$ rpki-client -vvvf rpkica.twnic.tw/rpki/IDT/0/35C866BE000DEAB870C97BED72D0A7807B829E4D.mft File: 35C866BE000DEAB870C97BED72D0A7807B829E4D.mft (raw, json) Hash identifier: i6PUUsc8uE1Xyw033X98OCeFYo8MnQQOz3/2UorU0fA= Subject key identifier: A7:B8:B8:92:75:6F:37:83:28:E0:7D:0F:82:96:D9:62:90:1C:FA:DC Authority key identifier: 35:C8:66:BE:00:0D:EA:B8:70:C9:7B:ED:72:D0:A7:80:7B:82:9E:4D Certificate issuer: /CN=35C866BE000DEAB870C97BED72D0A7807B829E4D Certificate serial: 22EF6C27FBF93FE29BD016588CF4E3BFCD84829E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/35C866BE000DEAB870C97BED72D0A7807B829E4D.cer Subject info access: rsync://rpkica.twnic.tw/rpki/IDT/0/35C866BE000DEAB870C97BED72D0A7807B829E4D.mft Manifest number: C6 Signing time: Sat 03 Oct 2026 14:25:18 +0000 Manifest this update: Sat 03 Oct 2026 14:20:18 +0000 Manifest next update: Sun 04 Oct 2026 14:32:18 +0000 Files and hashes: 1: 35C866BE000DEAB870C97BED72D0A7807B829E4D.crl (hash: a3kGDCZc9s6JL91b2F28b61XC3nZhLxGuLuswU7G664=) 2: 3232332e32362e342e302f32332d3234203d3e20313532313739.roa (hash: 1KuxfqT20KEMU13K1PoNgkxwUh6tXjO/u8vuBPBbPvM=) 3: 323430363a326663303a3a2f33322d3332203d3e20313334383233.roa (hash: T6rxUJGmT1hptwoFyjautezkOkglfrNk05IrJlVztRE=) 4: 3230322e3134382e3231302e302f32332d3234203d3e20313532313739.roa (hash: w66ZmETlDQxyi38rji0gzk1176tFqIfyztFJ3VNSIbg=) 5: 3130332e3135322e3232302e302f32332d3234203d3e20313338393937.roa (hash: J/22PWUGVzLaEIWqIEkco35k7PiKuvioKGMBglelLtk=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/IDT/0/35C866BE000DEAB870C97BED72D0A7807B829E4D.crl rsync://rpkica.twnic.tw/rpki/IDT/0/35C866BE000DEAB870C97BED72D0A7807B829E4D.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/35C866BE000DEAB870C97BED72D0A7807B829E4D.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 14:32:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:ef:6c:27:fb:f9:3f:e2:9b:d0:16:58:8c:f4:e3:bf:cd:84:82:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35C866BE000DEAB870C97BED72D0A7807B829E4D Validity Not Before: Oct 3 14:20:18 2026 GMT Not After : Oct 4 14:32:18 2026 GMT Subject: CN=A7B8B892756F378328E07D0F8296D962901CFADC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:70:78:ca:d3:6e:25:73:36:9f:f1:53:b4:d4: 2a:bf:9a:73:e4:81:20:e5:be:bc:8e:27:72:5d:3e: 2b:a7:c8:f6:ea:74:a1:53:ab:8f:f6:94:f8:28:c2: d5:fd:41:05:e8:fd:af:d5:c3:0b:61:e3:25:5b:73: 9f:73:74:15:21:ca:22:55:5f:c4:ce:12:88:dc:49: 35:57:ff:a0:77:f2:64:73:3b:29:b8:0b:6f:8a:7d: 43:e5:db:43:2b:63:85:07:8c:c1:e4:33:c0:70:34: ff:1d:d6:60:e5:af:c4:b2:a3:f3:92:4f:4f:31:ed: 2c:3d:6c:80:a6:2c:7e:01:6d:20:cf:50:b9:13:09: 61:8d:f3:02:b9:20:89:ad:87:e7:bf:a6:f6:72:3b: 44:e6:60:c2:09:a5:5d:c4:a0:53:bb:75:79:74:0b: 4a:a6:ea:28:71:4c:4f:5b:e7:9e:c0:a5:30:58:e6: da:cb:1b:90:34:d4:04:86:91:65:a0:59:fc:c4:1c: 82:de:3f:94:53:8c:d7:4e:f5:25:8d:eb:80:1b:06: eb:f4:90:15:4e:41:3b:67:13:9f:48:50:19:b2:f3: 9f:8f:f1:df:ab:8e:59:e5:4b:aa:c8:82:52:b2:2b: fd:26:aa:fa:81:1e:58:ce:06:78:cc:17:d9:8b:8d: fa:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:B8:B8:92:75:6F:37:83:28:E0:7D:0F:82:96:D9:62:90:1C:FA:DC X509v3 Authority Key Identifier: keyid:35:C8:66:BE:00:0D:EA:B8:70:C9:7B:ED:72:D0:A7:80:7B:82:9E:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/IDT/0/35C866BE000DEAB870C97BED72D0A7807B829E4D.