657E251911BBA0B2819562 Certificate serial: 3D058F213FE3ACF18F8E0B4A3AFE3A00BFF19517 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/28E8C034945DF0971A657E251911BBA0B2819562.cer Subject info access: rsync://rpkica.twnic.tw/rpki/FANTASY/0/28E8C034945DF0971A657E251911BBA0B2819562.mft Manifest number: C6 Signing time: Fri 02 Oct 2026 21:49:07 +0000 Manifest this update: Fri 02 Oct 2026 21:44:07 +0000 Manifest next update: Sat 03 Oct 2026 22:02:07 +0000 Files and hashes: 1: 323430353a613063303a3a2f33322d3438203d3e20313331363731.roa (hash: 6HrkEzQ2Yg1WTlAGALA+Lw5WYBWkKQgOUE2P3VYv1e4=) 2: 3130332e3134362e3231322e302f32342d3234203d3e20313331363731.roa (hash: v0VyC7X7thLb1BBUBYlXdyclFoTUZxEmzXZ1GE31WD8=) 3: 28E8C034945DF0971A657E251911BBA0B2819562.crl (hash: 07o4gZWwVJBzmZMA5aONjt4Xdad3PhPMFLjsUpcn7rc=) 4: 3130332e3134362e3231332e302f32342d3234203d3e20313331363731.roa (hash: LYwHjGxEzckNqePKzYBLQw/Fecl7B+Zct0xOoyvOLzg=) 5: 3130332e3134362e3231322e302f32332d3234203d3e20313331363731.roa (hash: pMS5Ph8mPGJU3UpJ7IjmKfi+Ix8We0Zd68WwZnbms2Y=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/FANTASY/0/28E8C034945DF0971A657E251911BBA0B2819562.crl rsync://rpkica.twnic.tw/rpki/FANTASY/0/28E8C034945DF0971A657E251911BBA0B2819562.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/28E8C034945DF0971A657E251911BBA0B2819562.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 22:02:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:05:8f:21:3f:e3:ac:f1:8f:8e:0b:4a:3a:fe:3a:00:bf:f1:95:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28E8C034945DF0971A657E251911BBA0B2819562 Validity Not Before: Oct 2 21:44:07 2026 GMT Not After : Oct 3 22:02:07 2026 GMT Subject: CN=C2FEB1725E434AFCAC65426804FB262B40418604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:c3:2a:53:1c:ce:6e:d1:40:6f:26:ac:85:52: 2e:2f:27:2c:44:2e:9a:cb:67:eb:b4:14:bb:fa:68: 1e:b3:f6:c9:b0:7b:33:0c:f0:37:6f:bd:8c:f0:d9: ba:59:02:11:16:f0:1a:65:8d:ce:25:ed:81:ee:da: 38:18:13:53:1c:d9:f7:a7:fa:81:db:ea:9c:5d:51: b2:0c:cb:99:87:e4:96:5d:0c:e0:74:30:93:a2:ca: 35:54:8f:f5:8f:b9:4c:5d:1c:b7:fa:dc:29:63:c6: 9c:04:9e:1b:a4:22:57:c0:41:5d:bf:87:af:e4:16: d7:8c:5a:d0:26:38:85:27:8f:30:41:e1:6b:6c:eb: 5c:15:a3:07:84:aa:99:ca:37:71:d8:73:64:69:7c: e1:e4:aa:d6:f3:87:4d:e4:3d:c3:bc:d2:d0:d6:09: 6d:4b:77:6b:cb:f8:39:00:24:a5:c9:61:da:21:3d: 48:0a:0d:b0:14:45:30:22:22:bd:54:3d:93:fc:53: 1d:0f:a1:e3:35:0d:ba:2e:da:62:b5:09:9a:ce:5d: 7e:a2:0a:6a:f9:a9:34:6c:1d:b6:52:79:bb:85:b7: 1e:e2:30:87:71:91:cc:b8:3c:4e:6f:ff:1b:cf:6a: 16:2a:50:21:b8:d9:43:0c:13:03:20:93:de:94:09: ed:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:FE:B1:72:5E:43:4A:FC:AC:65:42:68:04:FB:26:2B:40:41:86:04 X509v3 Authority Key Identifier: keyid:28:E8:C0:34:94:5D:F0:97:1A:65:7E:25:19:11:BB:A0:B2:81:95:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/FANTASY/0/28E8C034945DF0971A657E251911BBA0B2819562.