$ rpki-client -vvvf rpkica.twnic.tw/rpki/SHINETEL/0/DF363D7461650156F76A26CBA12EB3420DB3D849.mft File: DF363D7461650156F76A26CBA12EB3420DB3D849.mft (raw, json) Hash identifier: RAe1kak/d25AyLE4LUaehT89J1K/tsNlN65PsZut1JI= Subject key identifier: F3:37:2B:C2:80:A9:C6:22:BC:BA:3F:B7:FA:08:E0:2D:26:53:D4:72 Authority key identifier: DF:36:3D:74:61:65:01:56:F7:6A:26:CB:A1:2E:B3:42:0D:B3:D8:49 Certificate issuer: /CN=DF363D7461650156F76A26CBA12EB3420DB3D849 Certificate serial: 593BD61599AAB871182312841EF83D60A2E83773 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DF363D7461650156F76A26CBA12EB3420DB3D849.cer Subject info access: rsync://rpkica.twnic.tw/rpki/SHINETEL/0/DF363D7461650156F76A26CBA12EB3420DB3D849.mft Manifest number: C2 Signing time: Fri 02 Oct 2026 17:33:25 +0000 Manifest this update: Fri 02 Oct 2026 17:28:25 +0000 Manifest next update: Sat 03 Oct 2026 19:26:25 +0000 Files and hashes: 1: DF363D7461650156F76A26CBA12EB3420DB3D849.crl (hash: 6PEE+Wrz4mQ9TL7K8ifXnkhWJH9602hUnQz9GMkUuYM=) 2: 3130332e3131362e31342e302f32332d3234203d3e203633393032.roa (hash: ngTeNrAtpPC35YX71ipwovbw5e/8zCnuwIl4yirC2Qs=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/SHINETEL/0/DF363D7461650156F76A26CBA12EB3420DB3D849.crl rsync://rpkica.twnic.tw/rpki/SHINETEL/0/DF363D7461650156F76A26CBA12EB3420DB3D849.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DF363D7461650156F76A26CBA12EB3420DB3D849.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 19:26:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:3b:d6:15:99:aa:b8:71:18:23:12:84:1e:f8:3d:60:a2:e8:37:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF363D7461650156F76A26CBA12EB3420DB3D849 Validity Not Before: Oct 2 17:28:25 2026 GMT Not After : Oct 3 19:26:25 2026 GMT Subject: CN=F3372BC280A9C622BCBA3FB7FA08E02D2653D472 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:30:ec:f5:26:36:c5:ec:04:8b:85:30:16:cf: d9:4c:74:dc:f0:d4:f4:6f:73:6b:d6:0f:3b:73:3c: 14:18:29:80:aa:a4:d9:1c:b6:b5:43:63:72:84:d5: 6d:34:ed:de:c7:7b:12:2b:e7:e3:72:33:35:e5:ec: de:6b:f8:82:f3:23:78:31:cd:0b:c9:90:d9:86:8e: be:93:c0:1f:b7:aa:1f:89:85:42:9f:a7:87:bf:e0: a5:2b:9a:fd:83:4a:37:64:59:ed:90:14:2b:f8:bf: 0f:66:da:e3:ca:6e:46:6c:c7:3d:b8:80:c3:42:18: 93:b0:00:34:6a:e2:a7:2d:61:8b:b8:0c:60:fc:c9: f8:69:b8:45:48:2b:47:2f:d0:9d:b2:0c:6e:46:bf: eb:33:6c:35:29:38:87:4c:f0:25:1d:05:72:f6:78: 7f:6b:7c:15:f2:2e:9c:7d:e3:a6:4a:91:82:4f:98: d7:42:36:ea:94:90:67:74:c4:8d:10:60:72:b6:3e: 00:54:e9:45:18:57:b1:45:cc:a6:ba:e7:56:e6:ae: b5:7e:b3:9f:6f:0b:9b:f0:c2:a4:f1:a5:59:58:a3: b0:70:2f:a7:dd:c6:34:4a:43:de:ad:3d:05:cf:cb: 06:22:71:79:6b:a8:7e:b2:44:22:5f:6a:47:92:fc: c9:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:37:2B:C2:80:A9:C6:22:BC:BA:3F:B7:FA:08:E0:2D:26:53:D4:72 X509v3 Authority Key Identifier: keyid:DF:36:3D:74:61:65:01:56:F7:6A:26:CB:A1:2E:B3:42:0D:B3:D8:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/SHINETEL/0/DF363D7461650156F76A26CBA12EB3420DB3D849.