$ rpki-client -vvvf rpkica.twnic.tw/rpki/PNI/1/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.mft File: 3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.mft (raw, json) Hash identifier: 0OKVAggk0QXSV34FSuJVbXySbtjYrI3Ukr/IWDMLW4Q= Subject key identifier: FB:92:B4:B5:2C:2A:39:6E:B2:44:B1:1A:1F:A9:17:81:EB:CD:05:FE Authority key identifier: 3C:21:92:63:F2:6B:99:E2:DB:37:5C:D0:CD:FE:5E:54:B5:7B:5C:26 Certificate issuer: /CN=3C219263F26B99E2DB375CD0CDFE5E54B57B5C26 Certificate serial: 057437C3C82B029F47D779DC3D17286370A38E27 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/2/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.cer Subject info access: rsync://rpkica.twnic.tw/rpki/PNI/1/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.mft Manifest number: F6 Signing time: Sun 25 Oct 2026 21:53:26 +0000 Manifest this update: Sun 25 Oct 2026 21:48:26 +0000 Manifest next update: Mon 26 Oct 2026 22:44:26 +0000 Files and hashes: 1: 3138372e37392e3234342e302f32332d3332203d3e20313331363538.roa (hash: yumD0lxBQJ+80NWqiC1APAnKFuIvqRgJ6DwlCxndQ/c=) 2: 3138372e37392e3234312e302f32342d3332203d3e203633393037.roa (hash: OBpRfi4+lv5ccoc6iNCMiesrl6Hu6/OIxdIRidZn29s=) 3: 3138372e37392e3234372e302f32342d3234203d3e203134383734.roa (hash: xrdOBfPyCEULsjixsbr/Px/rQubD5zMfCzYg1CD5bIk=) 4: 3138372e37392e3234322e302f32342d3332203d3e20313532363237.roa (hash: rDdKFeMf3jMoCFWR1NywslztzyvdRKt2kDtU6UZnvp8=) 5: 3138372e37392e3234352e302f32342d3332203d3e20313530373638.roa (hash: Hs6nQhcgL92iGp+zVUZzGJBIRibLpPYWP2j8Qnvkw6Y=) 6: 3138372e37392e3234332e302f32342d3332203d3e20313532363237.roa (hash: g5g71SS0hEmKR6eQgaJ7zWq0tOfD6hYFf5XTJJ5szwg=) 7: 3138372e37392e3234302e302f32312d3332203d3e20313331363432.roa (hash: 3hkv3oIEXxYKcJ6+wpyKK8B+zNNvwWzz7gTiuX5XoeM=) 8: 3138372e37392e3234352e302f32342d3234203d3e20323138353230.roa (hash: EB0X9wsz9uJJnmVKIE2PXOMjly0K4UEREeZz8rtv7l4=) 9: 3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.crl (hash: iIVxose9m/qjlEX6PF9rtQnuqfzAJ3C3gL9TE/aUXqY=) 10: 3138372e37392e3234362e302f32332d3234203d3e203138313738.roa (hash: lvDvOodv8M6LrOgAyDJTwNdJGzoBoLeykAhTF1kRzCI=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/PNI/1/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.crl rsync://rpkica.twnic.tw/rpki/PNI/1/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/2/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 22:44:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:74:37:c3:c8:2b:02:9f:47:d7:79:dc:3d:17:28:63:70:a3:8e:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C219263F26B99E2DB375CD0CDFE5E54B57B5C26 Validity Not Before: Oct 25 21:48:26 2026 GMT Not After : Oct 26 22:44:26 2026 GMT Subject: CN=FB92B4B52C2A396EB244B11A1FA91781EBCD05FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:3f:7b:ae:bd:0d:29:84:68:5a:bd:a7:4f:78: 2f:c3:49:b5:74:0b:dc:07:67:cd:36:15:dc:3a:c5: cc:1f:da:82:57:ad:98:1d:95:78:ca:88:96:81:5f: a5:97:f1:d0:95:2e:24:58:88:a8:f3:d8:8e:eb:86: 69:6d:a3:a1:e2:c9:35:5d:86:85:de:47:07:bc:3d: 01:0a:1d:22:fa:d8:21:8a:64:19:15:05:df:83:00: c6:b3:ce:fb:92:9d:f0:6f:b6:e5:f3:0d:b4:bc:c0: ca:bf:55:3e:36:f9:4a:e5:05:81:14:e1:7f:58:84: 6d:ef:a3:83:99:56:af:ad:e4:ed:fa:c1:46:23:15: 