$ rpki-client -vvvf rpkica.twnic.tw/rpki/OPENRICH/0/61F2C234A51074E0978404BDC79AA79130040B00.mft File: 61F2C234A51074E0978404BDC79AA79130040B00.mft (raw, json) Hash identifier: QmurKmeIIfIvV3RP/pcE6oCb/cV1Xj2Y9DjpMxFoZZ4= Subject key identifier: 0E:4D:35:34:FF:DB:3A:1C:90:34:86:D4:29:30:DE:D8:CB:4C:BC:EB Authority key identifier: 61:F2:C2:34:A5:10:74:E0:97:84:04:BD:C7:9A:A7:91:30:04:0B:00 Certificate issuer: /CN=61F2C234A51074E0978404BDC79AA79130040B00 Certificate serial: 3FCBED4945677495B77A6EE1D69B879A6B9F4FAD Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/61F2C234A51074E0978404BDC79AA79130040B00.cer Subject info access: rsync://rpkica.twnic.tw/rpki/OPENRICH/0/61F2C234A51074E0978404BDC79AA79130040B00.mft Manifest number: C7 Signing time: Sat 03 Oct 2026 16:10:55 +0000 Manifest this update: Sat 03 Oct 2026 16:05:55 +0000 Manifest next update: Sun 04 Oct 2026 18:59:55 +0000 Files and hashes: 1: 3130332e3134372e3133302e302f32332d3234203d3e20313331363734.roa (hash: hPsd6S2D9hMin8P77QyQ2OhAm+/bYf9j5m2G2tBdGrg=) 2: 323430353a623863303a3a2f33322d3634203d3e20313331363734.roa (hash: zPchVf+BzdWdK6jtiyFuKEMvAaWvPZafeIufyi+NDAU=) 3: 323430353a623863303a3a2f33322d3634203d3e20313331363737.roa (hash: AnPDeDj6hR2bEdYvy6SAFA3A/pHmArnFaxzCcI0NAKA=) 4: 61F2C234A51074E0978404BDC79AA79130040B00.crl (hash: jaaFiCONDW35Ra2s7PuqqsMiDOxkCCJxQIf/NQE9LgE=) 5: 3130332e3134372e3133302e302f32332d3234203d3e20313331363737.roa (hash: VGWA54tpU9ZSYiEjleM6DRC35GLg1lZvqOaYCzFR4yI=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/OPENRICH/0/61F2C234A51074E0978404BDC79AA79130040B00.crl rsync://rpkica.twnic.tw/rpki/OPENRICH/0/61F2C234A51074E0978404BDC79AA79130040B00.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/61F2C234A51074E0978404BDC79AA79130040B00.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 18:59:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:cb:ed:49:45:67:74:95:b7:7a:6e:e1:d6:9b:87:9a:6b:9f:4f:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61F2C234A51074E0978404BDC79AA79130040B00 Validity Not Before: Oct 3 16:05:55 2026 GMT Not After : Oct 4 18:59:55 2026 GMT Subject: CN=0E4D3534FFDB3A1C903486D42930DED8CB4CBCEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:a8:07:f1:2f:e0:ba:8a:84:1b:52:1e:48:ff: e1:2c:94:25:b0:6f:79:ab:89:92:4d:e1:ef:5e:a8: a8:e0:39:90:c8:c4:e8:5f:65:8e:5a:0c:28:b8:19: 1b:7c:55:e4:e9:6c:c7:57:10:81:9b:fd:23:1f:e2: 6a:d6:13:31:b7:fd:5e:01:c6:63:b4:42:e1:a9:22: 42:b0:1b:23:78:44:72:8b:93:cd:e6:7a:b6:2e:4e: b8:4a:7c:7b:26:cd:6a:4a:46:49:8a:db:fc:10:e5: 38:c1:60:2f:20:c4:54:6c:0e:01:2a:5e:89:d2:94: fb:91:dc:70:76:95:ed:52:8e:1f:f4:0e:d6:dd:2a: 41:d8:b0:c7:f9:59:01:26:92:de:8a:70:22:7d:69: 43:3a:23:a1:fe:f5:b8:4d:35:ea:a8:fc:01:87:ef: 85:89:58:1e:65:bf:32:08:20:09:53:9e:5b:4e:17: 98:bf:f1:03:d5:78:41:8e:19:a0:09:c9:6f:08:43: 26:ca:4a:87:15:7f:11:19:45:1d:08:1c:0f:c2:fe: 33:32:8c:34:ab:1b:b1:8b:08:17:34:c7:7a:6b:2a: 94:fe:18:5f:cc:2e:0d:6d:4a:0d:96:0e:af:b7:e7: 07:1b:0f:dd:06:e3:4f:21:cd:b7:60:7a:84:89:3a: 65:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:4D:35:34:FF:DB:3A:1C:90:34:86:D4:29:30:DE:D8:CB:4C:BC:EB X509v3 Authority Key Identifier: keyid:61:F2:C2:34:A5:10:74:E0:97:84:04:BD:C7:9A:A7:91:30:04:0B:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/OPENRICH/0/61F2C234A51074E0978404BDC79AA79130040B00.