$ rpki-client -vvvf rpkica.twnic.tw/rpki/KANRAYS/1/061E60E9FDA5A25EDC961572A4CBA8C539D780AF.mft File: 061E60E9FDA5A25EDC961572A4CBA8C539D780AF.mft (raw, json) Hash identifier: 6NFd7BuK6nxyv+RiyrvKSrZGBFWqyOwmQkhOlaat108= Subject key identifier: 24:73:67:F0:AB:63:DE:56:0B:A0:6A:1F:EB:F0:CB:83:03:60:DE:7D Authority key identifier: 06:1E:60:E9:FD:A5:A2:5E:DC:96:15:72:A4:CB:A8:C5:39:D7:80:AF Certificate issuer: /CN=061E60E9FDA5A25EDC961572A4CBA8C539D780AF Certificate serial: 3704BA2390285F62B865E597DA1CD8C80F175163 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/3/061E60E9FDA5A25EDC961572A4CBA8C539D780AF.cer Subject info access: rsync://rpkica.twnic.tw/rpki/KANRAYS/1/061E60E9FDA5A25EDC961572A4CBA8C539D780AF.mft Manifest number: 92 Signing time: Wed 26 Aug 2026 21:24:55 +0000 Manifest this update: Wed 26 Aug 2026 21:19:55 +0000 Manifest next update: Thu 27 Aug 2026 23:20:55 +0000 Files and hashes: 1: 061E60E9FDA5A25EDC961572A4CBA8C539D780AF.crl (hash: iO/CnQHBahlfSleE0CSDtV6S/bEkos5WdsCrS9NQb8Y=) 2: 3135312e3135382e32362e302f32332d3234203d3e203138303434.roa (hash: QIY0glYph3b8eEZZ9jaZ9XB3vhAySFJ+wbIUL9Lsf2o=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/KANRAYS/1/061E60E9FDA5A25EDC961572A4CBA8C539D780AF.crl rsync://rpkica.twnic.tw/rpki/KANRAYS/1/061E60E9FDA5A25EDC961572A4CBA8C539D780AF.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/3/061E60E9FDA5A25EDC961572A4CBA8C539D780AF.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Aug 2026 23:20:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:04:ba:23:90:28:5f:62:b8:65:e5:97:da:1c:d8:c8:0f:17:51:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=061E60E9FDA5A25EDC961572A4CBA8C539D780AF Validity Not Before: Aug 26 21:19:55 2026 GMT Not After : Aug 27 23:20:55 2026 GMT Subject: CN=247367F0AB63DE560BA06A1FEBF0CB830360DE7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:8a:ac:23:36:ba:ea:c9:04:38:b9:cf:09:14: 7b:b6:cb:e2:e2:fe:f8:f8:77:e1:40:88:43:33:81: 63:05:99:11:20:20:c4:ba:7f:7c:4d:e6:cb:8b:43: 6d:36:8d:0a:74:cf:02:d4:06:0d:bc:d3:c9:d2:83: c2:be:0f:74:58:6a:af:70:66:19:ac:e1:17:97:86: 64:ff:95:c6:e0:3c:af:66:b2:bb:9c:e7:18:19:3a: a7:47:6f:7e:2b:5b:ce:d8:6e:13:92:33:b7:32:e0: 2a:47:07:ed:bb:ac:8f:7a:b8:f5:0b:6e:c1:09:45: bd:35:3a:b1:7d:f0:9e:df:aa:7d:9b:1a:20:c4:ab: d7:57:7b:5d:34:e7:83:1c:b5:11:0c:0b:cb:16:97: 9c:ac:97:c6:26:d5:0c:57:ef:6a:9a:48:d6:b5:38: 20:52:70:51:93:d0:f7:46:35:cc:28:11:fd:28:5b: e0:28:2f:f1:93:b4:fc:74:ef:0e:69:76:d4:a2:31: 72:4b:5b:ed:50:b4:c0:20:b7:51:f3:48:96:b4:c0: 2f:20:70:69:43:60:2b:9b:cc:40:69:22:6d:73:12: 7b:a4:7e:7f:e4:ef:e4:b4:fc:d1:e8:88:b5:ac:0c: c7:72:02:f9:00:ab:32:3d:81:6d:5e:26:a8:09:7d: c9:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:73:67:F0:AB:63:DE:56:0B:A0:6A:1F:EB:F0:CB:83:03:60:DE:7D X509v3 Authority Key Identifier: keyid:06:1E:60:E9:FD:A5:A2:5E:DC:96:15:72:A4:CB:A8:C5:39:D7:80:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/KANRAYS/1/061E60E9FDA5A25EDC961572A4CBA8C539D780AF.