$ rpki-client -vvvf rpkica.twnic.tw/rpki/JFT/0/D7FDD2309EFAC257359F67A560160D59D372E164.mft File: D7FDD2309EFAC257359F67A560160D59D372E164.mft (raw, json) Hash identifier: y7tOIvjjcuLvqhL8400eTbSienVN2OGn/sIV3XHpKF0= Subject key identifier: 6F:E3:E2:98:EF:F2:21:AD:3D:F7:BF:04:95:75:EF:E2:E0:F0:AF:F4 Authority key identifier: D7:FD:D2:30:9E:FA:C2:57:35:9F:67:A5:60:16:0D:59:D3:72:E1:64 Certificate issuer: /CN=D7FDD2309EFAC257359F67A560160D59D372E164 Certificate serial: 6DBE8D7A71190ADE8E61D604FBEEF2555D71E12B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D7FDD2309EFAC257359F67A560160D59D372E164.cer Subject info access: rsync://rpkica.twnic.tw/rpki/JFT/0/D7FDD2309EFAC257359F67A560160D59D372E164.mft Manifest number: C5 Signing time: Sun 04 Oct 2026 06:49:26 +0000 Manifest this update: Sun 04 Oct 2026 06:44:26 +0000 Manifest next update: Mon 05 Oct 2026 10:30:26 +0000 Files and hashes: 1: D7FDD2309EFAC257359F67A560160D59D372E164.crl (hash: LFmk1ykg0shBVNLtMYkXBQtH8l1YEkd4oEnRoU0IMf0=) 2: 3130332e3233362e3232362e302f32332d3234203d3e203138303431.roa (hash: AzoWjoqKzfT2i2xH8uvnREwwRYXtqWtGT2FrkUty/Fw=) 3: 323430313a313661303a3a2f33322d3332203d3e203138303431.roa (hash: i0/pTPKyKu5j66qOAMiRZI9DIMIWaYy8NyfCfY/8Two=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/JFT/0/D7FDD2309EFAC257359F67A560160D59D372E164.crl rsync://rpkica.twnic.tw/rpki/JFT/0/D7FDD2309EFAC257359F67A560160D59D372E164.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D7FDD2309EFAC257359F67A560160D59D372E164.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 22:23:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:be:8d:7a:71:19:0a:de:8e:61:d6:04:fb:ee:f2:55:5d:71:e1:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7FDD2309EFAC257359F67A560160D59D372E164 Validity Not Before: Oct 4 06:44:26 2026 GMT Not After : Oct 5 10:30:26 2026 GMT Subject: CN=6FE3E298EFF221AD3DF7BF049575EFE2E0F0AFF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:95:72:01:6f:37:00:54:17:45:36:08:53:86: a2:8b:25:87:27:46:42:8b:3c:22:fa:15:29:4c:3b: a3:a1:f8:20:25:bb:fe:cf:87:ac:19:42:20:84:c6: 3e:02:40:f3:03:15:6c:a2:87:64:c1:62:44:a4:8c: e2:d3:89:57:0e:cd:40:2b:64:1b:cd:11:88:0c:40: 8a:81:20:ae:f5:50:9b:e6:73:1a:5c:54:f5:e5:8c: 5d:2a:d4:cd:2e:8b:f1:1b:b4:06:ca:a9:1b:b3:42: a7:52:50:3f:fc:cb:13:28:fb:31:56:48:15:4b:78: 82:ec:13:1c:ac:19:0b:d4:62:1f:b2:28:06:eb:06: 3d:da:ce:85:ff:07:39:05:97:09:d9:ec:97:3c:ab: 34:70:ae:2a:c9:9b:06:b9:b6:1e:1f:27:10:e1:e1: 3b:7d:ad:81:c9:4d:7f:a2:23:4f:5c:07:d4:5c:5b: 87:13:d5:b4:37:43:60:97:fc:3b:b4:a7:97:99:cf: 33:48:c7:c3:a5:1a:90:f8:e7:38:d4:3b:be:33:dd: e8:88:0b:61:cb:71:4c:c8:c2:2b:21:d7:af:15:ad: 0b:27:73:63:44:da:6e:cc:79:a3:f3:d3:4b:05:fc: 43:68:84:6f:eb:da:98:ae:52:d6:ac:8e:7a:a8:0a: d2:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:E3:E2:98:EF:F2:21:AD:3D:F7:BF:04:95:75:EF:E2:E0:F0:AF:F4 X509v3 Authority Key Identifier: keyid:D7:FD:D2:30:9E:FA:C2:57:35:9F:67:A5:60:16:0D:59:D3:72:E1:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/JFT/0/D7FDD2309EFAC257359F67A560160D59D372E164.