$ rpki-client -vvvf rpkica.twnic.tw/rpki/CARL-NET/0/73E6AC8F948D0C97D941F26531617C19223508E6.mft File: 73E6AC8F948D0C97D941F26531617C19223508E6.mft (raw, json) Hash identifier: 5cy47VFH5CODNxSFAG/VjgYwxt506Ubka+SnWkhRcHg= Subject key identifier: 11:58:FF:96:EF:0C:BD:B1:F4:3C:B2:27:EE:A4:16:B0:88:81:10:F8 Authority key identifier: 73:E6:AC:8F:94:8D:0C:97:D9:41:F2:65:31:61:7C:19:22:35:08:E6 Certificate issuer: /CN=73E6AC8F948D0C97D941F26531617C19223508E6 Certificate serial: 05D1E5AFBB183714F587D21616EF9A62A19F735E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/73E6AC8F948D0C97D941F26531617C19223508E6.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CARL-NET/0/73E6AC8F948D0C97D941F26531617C19223508E6.mft Manifest number: F1 Signing time: Wed 04 Nov 2026 21:14:00 +0000 Manifest this update: Wed 04 Nov 2026 21:09:00 +0000 Manifest next update: Thu 05 Nov 2026 23:23:00 +0000 Files and hashes: 1: 73E6AC8F948D0C97D941F26531617C19223508E6.crl (hash: O8vbei+YXbyedu5uy4KuP2MrpK/Ta/hmxRReTay86F0=) 2: 3130332e3130332e38302e302f32322d3234203d3e2037353336.roa (hash: dGPLq2lyYCFxtDkCnYUjXrZAi+ZIN3xKzHo/rdmq9Wo=) 3: 3231312e37392e3130322e302f32332d3234203d3e203231383539.roa (hash: L57nfmyeojiXaTZf4zjU8tXgEtvksvbfz2DcpLr9SbM=) 4: 3130332e3130332e38302e302f32322d3234203d3e20313331363138.roa (hash: BJzz6G8VxovxCWAhRC1tIl3CH9yMcG4c36K4NUZF6DE=) 5: 3231312e37392e3130322e302f32332d3234203d3e2037353336.roa (hash: 3v3LP5j06Samtgaxz1mv2fEZi56D7EIyXnL/h/+knlQ=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CARL-NET/0/73E6AC8F948D0C97D941F26531617C19223508E6.crl rsync://rpkica.twnic.tw/rpki/CARL-NET/0/73E6AC8F948D0C97D941F26531617C19223508E6.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/73E6AC8F948D0C97D941F26531617C19223508E6.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 23:23:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:d1:e5:af:bb:18:37:14:f5:87:d2:16:16:ef:9a:62:a1:9f:73:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73E6AC8F948D0C97D941F26531617C19223508E6 Validity Not Before: Nov 4 21:09:00 2026 GMT Not After : Nov 5 23:23:00 2026 GMT Subject: CN=1158FF96EF0CBDB1F43CB227EEA416B0888110F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:af:b4:3a:fc:af:16:c7:7c:cf:f1:08:6e:f5: 09:1f:62:cc:16:b7:6d:9f:97:20:a0:3a:a0:56:62: c8:1e:2b:80:65:55:31:aa:94:ad:f2:8a:fe:41:88: f5:d9:81:75:17:01:3c:35:c9:ff:63:76:e8:82:08: 21:02:c5:5f:4c:c2:7a:5b:70:bb:a0:3d:8f:66:a6: 54:eb:eb:b0:d8:ea:92:79:72:7d:5f:01:b0:1a:e5: 4d:f0:84:c5:84:cd:a9:9f:55:03:98:36:32:3c:ef: 08:14:22:89:a3:bc:f4:8a:a0:69:b0:ce:d0:64:54: 57:d4:0e:4c:27:6a:91:7b:1f:d3:c8:ea:19:81:b9: ff:81:d0:40:72:7e:04:2d:48:21:3c:c0:62:c7:66: 53:e0:9f:66:cc:09:c5:2b:c3:ad:c5:e2:07:bb:07: e3:01:20:e3:3c:9a:96:64:be:a8:da:48:0f:0e:76: 7b:ff:5b:9b:5e:fb:73:ca:b0:dd:f3:2c:96:1c:16: 78:8a:78:2f:24:92:9e:0d:96:5d:34:f8:ff:3b:c1: c1:fa:ba:51:53:07:63:02:ba:89:c0:3f:df:2b:1f: 8b:b3:36:bc:02:5b:2d:a5:a8:5c:51:d9:2e:01:02: 0c:34:18:09:df:64:b0:ea:1f:d5:09:e8:93:64:32: 7b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:58:FF:96:EF:0C:BD:B1:F4:3C:B2:27:EE:A4:16:B0:88:81:10:F8 X509v3 Authority Key Identifier: keyid:73:E6:AC:8F:94:8D:0C:97:D9:41:F2:65:31:61:7C:19:22:35:08:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CARL-NET/0/73E6AC8F948D0C97D941F26531617C19223508E6.