$ rpki-client -vvvf rpkica.twnic.tw/rpki/TANET/0/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.mft File: 6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.mft (raw, json) Hash identifier: ZQkaS4NLiX37kq2Gga7+gU5isefOhcSgUF0LlBmIwjU= Subject key identifier: BC:27:C4:87:BD:CB:8A:60:AB:AA:8D:6B:B1:5B:84:CD:15:E1:83:BA Authority key identifier: 6E:9C:32:26:68:2A:EF:A8:D6:7B:8A:C6:08:CC:CF:C8:A0:96:10:CD Certificate issuer: /CN=6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD Certificate serial: 21FB8B7E2A32962A88E71EB406D39D4FE661BD3D Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TANET/0/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.mft Manifest number: 02A8 Signing time: Thu 01 Oct 2026 21:44:17 +0000 Manifest this update: Thu 01 Oct 2026 21:39:17 +0000 Manifest next update: Fri 02 Oct 2026 22:21:17 +0000 Files and hashes: 1: 6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.crl (hash: fe5gJO1h4ZLAvI4kQFTtvMD7xjP4BwTBWfb+7ctytmg=) 2: AS17716.roa (hash: QJfn98q9GCpZwDozPEb7vzDE8pPTD6V7DkN76r6Bpos=) 3: AS17711.roa (hash: HXnFQ1ogZR2j1qGYqwrCTC9+3osb0O4DBAASmnaoNYs=) 4: AS18047.roa (hash: J4WakVwJWfyd/jtRhBY0Sn4bIPMH3T7PrME5BAycAxE=) 5: AS18043.roa (hash: OceWabkHHIz4lY5kEFm9O1gY+H0mxDs8NOB+5bDRraU=) 6: AS9916.roa (hash: bJ1r+tyqzjibU4qpONziU5YtkwR5ZUj1zImuxSjlO2M=) 7: AS17712.roa (hash: VbYsDgut+6w19G6fBh7opEe2zCUfFJuIvPm1UL4j9g8=) 8: AS1569.roa (hash: jY4pATt/jGgMLbu/QefPNwktyUJg9b+KBtuPdVhUmTk=) 9: AS131150.roa (hash: Lmloz8LiIV8pjh8sGmz95zyicNGp9fS97nBLBQY/HWc=) 10: AS1659.roa (hash: j3u3V18aHfHo/NDML42g0UQSQjnXI5q9wXWoowXLBFg=) 11: AS17713.roa (hash: pFGUYdrzL+OUjhFFKgHC9k6HgAQM1lZqhd8PA52A+VI=) 12: AS18177.roa (hash: fxlV5+GVr2otH1tYq4wDBYNDHzH9J2LM+ShVYw3RZos=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TANET/0/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.crl rsync://rpkica.twnic.tw/rpki/TANET/0/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 22:21:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:fb:8b:7e:2a:32:96:2a:88:e7:1e:b4:06:d3:9d:4f:e6:61:bd:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD Validity Not Before: Oct 1 21:39:17 2026 GMT Not After : Oct 2 22:21:17 2026 GMT Subject: CN=BC27C487BDCB8A60ABAA8D6BB15B84CD15E183BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:46:8b:4d:5d:58:93:35:e9:14:9d:5a:c5:2b: dd:6a:40:e9:82:aa:40:d4:5d:45:e6:d7:7e:9b:a8: 05:7b:84:00:6d:bb:65:3b:ff:82:0c:e6:7f:1e:99: 9d:7a:c4:ca:52:3f:b1:92:ea:12:fc:2a:22:17:90: a1:62:34:93:02:68:82:1a:c1:5d:7c:7d:29:97:65: 5f:f6:a4:47:1c:77:18:2c:29:b8:95:ea:77:e7:08: 98:ce:a6:29:53:b5:f7:db:56:5c:8f:1a:1a:91:dd: 9b:f3:22:be:8b:dd:d6:ea:04:c1:b8:6b:19:7c:90: 16:5c:26:e0:52:40:a8:95:7e:df:42:01:35:d3:8d: 47:c0:83:9e:06:6d:69:59:db:3c:e8:a4:f1:ed:ae: 39:65:9a:25:19:e4:f3:62:a3:02:56:a4:3b:59:92: d2:31:ad:89:c6:62:54:3d:44:0f:18:9d:be:87:92: 32:fa:3c:09:98:39:c9:3a:1a:16:6b:70:41:9f:87: d0:7e:d9:b6:1c:eb:89:f3:74:50:84:19:a6:58:d6: 