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/35C866BE000DEAB870C97BED72D0A7807B829E4D.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/IDT/0/35C866BE000DEAB870C97BED72D0A7807B829E4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:68:07:c1:67:dc:73:2d:02:8a:84:fc:c5:49:dc:9e:77:63: c9:48:22:e4:01:79:7c:71:f8:4a:30:81:4a:bf:13:bb:e6:69: d5:a0:62:ae:f3:31:e2:ea:ba:ae:97:3c:c9:2a:73:c9:bf:11: 1d:72:c2:1d:98:d6:5f:56:a7:07:ac:16:6b:ca:34:97:16:40: 6d:64:ca:13:ee:c1:02:6e:e8:c6:f1:e3:86:e1:11:20:f5:33: 4d:fc:67:32:21:d2:21:17:f6:71:d7:f6:de:11:12:9c:ed:0c: ad:f9:28:d6:96:5c:1c:9d:c3:e8:e6:f9:f3:58:34:52:32:39: fe:48:ff:71:5d:c7:1c:de:73:28:c1:a7:55:63:79:ce:0a:35: 05:a5:f2:fc:f8:06:8e:de:c5:7a:db:b6:20:e3:73:db:e8:6a: b8:77:9a:2a:03:00:11:36:d8:05:33:81:c7:9d:3c:1e:09:a6: 14:7b:68:07:b5:d3:2d:de:bc:52:86:97:0b:9f:c4:74:6f:61: da:9d:c4:ab:9e:d4:58:ec:b5:8c:6f:3e:df:77:aa:d9:0b:62: 5f:4a:86:5a:9a:1a:53:13:de:1c:d9:cc:ad:0d:e5:5d:b8:d7: be:52:5c:97:7c:44:3b:31:eb:b4:5a:ed:f0:65:43:a6:fa:92: 20:1d:ed:b7 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUIu9sJ/v5P+Kb0BZYjPTjv82Egp4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVDODY2QkUwMDBERUFCODcwQzk3QkVENzJEMEE3ODA3 QjgyOUU0RDAeFw0yNjEwMDMxNDIwMThaFw0yNjEwMDQxNDMyMThaMDMxMTAvBgNV BAMTKEE3QjhCODkyNzU2RjM3ODMyOEUwN0QwRjgyOTZEOTYyOTAxQ0ZBREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMcHjK024lczaf8VO01Cq/mnPk gSDlvryOJ3JdPiunyPbqdKFTq4/2lPgowtX9QQXo/a/Vwwth4yVbc59zdBUhyiJV X8TOEojcSTVX/6B38mRzOym4C2+KfUPl20MrY4UHjMHkM8BwNP8d1mDlr8Syo/OS T08x7Sw9bICmLH4BbSDPULkTCWGN8wK5IImth+e/pvZyO0TmYMIJpV3EoFO7dXl0 C0qm6ihxTE9b557ApTBY5trLG5A01ASGkWWgWfzEHILeP5RTjNdO9SWN64AbBuv0 kBVOQTtnE59IUBmy85+P8d+rjlnlS6rIglKyK/0mqvqBHljOBnjMF9mLjfq1AgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUp7i4knVvN4Mo4H0PgpbZYpAc+twwHwYDVR0j BBgwFoAUNchmvgAN6rhwyXvtctCngHuCnk0wDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSURULzAv MzVDODY2QkUwMDBERUFCODcwQzk3QkVENzJEMEE3ODA3QjgyOUU0RC5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS8zNUM4NjZCRTAwMERFQUI4NzBDOTdCRUQ3MkQwQTc4 MDdCODI5RTRELmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSURULzAvMzVDODY2QkUwMDBERUFCODcw Qzk3QkVENzJEMEE3ODA3QjgyOUU0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAEdoB8Fn3HMtAoqE/MVJ 3J53Y8lIIuQBeXxx+EowgUq/E7vmadWgYq7zMeLquq6XPMkqc8m/ER1ywh2Y1l9W pwesFmvKNJcWQG1kyhPuwQJu6Mbx44bhESD1M038ZzIh0iEX9nHX9t4REpztDK35 KNaWXBydw+jm+fNYNFIyOf5I/3FdxxzecyjBp1Vjec4KNQWl8vz4Bo7exXrbtiDj c9voarh3mioDABE22AUzgcedPB4JphR7aAe10y3evFKGlwufxHRvYdqdxKue1Fjs tYxvPt93qtkLYl9KhlqaGlMT3hzZzK0N5V24175SXJd8RDsx67Ra7fBlQ6b6kiAd 7bc= -----END CERTIFICATE-----Generated at Sun Oct 4 00:52:42 2026 by rpki-client