$ rpki-client -vvvf rpkica.twnic.tw/rpki/STW/0/2963CB623A578334B7033062B58BFED2DC07BB04.mft File: 2963CB623A578334B7033062B58BFED2DC07BB04.mft (raw, json) Hash identifier: 3XlemYgcpJcHpThOxHSDNZ0JcP/q3s72ORmLqkAhj/Y= Subject key identifier: 4E:BB:04:4C:B2:06:C3:79:43:00:97:85:A3:D7:A3:00:9E:44:36:4D Authority key identifier: 29:63:CB:62:3A:57:83:34:B7:03:30:62:B5:8B:FE:D2:DC:07:BB:04 Certificate issuer: /CN=2963CB623A578334B7033062B58BFED2DC07BB04 Certificate serial: 6BE423231B6C5548B98DD236CC147970B41AE3F2 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2963CB623A578334B7033062B58BFED2DC07BB04.cer Subject info access: rsync://rpkica.twnic.tw/rpki/STW/0/2963CB623A578334B7033062B58BFED2DC07BB04.mft Manifest number: C4 Signing time: Sat 03 Oct 2026 15:40:50 +0000 Manifest this update: Sat 03 Oct 2026 15:35:50 +0000 Manifest next update: Sun 04 Oct 2026 16:06:50 +0000 Files and hashes: 1: 2963CB623A578334B7033062B58BFED2DC07BB04.crl (hash: TdIPiKWxtnyIbhpL9wsO8XTnKa3UCi0MLn48wQZ7zoc=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/STW/0/2963CB623A578334B7033062B58BFED2DC07BB04.crl rsync://rpkica.twnic.tw/rpki/STW/0/2963CB623A578334B7033062B58BFED2DC07BB04.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2963CB623A578334B7033062B58BFED2DC07BB04.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 16:06:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:e4:23:23:1b:6c:55:48:b9:8d:d2:36:cc:14:79:70:b4:1a:e3:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2963CB623A578334B7033062B58BFED2DC07BB04 Validity Not Before: Oct 3 15:35:50 2026 GMT Not After : Oct 4 16:06:50 2026 GMT Subject: CN=4EBB044CB206C37943009785A3D7A3009E44364D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0e:0f:a1:2a:0f:62:5f:93:52:ab:89:17:32: 50:3d:d3:05:be:4d:f6:8d:81:6d:a0:28:5a:4d:39: e2:48:0c:54:2d:e5:8c:5b:cd:81:89:29:f3:cc:97: 03:7c:97:be:45:40:8d:d5:e0:75:e0:ee:69:88:93: 88:c0:19:0a:49:6c:5e:08:b5:0c:17:d5:b9:f4:a5: 73:1f:e6:4f:a1:45:f7:99:35:df:cf:93:48:24:7c: 0d:28:36:cd:28:e4:23:52:8b:2e:55:30:bd:6d:7a: bf:9a:b7:a4:00:4e:a7:cf:3e:7c:29:ca:45:ff:2a: 73:f8:a5:53:8d:1d:c9:07:93:93:83:a1:67:bf:9a: db:17:b0:bb:e2:3a:e9:3b:f1:09:8a:7f:5b:04:64: d0:9f:66:8e:6c:8e:ef:cc:7b:35:d0:02:b4:5d:b1: c2:ad:e5:e8:2f:74:10:e1:b2:e2:30:c2:d6:3f:15: c2:f5:64:0c:09:c5:f9:e2:08:12:f5:c1:28:ce:8c: 57:cc:a8:a5:8b:97:c6:e5:d9:ee:f2:f6:ed:a5:5f: 35:18:f7:09:9d:74:fd:b7:c1:60:0d:41:82:a9:41: ae:6e:b6:5d:9c:5a:d1:e7:fc:25:20:af:aa:47:b3: ca:b6:b4:a9:90:f1:f0:06:1d:f1:ac:f4:cd:04:f3: 53:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:BB:04:4C:B2:06:C3:79:43:00:97:85:A3:D7:A3:00:9E:44:36:4D X509v3 Authority Key Identifier: keyid:29:63:CB:62:3A:57:83:34:B7:03:30:62:B5:8B:FE:D2:DC:07:BB:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/STW/0/2963CB623A578334B7033062B58BFED2DC07BB04.