$ rpki-client -vvf rpkica.twnic.tw/rpki/SONET/0/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.mft File: 3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.mft (raw, json) Hash identifier: w8eaZqhiCpJG3mqrcpgKunJsthAP7OOCf0UTrf/80xE= Subject key identifier: 3B:72:1A:81:E4:F9:76:4F:D5:B5:EE:2E:D8:7B:72:AC:58:C2:6C:83 Authority key identifier: 3F:6D:33:C9:B3:9C:FC:95:0A:2D:3D:BC:78:13:1E:1A:AF:8C:C8:EF Certificate issuer: /CN=3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF Certificate serial: 43174DDDAD1725FC5CDC16E1034BC9C7040F0DBB Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.cer Subject info access: rsync://rpkica.twnic.tw/rpki/SONET/0/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.mft Manifest number: 97 Signing time: Sat 15 Aug 2026 04:04:18 +0000 Manifest this update: Sat 15 Aug 2026 03:59:18 +0000 Manifest next update: Sun 16 Aug 2026 07:39:18 +0000 Files and hashes: 1: 3231392e38352e302e302f31362d3234203d3e203138313832.roa (hash: TkTwJY6tgXdxY0w+yf0JfiJDrdGZLKSEjlzpI3ieJUU=) 2: 32372e3130352e302e302f31362d3234203d3e203138313832.roa (hash: LmAW7PeQcegNvt2M9HNQbyVlYetXrEvSkZVhVCt+ooY=) 3: 36312e36342e36342e302f31382d3234203d3e203138313832.roa (hash: ZufTl96QJSTGjjHHnlV902JYYFFNTIDFxh070LDkULs=) 4: 33392e312e36342e302f32302d3234203d3e2039393232.roa (hash: juMnZBysyILQxgKPuDDStLHZSQ2rmujkQS4MrnwwJ/s=) 5: 33392e312e302e302f32302d3234203d3e2039393232.roa (hash: XsN+8OXikSiKwT554Z/8JtJMRKlDNFZ1zHxkg1sQLrI=) 6: 33392e312e31362e302f32302d3234203d3e2039393232.roa (hash: o5tck8QLFY02tn9jNvUElQeuTpHy+ammIuF39TN/Cn4=) 7: 36312e35362e3132382e302f31392d3234203d3e203138313832.roa (hash: Wz4YbIAlDY3Rql9HeEh2BYj6+M1ftVPyXgPvQ2mi8EE=) 8: 3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.crl (hash: GhHGFLd62VpY8K7XDPZyTXuW1omB1JpyYbI6DBpDIeY=) 9: 33392e312e302e302f31362d3234203d3e203138313832.roa (hash: CffvCFfDEQybZwp62g5aXFZex+pvcH1gSZG/H/2FRO0=) 10: 33392e312e34342e302f32342d3234203d3e2039393232.roa (hash: dh03y3MeArVsb+oESUBRNDxrsrn5jbUmgM4ZXBS0tXU=) 11: 33392e312e39362e302f32302d3234203d3e203138343139.roa (hash: W4A9R2ruP8BpTxaCGm9udnAE3yQmyw/+pOzjhpIfz0Y=) 12: 33392e312e34382e302f32302d3234203d3e2039393232.roa (hash: TTEoeJ1Nt73LCduyQM6y6wzx3+jdUSQumP9bhes2+UY=) 13: 33392e312e33322e302f32312d3234203d3e2039393232.roa (hash: VNQcRXeOE/j/rdkFQwcA1LclvGgGVBSj6YxVH+Y+B5E=) 14: 36312e36342e3132382e302f31372d3234203d3e203138313832.roa (hash: AP04YgE4U4X0DbCKpFBdjCNZlauxNQuycSDnxfq2LBo=) 15: 33392e312e34362e302f32342d3234203d3e2039393232.roa (hash: onwq6khytNt8j9JeiESYQPMZkrctbzkf2UmQhqWpjYw=) 