$ rpki-client -vvvf rpkica.twnic.tw/rpki/GSN/0/C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.mft File: C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.mft (raw, json) Hash identifier: WaawDUXxBx0bl/a8BsYTyLhy2QJyxSluFiZ8sdrJQwg= Subject key identifier: 53:C2:47:FE:72:10:D6:49:02:BB:53:0B:2E:C9:3F:F5:AC:54:B8:F9 Authority key identifier: C0:34:BD:9C:72:35:DC:2D:2C:C1:FD:7E:21:D4:3D:D0:6A:FD:C3:51 Certificate issuer: /CN=C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351 Certificate serial: 6295BF27EE402C4BA53B31FD307E9DDD16652905 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.cer Subject info access: rsync://rpkica.twnic.tw/rpki/GSN/0/C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.mft Manifest number: D0 Signing time: Fri 02 Oct 2026 22:55:15 +0000 Manifest this update: Fri 02 Oct 2026 22:50:15 +0000 Manifest next update: Sun 04 Oct 2026 01:11:15 +0000 Files and hashes: 1: 3231302e36392e302e302f31362d3136203d3e2034373832.roa (hash: rzzN/S5reVNYW1kngDJ9waaxaT8cnwfi4WPnhHzUC7w=) 2: C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.crl (hash: rh2ttmfhteY9mHz/lX/+ecnwZllKuAkX+/YCdOEL1G0=) 3: 3131372e35362e302e302f31362d3136203d3e2034373832.roa (hash: MFCSbHbqKYuWPiPCKMVh2kx7z7XCHdm/WXFRairBaN0=) 4: 323030313a343432303a3a2f33322d3332203d3e2034373832.roa (hash: gE5uEPlvoHn4YAIcNC7yJMhL4DCCYf0nlEOkebni8Us=) 5: 36312e36302e302e302f31372d3137203d3e2034373832.roa (hash: RxtL1JrL62KxxH9+j1ZECsfg+3xXdkmccPO6Ql29WBI=) 6: 3231312e37392e3136302e302f31392d3139203d3e2034373832.roa (hash: 1/SOl/bxT6+nXe2zhXDM2dmH5RkEj7//86PgvjmPKFQ=) 7: 3231302e3234312e302e302f31372d3137203d3e2034373832.roa (hash: KmWKCTE0ohasfgtfRxTrbUHfQbw/Y7nPMFINp2KhTpA=) 8: 3136332e32392e302e302f31362d3136203d3e2034373832.roa (hash: pGK5XkceqKAh4/7agsjC+GWpznd78YLbOQwpm2jcRiA=) 9: 36312e35372e33322e302f31392d3139203d3e2034373832.roa (hash: aqyU1VbOW0v1AFwJhVg9uuI3iSWv7CEHxJprPdp3Meo=) 10: 3231312e37392e3132382e302f31392d3139203d3e2034373832.roa (hash: /QiJMlPs1/pxye04spLNZHzDsoGhtgiX4yfIqbEq1wY=) 11: 3131372e35362e302e302f31382d3138203d3e2034373832.roa (hash: 8DMQSxYkXT39Wjc0+DxN6goaO03iNCXQLyzqirPMqAs=) 12: 3132342e3139392e36342e302f31392d3139203d3e2034373832.roa (hash: WuXDtugnIouFSIQBa95DW12JV+9YmfPeEhQ2M/9bHLw=) 13: 3232332e3230302e302e302f31362d3136203d3e2034373832.roa (hash: MA9+ajK8aX1uKUtp2sxtKQhYTLC2td1kAHyxBVTGWcc=) 14: 3231302e36392e3233342e302f32342d3234203d3e2034373832.roa (hash: 1EDOB0BRp1H67cx5ce4EUm7AGvO1r28WnpZQ75ZC5MM=) 15: 3132342e3139392e39362e302f32302d3230203d3e2034373832.roa (hash: 7acpyK5V9E2LR1y17/549QCIrRIx//QUMCroyuhMnD8=) 16: 36312e36372e36342e302f31392d3139203d3e2034373832.roa (hash: hP1Ce0puK87bnBkuUoZR08dKEnokYQB4baKFChuzk+E=) 17: 36312e35362e302e302f32302d3234203d3e203138313833.roa (hash: Z8hYEPWVHSTXdVxKiYoHCeRE+yhXuCK4vUjrYBstEPs=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/GSN/0/C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.crl rsync://rpkica.twnic.tw/rpki/GSN/0/C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 01:11:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:95:bf:27:ee:40:2c:4b:a5:3b:31:fd:30:7e:9d:dd:16:65:29:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351 Validity Not Before: Oct 2 22:50:15 2026 GMT Not After : Oct 4 01:11:15 2026 GMT Subject: CN=53C247FE7210D64902BB530B2EC93FF5AC54B8F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0f:1d:d2:d4:2e:9f:89:da:ed:f5:07:fa:8c: 56:f5:fc:66:e2:81:d3:07:c2:57:3c:37:1f:57:23: 50:de:4c:c8:c1:50:0c:b4:01:3a:ab:31:3c:aa:7b: 