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/73E6AC8F948D0C97D941F26531617C19223508E6.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CARL-NET/0/73E6AC8F948D0C97D941F26531617C19223508E6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:b4:2f:8a:7d:94:a5:59:f8:ae:69:32:19:90:5c:36:01:96: e1:e2:3e:f3:96:af:ee:85:c3:bb:1a:33:95:1a:db:9b:87:f7: 25:ee:4c:3c:4a:c2:11:25:9f:61:80:b4:a9:ae:e2:b5:95:6b: 3b:5c:2f:5f:fb:8d:a7:0a:b2:86:94:e8:17:de:1c:5a:1f:26: 5a:fb:50:dd:4f:e0:39:7f:c1:28:05:df:7a:ee:be:7b:0a:52: ea:d5:e3:bb:ca:ab:44:fa:96:cb:70:09:2f:3f:90:7f:9e:8f: 59:b7:99:ab:52:34:ae:82:0d:2d:30:ff:7c:ce:be:12:50:42: 68:95:cf:b7:5d:34:c3:71:46:78:28:30:72:67:fc:af:eb:76: d0:d9:e6:59:76:48:1b:ce:4f:41:eb:ca:82:b3:f6:45:d4:43: f7:50:de:14:c6:3f:be:ed:3b:97:e7:08:72:14:79:6c:27:9d: 0d:93:36:6c:17:32:a1:d6:b7:15:57:f4:22:dd:52:ea:d4:8a: 25:74:8b:9a:13:ce:7a:fa:11:43:72:4f:0d:7f:94:9a:d4:db: 7b:03:54:eb:a0:1d:86:65:55:18:36:c2:5c:f0:98:c1:44:65: 88:16:4e:08:08:ee:a3:4f:3b:86:83:71:fa:24:c4:b5:2c:d5: 1f:ad:1f:87 -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUBdHlr7sYNxT1h9IWFu+aYqGfc14wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzNFNkFDOEY5NDhEMEM5N0Q5NDFGMjY1MzE2MTdDMTky MjM1MDhFNjAeFw0yNjExMDQyMTA5MDBaFw0yNjExMDUyMzIzMDBaMDMxMTAvBgNV BAMTKDExNThGRjk2RUYwQ0JEQjFGNDNDQjIyN0VFQTQxNkIwODg4MTEwRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCor7Q6/K8Wx3zP8Qhu9QkfYswW t22flyCgOqBWYsgeK4BlVTGqlK3yiv5BiPXZgXUXATw1yf9jduiCCCECxV9Mwnpb cLugPY9mplTr67DY6pJ5cn1fAbAa5U3whMWEzamfVQOYNjI87wgUIomjvPSKoGmw ztBkVFfUDkwnapF7H9PI6hmBuf+B0EByfgQtSCE8wGLHZlPgn2bMCcUrw63F4ge7 B+MBIOM8mpZkvqjaSA8Odnv/W5te+3PKsN3zLJYcFniKeC8kkp4Nll00+P87wcH6 ulFTB2MCuonAP98rH4uzNrwCWy2lqFxR2S4BAgw0GAnfZLDqH9UJ6JNkMnsFAgMB AAGjggHyMIIB7jAdBgNVHQ4EFgQUEVj/lu8MvbH0PLIn7qQWsIiBEPgwHwYDVR0j BBgwFoAUc+asj5SNDJfZQfJlMWF8GSI1COYwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0FSTC1O RVQvMC83M0U2QUM4Rjk0OEQwQzk3RDk0MUYyNjUzMTYxN0MxOTIyMzUwOEU2LmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8xLzczRTZBQzhGOTQ4RDBDOTdEOTQxRjI2NTMx NjE3QzE5MjIzNTA4RTYuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9DQVJMLU5FVC8wLzczRTZBQzhG OTQ4RDBDOTdEOTQxRjI2NTMxNjE3QzE5MjIzNTA4RTYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAntC+K fZSlWfiuaTIZkFw2AZbh4j7zlq/uhcO7GjOVGtubh/cl7kw8SsIRJZ9hgLSpruK1 lWs7XC9f+42nCrKGlOgX3hxaHyZa+1DdT+A5f8EoBd967r57ClLq1eO7yqtE+pbL cAkvP5B/no9Zt5mrUjSugg0tMP98zr4SUEJolc+3XTTDcUZ4KDByZ/yv63bQ2eZZ dkgbzk9B68qCs/ZF1EP3UN4Uxj++7TuX5whyFHlsJ50NkzZsFzKh1rcVV/Qi3VLq 1IoldIuaE856+hFDck8Nf5Sa1Nt7A1TroB2GZVUYNsJc8JjBRGWIFk4ICO6jTzuG g3H6JMS1LNUfrR+H -----END CERTIFICATE-----Generated at Thu Nov 5 17:14:56 2026 by rpki-client