$ rpki-client -vvvf rpkica.twnic.tw/rpki/AOTERNET/1/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.mft File: DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.mft (raw, json) Hash identifier: +TplzPWGeFwwKQyjDLbRHSjNcuNa4GQ2h8cO7+YCoaU= Subject key identifier: 60:EE:75:55:FD:D7:AE:4F:62:22:A7:73:30:48:B8:E4:E4:1F:2C:90 Authority key identifier: DB:E0:6A:5F:C5:A5:E2:89:AC:EB:48:7B:50:C5:EC:D3:B6:DE:23:4C Certificate issuer: /CN=DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C Certificate serial: 1D3E0EDAB341C214069E656237D27DAD65EFB908 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.cer Subject info access: rsync://rpkica.twnic.tw/rpki/AOTERNET/1/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.mft Manifest number: 011C Signing time: Sun 15 Nov 2026 02:24:11 +0000 Manifest this update: Sun 15 Nov 2026 02:19:11 +0000 Manifest next update: Mon 16 Nov 2026 02:34:11 +0000 Files and hashes: 1: 3134342e37392e3233372e302f32342d3234203d3e203138303430.roa (hash: YiNfhn2rfnFW/2M2Ag4d3OUBywy0FERwAc5K7Q8vyfc=) 2: 3134342e37392e3233362e302f32342d3332203d3e203138303430.roa (hash: 1FIFjMBcizShdvw6u5phvDGtZhnMBusqAuzpJLq+G90=) 3: 3134342e37392e3233362e302f32342d3234203d3e203138303430.roa (hash: ZudjpagHov1aZlrdTbsVSXtYt3YeCsmSW4h5XCZ/uzs=) 4: DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.crl (hash: sYW6RJO7XInYBmvqzP9oPebjRef8bPP1Dj4bBjZwmQM=) 5: 3134342e37392e3233372e302f32342d3332203d3e203138303430.roa (hash: r6p1Am50m6SY4C22THPfAzr++Eba9JH1Hgnd4WmFLsA=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/AOTERNET/1/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.crl rsync://rpkica.twnic.tw/rpki/AOTERNET/1/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 02:34:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:3e:0e:da:b3:41:c2:14:06:9e:65:62:37:d2:7d:ad:65:ef:b9:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C Validity Not Before: Nov 15 02:19:11 2026 GMT Not After : Nov 16 02:34:11 2026 GMT Subject: CN=60EE7555FDD7AE4F6222A7733048B8E4E41F2C90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:01:5a:a5:07:41:c4:e9:0a:9d:d7:0a:ca:10: 0c:cc:e1:49:43:59:e7:12:54:98:4d:5e:6a:76:0f: 81:8b:f1:a2:01:1c:39:2b:ae:ec:e5:db:3c:9a:f5: b5:cb:35:c9:4e:e3:74:4c:7e:30:af:5c:bb:46:9d: 44:35:a6:4c:bd:cf:78:ca:9a:e7:70:1b:cd:92:c6: bd:0c:d1:72:54:e8:c2:a8:43:30:a7:a6:18:c6:88: 46:54:13:9e:43:3f:4a:97:3c:85:da:44:20:4a:b4: 47:48:3d:b2:d9:fb:37:41:19:b7:a2:64:f0:18:0c: 55:ca:f0:c4:51:45:59:62:76:54:99:5c:ae:3b:4c: 0c:91:04:85:27:8e:8b:af:02:3c:d5:23:56:e2:30: 72:13:15:65:ec:8a:74:b4:1b:04:71:41:f8:a4:a7: 78:14:4c:de:01:c8:cf:02:a4:d0:ba:df:0d:f9:df: 02:8a:0f:a5:be:cd:af:d4:83:3a:82:bb:7b:77:05: 6c:69:60:7c:6b:aa:a4:92:d6:4b:a3:3f:7e:70:35: bd:0f:28:59:59:f1:1e:8f:95:a3:7d:3d:bf:3f:36: 59:af:c0:bd:1f:7d:1a:c1:9b:27:64:d5:90:4a:e8: 0e:87:e5:71:79:36:27:ef:6b:94:8e:d0:51:1c:d0: 53:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:EE:75:55:FD:D7:AE:4F:62:22:A7:73:30:48:B8:E4:E4:1F:2C:90 X509v3 Authority Key Identifier: keyid:DB:E0:6A:5F:C5:A5:E2:89:AC:EB:48:7B:50:C5:EC:D3:B6:DE:23:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/AOTERNET/1/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/AOTERNET/1/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:e9:59:67:80:31:cb:bd:11:77:8b:40:db:be:9f:fe:20:fc: 41:a4:f8:cd:0b:7a:82:a5:1f:fe:21:ef:4a:f5:1d:56:c3:b0: 35:d0:19:c0:38:85:8c:3b:cb:f2:07:35:53:18:f1:2a:aa:5b: a4:4b:d5:dc:38:87:8a:c4:24:7b:b4:d3:df:df:9c:aa:e3:83: 36:35:64:07:75:df:3a:ad:03:7e:36:ae:16:5b:15:4e:fd:58: a2:70:76:4e:75:e8:98:41:79:34:8d:0a:cb:5f:f1:b7:b9:ee: 59:14:43:da:8e:74:a3:97:1f:0a:d5:8c:1a:fe:9f:79:25:3a: e2:45:8d:38:8e:5b:30:58:c0:10:13:c4:8f:26:0d:b7:5b:d1: b3:36:42:49:7b:ea:e2:5c:1b:09:b1:00:9e:e4:99:dc:57:a0: 1a:4a:08:c2:4d:2c:69:4f:89:9c:4e:06:4f:a2:8e:57:f7:a9: ef:2e:a4:e2:12:66:da:69:22:3e:5f:d2:5a:1f:f5:61:fe:85: 07:a0:85:3e:c3:b7:4c:fa:e8:ae:74:b2:38:1f:3b:be:c4:1c: a6:bb:5f:9f:c2:86:3a:98:d7:59:11:f5:ce:52:bf:64:d5:67: 94:36:fd:65:4e:24:52:39:d6:7f:b4:e3:33:36:8a:a8:7f:3a: 34:79:70:74 -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUHT4O2rNBwhQGnmViN9J9rWXvuQgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJFMDZBNUZDNUE1RTI4OUFDRUI0ODdCNTBDNUVDRDNC NkRFMjM0QzAeFw0yNjExMTUwMjE5MTFaFw0yNjExMTYwMjM0MTFaMDMxMTAvBgNV BAMTKDYwRUU3NTU1RkREN0FFNEY2MjIyQTc3MzMwNDhCOEU0RTQxRjJDOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiAVqlB0HE6Qqd1wrKEAzM4UlD WecSVJhNXmp2D4GL8aIBHDkrruzl2zya9bXLNclO43RMfjCvXLtGnUQ1pky9z3jK mudwG82Sxr0M0XJU6MKoQzCnphjGiEZUE55DP0qXPIXaRCBKtEdIPbLZ+zdBGbei ZPAYDFXK8MRRRVlidlSZXK47TAyRBIUnjouvAjzVI1biMHITFWXsinS0GwRxQfik p3gUTN4ByM8CpNC63w353wKKD6W+za/UgzqCu3t3BWxpYHxrqqSS1kujP35wNb0P KFlZ8R6PlaN9Pb8/NlmvwL0ffRrBmydk1ZBK6A6H5XF5Nifva5SO0FEc0FN7AgMB AAGjggHyMIIB7jAdBgNVHQ4EFgQUYO51Vf3Xrk9iIqdzMEi45OQfLJAwHwYDVR0j BBgwFoAU2+BqX8Wl4oms60h7UMXs07beI0wwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQU9URVJO RVQvMS9EQkUwNkE1RkM1QTVFMjg5QUNFQjQ4N0I1MEM1RUNEM0I2REUyMzRDLmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8wL0RCRTA2QTVGQzVBNUUyODlBQ0VCNDg3QjUw QzVFQ0QzQjZERTIzNEMuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9BT1RFUk5FVC8xL0RCRTA2QTVG QzVBNUUyODlBQ0VCNDg3QjUwQzVFQ0QzQjZERTIzNEMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC86Vln gDHLvRF3i0Dbvp/+IPxBpPjNC3qCpR/+Ie9K9R1Ww7A10BnAOIWMO8vyBzVTGPEq qlukS9XcOIeKxCR7tNPf35yq44M2NWQHdd86rQN+Nq4WWxVO/ViicHZOdeiYQXk0 jQrLX/G3ue5ZFEPajnSjlx8K1Ywa/p95JTriRY04jlswWMAQE8SPJg23W9GzNkJJ e+riXBsJsQCe5JncV6AaSgjCTSxpT4mcTgZPoo5X96nvLqTiEmbaaSI+X9JaH/Vh /oUHoIU+w7dM+uiudLI4Hzu+xBymu1+fwoY6mNdZEfXOUr9k1WeUNv1lTiRSOdZ/ tOMzNoqofzo0eXB0 -----END CERTIFICATE-----Generated at Sun Nov 15 18:59:55 2026 by rpki-client