$ rpki-client -vvf rpkica.twnic.tw/rpki/CARLWATCH/0/6A8F810EB0BF683DFCA74C403A7B03D37E16F268.mft File: 6A8F810EB0BF683DFCA74C403A7B03D37E16F268.mft (raw, json) Hash identifier: Cs4/O9DXsR7ZC4kssFD84sKnks6tsvCWakCRjkbYoZM= Subject key identifier: 3B:FA:F9:C1:EE:71:8F:07:98:C2:ED:DE:86:2B:8D:6B:FD:BD:92:27 Authority key identifier: 6A:8F:81:0E:B0:BF:68:3D:FC:A7:4C:40:3A:7B:03:D3:7E:16:F2:68 Certificate issuer: /CN=6A8F810EB0BF683DFCA74C403A7B03D37E16F268 Certificate serial: 465AEFBA94B18699175974F84A037417E5B0F9AF Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6A8F810EB0BF683DFCA74C403A7B03D37E16F268.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CARLWATCH/0/6A8F810EB0BF683DFCA74C403A7B03D37E16F268.mft Manifest number: 2E Signing time: Fri 12 Jun 2026 19:22:52 +0000 Manifest this update: Fri 12 Jun 2026 19:17:52 +0000 Manifest next update: Sat 13 Jun 2026 19:34:52 +0000 Files and hashes: 1: 3130332e3136312e362e302f32332d3234203d3e20313331363138.roa (hash: HW3fNW9yAqboou7jAhk1cKMCcOPZDWYktjmxy1gjfvo=) 2: 3130332e3136312e362e302f32332d3234203d3e203231383539.roa (hash: uWZD4+YbW51xLCVpXbXAANNn4P9xs+4KtJrLiouzkvQ=) 3: 6A8F810EB0BF683DFCA74C403A7B03D37E16F268.crl (hash: 5T3lo536PFvYoVbzG4b9sjYrNoXktx0zb/J2WD3F6LY=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CARLWATCH/0/6A8F810EB0BF683DFCA74C403A7B03D37E16F268.crl rsync://rpkica.twnic.tw/rpki/CARLWATCH/0/6A8F810EB0BF683DFCA74C403A7B03D37E16F268.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6A8F810EB0BF683DFCA74C403A7B03D37E16F268.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 19:34:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:5a:ef:ba:94:b1:86:99:17:59:74:f8:4a:03:74:17:e5:b0:f9:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A8F810EB0BF683DFCA74C403A7B03D37E16F268 Validity Not Before: Jun 12 19:17:52 2026 GMT Not After : Jun 13 19:34:52 2026 GMT Subject: CN=3BFAF9C1EE718F0798C2EDDE862B8D6BFDBD9227 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b1:c7:f3:46:f2:e9:b9:4d:1c:ff:99:31:a8: 92:49:7f:dc:33:ae:c4:f8:9f:b7:ca:4e:88:99:91: 7b:a2:55:47:c6:77:05:27:f6:74:f3:df:c1:23:4c: ce:0d:8b:98:e1:0f:64:0d:06:15:b6:01:21:9b:15: 78:89:55:81:41:e3:97:b0:bb:c3:15:9e:ea:9d:7e: c6:37:c6:f1:27:4a:94:56:34:5f:df:12:8d:48:ea: dc:b4:b4:cd:66:61:56:5e:a5:ed:8d:ad:15:99:1f: df:a6:a9:1c:2a:63:05:2e:6b:53:f5:df:94:9e:23: 0f:a8:de:bc:85:c1:68:90:42:23:f6:23:b2:a9:d0: 69:15:6d:9c:3c:41:f3:02:79:c7:69:5a:0f:f1:2a: 02:91:f4:cd:04:c3:63:58:19:a1:a0:ec:32:c1:94: 0d:dc:cd:fa:50:85:b7:ad:16:52:37:d6:fd:0a:1c: 90:d2:3a:91:4c:b3:b2:cb:d9:e6:d2:2c:3c:c2:11: 61:e1:02:3e:44:7c:b0:57:bf:f8:7e:8e:45:fa:ba: b0:e4:2b:73:0b:cb:9d:ee:2d:66:c0:d5:16:34:ea: bc:04:14:31:d2:87:6f:e1:c5:ad:12:76:25:29:00: 43:62:6d:95:20:80:d6:7f:f5:e0:03:6a:49:0c:5f: 36:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:FA:F9:C1:EE:71:8F:07:98:C2:ED:DE:86:2B:8D:6B:FD:BD:92:27 X509v3 Authority Key Identifier: keyid:6A:8F:81:0E:B0:BF:68:3D:FC:A7:4C:40:3A:7B:03:D3:7E:16:F2:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CARLWATCH/0/6A8F810EB0BF683DFCA74C403A7B03D37E16F268.