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/28E8C034945DF0971A657E251911BBA0B2819562.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/FANTASY/0/28E8C034945DF0971A657E251911BBA0B2819562.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:97:33:00:fd:62:bc:73:0b:93:e0:f3:24:f5:c9:34:c0:af: 54:77:e8:28:3d:c2:66:cf:1f:f6:78:ab:b6:8d:52:da:bb:af: 4a:1b:0f:92:67:52:85:8a:d7:26:b3:f5:77:1a:2e:8e:96:54: 66:b3:7a:df:5b:61:38:b2:1a:fa:22:30:c3:7f:6e:0f:94:e7: f1:fb:cf:35:95:6b:97:b3:65:da:f8:35:67:04:12:f3:47:d4: 00:6a:4f:72:eb:23:b3:65:13:4d:eb:4f:33:b2:47:23:0f:8f: 8a:f8:94:ab:f3:38:2b:f3:d8:51:91:fe:3d:7c:a0:86:43:8e: 10:ec:95:ac:f4:65:a1:aa:b0:81:c7:60:21:5e:e3:06:97:1b: b7:8c:0d:e0:6b:ed:bc:f5:d3:c2:60:fd:7e:97:35:ee:4d:b8: 28:ec:64:fc:4a:49:db:52:42:9d:30:eb:42:98:6e:c9:af:71: 13:00:6d:4d:a6:24:bc:04:a6:a1:4d:62:14:66:be:db:87:47: 0f:d3:0a:7d:2b:17:cb:fe:99:68:12:28:64:5d:b4:a5:14:35: 61:eb:25:f6:c5:c4:87:8a:b1:f6:61:57:bb:26:ac:a7:5f:41: fd:b1:83:8b:05:01:51:af:37:8a:ad:27:2e:63:32:0d:a3:7f: 06:9e:77:75 -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIUPQWPIT/jrPGPjgtKOv46AL/xlRcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhFOEMwMzQ5NDVERjA5NzFBNjU3RTI1MTkxMUJCQTBC MjgxOTU2MjAeFw0yNjEwMDIyMTQ0MDdaFw0yNjEwMDMyMjAyMDdaMDMxMTAvBgNV BAMTKEMyRkVCMTcyNUU0MzRBRkNBQzY1NDI2ODA0RkIyNjJCNDA0MTg2MDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKwypTHM5u0UBvJqyFUi4vJyxE LprLZ+u0FLv6aB6z9smwezMM8DdvvYzw2bpZAhEW8Bpljc4l7YHu2jgYE1Mc2fen +oHb6pxdUbIMy5mH5JZdDOB0MJOiyjVUj/WPuUxdHLf63CljxpwEnhukIlfAQV2/ h6/kFteMWtAmOIUnjzBB4Wts61wVoweEqpnKN3HYc2RpfOHkqtbzh03kPcO80tDW CW1Ld2vL+DkAJKXJYdohPUgKDbAURTAiIr1UPZP8Ux0PoeM1Dbou2mK1CZrOXX6i Cmr5qTRsHbZSebuFtx7iMIdxkcy4PE5v/xvPahYqUCG42UMMEwMgk96UCe2pAgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQUwv6xcl5DSvysZUJoBPsmK0BBhgQwHwYDVR0j BBgwFoAUKOjANJRd8JcaZX4lGRG7oLKBlWIwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRkFOVEFT WS8wLzI4RThDMDM0OTQ1REYwOTcxQTY1N0UyNTE5MTFCQkEwQjI4MTk1NjIuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvMjhFOEMwMzQ5NDVERjA5NzFBNjU3RTI1MTkx MUJCQTBCMjgxOTU2Mi5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0ZBTlRBU1kvMC8yOEU4QzAzNDk0 NURGMDk3MUE2NTdFMjUxOTExQkJBMEIyODE5NTYyLm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHJczAP1i vHMLk+DzJPXJNMCvVHfoKD3CZs8f9nirto1S2ruvShsPkmdShYrXJrP1dxoujpZU ZrN631thOLIa+iIww39uD5Tn8fvPNZVrl7Nl2vg1ZwQS80fUAGpPcusjs2UTTetP M7JHIw+PiviUq/M4K/PYUZH+PXyghkOOEOyVrPRloaqwgcdgIV7jBpcbt4wN4Gvt vPXTwmD9fpc17k24KOxk/EpJ21JCnTDrQphuya9xEwBtTaYkvASmoU1iFGa+24dH D9MKfSsXy/6ZaBIoZF20pRQ1Yesl9sXEh4qx9mFXuyasp19B/bGDiwUBUa83iq0n LmMyDaN/Bp53dQ== -----END CERTIFICATE-----Generated at Sat Oct 3 10:35:45 2026 by rpki-client