$ rpki-client -vvf rpkica.twnic.tw/rpki/SONET/0/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.mft File: 3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.mft (raw, json) Hash identifier: 0Y0gjgXo1iOFoXXrPIb7UhtEy/4LaCG6jMIeVbDuJPw= Subject key identifier: EB:7D:08:E1:68:B3:97:1E:8C:4F:30:D5:EA:8F:FF:8E:2D:0A:77:41 Authority key identifier: 3F:6D:33:C9:B3:9C:FC:95:0A:2D:3D:BC:78:13:1E:1A:AF:8C:C8:EF Certificate issuer: /CN=3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF Certificate serial: 35D6ACF0A6099A5C710DCFEFEE92227B080AC8F2 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.cer Subject info access: rsync://rpkica.twnic.tw/rpki/SONET/0/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.mft Manifest number: 19 Signing time: Wed 13 May 2026 04:06:42 +0000 Manifest this update: Wed 13 May 2026 04:01:42 +0000 Manifest next update: Thu 14 May 2026 05:23:42 +0000 Files and hashes: 1: 323430343a38303a3a2f32382d3438203d3e203138313832.roa (hash: gD1x4xXT4Z6eEJ+bwB2oDJNQCUbNjWpPyKuQClgUoNQ=) 2: 32372e3130352e3230362e302f32342d3234203d3e203435343734.roa (hash: 9Cuads8Xj/H3SUpgMMXmElqrysGMLgLQcPn8+WPxZaA=) 3: 36312e35362e3132382e302f31392d3234203d3e203138313832.roa (hash: Wz4YbIAlDY3Rql9HeEh2BYj6+M1ftVPyXgPvQ2mi8EE=) 4: 33392e312e34382e302f32302d3234203d3e2039393232.roa (hash: TTEoeJ1Nt73LCduyQM6y6wzx3+jdUSQumP9bhes2+UY=) 5: 33392e312e34372e302f32342d3234203d3e2039393232.roa (hash: Drtv5JpDCKBUTLlwm2QdYijdfjd//4f1UxcFzmvf4Yg=) 6: 36312e36342e3132382e302f31372d3234203d3e203138313832.roa (hash: AP04YgE4U4X0DbCKpFBdjCNZlauxNQuycSDnxfq2LBo=) 7: 32372e3130352e38322e302f32342d3234203d3e203332373837.roa (hash: 1sg7Wk2e/ZdonH5PhiuzAv6jLByDCAyoVpPFtRuPk6A=) 8: 33392e312e34352e302f32342d3234203d3e2039393232.roa (hash: ryqYKYb9ZEnNDprKt9KNFJe6hMX8qggWXnAtJIFQzic=) 9: 33392e312e302e302f31362d3234203d3e203138313832.roa (hash: CffvCFfDEQybZwp62g5aXFZex+pvcH1gSZG/H/2FRO0=) 10: 36312e36322e302e302f31362d3234203d3e203138313832.roa (hash: ifIFQrYUhM297jse0mQ1w+HqkUSGHCWju3weIN7aUQs=) 11: 33392e312e36342e302f32302d3234203d3e2039393232.roa (hash: juMnZBysyILQxgKPuDDStLHZSQ2rmujkQS4MrnwwJ/s=) 12: 33392e312e34362e302f32342d3234203d3e2039393232.roa (hash: onwq6khytNt8j9JeiESYQPMZkrctbzkf2UmQhqWpjYw=) 13: 36312e36342e36342e302f31382d3234203d3e203138313832.roa (hash: ZufTl96QJSTGjjHHnlV902JYYFFNTIDFxh070LDkULs=) 14: 33392e312e34342e302f32342d3234203d3e2039393232.roa (hash: dh03y3MeArVsb+oESUBRNDxrsrn5jbUmgM4ZXBS0tXU=) 15: 33392e312e33322e302f32312d3234203d3e2039393232.roa (hash: