$ rpki-client -vvvf rpkica.twnic.tw/rpki/KKCO/0/1BF419773D1E15EEFD6CA2BB4E50DBEF74AB9694.mft File: 1BF419773D1E15EEFD6CA2BB4E50DBEF74AB9694.mft (raw, json) Hash identifier: RUczTZnZlUmVsk5S+QVK5SJKOVnnPUYD41FVwdkRWzs= Subject key identifier: 6E:8C:78:A3:C9:7C:7D:9C:FD:02:21:D8:DE:7C:CF:3A:07:04:98:9A Authority key identifier: 1B:F4:19:77:3D:1E:15:EE:FD:6C:A2:BB:4E:50:DB:EF:74:AB:96:94 Certificate issuer: /CN=1BF419773D1E15EEFD6CA2BB4E50DBEF74AB9694 Certificate serial: 6403B56D5752F8BAC87331A88D3A36860C3FAC2A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1BF419773D1E15EEFD6CA2BB4E50DBEF74AB9694.cer Subject info access: rsync://rpkica.twnic.tw/rpki/KKCO/0/1BF419773D1E15EEFD6CA2BB4E50DBEF74AB9694.mft Manifest number: C6 Signing time: Sun 04 Oct 2026 10:50:15 +0000 Manifest this update: Sun 04 Oct 2026 10:45:15 +0000 Manifest next update: Mon 05 Oct 2026 12:16:15 +0000 Files and hashes: 1: 3130332e3133342e3132302e302f32322d3234203d3e20313331363435.roa (hash: 5YtP4S/SL4qMiPP6SO95f1XxJCbpmMediEjct/tVRs0=) 2: 323430343a363363303a3a2f33322d3438203d3e20313331363435.roa (hash: IKYmTXcs/sxSdeZ8soPiKcin23Vsg+QkfcjhBMnj+D8=) 3: 1BF419773D1E15EEFD6CA2BB4E50DBEF74AB9694.crl (hash: QawqI1CZ9/Rv72ENLWYQ31DN6iPQxZmKKLYoPCBYDSg=) 4: 3230322e3132332e3132362e302f32332d3234203d3e20313331363435.roa (hash: X5pJ+pB5W852b19TEIzFlXBOz+DsW3q2s1s2BmWLs78=) 5: 3230322e3134382e3230382e302f32332d3234203d3e20313331363435.roa (hash: G2OLOqYyK8DpocEbNmGZNRoqNscoouK3uCmhiiODaHA=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/KKCO/0/1BF419773D1E15EEFD6CA2BB4E50DBEF74AB9694.crl rsync://rpkica.twnic.tw/rpki/KKCO/0/1BF419773D1E15EEFD6CA2BB4E50DBEF74AB9694.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1BF419773D1E15EEFD6CA2BB4E50DBEF74AB9694.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 12:16:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:03:b5:6d:57:52:f8:ba:c8:73:31:a8:8d:3a:36:86:0c:3f:ac:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BF419773D1E15EEFD6CA2BB4E50DBEF74AB9694 Validity Not Before: Oct 4 10:45:15 2026 GMT Not After : Oct 5 12:16:15 2026 GMT Subject: CN=6E8C78A3C97C7D9CFD0221D8DE7CCF3A0704989A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:fc:38:b3:00:1c:6b:58:83:4c:8c:22:b5:da: e7:db:52:f2:12:79:e2:f7:3f:be:f1:7d:c0:73:4c: 4d:d9:ad:3d:03:a2:13:9e:61:5a:8b:79:c6:48:d4: 18:2d:7a:2e:db:5a:82:08:e5:0a:ab:0f:3e:06:6f: 1b:e4:a2:9d:d6:9d:23:19:88:51:91:81:3d:4a:a5: 2f:1c:fc:08:c1:06:da:67:b5:96:72:8a:2e:6a:46: a9:06:f0:f3:cb:77:1e:1d:92:6a:7d:12:4e:e3:3a: bd:4b:eb:31:d5:74:e4:b9:22:23:18:f2:d3:74:6b: ba:dc:cb:6f:b3:8d:c6:28:d5:48:e4:37:f6:ed:32: d3:8e:92:4e:03:31:cb:f5:1e:17:5a:36:a7:7f:11: fd:52:a1:35:89:5c:58:bf:48:fd:58:09:b0:f0:98: f2:56:55:0c:bf:7a:18:26:e9:24:2f:ed:cd:b4:fd: 87:14:6e:c2:e6:42:5e:93:11:49:a3:f5:09:82:2e: 02:be:5e:c4:8b:f6:de:4e:e0:b4:c0:b1:e8:f6:74: 11:eb:ba:e2:30:da:63:9f:4c:d6:b9:76:9c:4c:a3: ca:29:3a:6c:9b:2c:e8:87:4a:9f:0b:d9:73:33:d4: fc:b7:50:40:4d:fb:11:75:a4:96:b5:9e:02:11:8e: b9:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:8C:78:A3:C9:7C:7D:9C:FD:02:21:D8:DE:7C:CF:3A:07:04:98:9A X509v3 Authority Key Identifier: keyid:1B:F4:19:77:3D:1E:15:EE:FD:6C:A2:BB:4E:50:DB:EF:74:AB:96:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/KKCO/0/1BF419773D1E15EEFD6CA2BB4E50DBEF74AB9694.