$ rpki-client -vvvf rpkica.twnic.tw/rpki/KANRAYS/1/061E60E9FDA5A25EDC961572A4CBA8C539D780AF.mft File: 061E60E9FDA5A25EDC961572A4CBA8C539D780AF.mft (raw, json) Hash identifier: 5hNBb6/zfARgWr04HUULbuOlzv4jjF8rJ2oj4Na5O5U= Subject key identifier: 6E:C1:B7:79:96:58:7C:BF:65:B9:2B:02:98:19:F9:F9:A0:06:5C:B3 Authority key identifier: 06:1E:60:E9:FD:A5:A2:5E:DC:96:15:72:A4:CB:A8:C5:39:D7:80:AF Certificate issuer: /CN=061E60E9FDA5A25EDC961572A4CBA8C539D780AF Certificate serial: 74B7D438F057937DDD8EA41ECFE68528113544CE Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/3/061E60E9FDA5A25EDC961572A4CBA8C539D780AF.cer Subject info access: rsync://rpkica.twnic.tw/rpki/KANRAYS/1/061E60E9FDA5A25EDC961572A4CBA8C539D780AF.mft Manifest number: D0 Signing time: Mon 12 Oct 2026 10:43:32 +0000 Manifest this update: Mon 12 Oct 2026 10:38:32 +0000 Manifest next update: Tue 13 Oct 2026 14:17:32 +0000 Files and hashes: 1: 061E60E9FDA5A25EDC961572A4CBA8C539D780AF.crl (hash: o3eabcZasS3Ru+tCEZMpl6Vos/Q0KwlspXsPFdh8ODo=) 2: 3135312e3135382e32362e302f32332d3234203d3e203138303434.roa (hash: QIY0glYph3b8eEZZ9jaZ9XB3vhAySFJ+wbIUL9Lsf2o=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/KANRAYS/1/061E60E9FDA5A25EDC961572A4CBA8C539D780AF.crl rsync://rpkica.twnic.tw/rpki/KANRAYS/1/061E60E9FDA5A25EDC961572A4CBA8C539D780AF.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/3/061E60E9FDA5A25EDC961572A4CBA8C539D780AF.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 14:17:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:b7:d4:38:f0:57:93:7d:dd:8e:a4:1e:cf:e6:85:28:11:35:44:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=061E60E9FDA5A25EDC961572A4CBA8C539D780AF Validity Not Before: Oct 12 10:38:32 2026 GMT Not After : Oct 13 14:17:32 2026 GMT Subject: CN=6EC1B77996587CBF65B92B029819F9F9A0065CB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d4:fb:d7:bf:26:98:fb:2a:4e:f0:31:87:44: f4:e1:6c:ee:45:2b:bb:91:52:ac:84:2a:20:f2:f3: 4a:d4:26:f5:c2:98:49:86:d3:fd:03:75:a6:b9:93: f9:ac:a3:51:46:2b:4c:68:5e:3c:c0:40:50:f6:6a: 76:81:b3:49:88:5b:35:55:f4:5c:ff:19:93:6d:0b: 6f:4e:44:8e:6d:32:79:df:bb:65:7d:d1:9c:0e:8d: 79:e5:02:b0:96:e2:da:a0:34:8c:c2:02:cd:03:56: 6d:48:53:12:2d:d2:1b:36:19:58:3d:71:29:86:db: 2d:dd:0f:bf:39:0f:fd:67:3a:34:22:64:fd:73:08: 8a:04:bd:d5:f2:b2:2e:0f:e7:85:93:fb:65:f4:90: 9c:5b:d8:43:ba:18:3b:03:4e:6c:f7:f9:f9:a3:20: 18:e1:93:9a:46:c2:96:71:c8:0b:af:e2:84:b8:2f: f2:99:ad:25:12:5f:ab:0a:4f:99:a5:93:36:ba:59: 2e:95:2b:04:5a:9d:65:11:5a:2f:0c:12:c6:4c:a4: de:6c:8b:5d:a7:c2:24:93:48:f4:91:9a:0d:90:ed: b4:f5:3c:aa:14:eb:90:c4:67:1d:16:43:1d:78:fd: 45:75:35:8a:05:62:0b:45:45:3b:16:d6:4c:95:3f: 8e:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:C1:B7:79:96:58:7C:BF:65:B9:2B:02:98:19:F9:F9:A0:06:5C:B3 X509v3 Authority Key Identifier: keyid:06:1E:60:E9:FD:A5:A2:5E:DC:96:15:72:A4:CB:A8:C5:39:D7:80:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/KANRAYS/1/061E60E9FDA5A25EDC961572A4CBA8C539D780AF.