$ rpki-client -vvvf rpkica.twnic.tw/rpki/SYMPHOX/0/B64BDE0841E1E027F1A23036D9C779A108C22EE1.mft File: B64BDE0841E1E027F1A23036D9C779A108C22EE1.mft (raw, json) Hash identifier: 68NFY59/UkO1vt4HtHZLr1ZVAwk0PONFf/uzIP8LHxI= Subject key identifier: 9E:43:C9:AB:09:C1:81:6F:FC:F0:4A:FD:60:65:A0:DE:BD:F6:05:64 Authority key identifier: B6:4B:DE:08:41:E1:E0:27:F1:A2:30:36:D9:C7:79:A1:08:C2:2E:E1 Certificate issuer: /CN=B64BDE0841E1E027F1A23036D9C779A108C22EE1 Certificate serial: 43A4133D5E5814509E8FF1483C4F2B844C8790F0 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B64BDE0841E1E027F1A23036D9C779A108C22EE1.cer Subject info access: rsync://rpkica.twnic.tw/rpki/SYMPHOX/0/B64BDE0841E1E027F1A23036D9C779A108C22EE1.mft Manifest number: C1 Signing time: Thu 01 Oct 2026 20:39:05 +0000 Manifest this update: Thu 01 Oct 2026 20:34:05 +0000 Manifest next update: Fri 02 Oct 2026 22:48:05 +0000 Files and hashes: 1: 3231312e37362e3132382e302f32302d3234203d3e203536313739.roa (hash: lXdw4/lA7p0B+u17xRun5vfo7vWAF9rUjcOVqwT8L6A=) 2: B64BDE0841E1E027F1A23036D9C779A108C22EE1.crl (hash: 8pcUiYsx0gK1iHiw/c7nPw3Lac/W/HVBoDMHZ7gzkx4=) 3: 3231312e37362e3132382e302f32302d3234203d3e2039323136.roa (hash: qP4Uel7t0Zn5tKHqbi9V7FUrZ6MHFXEUK/naBwtrnS4=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/SYMPHOX/0/B64BDE0841E1E027F1A23036D9C779A108C22EE1.crl rsync://rpkica.twnic.tw/rpki/SYMPHOX/0/B64BDE0841E1E027F1A23036D9C779A108C22EE1.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B64BDE0841E1E027F1A23036D9C779A108C22EE1.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 16:56:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:a4:13:3d:5e:58:14:50:9e:8f:f1:48:3c:4f:2b:84:4c:87:90:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B64BDE0841E1E027F1A23036D9C779A108C22EE1 Validity Not Before: Oct 1 20:34:05 2026 GMT Not After : Oct 2 22:48:05 2026 GMT Subject: CN=9E43C9AB09C1816FFCF04AFD6065A0DEBDF60564 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f5:e5:f0:75:cb:4c:a2:e4:57:3f:42:c4:79: c8:e1:c9:8c:f1:9f:9d:2d:09:2c:ef:fc:31:dc:32: e0:ec:5d:2a:b5:81:ba:44:10:19:d9:d1:fa:c0:7e: 62:84:b5:16:c3:72:d6:f0:2e:6d:8d:68:d1:df:63: 37:a0:01:4d:62:95:df:00:aa:4b:63:c3:5e:c5:8f: ee:3a:38:84:2a:23:b2:77:7b:0d:de:8c:e9:52:17: 82:a1:5f:85:c2:f4:53:c0:a2:e0:58:37:eb:fc:6f: 6e:7a:5b:b8:48:ea:5b:09:dd:54:19:01:6e:82:7f: 27:11:a1:26:53:10:80:42:36:65:a1:3d:26:d6:4a: 92:34:68:36:17:63:92:44:fe:10:23:c8:72:71:34: 45:be:f9:85:a7:19:88:61:ea:9e:c9:16:e7:28:7f: 41:f7:5b:90:0f:6b:3f:85:6a:e4:6c:54:87:02:d6: fd:e2:4a:4c:f1:da:fd:41:bf:6c:ad:d9:ec:78:2d: 5b:53:09:32:c9:a7:02:9e:3e:df:76:11:3d:71:ab: b0:6e:45:65:b6:e4:b3:b8:f1:79:b3:39:59:80:52: 56:ec:47:76:19:3e:de:ca:5e:d1:63:89:84:60:1a: 13:67:e7:ae:28:eb:62:07:0c:3b:06:42:91:74:a0: 64:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:43:C9:AB:09:C1:81:6F:FC:F0:4A:FD:60:65:A0:DE:BD:F6:05:64 X509v3 Authority Key Identifier: keyid:B6:4B:DE:08:41:E1:E0:27:F1:A2:30:36:D9:C7:79:A1:08:C2:2E:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/SYMPHOX/0/B64BDE0841E1E027F1A23036D9C779A108C22EE1.