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D7FDD2309EFAC257359F67A560160D59D372E164.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/JFT/0/D7FDD2309EFAC257359F67A560160D59D372E164.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:e4:5e:f3:3c:7c:1d:a6:ca:93:72:c3:4f:cf:ff:d4:d1:a7: a5:83:f9:2e:d1:e3:4a:38:15:f7:12:4e:67:23:13:1f:59:f8: 9d:a9:ed:bd:0b:cd:82:f2:a9:47:81:4c:45:f1:c2:fc:d6:fd: 9d:a5:2f:61:22:fc:85:15:43:92:ed:b2:f0:ce:a3:28:92:34: d3:20:07:1a:a3:d0:f8:90:42:5a:a0:2c:d2:89:16:42:9d:72: cf:4e:08:f1:6b:60:4c:8c:56:d4:85:68:88:7f:b3:bf:e5:69: 4b:55:ca:b8:01:25:7d:26:99:ce:2b:15:9e:83:bd:77:1e:a6: 5f:68:ec:a4:4c:1d:11:75:a7:e6:58:1c:dd:c2:af:73:3f:95: 03:e0:c2:c2:d0:70:53:25:76:a9:05:7a:62:2c:99:ea:82:d4: ce:ff:d8:9f:d8:94:ec:b6:5f:d5:67:c1:c8:0e:03:38:8e:41: 60:36:29:4b:44:59:61:e6:41:d1:a3:3f:27:97:68:90:08:b1: ae:a6:d6:3c:74:51:db:ee:cd:22:5d:09:b1:44:cc:c1:27:4f: 23:9a:55:c0:0a:02:45:d1:ad:ae:2c:67:98:09:06:e8:de:f7: 67:ae:6c:98:4f:7e:91:c2:c8:63:6e:49:a8:62:81:89:e3:0e: cd:f7:91:ca -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUbb6NenEZCt6OYdYE++7yVV1x4SswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDdGREQyMzA5RUZBQzI1NzM1OUY2N0E1NjAxNjBENTlE MzcyRTE2NDAeFw0yNjEwMDQwNjQ0MjZaFw0yNjEwMDUxMDMwMjZaMDMxMTAvBgNV BAMTKDZGRTNFMjk4RUZGMjIxQUQzREY3QkYwNDk1NzVFRkUyRTBGMEFGRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSlXIBbzcAVBdFNghThqKLJYcn RkKLPCL6FSlMO6Oh+CAlu/7Ph6wZQiCExj4CQPMDFWyih2TBYkSkjOLTiVcOzUAr ZBvNEYgMQIqBIK71UJvmcxpcVPXljF0q1M0ui/EbtAbKqRuzQqdSUD/8yxMo+zFW SBVLeILsExysGQvUYh+yKAbrBj3azoX/BzkFlwnZ7Jc8qzRwrirJmwa5th4fJxDh 4Tt9rYHJTX+iI09cB9RcW4cT1bQ3Q2CX/Du0p5eZzzNIx8OlGpD45zjUO74z3eiI C2HLcUzIwish168VrQsnc2NE2m7MeaPz00sF/ENohG/r2piuUtasjnqoCtIbAgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUb+PimO/yIa09978ElXXv4uDwr/QwHwYDVR0j BBgwFoAU1/3SMJ76wlc1n2elYBYNWdNy4WQwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSkZULzAv RDdGREQyMzA5RUZBQzI1NzM1OUY2N0E1NjAxNjBENTlEMzcyRTE2NC5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS9EN0ZERDIzMDlFRkFDMjU3MzU5RjY3QTU2MDE2MEQ1 OUQzNzJFMTY0LmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSkZULzAvRDdGREQyMzA5RUZBQzI1NzM1 OUY2N0E1NjAxNjBENTlEMzcyRTE2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAGzkXvM8fB2mypNyw0/P /9TRp6WD+S7R40o4FfcSTmcjEx9Z+J2p7b0LzYLyqUeBTEXxwvzW/Z2lL2Ei/IUV Q5LtsvDOoyiSNNMgBxqj0PiQQlqgLNKJFkKdcs9OCPFrYEyMVtSFaIh/s7/laUtV yrgBJX0mmc4rFZ6DvXcepl9o7KRMHRF1p+ZYHN3Cr3M/lQPgwsLQcFMldqkFemIs meqC1M7/2J/YlOy2X9VnwcgOAziOQWA2KUtEWWHmQdGjPyeXaJAIsa6m1jx0Udvu zSJdCbFEzMEnTyOaVcAKAkXRra4sZ5gJBuje92eubJhPfpHCyGNuSahigYnjDs33 kco= -----END CERTIFICATE-----Generated at Sun Oct 4 11:17:27 2026 by rpki-client