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/061E60E9FDA5A25EDC961572A4CBA8C539D780AF.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KANRAYS/1/061E60E9FDA5A25EDC961572A4CBA8C539D780AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:5b:56:28:51:2a:9f:f6:0e:55:7e:c7:a5:d2:69:68:d9:2c: cc:e9:66:9b:6e:a5:7e:a0:47:99:4e:9e:eb:7b:12:8f:34:58: 9e:7c:55:d6:6e:4d:9f:5c:56:69:36:95:12:88:4c:97:7e:af: 1d:bd:ed:9d:c6:dc:35:73:81:85:c2:df:9e:c9:15:8e:e0:e6: 56:b4:39:b5:5d:49:2b:46:ca:b9:f4:07:a7:7d:03:53:d5:67: e6:9b:26:69:66:bd:fa:d2:b9:1f:3e:a8:b0:cc:54:62:82:ca: 25:4d:fc:59:67:e5:96:f4:cd:4c:ce:67:61:f6:f2:1d:a8:7f: 37:50:28:39:92:c7:05:35:87:3e:4b:16:c4:9d:e2:14:d1:0a: ae:55:83:90:1f:9d:82:28:b8:9e:96:5f:da:87:68:f4:f2:54: 5e:73:bc:3f:a9:30:a3:8d:ee:25:97:50:dd:83:5f:4a:00:c5: 04:f4:76:2a:c7:5c:64:f4:3c:c6:46:1f:00:4e:6d:e3:bf:ae: f9:83:b9:e1:3d:75:7d:25:3e:5b:02:89:54:d9:c7:ac:5b:5f: 6b:65:6b:9f:6b:f8:4d:50:29:d3:db:e1:d7:23:55:04:f2:d3: 83:0c:ec:36:1f:c5:13:75:2a:8d:d7:23:6c:74:8e:d2:3a:60: 33:b9:6c:9f -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIUdLfUOPBXk33djqQez+aFKBE1RM4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDYxRTYwRTlGREE1QTI1RURDOTYxNTcyQTRDQkE4QzUz OUQ3ODBBRjAeFw0yNjEwMTIxMDM4MzJaFw0yNjEwMTMxNDE3MzJaMDMxMTAvBgNV BAMTKDZFQzFCNzc5OTY1ODdDQkY2NUI5MkIwMjk4MTlGOUY5QTAwNjVDQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG1PvXvyaY+ypO8DGHRPThbO5F K7uRUqyEKiDy80rUJvXCmEmG0/0Ddaa5k/mso1FGK0xoXjzAQFD2anaBs0mIWzVV 9Fz/GZNtC29ORI5tMnnfu2V90ZwOjXnlArCW4tqgNIzCAs0DVm1IUxIt0hs2GVg9 cSmG2y3dD785D/1nOjQiZP1zCIoEvdXysi4P54WT+2X0kJxb2EO6GDsDTmz3+fmj IBjhk5pGwpZxyAuv4oS4L/KZrSUSX6sKT5mlkza6WS6VKwRanWURWi8MEsZMpN5s i12nwiSTSPSRmg2Q7bT1PKoU65DEZx0WQx14/UV1NYoFYgtFRTsW1kyVP45nAgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQUbsG3eZZYfL9luSsCmBn5+aAGXLMwHwYDVR0j BBgwFoAUBh5g6f2lol7clhVypMuoxTnXgK8wDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0FOUkFZ Uy8xLzA2MUU2MEU5RkRBNUEyNUVEQzk2MTU3MkE0Q0JBOEM1MzlENzgwQUYuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzMvMDYxRTYwRTlGREE1QTI1RURDOTYxNTcyQTRD QkE4QzUzOUQ3ODBBRi5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0tBTlJBWVMvMS8wNjFFNjBFOUZE QTVBMjVFREM5NjE1NzJBNENCQThDNTM5RDc4MEFGLm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZFtWKFEq n/YOVX7HpdJpaNkszOlmm26lfqBHmU6e63sSjzRYnnxV1m5Nn1xWaTaVEohMl36v Hb3tncbcNXOBhcLfnskVjuDmVrQ5tV1JK0bKufQHp30DU9Vn5psmaWa9+tK5Hz6o sMxUYoLKJU38WWfllvTNTM5nYfbyHah/N1AoOZLHBTWHPksWxJ3iFNEKrlWDkB+d gii4npZf2odo9PJUXnO8P6kwo43uJZdQ3YNfSgDFBPR2KsdcZPQ8xkYfAE5t47+u +YO54T11fSU+WwKJVNnHrFtfa2Vrn2v4TVAp09vh1yNVBPLTgwzsNh/FE3Uqjdcj bHSO0jpgM7lsnw== -----END CERTIFICATE-----Generated at Tue Oct 13 08:13:54 2026 by rpki-client