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DF363D7461650156F76A26CBA12EB3420DB3D849.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SHINETEL/0/DF363D7461650156F76A26CBA12EB3420DB3D849.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:14:da:f8:6c:27:13:67:13:d8:62:c8:ac:e2:49:86:b1:69: 25:9d:bf:9f:e0:ef:93:bd:c5:f2:9c:71:f3:42:05:2b:5a:6b: 12:fc:5b:6f:e1:05:52:e8:75:35:b2:ff:3f:df:fe:f8:1b:3b: 41:49:4c:71:6a:e5:7a:a9:4c:9d:53:de:e6:57:1f:04:65:17: 70:7d:78:52:2a:c4:24:c8:0b:31:ed:06:7f:ff:75:4d:c1:65: ca:1f:bc:f9:96:e6:ce:ed:ac:47:ed:ff:19:30:8f:66:9a:be: d8:c0:f6:67:3d:df:98:15:d2:a3:0e:40:ed:62:e8:54:03:fb: be:4b:fb:63:e5:12:59:e0:4d:83:76:87:f6:a4:63:b6:fc:6d: 92:27:a8:b8:a5:57:20:bd:cf:9c:c5:77:01:23:a2:bf:a2:f3: aa:75:a1:c2:79:be:7f:80:d8:fb:59:1e:a3:87:02:0d:08:66: be:ed:c2:4a:31:0d:5b:2a:8e:75:78:17:3a:e9:17:00:fe:50: 05:8b:2d:13:88:81:8a:9e:6f:d7:25:ed:b1:6e:d7:8a:67:95: 03:97:36:a9:a7:87:51:52:43:6b:7e:14:d1:e0:23:b6:d2:7d: eb:56:84:c4:8b:ad:3b:a5:16:41:e8:cf:cf:ab:cd:3d:49:70: bb:9c:e0:38 -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUWTvWFZmquHEYIxKEHvg9YKLoN3MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREYzNjNENzQ2MTY1MDE1NkY3NkEyNkNCQTEyRUIzNDIw REIzRDg0OTAeFw0yNjEwMDIxNzI4MjVaFw0yNjEwMDMxOTI2MjVaMDMxMTAvBgNV BAMTKEYzMzcyQkMyODBBOUM2MjJCQ0JBM0ZCN0ZBMDhFMDJEMjY1M0Q0NzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdMOz1JjbF7ASLhTAWz9lMdNzw 1PRvc2vWDztzPBQYKYCqpNkctrVDY3KE1W007d7HexIr5+NyMzXl7N5r+ILzI3gx zQvJkNmGjr6TwB+3qh+JhUKfp4e/4KUrmv2DSjdkWe2QFCv4vw9m2uPKbkZsxz24 gMNCGJOwADRq4qctYYu4DGD8yfhpuEVIK0cv0J2yDG5Gv+szbDUpOIdM8CUdBXL2 eH9rfBXyLpx946ZKkYJPmNdCNuqUkGd0xI0QYHK2PgBU6UUYV7FFzKa651bmrrV+ s59vC5vwwqTxpVlYo7BwL6fdxjRKQ96tPQXPywYicXlrqH6yRCJfakeS/Mk7AgMB AAGjggHyMIIB7jAdBgNVHQ4EFgQU8zcrwoCpxiK8uj+3+gjgLSZT1HIwHwYDVR0j BBgwFoAU3zY9dGFlAVb3aibLoS6zQg2z2EkwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0hJTkVU RUwvMC9ERjM2M0Q3NDYxNjUwMTU2Rjc2QTI2Q0JBMTJFQjM0MjBEQjNEODQ5LmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8xL0RGMzYzRDc0NjE2NTAxNTZGNzZBMjZDQkEx MkVCMzQyMERCM0Q4NDkuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9TSElORVRFTC8wL0RGMzYzRDc0 NjE2NTAxNTZGNzZBMjZDQkExMkVCMzQyMERCM0Q4NDkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCnFNr4 bCcTZxPYYsis4kmGsWklnb+f4O+TvcXynHHzQgUrWmsS/Ftv4QVS6HU1sv8/3/74 GztBSUxxauV6qUydU97mVx8EZRdwfXhSKsQkyAsx7QZ//3VNwWXKH7z5lubO7axH 7f8ZMI9mmr7YwPZnPd+YFdKjDkDtYuhUA/u+S/tj5RJZ4E2Ddof2pGO2/G2SJ6i4 pVcgvc+cxXcBI6K/ovOqdaHCeb5/gNj7WR6jhwINCGa+7cJKMQ1bKo51eBc66RcA /lAFiy0TiIGKnm/XJe2xbteKZ5UDlzapp4dRUkNrfhTR4CO20n3rVoTEi607pRZB 6M/Pq809SXC7nOA4 -----END CERTIFICATE-----Generated at Sat Oct 3 11:38:20 2026 by rpki-client