$ rpki-client -vvf rpkica.twnic.tw/rpki/JDA/0/3E0842CB09173FD62797099AF95D837AFF05C8C1.mft File: 3E0842CB09173FD62797099AF95D837AFF05C8C1.mft (raw, json) Hash identifier: S/qLNSDAzpP0yE6TBEvqimp6WM7dv4vaHXy73U6YQpo= Subject key identifier: A5:0E:84:22:02:D5:2F:0B:A1:17:32:C4:18:5E:78:CE:CD:28:77:7B Authority key identifier: 3E:08:42:CB:09:17:3F:D6:27:97:09:9A:F9:5D:83:7A:FF:05:C8:C1 Certificate issuer: /CN=3E0842CB09173FD62797099AF95D837AFF05C8C1 Certificate serial: 2B1E9B86BC3511AAE1FBF2E09B1AC577852431B3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3E0842CB09173FD62797099AF95D837AFF05C8C1.cer Subject info access: rsync://rpkica.twnic.tw/rpki/JDA/0/3E0842CB09173FD62797099AF95D837AFF05C8C1.mft Manifest number: 83 Signing time: Fri 14 Aug 2026 18:37:46 +0000 Manifest this update: Fri 14 Aug 2026 18:32:46 +0000 Manifest next update: Sat 15 Aug 2026 21:56:46 +0000 Files and hashes: 1: 3231302e37392e3135342e302f32332d3234203d3e203338313336.roa (hash: dBOQT7bQagPeeSG1nSOxtcaQ3wS6JFXvLy9ydXd5jHY=) 2: 3E0842CB09173FD62797099AF95D837AFF05C8C1.crl (hash: FVC9GhUS/x1kOKl2geWuLXBMiEj+/2F59fYgifD2yf4=) 3: 323430313a353565303a3a2f33322d3332203d3e203138303431.roa (hash: qBti13dNoJJvS8VN2rEdP5+tGcjEGWujArPyCZdW53g=) 4: 3231302e37392e3135342e302f32332d3234203d3e203138303431.roa (hash: 6gHJfiK63fKOqTCfE1ImEP6HSow+veqBLLBJ8NhAMVM=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/JDA/0/3E0842CB09173FD62797099AF95D837AFF05C8C1.crl rsync://rpkica.twnic.tw/rpki/JDA/0/3E0842CB09173FD62797099AF95D837AFF05C8C1.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3E0842CB09173FD62797099AF95D837AFF05C8C1.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 15 Aug 2026 21:56:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:1e:9b:86:bc:35:11:aa:e1:fb:f2:e0:9b:1a:c5:77:85:24:31:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E0842CB09173FD62797099AF95D837AFF05C8C1 Validity Not Before: Aug 14 18:32:46 2026 GMT Not After : Aug 15 21:56:46 2026 GMT Subject: CN=A50E842202D52F0BA11732C4185E78CECD28777B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:05:71:b3:7b:7b:61:d7:b2:16:e2:96:d4:e4: 56:28:3f:e0:f2:98:83:f3:11:09:8c:c8:76:2d:b6: 7b:e1:90:05:00:30:65:dc:ba:7a:f9:68:c7:21:56: c6:7f:a4:d9:11:68:65:39:28:df:54:50:1d:92:03: cb:80:2c:ee:01:5b:0e:f6:48:af:d2:c2:b9:56:35: 2f:6c:5d:8d:1c:74:a2:f4:e4:0a:9b:89:b2:51:e8: 9f:28:09:62:34:bc:87:be:c4:3e:78:f7:5b:2e:09: 1d:3d:f8:bc:e4:cf:bc:28:07:c1:86:1b:3c:ec:91: e5:8e:16:dd:c7:fb:65:fe:9d:4c:16:37:f3:6b:52: 96:0b:3e:02:58:4f:42:d4:dd:0b:74:e6:7f:0d:c4: 69:9c:52:43:d8:ce:b6:e7:56:77:26:2e:e4:1b:92: d9:3d:fa:55:70:5c:62:54:e4:8f:6d:50:58:97:3b: 1a:78:3b:f7:cb:c4:a3:eb:23:3e:c0:8f:1c:59:15: 13:38:93:70:1b:f0:18:98:29:7b:c2:79:c0:56:bf: 3a:02:4e:15:0e:f3:d1:d0:c7:88:b0:61:a0:f1:cf: 73:16:07:d5:60:b3:51:85:a0:fc:ee:cf:93:49:4a: 8f:1c:5a:a2:0b:09:11:51:82:23:d0:ed:a0:3e:47: 2f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:0E:84:22:02:D5:2F:0B:A1:17:32:C4:18:5E:78:CE:CD:28:77:7B X509v3 Authority Key Identifier: keyid:3E:08:42:CB:09:17:3F:D6:27:97:09:9A:F9:5D:83:7A:FF:05:C8:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/JDA/0/3E0842CB09173FD62797099AF95D837AFF05C8C1.