00:52:79:4a:6d:9b:45:d8:56:26:a5:ad:88:b5:59: c5:0b:3e:44:f6:71:57:3c:43:ca:2a:75:01:94:28: 57:1d:b6:14:38:92:4f:c4:8a:b7:05:14:62:1c:3e: 39:f3:5f:b0:f1:0d:e8:14:e4:3d:23:6b:b6:a7:f0: 25:2d:68:81:18:b5:06:58:ef:7f:2a:07:be:68:c6: e8:9c:a3:02:cd:b4:ef:cb:03:a0:84:39:de:e1:30: 8f:cd:7c:f1:80:6a:3c:44:af:4a:15:47:77:7e:73: 1e:29:c8:06:69:2c:4a:4a:f0:73:af:0f:a9:af:82: 0d:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:92:B4:B5:2C:2A:39:6E:B2:44:B1:1A:1F:A9:17:81:EB:CD:05:FE X509v3 Authority Key Identifier: keyid:3C:21:92:63:F2:6B:99:E2:DB:37:5C:D0:CD:FE:5E:54:B5:7B:5C:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/PNI/1/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PNI/1/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:6b:5f:d0:2a:32:e8:80:b2:0c:57:21:87:36:2d:0d:1a:f8: 6f:41:80:9f:dc:01:4d:04:77:54:2f:6e:8f:ce:30:5a:9e:16: 97:d4:b5:83:89:77:86:78:2f:6e:de:29:60:36:d1:c1:3e:01: 8f:a9:3c:25:24:c2:a8:4b:46:8f:87:be:48:cd:ed:ad:82:bc: fb:33:f8:e3:61:37:ce:23:f9:b4:d1:f1:70:ec:22:71:ab:f6: 20:80:fe:8a:98:16:95:07:2a:16:50:fd:96:21:18:a6:ef:10: f4:f6:06:c2:15:65:69:5f:38:ca:88:16:a9:c0:25:48:87:6d: a5:28:f3:19:89:05:49:87:e7:f9:55:b0:a9:46:80:8d:0a:73: fd:4c:06:60:03:8e:4c:23:21:d8:5e:44:07:ef:a7:8d:d3:61: c6:fc:b2:76:71:55:f3:16:7c:96:ab:82:f5:c7:7b:bf:4d:54: 5f:0c:f4:a3:cd:11:36:93:5d:f0:d5:46:6f:78:bb:95:99:89: d2:22:51:25:e9:70:fb:36:0c:9e:2c:8a:00:17:d7:4d:96:62: 08:fe:8e:7e:a0:9c:90:2f:7a:fd:da:a5:7c:18:22:9f:1a:8b: 03:e1:52:d9:a2:9a:8d:93:36:9a:6d:7d:f0:f1:a5:3c:c0:90: f5:87:68:ed -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUBXQ3w8grAp9H13ncPRcoY3CjjicwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MyMTkyNjNGMjZCOTlFMkRCMzc1Q0QwQ0RGRTVFNTRC NTdCNUMyNjAeFw0yNjEwMjUyMTQ4MjZaFw0yNjEwMjYyMjQ0MjZaMDMxMTAvBgNV BAMTKEZCOTJCNEI1MkMyQTM5NkVCMjQ0QjExQTFGQTkxNzgxRUJDRDA1RkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmP3uuvQ0phGhavadPeC/DSbV0 C9wHZ802Fdw6xcwf2oJXrZgdlXjKiJaBX6WX8dCVLiRYiKjz2I7rhmlto6HiyTVd hoXeRwe8PQEKHSL62CGKZBkVBd+DAMazzvuSnfBvtuXzDbS8wMq/VT42+UrlBYEU 4X9YhG3vo4OZVq+t5O36wUYjFQBSeUptm0XYVialrYi1WcULPkT2cVc8Q8oqdQGU KFcdthQ4kk/EircFFGIcPjnzX7DxDegU5D0ja7an8CUtaIEYtQZY738qB75oxuic owLNtO/LA6CEOd7hMI/NfPGAajxEr0oVR3d+cx4pyAZpLEpK8HOvD6mvgg2JAgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQU+5K0tSwqOW6yRLEaH6kXgevNBf4wHwYDVR0j BBgwFoAUPCGSY/JrmeLbN1zQzf5eVLV7XCYwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvUE5JLzEv M0MyMTkyNjNGMjZCOTlFMkRCMzc1Q0QwQ0RGRTVFNTRCNTdCNUMyNi5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMi8zQzIxOTI2M0YyNkI5OUUyREIzNzVDRDBDREZFNUU1 NEI1N0I1QzI2LmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvUE5JLzEvM0MyMTkyNjNGMjZCOTlFMkRC Mzc1Q0QwQ0RGRTVFNTRCNTdCNUMyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAFNrX9AqMuiAsgxXIYc2 LQ0a+G9BgJ/cAU0Ed1Qvbo/OMFqeFpfUtYOJd4Z4L27eKWA20cE+AY+pPCUkwqhL Ro+HvkjN7a2CvPsz+ONhN84j+bTR8XDsInGr9iCA/oqYFpUHKhZQ/ZYhGKbvEPT2 BsIVZWlfOMqIFqnAJUiHbaUo8xmJBUmH5/lVsKlGgI0Kc/1MBmADjkwjIdheRAfv p43TYcb8snZxVfMWfJargvXHe79NVF8M9KPNETaTXfDVRm94u5WZidIiUSXpcPs2 DJ4sigAX102WYgj+jn6gnJAvev3apXwYIp8aiwPhUtmimo2TNpptffDxpTzAkPWH aO0= -----END CERTIFICATE-----Generated at Mon Oct 26 04:00:58 2026 by rpki-client