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/61F2C234A51074E0978404BDC79AA79130040B00.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/OPENRICH/0/61F2C234A51074E0978404BDC79AA79130040B00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:b8:39:90:2d:a9:a0:5e:2e:f9:e5:d0:b0:57:7a:a4:59:ef: d2:9e:a9:b0:e2:09:fb:46:da:33:48:92:07:a0:7b:d0:b8:c1: 7d:e1:1d:72:54:c4:48:cd:84:a2:36:c5:a9:cc:32:a6:dc:b2: 02:1c:00:d2:5e:d5:df:23:a1:d9:00:8e:be:be:31:01:11:c2: 45:b7:fa:d3:36:45:a0:01:a5:03:da:19:35:f1:4c:60:d8:00: 71:8e:bb:40:8d:c1:c8:62:35:47:38:ba:a6:ec:42:74:47:63: 8a:da:50:e5:a7:c6:b8:38:11:f2:aa:fe:dd:e5:d9:e3:63:a5: b7:e9:8c:e6:b5:9a:72:f7:11:66:48:48:d8:8e:f6:21:3c:76: 2c:6d:ca:fe:3e:b2:a3:34:2a:70:3c:3c:1f:f9:e3:71:bc:d5: c7:df:42:53:5d:99:5f:d0:e4:7f:8e:ab:f6:f3:26:a3:65:53: 22:3c:ae:02:04:0e:50:f6:19:f5:e8:81:61:a6:9b:7c:a9:89: 0c:50:aa:1c:03:ed:11:77:d8:b2:78:88:e1:5a:c3:a4:4d:3a: 6b:25:3d:05:95:a3:22:6a:bd:93:9f:e8:56:32:71:98:5a:3d: ae:f8:d3:94:fc:e7:18:f1:f9:d4:a9:c7:00:e1:f9:d0:f3:85: 91:32:4e:27 -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUP8vtSUVndJW3em7h1puHmmufT60wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjFGMkMyMzRBNTEwNzRFMDk3ODQwNEJEQzc5QUE3OTEz MDA0MEIwMDAeFw0yNjEwMDMxNjA1NTVaFw0yNjEwMDQxODU5NTVaMDMxMTAvBgNV BAMTKDBFNEQzNTM0RkZEQjNBMUM5MDM0ODZENDI5MzBERUQ4Q0I0Q0JDRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoqAfxL+C6ioQbUh5I/+EslCWw b3mriZJN4e9eqKjgOZDIxOhfZY5aDCi4GRt8VeTpbMdXEIGb/SMf4mrWEzG3/V4B xmO0QuGpIkKwGyN4RHKLk83merYuTrhKfHsmzWpKRkmK2/wQ5TjBYC8gxFRsDgEq XonSlPuR3HB2le1Sjh/0DtbdKkHYsMf5WQEmkt6KcCJ9aUM6I6H+9bhNNeqo/AGH 74WJWB5lvzIIIAlTnltOF5i/8QPVeEGOGaAJyW8IQybKSocVfxEZRR0IHA/C/jMy jDSrG7GLCBc0x3prKpT+GF/MLg1tSg2WDq+35wcbD90G408hzbdgeoSJOmUvAgMB AAGjggHyMIIB7jAdBgNVHQ4EFgQUDk01NP/bOhyQNIbUKTDe2MtMvOswHwYDVR0j BBgwFoAUYfLCNKUQdOCXhAS9x5qnkTAECwAwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvT1BFTlJJ Q0gvMC82MUYyQzIzNEE1MTA3NEUwOTc4NDA0QkRDNzlBQTc5MTMwMDQwQjAwLmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8xLzYxRjJDMjM0QTUxMDc0RTA5Nzg0MDRCREM3 OUFBNzkxMzAwNDBCMDAuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9PUEVOUklDSC8wLzYxRjJDMjM0 QTUxMDc0RTA5Nzg0MDRCREM3OUFBNzkxMzAwNDBCMDAubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCnuDmQ LamgXi755dCwV3qkWe/Snqmw4gn7RtozSJIHoHvQuMF94R1yVMRIzYSiNsWpzDKm 3LICHADSXtXfI6HZAI6+vjEBEcJFt/rTNkWgAaUD2hk18Uxg2ABxjrtAjcHIYjVH OLqm7EJ0R2OK2lDlp8a4OBHyqv7d5dnjY6W36YzmtZpy9xFmSEjYjvYhPHYsbcr+ PrKjNCpwPDwf+eNxvNXH30JTXZlf0OR/jqv28yajZVMiPK4CBA5Q9hn16IFhppt8 qYkMUKocA+0Rd9iyeIjhWsOkTTprJT0FlaMiar2Tn+hWMnGYWj2u+NOU/OcY8fnU qccA4fnQ84WRMk4n -----END CERTIFICATE-----Generated at Sun Oct 4 05:35:19 2026 by rpki-client