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B64BDE0841E1E027F1A23036D9C779A108C22EE1.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SYMPHOX/0/B64BDE0841E1E027F1A23036D9C779A108C22EE1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:0e:0b:39:96:f7:20:79:d8:25:b2:45:5b:09:94:d2:27:bb: ac:88:d0:57:04:ec:b8:13:3d:c7:ba:37:a5:11:e8:bb:11:17: 80:b0:71:00:7f:4b:7c:a0:97:c1:78:83:c5:61:35:d6:99:aa: 0b:46:0f:0a:5d:57:86:44:38:18:f9:1f:2a:96:fd:6b:8c:81: b6:a1:43:98:73:16:1b:d1:d0:c7:e7:f6:1b:31:ff:47:b2:87: 11:e7:1c:41:ec:09:c4:34:07:32:7e:ce:7f:5b:a2:74:5b:c8: dc:ed:6e:85:f5:3a:99:e7:43:8b:47:de:69:b0:2d:c1:7b:ae: 93:f5:14:c4:b7:80:e8:aa:87:10:72:9d:3d:32:ab:b2:da:f5: 76:6c:ee:6b:80:b6:df:23:63:d7:23:24:87:19:ee:2e:0e:f9: 08:c0:65:a6:92:1c:50:d5:9a:15:e2:b4:c9:40:f1:dc:cc:d8: 0f:47:8f:e0:ef:a1:85:27:99:8e:a3:67:ab:45:1b:6c:08:1a: 53:7d:5a:6e:d9:24:9d:e6:cf:ce:56:ea:81:79:79:cd:52:46: 41:d0:c2:c3:63:6e:b3:97:95:a0:a3:8f:c9:6f:87:96:e7:e5: 3a:58:e8:cf:f7:47:34:8a:9b:ca:52:11:cd:f1:72:2b:62:14: 2f:e7:2b:f7 -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIUQ6QTPV5YFFCej/FIPE8rhEyHkPAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY0QkRFMDg0MUUxRTAyN0YxQTIzMDM2RDlDNzc5QTEw OEMyMkVFMTAeFw0yNjEwMDEyMDM0MDVaFw0yNjEwMDIyMjQ4MDVaMDMxMTAvBgNV BAMTKDlFNDNDOUFCMDlDMTgxNkZGQ0YwNEFGRDYwNjVBMERFQkRGNjA1NjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR9eXwdctMouRXP0LEecjhyYzx n50tCSzv/DHcMuDsXSq1gbpEEBnZ0frAfmKEtRbDctbwLm2NaNHfYzegAU1ild8A qktjw17Fj+46OIQqI7J3ew3ejOlSF4KhX4XC9FPAouBYN+v8b256W7hI6lsJ3VQZ AW6CfycRoSZTEIBCNmWhPSbWSpI0aDYXY5JE/hAjyHJxNEW++YWnGYhh6p7JFuco f0H3W5APaz+FauRsVIcC1v3iSkzx2v1Bv2yt2ex4LVtTCTLJpwKePt92ET1xq7Bu RWW25LO48XmzOVmAUlbsR3YZPt7KXtFjiYRgGhNn564o62IHDDsGQpF0oGR9AgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQUnkPJqwnBgW/88Er9YGWg3r32BWQwHwYDVR0j BBgwFoAUtkveCEHh4CfxojA22cd5oQjCLuEwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU1lNUEhP WC8wL0I2NEJERTA4NDFFMUUwMjdGMUEyMzAzNkQ5Qzc3OUExMDhDMjJFRTEuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvQjY0QkRFMDg0MUUxRTAyN0YxQTIzMDM2RDlD Nzc5QTEwOEMyMkVFMS5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1NZTVBIT1gvMC9CNjRCREUwODQx RTFFMDI3RjFBMjMwMzZEOUM3NzlBMTA4QzIyRUUxLm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAow4LOZb3 IHnYJbJFWwmU0ie7rIjQVwTsuBM9x7o3pRHouxEXgLBxAH9LfKCXwXiDxWE11pmq C0YPCl1XhkQ4GPkfKpb9a4yBtqFDmHMWG9HQx+f2GzH/R7KHEeccQewJxDQHMn7O f1uidFvI3O1uhfU6medDi0feabAtwXuuk/UUxLeA6KqHEHKdPTKrstr1dmzua4C2 3yNj1yMkhxnuLg75CMBlppIcUNWaFeK0yUDx3MzYD0eP4O+hhSeZjqNnq0UbbAga U31abtkknebPzlbqgXl5zVJGQdDCw2Nus5eVoKOPyW+HluflOljoz/dHNIqbylIR zfFyK2IUL+cr9w== -----END CERTIFICATE-----Generated at Fri Oct 2 07:42:37 2026 by rpki-client