$ rpki-client -vvvf rpkica.twnic.tw/rpki/ZAT/0/0291B733B1EED1AF7E817D958CE6F13A585F0695.mft File: 0291B733B1EED1AF7E817D958CE6F13A585F0695.mft (raw, json) Hash identifier: keMEWn2ZXctFhZJ5mmAS7fM1OTabAOF63iyRg3a5/2E= Subject key identifier: 3C:B3:71:13:D7:C2:C5:C3:60:67:47:ED:C5:A8:89:3C:93:24:CE:4B Authority key identifier: 02:91:B7:33:B1:EE:D1:AF:7E:81:7D:95:8C:E6:F1:3A:58:5F:06:95 Certificate issuer: /CN=0291B733B1EED1AF7E817D958CE6F13A585F0695 Certificate serial: 23A4681F0362E8B119F59AF9948C28E18665DE63 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0291B733B1EED1AF7E817D958CE6F13A585F0695.cer Subject info access: rsync://rpkica.twnic.tw/rpki/ZAT/0/0291B733B1EED1AF7E817D958CE6F13A585F0695.mft Manifest number: C4 Signing time: Sat 03 Oct 2026 12:30:03 +0000 Manifest this update: Sat 03 Oct 2026 12:25:03 +0000 Manifest next update: Sun 04 Oct 2026 15:04:03 +0000 Files and hashes: 1: 323430313a353561303a3a2f33322d3332203d3e203138303431.roa (hash: CrzulhqYuNBjNzDQRC8BOsQxP+QuAw4ZbCFe65kH3fw=) 2: 0291B733B1EED1AF7E817D958CE6F13A585F0695.crl (hash: I6ILax4SJJpF51WPPLbixhEUdb66QG8wgy7WJnETA8E=) 3: 3231302e37392e3135312e302f32342d3234203d3e20323031323137.roa (hash: WRpRpWc9nNYJzvwhsCMAvWKmyMgtn7Z1UBftNahQj4c=) 4: 3231302e37392e3135302e302f32332d3234203d3e203138303431.roa (hash: XF9vSkheKC1NRFUS3alvj8iCKGl0+/ZaB+X31yisdf0=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/ZAT/0/0291B733B1EED1AF7E817D958CE6F13A585F0695.crl rsync://rpkica.twnic.tw/rpki/ZAT/0/0291B733B1EED1AF7E817D958CE6F13A585F0695.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0291B733B1EED1AF7E817D958CE6F13A585F0695.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 15:04:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:a4:68:1f:03:62:e8:b1:19:f5:9a:f9:94:8c:28:e1:86:65:de:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0291B733B1EED1AF7E817D958CE6F13A585F0695 Validity Not Before: Oct 3 12:25:03 2026 GMT Not After : Oct 4 15:04:03 2026 GMT Subject: CN=3CB37113D7C2C5C3606747EDC5A8893C9324CE4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f1:d0:d9:da:59:3f:bf:e0:f2:b0:6c:76:09: a8:86:d5:0e:f3:bf:5f:31:be:5c:c2:a0:cf:7f:af: 22:cb:31:32:45:78:93:4a:45:be:20:51:3f:9d:5d: c8:35:4f:fa:7d:0b:53:ea:d1:c2:ee:4d:14:4a:02: 46:61:f1:48:80:e5:b7:73:b3:fe:b2:fe:41:e1:f7: 50:60:bf:7a:08:2f:82:b7:d0:71:bf:a9:f3:89:72: 0f:f5:3b:67:ac:00:b1:a1:ff:52:4a:39:1b:99:29: 22:f7:d0:ec:ae:f6:79:55:43:eb:05:c9:f5:bf:af: a7:42:8d:18:63:fd:59:dc:91:a8:77:27:d5:50:34: d4:7a:23:4d:55:4f:d0:66:6b:98:5e:f8:16:16:9f: 76:59:7c:4c:22:78:cd:71:ba:83:83:bc:28:1c:93: b3:1f:df:24:30:20:a1:d3:20:bd:db:de:14:54:f0: eb:e2:5c:de:84:30:c9:96:f4:90:c8:6a:bd:52:9c: b0:b3:20:97:80:24:7e:e2:d3:c6:e8:f8:80:00:ef: 3f:fe:93:e7:52:c4:a3:84:36:f4:58:1b:94:3a:65: 9d:a3:39:4a:99:a3:89:c6:b7:80:f6:42:7d:d3:3d: e4:55:45:71:51:52:e7:d4:63:a7:b6:b6:31:19:23: 64:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:B3:71:13:D7:C2:C5:C3:60:67:47:ED:C5:A8:89:3C:93:24:CE:4B X509v3 Authority Key Identifier: keyid:02:91:B7:33:B1:EE:D1:AF:7E:81:7D:95:8C:E6:F1:3A:58:5F:06:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/ZAT/0/0291B733B1EED1AF7E817D958CE6F13A585F0695.