94:87:1b:25:1c:36:99:6f:2f:df:04:bb:43:4e:a2: 29:a5:69:1e:34:8b:c7:68:2d:52:d7:e6:ff:64:82: 42:67:86:cf:b3:e1:d8:cf:5d:fd:b0:bf:1c:0c:12: 83:5c:85:58:00:00:6c:40:c3:b1:44:ed:7e:44:fa: 05:76:96:65:be:f6:16:88:46:ab:f2:90:82:7a:79: ad:99:f1:fd:08:85:cf:c0:36:c2:eb:34:1e:09:66: a3:18:09:57:1f:ce:34:81:1c:6c:16:fa:9e:2c:1f: c0:c9:59:ae:d2:f0:f5:ba:ad:8f:5e:e6:27:14:40: dd:ec:c3:35:4c:50:fe:e0:c8:a0:b7:25:07:80:1d: bb:ea:2e:6d:80:4b:27:f1:a7:9e:b8:4d:e5:ef:fd: 7a:0b:47:0b:5e:30:d3:1e:1c:89:99:99:6e:6f:17: ac:1c:37:80:80:c4:52:48:18:63:f5:36:e3:43:56: c8:bf:13:3c:36:a2:13:bc:65:1a:85:9f:2f:ac:9c: 08:1e:3e:de:4d:22:a9:71:ef:17:a3:b3:db:9c:c9: 83:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:C2:47:FE:72:10:D6:49:02:BB:53:0B:2E:C9:3F:F5:AC:54:B8:F9 X509v3 Authority Key Identifier: keyid:C0:34:BD:9C:72:35:DC:2D:2C:C1:FD:7E:21:D4:3D:D0:6A:FD:C3:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/GSN/0/C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/GSN/0/C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:e8:ec:7a:38:ab:a5:be:34:bd:bf:d1:2b:fa:6f:21:c4:7d: 2f:6a:db:74:7f:fd:bb:ff:fb:08:ea:83:f2:e7:4e:a0:79:f2: 63:15:df:f5:c3:5d:5b:9a:05:2e:fe:6f:f9:4c:d6:9e:16:39: 47:89:0d:bd:44:d1:ab:5f:35:5e:41:5b:4d:1a:5c:f7:08:30: 32:c9:01:9c:9b:1d:8b:f3:83:93:d0:6b:e0:b5:83:2b:db:35: 66:eb:10:f1:21:95:3f:b7:49:ed:4a:bd:30:4c:d3:f1:43:47: ad:c7:5f:bc:d8:cb:87:e3:1e:af:51:96:4e:33:ea:72:8d:78: 8b:fb:24:6b:4e:49:d7:bf:62:83:88:3f:38:8b:94:e3:67:15: e9:f8:8b:97:f1:d6:62:72:37:8b:9c:6f:d2:fa:17:18:95:6c: e3:59:a9:3a:ff:fe:4e:76:b0:bf:5e:98:fe:12:73:9f:45:a2: fe:76:f3:f1:a7:d3:b5:30:fb:40:c2:95:6c:cf:d2:56:95:82: 6a:a4:28:53:d2:92:78:43:36:6b:1c:bc:92:5b:ce:7c:f2:43: dc:9f:71:32:ed:7c:c9:eb:82:fd:38:73:2a:5e:d4:7a:79:6d: 3f:63:50:07:c0:fe:f7:59:9c:ed:43:25:21:96:03:f4:5f:3d: 13:f3:0b:5a -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUYpW/J+5ALEulOzH9MH6d3RZlKQUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzAzNEJEOUM3MjM1REMyRDJDQzFGRDdFMjFENDNERDA2 QUZEQzM1MTAeFw0yNjEwMDIyMjUwMTVaFw0yNjEwMDQwMTExMTVaMDMxMTAvBgNV BAMTKDUzQzI0N0ZFNzIxMEQ2NDkwMkJCNTMwQjJFQzkzRkY1QUM1NEI4RjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCDx3S1C6fidrt9Qf6jFb1/Gbi gdMHwlc8Nx9XI1DeTMjBUAy0ATqrMTyqe5SHGyUcNplvL98Eu0NOoimlaR40i8do LVLX5v9kgkJnhs+z4djPXf2wvxwMEoNchVgAAGxAw7FE7X5E+gV2lmW+9haIRqvy kIJ6ea2Z8f0Ihc/ANsLrNB4JZqMYCVcfzjSBHGwW+p4sH8DJWa7S8PW6rY9e5icU QN3swzVMUP7gyKC3JQeAHbvqLm2ASyfxp564TeXv/XoLRwteMNMeHImZmW5vF6wc N4CAxFJIGGP1NuNDVsi/Ezw2ohO8ZRqFny+snAgePt5NIqlx7xejs9ucyYO1AgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUU8JH/nIQ1kkCu1MLLsk/9axUuPkwHwYDVR0j BBgwFoAUwDS9nHI13C0swf1+IdQ90Gr9w1EwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvR1NOLzAv QzAzNEJEOUM3MjM1REMyRDJDQzFGRDdFMjFENDNERDA2QUZEQzM1MS5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS9DMDM0QkQ5QzcyMzVEQzJEMkNDMUZEN0UyMUQ0M0RE MDZBRkRDMzUxLmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvR1NOLzAvQzAzNEJEOUM3MjM1REMyRDJD QzFGRDdFMjFENDNERDA2QUZEQzM1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAE3o7Ho4q6W+NL2/0Sv6 byHEfS9q23R//bv/+wjqg/LnTqB58mMV3/XDXVuaBS7+b/lM1p4WOUeJDb1E0atf NV5BW00aXPcIMDLJAZybHYvzg5PQa+C1gyvbNWbrEPEhlT+3Se1KvTBM0/FDR63H X7zYy4fjHq9Rlk4z6nKNeIv7JGtOSde/YoOIPziLlONnFen4i5fx1mJyN4ucb9L6 FxiVbONZqTr//k52sL9emP4Sc59Fov528/Gn07Uw+0DClWzP0laVgmqkKFPSknhD NmscvJJbznzyQ9yfcTLtfMnrgv04cype1Hp5bT9jUAfA/vdZnO1DJSGWA/RfPRPz C1o= -----END CERTIFICATE-----Generated at Sat Oct 3 11:03:55 2026 by rpki-client