16: 33392e312e34372e302f32342d3234203d3e2039393232.roa (hash: Drtv5JpDCKBUTLlwm2QdYijdfjd//4f1UxcFzmvf4Yg=) 17: 323430343a38303a3a2f32382d3438203d3e203138313832.roa (hash: gD1x4xXT4Z6eEJ+bwB2oDJNQCUbNjWpPyKuQClgUoNQ=) 18: 33392e312e34302e302f32322d3234203d3e2039393232.roa (hash: z5CRvkmrV5KJFcdljtPbVmXZST0Ame/3ck3rEFg8aGM=) 19: 32372e3130352e38322e302f32342d3234203d3e203332373837.roa (hash: 1sg7Wk2e/ZdonH5PhiuzAv6jLByDCAyoVpPFtRuPk6A=) 20: 3231392e38342e302e302f31362d3234203d3e203138313832.roa (hash: 8fiqTkiu9MOMh1suF5MiCOJuDwIsVQ34W7YS4b6Ylb8=) 21: 36312e36322e302e302f31362d3234203d3e203138313832.roa (hash: ifIFQrYUhM297jse0mQ1w+HqkUSGHCWju3weIN7aUQs=) 22: 33392e312e34352e302f32342d3234203d3e2039393232.roa (hash: ryqYKYb9ZEnNDprKt9KNFJe6hMX8qggWXnAtJIFQzic=) 23: 32372e3130352e3230362e302f32342d3234203d3e203435343734.roa (hash: 9Cuads8Xj/H3SUpgMMXmElqrysGMLgLQcPn8+WPxZaA=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/SONET/0/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.crl rsync://rpkica.twnic.tw/rpki/SONET/0/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 16 Aug 2026 03:24:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:17:4d:dd:ad:17:25:fc:5c:dc:16:e1:03:4b:c9:c7:04:0f:0d:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF Validity Not Before: Aug 15 03:59:18 2026 GMT Not After : Aug 16 07:39:18 2026 GMT Subject: CN=3B721A81E4F9764FD5B5EE2ED87B72AC58C26C83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a0:8e:d9:1f:0b:38:6e:a6:ef:ca:67:f1:cf: fc:35:e8:d4:96:da:ba:8c:c3:e4:9e:26:52:de:d2: 67:ef:d5:ee:bd:93:c0:61:f5:d8:29:b6:d6:83:45: da:ed:5c:f6:4e:3f:02:5a:3e:5c:03:3d:24:c2:78: a2:a5:da:96:0d:f5:f4:0e:8e:d7:3f:40:af:64:b2: 51:f6:d5:ec:19:15:43:d5:a1:c4:e3:58:32:a9:7c: 97:bc:29:43:bf:e2:ef:11:b9:c0:0a:db:58:74:83: c9:7d:b9:ab:27:91:88:1f:88:24:e7:e8:65:70:39: 2a:70:67:14:c3:12:66:29:d6:72:ae:5e:5f:b7:3f: 54:2e:87:22:86:17:30:2b:04:83:bf:cd:b0:2a:1a: 5a:e4:20:49:c0:36:31:8c:2a:bb:fa:15:e4:b8:e9: 69:09:bc:a3:6b:77:42:b2:c6:fc:b5:90:5e:f6:c9: 29:c0:f7:3f:6f:bd:2b:da:3f:c2:93:d6:6d:59:48: d7:68:49:56:6d:94:51:78:c2:7b:3f:e7:0e:cd:e0: 3a:5e:a4:a4:eb:84:51:e8:91:f0:35:8a:4b:8e:5e: 18:6e:68:0b:90:6b:32:fb:d0:fa:6b:a3:ee:1a:3b: 95:48:30:7f:9e:3d:c9:85:67:62:0b:53:4e:c6:6f: e5:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:72:1A:81:E4:F9:76:4F:D5:B5:EE:2E:D8:7B:72:AC:58:C2:6C:83 X509v3 Authority Key Identifier: keyid:3F:6D:33:C9:B3:9C:FC:95:0A:2D:3D:BC:78:13:1E:1A:AF:8C:C8:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/SONET/0/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SONET/0/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:e4:b1:55:6c:9e:a7:6f:bf:60:b5:46:71:d9:f3:5e:fe:f9: 15:a8:22:9b:bb:fe:ee:83:08:25:49:51:91:8f:51:45:ad:7f: 26:81:c5:90:35:90:26:07:c0:0f:37:35:e0:d4:e5:44:d9:d0: d9:0f:8e:28:2c:1f:7a:12:3f:42:a0:e8:8b:87:97:8f:ec:4c: e2:98:01:16:6f:53:d9:97:55:75:0f:65:f3:2c:ee:e9:6c:54: ec:25:00:f6:48:56:fe:6c:86:d5:d5:22:41:4e:f6:45:09:0b: 98:57:65:46:24:62:f0:6c:20:ef:b2:2d:f3:7b:c4:7b:c1:9f: 1c:87:0c:75:eb:43:aa:04:12:1a:dc:7c:9e:e2:f8:f1:b7:a5: 2f:99:f5:64:26:fb:2b:ee:50:e3:16:48:44:16:92:88:5d:26: 5a:71:66:03:78:7e:15:d1:61:60:16:e3:95:1a:ce:c9:7b:7c: ba:10:cc:d2:95:0e:ee:06:aa:06:04:ad:e2:04:51:68:b8:0c: 96:d9:1a:8f:b6:62:7f:09:69:7d:b0:74:64:9c:00:9c:30:0f: 5f:75:73:2a:1b:88:0e:79:fd:32:ec:14:6c:69:ce:80:c2:ec: a3:d1:ee:0a:bd:9e:8f:cd:6d:a2:37:0f:ed:1c:70:ff:80:d5: a7:4e:fd:14 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUQxdN3a0XJfxc3BbhA0vJxwQPDbswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Y2RDMzQzlCMzlDRkM5NTBBMkQzREJDNzgxMzFFMUFB RjhDQzhFRjAeFw0yNjA4MTUwMzU5MThaFw0yNjA4MTYwNzM5MThaMDMxMTAvBgNV BAMTKDNCNzIxQTgxRTRGOTc2NEZENUI1RUUyRUQ4N0I3MkFDNThDMjZDODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2oI7ZHws4bqbvymfxz/w16NSW 2rqMw+SeJlLe0mfv1e69k8Bh9dgpttaDRdrtXPZOPwJaPlwDPSTCeKKl2pYN9fQO jtc/QK9kslH21ewZFUPVocTjWDKpfJe8KUO/4u8RucAK21h0g8l9uasnkYgfiCTn 6GVwOSpwZxTDEmYp1nKuXl+3P1QuhyKGFzArBIO/zbAqGlrkIEnANjGMKrv6FeS4 6WkJvKNrd0Kyxvy1kF72ySnA9z9vvSvaP8KT1m1ZSNdoSVZtlFF4wns/5w7N4Dpe pKTrhFHokfA1ikuOXhhuaAuQazL70Ppro+4aO5VIMH+ePcmFZ2ILU07Gb+UJAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUO3IageT5dk/Vte4u2HtyrFjCbIMwHwYDVR0j BBgwFoAUP20zybOc/JUKLT28eBMeGq+MyO8wDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU09ORVQv MC8zRjZEMzNDOUIzOUNGQzk1MEEyRDNEQkM3ODEzMUUxQUFGOENDOEVGLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzNGNkQzM0M5QjM5Q0ZDOTUwQTJEM0RCQzc4MTMx RTFBQUY4Q0M4RUYuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9TT05FVC8wLzNGNkQzM0M5QjM5Q0ZD OTUwQTJEM0RCQzc4MTMxRTFBQUY4Q0M4RUYubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAn5LFVbJ6nb79g tUZx2fNe/vkVqCKbu/7ugwglSVGRj1FFrX8mgcWQNZAmB8APNzXg1OVE2dDZD44o LB96Ej9CoOiLh5eP7EzimAEWb1PZl1V1D2XzLO7pbFTsJQD2SFb+bIbV1SJBTvZF CQuYV2VGJGLwbCDvsi3ze8R7wZ8chwx160OqBBIa3Hye4vjxt6UvmfVkJvsr7lDj FkhEFpKIXSZacWYDeH4V0WFgFuOVGs7Je3y6EMzSlQ7uBqoGBK3iBFFouAyW2RqP tmJ/CWl9sHRknACcMA9fdXMqG4gOef0y7BRsac6Awuyj0e4KvZ6PzW2iNw/tHHD/ gNWnTv0U -----END CERTIFICATE-----Generated at Sat Aug 15 05:21:31 2026 by rpki-client