$ rpki-client -vvvf rpkica.twnic.tw/rpki/SONET/0/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.mft File: 3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.mft (raw, json) Hash identifier: 8GTwLYZNV6XmOGSiiO44shwSct8fEhmHvA3udVSqEmE= Subject key identifier: 6B:14:17:21:30:DC:C2:DF:4A:FB:E4:EF:59:7C:11:95:AD:E4:C5:23 Authority key identifier: 3F:6D:33:C9:B3:9C:FC:95:0A:2D:3D:BC:78:13:1E:1A:AF:8C:C8:EF Certificate issuer: /CN=3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF Certificate serial: 4FE91FF96FF6D5A269A7602D3FF239A4F23E7333 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.cer Subject info access: rsync://rpkica.twnic.tw/rpki/SONET/0/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.mft Manifest number: D9 Signing time: Sat 03 Oct 2026 19:26:43 +0000 Manifest this update: Sat 03 Oct 2026 19:21:43 +0000 Manifest next update: Sun 04 Oct 2026 20:05:43 +0000 Files and hashes: 1: 33392e312e34372e302f32342d3234203d3e2039393232.roa (hash: Drtv5JpDCKBUTLlwm2QdYijdfjd//4f1UxcFzmvf4Yg=) 2: 36312e36322e302e302f31362d3234203d3e203138313832.roa (hash: ifIFQrYUhM297jse0mQ1w+HqkUSGHCWju3weIN7aUQs=) 3: 36312e36342e36342e302f31382d3234203d3e203138313832.roa (hash: ZufTl96QJSTGjjHHnlV902JYYFFNTIDFxh070LDkULs=) 4: 33392e312e34362e302f32342d3234203d3e2039393232.roa (hash: onwq6khytNt8j9JeiESYQPMZkrctbzkf2UmQhqWpjYw=) 5: 33392e312e302e302f31362d3234203d3e203138313832.roa (hash: CffvCFfDEQybZwp62g5aXFZex+pvcH1gSZG/H/2FRO0=) 6: 33392e312e31362e302f32302d3234203d3e2039393232.roa (hash: o5tck8QLFY02tn9jNvUElQeuTpHy+ammIuF39TN/Cn4=) 7: 33392e312e39362e302f32302d3234203d3e203138343139.roa (hash: W4A9R2ruP8BpTxaCGm9udnAE3yQmyw/+pOzjhpIfz0Y=) 8: 33392e312e34382e302f32302d3234203d3e2039393232.roa (hash: TTEoeJ1Nt73LCduyQM6y6wzx3+jdUSQumP9bhes2+UY=) 9: 33392e312e33322e302f32312d3234203d3e2039393232.roa (hash: VNQcRXeOE/j/rdkFQwcA1LclvGgGVBSj6YxVH+Y+B5E=) 10: 3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.crl (hash: TW/32CS8DMnX1wHnGLgwkDf7DelYEt/Rs+tS396nScY=) 11: 3231392e38342e302e302f31362d3234203d3e203138313832.roa (hash: 8fiqTkiu9MOMh1suF5MiCOJuDwIsVQ34W7YS4b6Ylb8=) 12: 33392e312e34342e302f32342d3234203d3e2039393232.roa (hash: dh03y3MeArVsb+oESUBRNDxrsrn5jbUmgM4ZXBS0tXU=) 13: 33392e312e36342e302f32302d3234203d3e2039393232.roa (hash: juMnZBysyILQxgKPuDDStLHZSQ2rmujkQS4MrnwwJ/s=) 14: 3231392e38352e302e302f31362d3234203d3e203138313832.roa (hash: TkTwJY6tgXdxY0w+yf0JfiJDrdGZLKSEjlzpI3ieJUU=) 15: 32372e3130352e302e302f31362d3234203d3e203138313832.roa (hash: LmAW7PeQcegNvt2M9HNQbyVlYetXrEvSkZVhVCt+ooY=) 