VNQcRXeOE/j/rdkFQwcA1LclvGgGVBSj6YxVH+Y+B5E=) 16: 32372e3130352e302e302f31362d3234203d3e203138313832.roa (hash: LmAW7PeQcegNvt2M9HNQbyVlYetXrEvSkZVhVCt+ooY=) 17: 33392e312e39362e302f32302d3234203d3e203138343139.roa (hash: W4A9R2ruP8BpTxaCGm9udnAE3yQmyw/+pOzjhpIfz0Y=) 18: 33392e312e302e302f32302d3234203d3e2039393232.roa (hash: XsN+8OXikSiKwT554Z/8JtJMRKlDNFZ1zHxkg1sQLrI=) 19: 33392e312e34302e302f32322d3234203d3e2039393232.roa (hash: z5CRvkmrV5KJFcdljtPbVmXZST0Ame/3ck3rEFg8aGM=) 20: 3231392e38342e302e302f31362d3234203d3e203138313832.roa (hash: 8fiqTkiu9MOMh1suF5MiCOJuDwIsVQ34W7YS4b6Ylb8=) 21: 3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.crl (hash: v224Cs3ajL3bd2nNB9z2EA2RrcEteNoLpaCvMTBN2DQ=) 22: 33392e312e31362e302f32302d3234203d3e2039393232.roa (hash: o5tck8QLFY02tn9jNvUElQeuTpHy+ammIuF39TN/Cn4=) 23: 3231392e38352e302e302f31362d3234203d3e203138313832.roa (hash: TkTwJY6tgXdxY0w+yf0JfiJDrdGZLKSEjlzpI3ieJUU=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/SONET/0/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.crl rsync://rpkica.twnic.tw/rpki/SONET/0/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 05:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:d6:ac:f0:a6:09:9a:5c:71:0d:cf:ef:ee:92:22:7b:08:0a:c8:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF Validity Not Before: May 13 04:01:42 2026 GMT Not After : May 14 05:23:42 2026 GMT Subject: CN=EB7D08E168B3971E8C4F30D5EA8FFF8E2D0A7741 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:98:0d:d8:aa:07:70:d8:d7:08:8e:27:80:00: 0a:18:b5:1a:97:ca:a3:77:d1:b5:3b:48:2b:62:b4: 9b:c1:0e:91:3e:c3:b2:8d:cd:6b:ee:7d:e9:ce:5e: 78:a4:73:75:a5:98:2b:0b:2a:51:7e:a5:47:a8:73: be:21:dd:ef:7a:1c:72:9c:03:72:88:68:17:7f:df: 63:6c:de:69:ea:79:fc:20:60:6e:d6:42:69:41:ae: 79:5c:92:44:44:46:57:22:15:51:49:a9:11:0f:82: 4a:39:cd:1c:24:ec:4b:b7:a3:03:5c:5f:88:54:b3: 21:8a:fe:a0:1b:ed:4c:1e:94:33:12:17:7f:ce:f9: 17:7d:a9:1f:cf:75:7d:55:4e:4d:7e:1c:7b:42:cc: f6:fa:1a:db:1d:c9:82:12:78:60:2c:31:71:61:43: ab:34:b3:92:d8:43:9d:b7:ec:b1:e0:31:15:6f:43: 80:42:05:88:0f:52:3d:79:2b:db:55:af:cd:90:bb: c7:54:9b:17:94:33:f0:5e:10:55:d0:77:df:ea:b9: 10:6b:88:72:4e:69:3e:9a:0e:ac:d0:a3:cd:6a:82: ad:52:11:7b:3c:33:2e:1e:49:0a:e0:50:7f:a2:5f: f6:56:5f:33:a7:ff:e9:d4:fd:b5:9a:ae:15:cf:e9: 27:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:7D:08:E1:68:B3:97:1E:8C:4F:30:D5:EA:8F:FF:8E:2D:0A:77:41 X509v3 Authority Key Identifier: keyid:3F:6D:33:C9:B3:9C:FC:95:0A:2D:3D:BC:78:13:1E:1A:AF:8C:C8:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/SONET/0/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SONET/0/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:fe:93:82:a2:c0:8d:0e:0c:0d:c3:f9:d1:ca:2d:fd:16:f3: ba:52:9a:fd:3d:e5:01:2d:a3:2f:d9:00:31:b7:34:0a:a8:ca: e6:95:cb:cb:f6:3d:57:76:82:28:0c:52:3d:4a:23:4f:dc:33: 76:85:f7:8b:51:94:c6:dd:2f:ca:51:e6:66:a1:82:34:50:0e: 9f:be:c4:9d:cf:46:30:bd:5a:98:30:82:84:ea:11:08:92:40: 62:82:1c:9c:70:a6:be:82:c9:2e:dd:c1:1d:26:a6:1c:06:29: 41:bc:3d:e4:be:58:c4:4b:eb:8c:ae:38:25:33:4c:29:69:a5: 13:b1:96:9f:ac:b4:8e:e5:12:0c:01:53:aa:87:00:9f:c6:08: 30:98:e8:43:df:c3:a2:ee:81:b7:a1:e3:24:01:c2:57:5c:23: fa:44:a1:03:4d:57:08:6b:1e:01:0c:80:fe:29:b1:2d:7c:90: 86:0b:56:0f:de:84:5e:82:8c:01:8a:0e:36:07:2e:a6:aa:08: 90:3e:9c:ae:6f:33:2c:6f:c0:4c:d1:d2:0b:63:e5:98:f6:76: 24:92:76:a7:25:28:0f:e1:cb:72:b4:ea:14:aa:22:b8:6d:16: 5d:35:3e:7b:6f:51:98:ed:29:d0:3d:b2:17:6f:07:23:dc:70: 0e:86:93:8f -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUNdas8KYJmlxxDc/v7pIiewgKyPIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Y2RDMzQzlCMzlDRkM5NTBBMkQzREJDNzgxMzFFMUFB RjhDQzhFRjAeFw0yNjA1MTMwNDAxNDJaFw0yNjA1MTQwNTIzNDJaMDMxMTAvBgNV BAMTKEVCN0QwOEUxNjhCMzk3MUU4QzRGMzBENUVBOEZGRjhFMkQwQTc3NDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6mA3Yqgdw2NcIjieAAAoYtRqX yqN30bU7SCtitJvBDpE+w7KNzWvufenOXnikc3WlmCsLKlF+pUeoc74h3e96HHKc A3KIaBd/32Ns3mnqefwgYG7WQmlBrnlckkRERlciFVFJqREPgko5zRwk7Eu3owNc X4hUsyGK/qAb7UwelDMSF3/O+Rd9qR/PdX1VTk1+HHtCzPb6GtsdyYISeGAsMXFh Q6s0s5LYQ5237LHgMRVvQ4BCBYgPUj15K9tVr82Qu8dUmxeUM/BeEFXQd9/quRBr iHJOaT6aDqzQo81qgq1SEXs8My4eSQrgUH+iX/ZWXzOn/+nU/bWarhXP6SeNAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQU630I4Wizlx6MTzDV6o//ji0Kd0EwHwYDVR0j BBgwFoAUP20zybOc/JUKLT28eBMeGq+MyO8wDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU09ORVQv MC8zRjZEMzNDOUIzOUNGQzk1MEEyRDNEQkM3ODEzMUUxQUFGOENDOEVGLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzNGNkQzM0M5QjM5Q0ZDOTUwQTJEM0RCQzc4MTMx RTFBQUY4Q0M4RUYuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9TT05FVC8wLzNGNkQzM0M5QjM5Q0ZD OTUwQTJEM0RCQzc4MTMxRTFBQUY4Q0M4RUYubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBn/pOCosCNDgwN w/nRyi39FvO6Upr9PeUBLaMv2QAxtzQKqMrmlcvL9j1XdoIoDFI9SiNP3DN2hfeL UZTG3S/KUeZmoYI0UA6fvsSdz0YwvVqYMIKE6hEIkkBighyccKa+gsku3cEdJqYc BilBvD3kvljES+uMrjglM0wpaaUTsZafrLSO5RIMAVOqhwCfxggwmOhD38Oi7oG3 oeMkAcJXXCP6RKEDTVcIax4BDID+KbEtfJCGC1YP3oRegowBig42By6mqgiQPpyu bzMsb8BM0dILY+WY9nYkknanJSgP4ctytOoUqiK4bRZdNT57b1GY7SnQPbIXbwcj 3HAOhpOP -----END CERTIFICATE-----Generated at Wed May 13 20:35:57 2026 by rpki-client