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2963CB623A578334B7033062B58BFED2DC07BB04.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/STW/0/2963CB623A578334B7033062B58BFED2DC07BB04.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:63:f4:ee:bc:4d:e8:d7:23:fd:ed:28:a8:87:bf:cd:5c:19: 4d:cf:91:fc:81:39:74:f9:8d:08:0f:ed:c4:22:21:c4:3a:50: 52:33:aa:0e:82:9b:92:49:a6:53:a6:e2:b0:05:94:51:a0:b8: a8:b0:60:8e:39:48:4b:53:0b:e6:a1:a2:50:c9:db:b1:f2:28: a9:a6:a9:30:56:14:63:03:2e:c6:fc:ad:11:4e:8c:da:3a:ad: 83:1c:ef:60:65:23:dd:5a:0d:09:df:78:fd:2e:45:e6:64:02: 9f:30:ca:69:62:f2:f2:77:41:af:03:84:ea:af:81:62:43:fa: f0:88:71:3b:7f:f5:68:33:da:05:73:a3:ab:44:fb:bc:8c:3c: af:fd:1f:87:d4:51:e2:e6:22:8b:5c:3a:9f:f7:04:22:78:c5: 9d:d5:ba:66:3d:32:fe:62:8b:93:5f:10:23:7b:a1:a8:ad:05: d3:e8:8d:60:5d:bb:07:09:50:cc:ce:12:64:79:9f:a1:45:57: 3a:50:e7:11:17:fd:02:77:c2:a0:95:24:16:ac:bc:1a:27:b6: 3a:6d:91:5e:70:fc:dc:ce:39:02:9c:66:38:a0:98:9c:2c:ba: e6:8c:2f:a2:ea:93:ec:52:23:7c:92:46:d8:5d:e4:13:1c:6c: a0:f0:74:dd -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUa+QjIxtsVUi5jdI2zBR5cLQa4/IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk2M0NCNjIzQTU3ODMzNEI3MDMzMDYyQjU4QkZFRDJE QzA3QkIwNDAeFw0yNjEwMDMxNTM1NTBaFw0yNjEwMDQxNjA2NTBaMDMxMTAvBgNV BAMTKDRFQkIwNDRDQjIwNkMzNzk0MzAwOTc4NUEzRDdBMzAwOUU0NDM2NEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2Dg+hKg9iX5NSq4kXMlA90wW+ TfaNgW2gKFpNOeJIDFQt5YxbzYGJKfPMlwN8l75FQI3V4HXg7mmIk4jAGQpJbF4I tQwX1bn0pXMf5k+hRfeZNd/Pk0gkfA0oNs0o5CNSiy5VML1ter+at6QATqfPPnwp ykX/KnP4pVONHckHk5ODoWe/mtsXsLviOuk78QmKf1sEZNCfZo5sju/MezXQArRd scKt5egvdBDhsuIwwtY/FcL1ZAwJxfniCBL1wSjOjFfMqKWLl8bl2e7y9u2lXzUY 9wmddP23wWANQYKpQa5utl2cWtHn/CUgr6pHs8q2tKmQ8fAGHfGs9M0E81O9AgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUTrsETLIGw3lDAJeFo9ejAJ5ENk0wHwYDVR0j BBgwFoAUKWPLYjpXgzS3AzBitYv+0twHuwQwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU1RXLzAv Mjk2M0NCNjIzQTU3ODMzNEI3MDMzMDYyQjU4QkZFRDJEQzA3QkIwNC5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS8yOTYzQ0I2MjNBNTc4MzM0QjcwMzMwNjJCNThCRkVE MkRDMDdCQjA0LmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU1RXLzAvMjk2M0NCNjIzQTU3ODMzNEI3 MDMzMDYyQjU4QkZFRDJEQzA3QkIwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBADpj9O68TejXI/3tKKiH v81cGU3PkfyBOXT5jQgP7cQiIcQ6UFIzqg6Cm5JJplOm4rAFlFGguKiwYI45SEtT C+aholDJ27HyKKmmqTBWFGMDLsb8rRFOjNo6rYMc72BlI91aDQnfeP0uReZkAp8w ymli8vJ3Qa8DhOqvgWJD+vCIcTt/9Wgz2gVzo6tE+7yMPK/9H4fUUeLmIotcOp/3 BCJ4xZ3VumY9Mv5ii5NfECN7oaitBdPojWBduwcJUMzOEmR5n6FFVzpQ5xEX/QJ3 wqCVJBasvBontjptkV5w/NzOOQKcZjigmJwsuuaML6Lqk+xSI3ySRthd5BMcbKDw dN0= -----END CERTIFICATE-----Generated at Sun Oct 4 07:04:03 2026 by rpki-client