16: 36312e35362e3132382e302f31392d3234203d3e203138313832.roa (hash: Wz4YbIAlDY3Rql9HeEh2BYj6+M1ftVPyXgPvQ2mi8EE=) 17: 33392e312e34352e302f32342d3234203d3e2039393232.roa (hash: ryqYKYb9ZEnNDprKt9KNFJe6hMX8qggWXnAtJIFQzic=) 18: 32372e3130352e38322e302f32342d3234203d3e203332373837.roa (hash: 1sg7Wk2e/ZdonH5PhiuzAv6jLByDCAyoVpPFtRuPk6A=) 19: 32372e3130352e3230362e302f32342d3234203d3e203435343734.roa (hash: 9Cuads8Xj/H3SUpgMMXmElqrysGMLgLQcPn8+WPxZaA=) 20: 33392e312e34302e302f32322d3234203d3e2039393232.roa (hash: z5CRvkmrV5KJFcdljtPbVmXZST0Ame/3ck3rEFg8aGM=) 21: 33392e312e302e302f32302d3234203d3e2039393232.roa (hash: XsN+8OXikSiKwT554Z/8JtJMRKlDNFZ1zHxkg1sQLrI=) 22: 323430343a38303a3a2f32382d3438203d3e203138313832.roa (hash: gD1x4xXT4Z6eEJ+bwB2oDJNQCUbNjWpPyKuQClgUoNQ=) 23: 36312e36342e3132382e302f31372d3234203d3e203138313832.roa (hash: AP04YgE4U4X0DbCKpFBdjCNZlauxNQuycSDnxfq2LBo=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/SONET/0/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.crl rsync://rpkica.twnic.tw/rpki/SONET/0/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 20:05:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:e9:1f:f9:6f:f6:d5:a2:69:a7:60:2d:3f:f2:39:a4:f2:3e:73:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF Validity Not Before: Oct 3 19:21:43 2026 GMT Not After : Oct 4 20:05:43 2026 GMT Subject: CN=6B14172130DCC2DF4AFBE4EF597C1195ADE4C523 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:09:ca:d9:88:82:1c:2c:63:42:7e:d4:33:75: b7:0e:68:e5:f3:8d:90:c5:f5:00:ab:05:c3:4a:57: 1d:39:b9:25:6c:fd:8e:19:f7:ee:38:91:84:5f:59: db:91:5d:fb:4a:e0:64:dd:dc:05:9e:6b:1c:a4:8e: 2d:44:c1:4d:0a:ac:44:99:6a:2e:83:44:3b:6e:a0: 6f:ea:9c:36:68:86:b8:f6:38:a2:4a:c8:25:ec:7c: 8e:05:e1:3c:c8:5c:04:eb:4d:eb:27:49:16:dc:6b: 6a:35:d5:4b:0f:51:59:74:9e:7e:41:16:45:10:69: f3:23:53:e5:bb:42:18:7f:2c:04:49:e3:4c:86:eb: 29:fc:95:c2:f7:6f:9a:71:cb:a7:bf:f0:b1:51:32: c9:c3:5c:0e:b6:d1:69:2c:59:80:eb:b0:e5:e1:8a: e5:0e:2f:48:91:0d:75:c7:f3:f6:d8:1c:0e:75:b1: fd:e4:a6:27:df:07:15:4d:3d:d4:eb:ea:e8:1e:6a: 93:14:0b:1b:68:05:8c:6e:2b:bc:02:0c:4d:ab:db: 3d:e6:31:26:a3:61:b3:24:a5:62:30:e5:8b:ef:90: c7:8f:7f:7c:de:77:da:3c:ce:e5:19:ae:00:8f:db: 2c:a7:f0:ba:ee:7e:7a:78:88:4d:ad:25:83:41:a6: 47:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:14:17:21:30:DC:C2:DF:4A:FB:E4:EF:59:7C:11:95:AD:E4:C5:23 X509v3 Authority Key Identifier: keyid:3F:6D:33:C9:B3:9C:FC:95:0A:2D:3D:BC:78:13:1E:1A:AF:8C:C8:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/SONET/0/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SONET/0/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:9c:e9:bd:af:f0:1e:98:67:d2:c3:26:d6:91:cd:40:62:2e: 11:76:31:50:3b:65:60:94:3d:a2:16:c7:50:85:ad:61:30:73: 5b:73:b4:c7:f6:55:dc:24:a9:93:a6:28:cd:64:7b:d5:fd:ae: ac:6b:77:9b:f8:a7:93:ee:59:f3:0c:da:7f:10:48:df:35:87: 17:8c:d1:f1:e6:ac:ff:b0:ab:4a:fd:62:bc:12:1b:b0:90:cd: d3:16:a3:d4:b5:a9:ba:71:3f:32:dc:f3:3d:0d:69:67:77:db: 1a:44:64:bd:a6:5a:70:fd:d2:c1:b0:cd:99:be:15:54:6a:e7: f9:5f:e1:d0:91:ac:64:d7:80:8d:39:71:59:27:34:54:f0:52: a4:0c:5f:05:3a:99:a4:16:7b:e6:35:49:93:49:2e:fa:e1:c9: 07:a6:a7:cf:67:01:7b:b1:56:bb:82:bb:19:24:8f:d6:59:0d: 9d:60:1b:41:76:a9:50:c9:83:6f:c2:c6:8b:92:11:88:6c:09: 9a:b7:bd:a7:37:80:b5:1b:19:41:d1:1a:86:f8:62:d2:89:f7: 35:23:a4:0a:7a:e8:1f:39:a9:11:91:a1:2e:05:6a:99:42:19: 39:1f:9d:6d:5b:26:6e:74:16:a5:c1:ea:bf:80:93:ca:5a:ae: c3:04:66:20 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUT+kf+W/21aJpp2AtP/I5pPI+czMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Y2RDMzQzlCMzlDRkM5NTBBMkQzREJDNzgxMzFFMUFB RjhDQzhFRjAeFw0yNjEwMDMxOTIxNDNaFw0yNjEwMDQyMDA1NDNaMDMxMTAvBgNV BAMTKDZCMTQxNzIxMzBEQ0MyREY0QUZCRTRFRjU5N0MxMTk1QURFNEM1MjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSCcrZiIIcLGNCftQzdbcOaOXz jZDF9QCrBcNKVx05uSVs/Y4Z9+44kYRfWduRXftK4GTd3AWeaxykji1EwU0KrESZ ai6DRDtuoG/qnDZohrj2OKJKyCXsfI4F4TzIXATrTesnSRbca2o11UsPUVl0nn5B FkUQafMjU+W7Qhh/LARJ40yG6yn8lcL3b5pxy6e/8LFRMsnDXA620WksWYDrsOXh iuUOL0iRDXXH8/bYHA51sf3kpiffBxVNPdTr6ugeapMUCxtoBYxuK7wCDE2r2z3m MSajYbMkpWIw5YvvkMePf3zed9o8zuUZrgCP2yyn8Lrufnp4iE2tJYNBpkcTAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUaxQXITDcwt9K++TvWXwRla3kxSMwHwYDVR0j BBgwFoAUP20zybOc/JUKLT28eBMeGq+MyO8wDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU09ORVQv MC8zRjZEMzNDOUIzOUNGQzk1MEEyRDNEQkM3ODEzMUUxQUFGOENDOEVGLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzNGNkQzM0M5QjM5Q0ZDOTUwQTJEM0RCQzc4MTMx RTFBQUY4Q0M4RUYuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9TT05FVC8wLzNGNkQzM0M5QjM5Q0ZD OTUwQTJEM0RCQzc4MTMxRTFBQUY4Q0M4RUYubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQATnOm9r/AemGfS wybWkc1AYi4RdjFQO2VglD2iFsdQha1hMHNbc7TH9lXcJKmTpijNZHvV/a6sa3eb +KeT7lnzDNp/EEjfNYcXjNHx5qz/sKtK/WK8EhuwkM3TFqPUtam6cT8y3PM9DWln d9saRGS9plpw/dLBsM2ZvhVUauf5X+HQkaxk14CNOXFZJzRU8FKkDF8FOpmkFnvm NUmTSS764ckHpqfPZwF7sVa7grsZJI/WWQ2dYBtBdqlQyYNvwsaLkhGIbAmat72n N4C1GxlB0RqG+GLSifc1I6QKeugfOakRkaEuBWqZQhk5H51tWyZudBalweq/gJPK Wq7DBGYg -----END CERTIFICATE-----Generated at Sun Oct 4 00:47:56 2026 by rpki-client