30:e9:30:24:d6:05:96:a4:b6:ec:81:a7:64:60:aa: 9a:c3:12:73:da:b0:b9:2f:a7:ea:db:1b:b7:10:64: 7f:f8:28:6e:98:dd:a9:57:e2:c0:a5:42:bc:c2:f5: b7:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:27:C4:87:BD:CB:8A:60:AB:AA:8D:6B:B1:5B:84:CD:15:E1:83:BA X509v3 Authority Key Identifier: keyid:6E:9C:32:26:68:2A:EF:A8:D6:7B:8A:C6:08:CC:CF:C8:A0:96:10:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TANET/0/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TANET/0/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:58:8a:9d:38:2e:67:80:a9:cd:36:88:07:11:d3:20:c8:d8: 08:42:ef:62:74:09:c7:0d:cb:bb:0e:6d:03:5c:e3:65:18:0a: 04:7b:ed:ca:db:20:c5:61:c6:fe:99:14:0f:45:5d:35:d3:11: e7:b6:d7:ad:dc:69:41:43:f6:95:5c:97:f5:7e:18:dc:26:29: 35:23:08:66:7f:ed:99:8b:0f:65:df:8e:e3:a6:8b:86:ae:00: b0:5f:2a:7b:76:25:7b:a1:c0:55:29:2d:e5:a3:b8:00:d6:8c: 67:6b:d8:0d:4d:67:dd:ae:ac:b5:63:78:72:d5:3f:6c:8c:3c: 94:34:7e:d6:b7:07:22:cb:51:0a:13:bb:3a:9a:f9:8a:45:26: 94:ea:1b:bd:db:fa:33:75:aa:8f:ee:43:c3:19:6a:9c:67:1e: 8e:8f:c9:5a:8c:1b:d7:91:3e:42:26:9c:1f:8a:18:c7:3e:ad: 77:57:cb:01:13:73:39:a5:78:32:dd:50:68:86:e0:84:d1:91: e2:12:eb:85:7b:cc:6a:71:25:a3:2d:f9:c3:92:2d:ce:1e:84: 87:82:8a:b9:66:80:0b:1e:2f:8b:20:af:56:56:2f:f8:c4:19: 98:f5:e3:c5:1d:ac:4f:8f:aa:23:d7:02:83:ce:c6:23:4f:8a: 4a:44:a0:0e -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUIfuLfioyliqI5x60BtOdT+ZhvT0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkU5QzMyMjY2ODJBRUZBOEQ2N0I4QUM2MDhDQ0NGQzhB MDk2MTBDRDAeFw0yNjEwMDEyMTM5MTdaFw0yNjEwMDIyMjIxMTdaMDMxMTAvBgNV BAMTKEJDMjdDNDg3QkRDQjhBNjBBQkFBOEQ2QkIxNUI4NENEMTVFMTgzQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5RotNXViTNekUnVrFK91qQOmC qkDUXUXm136bqAV7hABtu2U7/4IM5n8emZ16xMpSP7GS6hL8KiIXkKFiNJMCaIIa wV18fSmXZV/2pEccdxgsKbiV6nfnCJjOpilTtffbVlyPGhqR3ZvzIr6L3dbqBMG4 axl8kBZcJuBSQKiVft9CATXTjUfAg54GbWlZ2zzopPHtrjllmiUZ5PNiowJWpDtZ ktIxrYnGYlQ9RA8Ynb6HkjL6PAmYOck6GhZrcEGfh9B+2bYc64nzdFCEGaZY1jDp MCTWBZaktuyBp2RgqprDEnPasLkvp+rbG7cQZH/4KG6Y3alX4sClQrzC9bc9AgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUvCfEh73LimCrqo1rsVuEzRXhg7owHwYDVR0j BBgwFoAUbpwyJmgq76jWe4rGCMzPyKCWEM0wDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVEFORVQv MC82RTlDMzIyNjY4MkFFRkE4RDY3QjhBQzYwOENDQ0ZDOEEwOTYxMENELmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzZFOUMzMjI2NjgyQUVGQThENjdCOEFDNjA4Q0ND RkM4QTA5NjEwQ0QuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UQU5FVC8wLzZFOUMzMjI2NjgyQUVG QThENjdCOEFDNjA4Q0NDRkM4QTA5NjEwQ0QubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBWWIqdOC5ngKnN NogHEdMgyNgIQu9idAnHDcu7Dm0DXONlGAoEe+3K2yDFYcb+mRQPRV010xHnttet 3GlBQ/aVXJf1fhjcJik1Iwhmf+2Ziw9l347jpouGrgCwXyp7diV7ocBVKS3lo7gA 1oxna9gNTWfdrqy1Y3hy1T9sjDyUNH7Wtwciy1EKE7s6mvmKRSaU6hu92/ozdaqP 7kPDGWqcZx6Oj8lajBvXkT5CJpwfihjHPq13V8sBE3M5pXgy3VBohuCE0ZHiEuuF e8xqcSWjLfnDki3OHoSHgoq5ZoALHi+LIK9WVi/4xBmY9ePFHaxPj6oj1wKDzsYj T4pKRKAO -----END CERTIFICATE-----Generated at Fri Oct 2 14:54:43 2026 by rpki-client