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0291B733B1EED1AF7E817D958CE6F13A585F0695.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ZAT/0/0291B733B1EED1AF7E817D958CE6F13A585F0695.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:da:39:cb:85:f6:1d:79:ab:43:a4:cd:7c:22:4d:37:61:1d: d2:06:a3:e3:8d:d7:e9:91:d1:d3:d0:6c:f6:9d:4d:de:91:20: 6c:4e:f2:73:ff:6e:95:d1:71:d4:cc:b3:4f:0e:93:1d:a1:18: 6c:bf:5b:18:65:17:81:12:e6:8f:4e:32:57:75:8c:f5:3b:27: 92:db:ec:73:ab:df:6a:4c:e1:54:33:a0:fb:19:71:eb:d3:2c: 3d:a1:41:a0:1b:ab:cd:fc:40:0c:8c:72:49:4c:bb:e1:d6:f1: d2:76:3a:f5:79:01:c3:89:78:49:92:b1:3e:58:ab:87:e7:12: db:24:ef:86:df:16:4e:b1:70:be:9b:94:84:03:94:6b:61:ef: 5b:91:2b:4e:59:ba:fe:18:38:2b:29:d7:eb:1e:73:08:02:99: 47:3c:de:7b:f1:7c:31:d4:e8:56:57:8a:55:8e:d9:6b:c1:0e: fa:64:8b:a6:1c:95:af:6c:e2:86:47:a2:84:25:99:29:c3:ae: d1:3b:e6:9d:58:e9:7c:37:4b:50:9a:25:8c:71:05:a9:12:cf: 67:91:34:94:ac:16:c0:43:15:db:30:13:c2:67:e3:f9:b4:48: 5e:c5:4e:96:23:cd:8d:d1:4f:29:74:f8:64:70:d0:7f:ec:d4: 5b:9d:cc:b2 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUI6RoHwNi6LEZ9Zr5lIwo4YZl3mMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI5MUI3MzNCMUVFRDFBRjdFODE3RDk1OENFNkYxM0E1 ODVGMDY5NTAeFw0yNjEwMDMxMjI1MDNaFw0yNjEwMDQxNTA0MDNaMDMxMTAvBgNV BAMTKDNDQjM3MTEzRDdDMkM1QzM2MDY3NDdFREM1QTg4OTNDOTMyNENFNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK8dDZ2lk/v+DysGx2CaiG1Q7z v18xvlzCoM9/ryLLMTJFeJNKRb4gUT+dXcg1T/p9C1Pq0cLuTRRKAkZh8UiA5bdz s/6y/kHh91Bgv3oIL4K30HG/qfOJcg/1O2esALGh/1JKORuZKSL30Oyu9nlVQ+sF yfW/r6dCjRhj/Vnckah3J9VQNNR6I01VT9Bma5he+BYWn3ZZfEwieM1xuoODvCgc k7Mf3yQwIKHTIL3b3hRU8OviXN6EMMmW9JDIar1SnLCzIJeAJH7i08bo+IAA7z/+ k+dSxKOENvRYG5Q6ZZ2jOUqZo4nGt4D2Qn3TPeRVRXFRUufUY6e2tjEZI2TXAgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUPLNxE9fCxcNgZ0ftxaiJPJMkzkswHwYDVR0j BBgwFoAUApG3M7Hu0a9+gX2VjObxOlhfBpUwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvWkFULzAv MDI5MUI3MzNCMUVFRDFBRjdFODE3RDk1OENFNkYxM0E1ODVGMDY5NS5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS8wMjkxQjczM0IxRUVEMUFGN0U4MTdEOTU4Q0U2RjEz QTU4NUYwNjk1LmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvWkFULzAvMDI5MUI3MzNCMUVFRDFBRjdF ODE3RDk1OENFNkYxM0E1ODVGMDY5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAIbaOcuF9h15q0OkzXwi TTdhHdIGo+ON1+mR0dPQbPadTd6RIGxO8nP/bpXRcdTMs08Okx2hGGy/WxhlF4ES 5o9OMld1jPU7J5Lb7HOr32pM4VQzoPsZcevTLD2hQaAbq838QAyMcklMu+HW8dJ2 OvV5AcOJeEmSsT5Yq4fnEtsk74bfFk6xcL6blIQDlGth71uRK05Zuv4YOCsp1+se cwgCmUc83nvxfDHU6FZXilWO2WvBDvpki6Ycla9s4oZHooQlmSnDrtE75p1Y6Xw3 S1CaJYxxBakSz2eRNJSsFsBDFdswE8Jn4/m0SF7FTpYjzY3RTyl0+GRw0H/s1Fud zLI= -----END CERTIFICATE-----Generated at Sun Oct 4 00:48:10 2026 by rpki-client