$ rpki-client -vvvf rpkica.twnic.tw/rpki/AOTERNET/1/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.mft File: DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.mft (raw, json) Hash identifier: 4SNUQYC8HMnYeKiJWJVeRs9Tzp1G+Z22yCcIQh3rwL8= Subject key identifier: 68:C1:34:7A:0A:1D:7C:8F:72:C9:86:09:FF:01:10:2C:A3:F9:BC:11 Authority key identifier: DB:E0:6A:5F:C5:A5:E2:89:AC:EB:48:7B:50:C5:EC:D3:B6:DE:23:4C Certificate issuer: /CN=DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C Certificate serial: 45A119A4030D348F302E49F65EAC29CAF737196E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.cer Subject info access: rsync://rpkica.twnic.tw/rpki/AOTERNET/1/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.mft Manifest number: D1 Signing time: Mon 21 Sep 2026 23:28:02 +0000 Manifest this update: Mon 21 Sep 2026 23:23:02 +0000 Manifest next update: Wed 23 Sep 2026 03:20:02 +0000 Files and hashes: 1: 3134342e37392e3233372e302f32342d3332203d3e203138303430.roa (hash: r6p1Am50m6SY4C22THPfAzr++Eba9JH1Hgnd4WmFLsA=) 2: 3134342e37392e3233362e302f32342d3234203d3e203138303430.roa (hash: ZudjpagHov1aZlrdTbsVSXtYt3YeCsmSW4h5XCZ/uzs=) 3: 3134342e37392e3233362e302f32342d3332203d3e203138303430.roa (hash: 1FIFjMBcizShdvw6u5phvDGtZhnMBusqAuzpJLq+G90=) 4: DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.crl (hash: HX3OTklXru3T8o5OyQMt9oBjE+pUa47ZZK0pCLlxouk=) 5: 3134342e37392e3233372e302f32342d3234203d3e203138303430.roa (hash: YiNfhn2rfnFW/2M2Ag4d3OUBywy0FERwAc5K7Q8vyfc=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/AOTERNET/1/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.crl rsync://rpkica.twnic.tw/rpki/AOTERNET/1/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 02:44:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:a1:19:a4:03:0d:34:8f:30:2e:49:f6:5e:ac:29:ca:f7:37:19:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C Validity Not Before: Sep 21 23:23:02 2026 GMT Not After : Sep 23 03:20:02 2026 GMT Subject: CN=68C1347A0A1D7C8F72C98609FF01102CA3F9BC11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f8:45:a6:7b:72:d0:06:b0:4d:ce:09:54:5a: e5:3d:44:87:0b:9f:95:87:85:e9:c2:7c:fa:ae:dd: ab:12:f6:01:44:59:b9:53:4d:6c:15:fb:a8:fb:a6: 88:49:fb:e0:4a:54:cc:f3:5a:56:fa:00:8c:77:1f: c4:16:06:01:ec:2d:23:e6:45:26:55:76:a7:8b:f6: ce:a3:ad:ec:b6:5e:66:8b:72:73:fe:bf:30:33:97: b2:a2:7e:36:50:93:1d:70:f8:ca:75:60:a3:2c:bf: dc:7c:91:34:f1:94:69:67:d2:30:fa:aa:2f:54:65: a2:f3:76:90:22:b9:5b:1d:88:58:51:04:fc:07:58: 0c:c2:01:42:31:f8:97:6a:c1:18:69:bb:27:ab:5a: 94:62:33:79:aa:93:d7:5a:c0:08:f2:4d:6b:a7:2b: 22:e8:f6:0e:d7:1d:f0:29:13:92:58:1c:13:37:c1: ef:3c:bb:03:4b:b4:8f:25:f0:6d:53:09:8a:a8:a5: 90:2f:5f:8f:54:15:dc:01:4d:64:fc:c2:65:14:e3: bf:26:b3:ec:27:e8:e6:ba:ff:c5:66:45:cc:cf:8b: e5:c5:d6:b3:74:de:48:8c:d6:7e:b3:29:38:48:1d: 2d:b3:bc:01:2d:08:04:d1:49:95:ef:28:33:15:da: da:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:C1:34:7A:0A:1D:7C:8F:72:C9:86:09:FF:01:10:2C:A3:F9:BC:11 X509v3 Authority Key Identifier: keyid:DB:E0:6A:5F:C5:A5:E2:89:AC:EB:48:7B:50:C5:EC:D3:B6:DE:23:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/AOTERNET/1/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/AOTERNET/1/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:0e:88:23:cf:bc:57:21:83:d7:14:a1:45:12:a4:12:b8:3e: 72:0e:15:b3:39:16:7d:ae:65:84:fe:e3:7f:01:11:47:ce:62: 1f:61:45:b1:5a:7f:59:81:e3:7e:64:7b:90:dd:9d:d5:00:9b: 87:b6:ab:91:ff:4b:99:a6:4a:83:e4:db:98:e3:f3:ca:55:8d: 47:0a:02:ed:7b:f5:08:ff:11:40:53:63:35:74:41:15:c5:4b: e5:fe:99:a8:08:e2:74:19:b3:1f:81:5f:dc:6d:48:1b:99:9b: 5f:0b:68:97:28:8c:92:d0:ca:34:0a:6c:a3:43:67:13:6e:6a: 94:36:21:d2:6b:0c:b0:ad:ea:a4:a7:52:c3:2d:88:fd:d4:88: a8:61:fc:0c:12:24:09:3e:01:2d:09:7b:74:02:bf:c3:be:68: b5:17:ca:a8:5b:f0:7c:87:4f:4e:29:ff:22:d9:37:39:80:60: ed:d0:e6:12:b9:b1:db:bb:70:c0:28:49:6d:62:03:ac:5b:bc: eb:2e:fb:07:45:d9:98:ca:fd:39:fb:8f:e3:5a:d8:62:53:8a: 52:17:d6:1f:59:1b:e2:70:b4:07:1c:44:fc:8f:c0:21:9e:69: 36:e1:7a:42:c9:c6:8f:fb:58:37:89:64:3a:b7:c3:14:04:24: 83:b9:fd:ac -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIURaEZpAMNNI8wLkn2Xqwpyvc3GW4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJFMDZBNUZDNUE1RTI4OUFDRUI0ODdCNTBDNUVDRDNC NkRFMjM0QzAeFw0yNjA5MjEyMzIzMDJaFw0yNjA5MjMwMzIwMDJaMDMxMTAvBgNV BAMTKDY4QzEzNDdBMEExRDdDOEY3MkM5ODYwOUZGMDExMDJDQTNGOUJDMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE+EWme3LQBrBNzglUWuU9RIcL n5WHhenCfPqu3asS9gFEWblTTWwV+6j7pohJ++BKVMzzWlb6AIx3H8QWBgHsLSPm RSZVdqeL9s6jrey2XmaLcnP+vzAzl7KifjZQkx1w+Mp1YKMsv9x8kTTxlGln0jD6 qi9UZaLzdpAiuVsdiFhRBPwHWAzCAUIx+JdqwRhpuyerWpRiM3mqk9dawAjyTWun KyLo9g7XHfApE5JYHBM3we88uwNLtI8l8G1TCYqopZAvX49UFdwBTWT8wmUU478m s+wn6Oa6/8VmRczPi+XF1rN03kiM1n6zKThIHS2zvAEtCATRSZXvKDMV2trHAgMB AAGjggHyMIIB7jAdBgNVHQ4EFgQUaME0egodfI9yyYYJ/wEQLKP5vBEwHwYDVR0j BBgwFoAU2+BqX8Wl4oms60h7UMXs07beI0wwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQU9URVJO RVQvMS9EQkUwNkE1RkM1QTVFMjg5QUNFQjQ4N0I1MEM1RUNEM0I2REUyMzRDLmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8wL0RCRTA2QTVGQzVBNUUyODlBQ0VCNDg3QjUw QzVFQ0QzQjZERTIzNEMuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9BT1RFUk5FVC8xL0RCRTA2QTVG QzVBNUUyODlBQ0VCNDg3QjUwQzVFQ0QzQjZERTIzNEMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBnDogj z7xXIYPXFKFFEqQSuD5yDhWzORZ9rmWE/uN/ARFHzmIfYUWxWn9ZgeN+ZHuQ3Z3V AJuHtquR/0uZpkqD5NuY4/PKVY1HCgLte/UI/xFAU2M1dEEVxUvl/pmoCOJ0GbMf gV/cbUgbmZtfC2iXKIyS0Mo0CmyjQ2cTbmqUNiHSawywreqkp1LDLYj91IioYfwM EiQJPgEtCXt0Ar/Dvmi1F8qoW/B8h09OKf8i2Tc5gGDt0OYSubHbu3DAKEltYgOs W7zrLvsHRdmYyv05+4/jWthiU4pSF9YfWRvicLQHHET8j8Ahnmk24XpCycaP+1g3 iWQ6t8MUBCSDuf2s -----END CERTIFICATE-----Generated at Tue Sep 22 04:09:28 2026 by rpki-client