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6A8F810EB0BF683DFCA74C403A7B03D37E16F268.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CARLWATCH/0/6A8F810EB0BF683DFCA74C403A7B03D37E16F268.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:90:5a:eb:0d:5c:2b:2c:ed:ec:37:89:a4:9e:a7:55:76:af: b5:ac:59:0a:96:90:90:e0:db:6f:cf:93:eb:5d:77:6c:62:d9: f8:da:d0:5c:23:a9:3b:27:3b:f5:f9:ce:99:49:81:6f:7e:91: 02:b0:77:6b:68:2c:30:73:37:38:e8:4d:a7:77:fa:cb:70:e8: a4:32:de:e4:7f:07:ca:bf:fb:8b:a4:40:63:53:7a:98:8c:0e: 7d:b8:5f:33:31:5c:2b:6c:bc:12:1d:e5:3f:bc:1c:45:3e:92: a6:88:e5:cd:05:71:4f:96:f3:6f:16:ec:dc:3b:f6:31:5b:2c: 98:c7:87:fa:db:8a:40:37:c0:05:e7:d6:31:d4:aa:e3:61:ae: 43:81:5a:19:1b:9e:9c:3e:e4:46:d7:fd:93:32:b5:ad:62:e0: be:f0:ed:2d:bb:47:08:5d:f9:4c:1f:30:3a:62:90:85:29:a8: 6c:54:13:e7:39:ac:43:58:06:7a:24:15:08:ca:09:23:b9:1d: 75:a2:8e:cb:68:52:1c:64:1d:b9:0c:be:a4:0a:2e:15:be:17: 65:1d:82:af:77:e0:5b:09:62:aa:5c:3f:38:2b:f1:c9:ab:fa: 19:d8:7d:0d:29:01:d3:cb:57:22:26:5e:e4:46:b2:b3:03:a0: 11:b4:41:af -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIURlrvupSxhpkXWXT4SgN0F+Ww+a8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkE4RjgxMEVCMEJGNjgzREZDQTc0QzQwM0E3QjAzRDM3 RTE2RjI2ODAeFw0yNjA2MTIxOTE3NTJaFw0yNjA2MTMxOTM0NTJaMDMxMTAvBgNV BAMTKDNCRkFGOUMxRUU3MThGMDc5OEMyRURERTg2MkI4RDZCRkRCRDkyMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJscfzRvLpuU0c/5kxqJJJf9wz rsT4n7fKToiZkXuiVUfGdwUn9nTz38EjTM4Ni5jhD2QNBhW2ASGbFXiJVYFB45ew u8MVnuqdfsY3xvEnSpRWNF/fEo1I6ty0tM1mYVZepe2NrRWZH9+mqRwqYwUua1P1 35SeIw+o3ryFwWiQQiP2I7Kp0GkVbZw8QfMCecdpWg/xKgKR9M0Ew2NYGaGg7DLB lA3czfpQhbetFlI31v0KHJDSOpFMs7LL2ebSLDzCEWHhAj5EfLBXv/h+jkX6urDk K3MLy53uLWbA1RY06rwEFDHSh2/hxa0SdiUpAENibZUggNZ/9eADakkMXzbjAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUO/r5we5xjweYwu3ehiuNa/29kicwHwYDVR0j BBgwFoAUao+BDrC/aD38p0xAOnsD034W8mgwDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0FSTFdB VENILzAvNkE4RjgxMEVCMEJGNjgzREZDQTc0QzQwM0E3QjAzRDM3RTE2RjI2OC5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMS82QThGODEwRUIwQkY2ODNERkNBNzRDNDAz QTdCMDNEMzdFMTZGMjY4LmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0FSTFdBVENILzAvNkE4Rjgx MEVCMEJGNjgzREZDQTc0QzQwM0E3QjAzRDM3RTE2RjI2OC5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBACSQ WusNXCss7ew3iaSep1V2r7WsWQqWkJDg22/Pk+tdd2xi2fja0FwjqTsnO/X5zplJ gW9+kQKwd2toLDBzNzjoTad3+stw6KQy3uR/B8q/+4ukQGNTepiMDn24XzMxXCts vBId5T+8HEU+kqaI5c0FcU+W828W7Nw79jFbLJjHh/rbikA3wAXn1jHUquNhrkOB Whkbnpw+5EbX/ZMyta1i4L7w7S27Rwhd+UwfMDpikIUpqGxUE+c5rENYBnokFQjK CSO5HXWijstoUhxkHbkMvqQKLhW+F2Udgq934FsJYqpcPzgr8cmr+hnYfQ0pAdPL VyImXuRGsrMDoBG0Qa8= -----END CERTIFICATE-----Generated at Sat Jun 13 11:29:29 2026 by rpki-client