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/061E60E9FDA5A25EDC961572A4CBA8C539D780AF.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KANRAYS/1/061E60E9FDA5A25EDC961572A4CBA8C539D780AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:df:eb:2f:8d:f7:22:29:89:57:ab:31:d3:68:57:12:f4:e1: f8:60:48:a5:6f:20:db:79:3c:da:ea:eb:d8:c5:20:18:1a:53: 75:52:55:5f:bf:af:26:a8:a9:a3:e6:48:51:5d:9d:fc:ad:dc: bd:ba:1c:34:d1:10:75:61:74:1c:b1:ac:d9:e9:14:1e:31:22: dc:29:00:c8:73:a9:6c:78:e0:76:96:38:84:ce:c6:28:7c:1c: 55:89:f6:f4:6c:12:85:2d:50:3c:55:53:76:2a:66:41:1e:3f: 72:44:31:a1:b7:c9:7e:62:ec:dc:d1:57:02:f2:a4:0c:76:63: 6a:95:12:38:86:c7:55:11:ca:de:6e:6b:2e:c9:90:ad:ce:50: f2:80:0b:ef:68:e8:72:7c:e9:14:32:9f:9e:14:56:92:31:1b: 37:97:5c:12:37:05:12:63:26:a9:ca:4c:6f:71:de:b1:9a:c5: c7:75:86:2d:82:1d:88:b3:44:04:7a:73:db:46:de:36:60:e5: 33:13:56:7b:b5:b4:dd:12:57:ce:61:7a:19:88:b7:d3:6f:bd: 2a:11:ff:e0:7a:8d:bf:0f:4e:01:4c:19:34:12:ad:8e:9d:e5: d9:09:1d:ac:42:fe:cf:a5:6d:89:66:33:d5:a1:eb:6d:20:be: c8:98:cf:88 -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIUNwS6I5AoX2K4ZeWX2hzYyA8XUWMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDYxRTYwRTlGREE1QTI1RURDOTYxNTcyQTRDQkE4QzUz OUQ3ODBBRjAeFw0yNjA4MjYyMTE5NTVaFw0yNjA4MjcyMzIwNTVaMDMxMTAvBgNV BAMTKDI0NzM2N0YwQUI2M0RFNTYwQkEwNkExRkVCRjBDQjgzMDM2MERFN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDViqwjNrrqyQQ4uc8JFHu2y+Li /vj4d+FAiEMzgWMFmREgIMS6f3xN5suLQ202jQp0zwLUBg2808nSg8K+D3RYaq9w Zhms4ReXhmT/lcbgPK9msruc5xgZOqdHb34rW87YbhOSM7cy4CpHB+27rI96uPUL bsEJRb01OrF98J7fqn2bGiDEq9dXe10054MctREMC8sWl5ysl8Ym1QxX72qaSNa1 OCBScFGT0PdGNcwoEf0oW+AoL/GTtPx07w5pdtSiMXJLW+1QtMAgt1HzSJa0wC8g cGlDYCubzEBpIm1zEnukfn/k7+S0/NHoiLWsDMdyAvkAqzI9gW1eJqgJfcl1AgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQUJHNn8Ktj3lYLoGof6/DLgwNg3n0wHwYDVR0j BBgwFoAUBh5g6f2lol7clhVypMuoxTnXgK8wDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0FOUkFZ Uy8xLzA2MUU2MEU5RkRBNUEyNUVEQzk2MTU3MkE0Q0JBOEM1MzlENzgwQUYuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzMvMDYxRTYwRTlGREE1QTI1RURDOTYxNTcyQTRD QkE4QzUzOUQ3ODBBRi5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0tBTlJBWVMvMS8wNjFFNjBFOUZE QTVBMjVFREM5NjE1NzJBNENCQThDNTM5RDc4MEFGLm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU9/rL433 IimJV6sx02hXEvTh+GBIpW8g23k82urr2MUgGBpTdVJVX7+vJqipo+ZIUV2d/K3c vbocNNEQdWF0HLGs2ekUHjEi3CkAyHOpbHjgdpY4hM7GKHwcVYn29GwShS1QPFVT dipmQR4/ckQxobfJfmLs3NFXAvKkDHZjapUSOIbHVRHK3m5rLsmQrc5Q8oAL72jo cnzpFDKfnhRWkjEbN5dcEjcFEmMmqcpMb3HesZrFx3WGLYIdiLNEBHpz20beNmDl MxNWe7W03RJXzmF6GYi302+9KhH/4HqNvw9OAUwZNBKtjp3l2QkdrEL+z6VtiWYz 1aHrbSC+yJjPiA== -----END CERTIFICATE-----Generated at Thu Aug 27 04:52:32 2026 by rpki-client