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1BF419773D1E15EEFD6CA2BB4E50DBEF74AB9694.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KKCO/0/1BF419773D1E15EEFD6CA2BB4E50DBEF74AB9694.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:72:8d:ce:d9:78:53:d9:52:46:38:df:66:7f:83:61:12:09: 5a:9a:57:bd:12:3e:e9:95:b2:64:86:82:3d:c1:65:31:eb:3c: 32:5a:dc:9e:4f:95:b0:a9:7b:76:54:56:87:bd:98:4d:5b:10: 6a:d8:a5:35:f7:3a:f7:b3:4b:fa:1a:65:69:1d:e8:e3:99:9a: 14:38:fa:9d:41:1d:a0:2f:86:b4:e4:fd:cd:d4:88:1f:21:f4: e4:d6:f6:71:89:0c:26:02:55:9e:2c:46:85:8e:95:a6:38:b9: df:a1:26:0f:43:b8:96:a7:47:8c:be:3e:63:04:f2:27:cf:b5: f8:e1:21:88:50:1e:bb:eb:db:d5:ef:40:9f:a5:9b:3d:65:b9: 5a:4c:b4:4f:35:10:b6:0c:8e:67:c6:02:da:15:60:dd:90:c0: 04:be:39:56:35:8c:8c:c3:09:b7:1a:29:02:d4:b6:e7:9a:68: 52:bd:bc:9f:6a:99:e3:71:a2:dd:b8:6c:ed:75:23:75:fb:3d: d6:96:40:09:81:d5:15:72:d0:1e:6a:fd:cf:02:76:fd:ec:62: 1f:ce:c5:f5:a6:f4:65:fc:28:d8:90:a3:0b:aa:75:03:d3:74: c1:be:01:37:c4:08:02:8b:e0:52:2b:55:24:44:eb:66:01:b9: 9e:59:36:fd -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUZAO1bVdS+LrIczGojTo2hgw/rCowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJGNDE5NzczRDFFMTVFRUZENkNBMkJCNEU1MERCRUY3 NEFCOTY5NDAeFw0yNjEwMDQxMDQ1MTVaFw0yNjEwMDUxMjE2MTVaMDMxMTAvBgNV BAMTKDZFOEM3OEEzQzk3QzdEOUNGRDAyMjFEOERFN0NDRjNBMDcwNDk4OUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm/DizABxrWINMjCK12ufbUvIS eeL3P77xfcBzTE3ZrT0DohOeYVqLecZI1Bgtei7bWoII5QqrDz4Gbxvkop3WnSMZ iFGRgT1KpS8c/AjBBtpntZZyii5qRqkG8PPLdx4dkmp9Ek7jOr1L6zHVdOS5IiMY 8tN0a7rcy2+zjcYo1UjkN/btMtOOkk4DMcv1HhdaNqd/Ef1SoTWJXFi/SP1YCbDw mPJWVQy/ehgm6SQv7c20/YcUbsLmQl6TEUmj9QmCLgK+XsSL9t5O4LTAsej2dBHr uuIw2mOfTNa5dpxMo8opOmybLOiHSp8L2XMz1Py3UEBN+xF1pJa1ngIRjrmhAgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQUbox4o8l8fZz9AiHY3nzPOgcEmJowHwYDVR0j BBgwFoAUG/QZdz0eFe79bKK7TlDb73SrlpQwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0tDTy8w LzFCRjQxOTc3M0QxRTE1RUVGRDZDQTJCQjRFNTBEQkVGNzRBQjk2OTQuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvMUJGNDE5NzczRDFFMTVFRUZENkNBMkJCNEU1MERC RUY3NEFCOTY5NC5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0tLQ08vMC8xQkY0MTk3NzNEMUUxNUVF RkQ2Q0EyQkI0RTUwREJFRjc0QUI5Njk0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXHKNztl4U9lSRjjf Zn+DYRIJWppXvRI+6ZWyZIaCPcFlMes8Mlrcnk+VsKl7dlRWh72YTVsQatilNfc6 97NL+hplaR3o45maFDj6nUEdoC+GtOT9zdSIHyH05Nb2cYkMJgJVnixGhY6Vpji5 36EmD0O4lqdHjL4+YwTyJ8+1+OEhiFAeu+vb1e9An6WbPWW5Wky0TzUQtgyOZ8YC 2hVg3ZDABL45VjWMjMMJtxopAtS255poUr28n2qZ43Gi3bhs7XUjdfs91pZACYHV FXLQHmr9zwJ2/exiH87F9ab0Zfwo2JCjC6p1A9N0wb4BN8QIAovgUitVJETrZgG5 nlk2/Q== -----END CERTIFICATE-----Generated at Sun Oct 4 16:56:22 2026 by rpki-client