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3E0842CB09173FD62797099AF95D837AFF05C8C1.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/JDA/0/3E0842CB09173FD62797099AF95D837AFF05C8C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:68:0c:5d:8f:23:c8:a0:35:a7:44:50:cf:10:a7:69:b1:ea: 69:51:73:ad:35:5f:13:23:31:51:7b:2b:d4:0e:98:4c:4c:b5: af:f3:f4:6e:cb:7e:8c:95:f7:a1:59:2e:91:43:e8:f4:b2:53: 07:5b:5e:01:2c:ff:e1:c0:04:f5:a0:50:27:9f:77:54:6b:88: a6:8f:a8:62:c0:94:ee:aa:8b:5f:9a:6f:4a:ef:55:63:2f:65: bb:b8:9d:ed:25:c6:5a:aa:2a:1e:51:87:5a:35:d7:e8:eb:a9: e4:38:4d:12:87:4a:4b:52:84:5f:20:db:6a:22:fe:40:25:6e: 43:23:76:75:36:14:b9:48:a5:4b:72:7f:75:4f:64:19:0e:02: 17:eb:d7:dc:21:6e:43:15:33:c5:e3:6f:64:74:b1:04:5d:05: a1:e7:d6:e0:d7:70:47:45:26:54:be:0d:dc:57:71:a2:e3:3d: 1f:67:4a:e4:21:43:62:26:09:dd:a0:41:fb:8a:c1:2e:c6:c3: 80:ed:1e:d8:45:74:53:00:bb:21:9e:f2:96:42:62:e4:0e:ed: 48:f6:ed:72:c3:78:c8:db:c5:cd:3c:73:32:7a:70:4a:42:7f: 79:64:93:c3:c5:5c:cc:29:a6:05:26:e6:67:68:bf:16:ae:ce: 05:dc:cf:a7 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUKx6bhrw1Earh+/LgmxrFd4UkMbMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0UwODQyQ0IwOTE3M0ZENjI3OTcwOTlBRjk1RDgzN0FG RjA1QzhDMTAeFw0yNjA4MTQxODMyNDZaFw0yNjA4MTUyMTU2NDZaMDMxMTAvBgNV BAMTKEE1MEU4NDIyMDJENTJGMEJBMTE3MzJDNDE4NUU3OENFQ0QyODc3N0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzBXGze3th17IW4pbU5FYoP+Dy mIPzEQmMyHYttnvhkAUAMGXcunr5aMchVsZ/pNkRaGU5KN9UUB2SA8uALO4BWw72 SK/SwrlWNS9sXY0cdKL05AqbibJR6J8oCWI0vIe+xD5491suCR09+Lzkz7woB8GG GzzskeWOFt3H+2X+nUwWN/NrUpYLPgJYT0LU3Qt05n8NxGmcUkPYzrbnVncmLuQb ktk9+lVwXGJU5I9tUFiXOxp4O/fLxKPrIz7AjxxZFRM4k3Ab8BiYKXvCecBWvzoC ThUO89HQx4iwYaDxz3MWB9Vgs1GFoPzuz5NJSo8cWqILCRFRgiPQ7aA+Ry/fAgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUpQ6EIgLVLwuhFzLEGF54zs0od3swHwYDVR0j BBgwFoAUPghCywkXP9Ynlwma+V2Dev8FyMEwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSkRBLzAv M0UwODQyQ0IwOTE3M0ZENjI3OTcwOTlBRjk1RDgzN0FGRjA1QzhDMS5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS8zRTA4NDJDQjA5MTczRkQ2Mjc5NzA5OUFGOTVEODM3 QUZGMDVDOEMxLmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSkRBLzAvM0UwODQyQ0IwOTE3M0ZENjI3 OTcwOTlBRjk1RDgzN0FGRjA1QzhDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAIVoDF2PI8igNadEUM8Q p2mx6mlRc601XxMjMVF7K9QOmExMta/z9G7LfoyV96FZLpFD6PSyUwdbXgEs/+HA BPWgUCefd1RriKaPqGLAlO6qi1+ab0rvVWMvZbu4ne0lxlqqKh5Rh1o11+jrqeQ4 TRKHSktShF8g22oi/kAlbkMjdnU2FLlIpUtyf3VPZBkOAhfr19whbkMVM8Xjb2R0 sQRdBaHn1uDXcEdFJlS+DdxXcaLjPR9nSuQhQ2ImCd2gQfuKwS7Gw4DtHthFdFMA uyGe8pZCYuQO7Uj27XLDeMjbxc08czJ6cEpCf3lkk8PFXMwppgUm5mdovxauzgXc z6c= -----END CERTIFICATE-----Generated at Sat Aug 15 05:21:28 2026 by rpki-client