$ rpki-client -vvvf rpkica.twnic.tw/rpki/CATHDD/0/21DBFD1921121F730C614C0DE6212CD6949CD5AF.mft File: 21DBFD1921121F730C614C0DE6212CD6949CD5AF.mft (raw, json) Hash identifier: Ri2Z0bJZzzXQAjzGKWZMoiTUix4x9fJABWVKDFi/+8A= Subject key identifier: A3:03:7B:51:02:31:30:62:A1:0B:B5:DC:07:DB:EC:97:71:40:A9:1D Authority key identifier: 21:DB:FD:19:21:12:1F:73:0C:61:4C:0D:E6:21:2C:D6:94:9C:D5:AF Certificate issuer: /CN=21DBFD1921121F730C614C0DE6212CD6949CD5AF Certificate serial: 4331A7BAFC48AF4FB0D29758700EB45075E4B905 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/21DBFD1921121F730C614C0DE6212CD6949CD5AF.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CATHDD/0/21DBFD1921121F730C614C0DE6212CD6949CD5AF.mft Manifest number: B6 Signing time: Sun 20 Sep 2026 18:59:07 +0000 Manifest this update: Sun 20 Sep 2026 18:54:07 +0000 Manifest next update: Mon 21 Sep 2026 20:36:07 +0000 Files and hashes: 1: 21DBFD1921121F730C614C0DE6212CD6949CD5AF.crl (hash: JAVwkG3PPqdPAAjVLDE1dI+OX33rHPH10wPYoEdPBUs=) 2: 323430313a636436303a3a2f34302d3430203d3e20323134303330.roa (hash: 780V3DLt+Fe7Fs8V4ULwUWJozzo56xPXySO9+JGJ2W8=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CATHDD/0/21DBFD1921121F730C614C0DE6212CD6949CD5AF.crl rsync://rpkica.twnic.tw/rpki/CATHDD/0/21DBFD1921121F730C614C0DE6212CD6949CD5AF.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/21DBFD1921121F730C614C0DE6212CD6949CD5AF.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 20:36:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:31:a7:ba:fc:48:af:4f:b0:d2:97:58:70:0e:b4:50:75:e4:b9:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21DBFD1921121F730C614C0DE6212CD6949CD5AF Validity Not Before: Sep 20 18:54:07 2026 GMT Not After : Sep 21 20:36:07 2026 GMT Subject: CN=A3037B5102313062A10BB5DC07DBEC977140A91D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:cc:8b:ba:52:8f:62:41:74:23:7a:aa:f2:79: 3d:18:9b:de:d3:20:48:27:51:97:00:fc:de:0b:50: 69:d6:67:b0:f8:fb:e9:57:39:3e:20:9c:14:ad:4e: 0d:69:0e:8c:4c:d3:9a:70:9c:a3:46:6d:16:cd:9c: ac:1a:3d:55:a6:d8:dd:84:50:f8:9c:3a:7b:08:ec: b9:23:a7:fa:5d:67:8b:bc:be:ff:2f:3d:c9:48:b0: cf:fa:78:dc:e5:4a:3b:67:35:48:35:af:3e:4b:92: 18:3e:8d:32:5e:74:98:26:de:e6:f6:93:40:da:8e: 02:55:37:fb:3c:0f:b8:20:9a:1a:bc:85:aa:41:10: 6f:fc:e7:cd:80:a0:ea:e0:60:bf:ab:ba:dc:90:fa: 96:7a:4c:16:4b:19:c1:11:35:2a:36:99:60:45:0e: 70:cf:74:f2:18:d2:b5:85:78:02:68:24:9e:32:91: 06:6b:ad:ca:56:57:82:1e:41:67:31:c9:b2:f5:f5: eb:6b:b3:25:28:b9:47:ed:a2:1c:25:63:86:a3:08: eb:00:60:5b:cd:43:09:06:a6:2f:bd:09:83:d8:f9: 5f:72:2b:8e:78:a6:c6:c5:0e:f1:a1:a3:c9:7d:ee: 25:3a:40:e1:57:3c:06:cc:35:c1:bd:dd:b2:bf:9d: dc:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:03:7B:51:02:31:30:62:A1:0B:B5:DC:07:DB:EC:97:71:40:A9:1D X509v3 Authority Key Identifier: keyid:21:DB:FD:19:21:12:1F:73:0C:61:4C:0D:E6:21:2C:D6:94:9C:D5:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CATHDD/0/21DBFD1921121F730C614C0DE6212CD6949CD5AF.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/21DBFD1921121F730C614C0DE6212CD6949CD5AF.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CATHDD/0/21DBFD1921121F730C614C0DE6212CD6949CD5AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:e3:3c:e4:68:60:2d:8c:49:60:6a:d8:37:4c:28:cd:22:e6: ae:6e:b5:86:47:d7:06:34:f6:58:3e:ee:ba:07:9f:b6:6a:ec: 7e:47:a2:a7:53:ae:e5:07:e5:d2:b8:f0:bd:24:cd:5e:fc:e3: e4:09:0b:d3:34:38:a4:ac:68:ad:3a:81:6c:cb:f7:6c:1a:61: c9:19:30:7f:38:b8:2e:0f:b6:85:d1:cb:4a:21:89:77:62:d3: 4f:e6:4e:45:0a:5e:be:85:b0:27:b3:27:58:a0:bb:29:2b:95: bd:ed:db:d2:01:26:0a:b2:79:67:93:98:b9:f5:96:ec:1b:94: ba:c0:90:68:76:b5:a7:ce:e5:4d:a4:e6:71:06:23:26:8c:2f: 47:58:3e:21:55:67:d7:8d:85:6b:c9:34:8f:69:ff:dc:0f:bf: dd:e1:61:f0:55:01:50:fe:27:bf:81:70:2e:b9:ca:bd:a8:81: d4:80:9b:72:07:4a:bc:5a:9b:52:fd:90:2d:52:fc:87:0f:bd: fc:b2:59:e8:9c:24:32:26:d1:80:0e:c9:4c:d0:15:2e:07:89: 45:83:57:6f:55:ff:81:d1:49:9f:6c:ad:30:32:8a:e9:15:7a: 70:91:dc:be:64:be:6b:ad:f9:c3:b5:d6:29:f2:a8:d0:50:d9: f4:83:d9:b7 -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUQzGnuvxIr0+w0pdYcA60UHXkuQUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFEQkZEMTkyMTEyMUY3MzBDNjE0QzBERTYyMTJDRDY5 NDlDRDVBRjAeFw0yNjA5MjAxODU0MDdaFw0yNjA5MjEyMDM2MDdaMDMxMTAvBgNV BAMTKEEzMDM3QjUxMDIzMTMwNjJBMTBCQjVEQzA3REJFQzk3NzE0MEE5MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQzIu6Uo9iQXQjeqryeT0Ym97T IEgnUZcA/N4LUGnWZ7D4++lXOT4gnBStTg1pDoxM05pwnKNGbRbNnKwaPVWm2N2E UPicOnsI7Lkjp/pdZ4u8vv8vPclIsM/6eNzlSjtnNUg1rz5Lkhg+jTJedJgm3ub2 k0DajgJVN/s8D7ggmhq8hapBEG/8582AoOrgYL+rutyQ+pZ6TBZLGcERNSo2mWBF DnDPdPIY0rWFeAJoJJ4ykQZrrcpWV4IeQWcxybL19etrsyUouUftohwlY4ajCOsA YFvNQwkGpi+9CYPY+V9yK454psbFDvGho8l97iU6QOFXPAbMNcG93bK/ndwDAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQUowN7UQIxMGKhC7XcB9vsl3FAqR0wHwYDVR0j BBgwFoAUIdv9GSESH3MMYUwN5iEs1pSc1a8wDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0FUSERE LzAvMjFEQkZEMTkyMTEyMUY3MzBDNjE0QzBERTYyMTJDRDY5NDlDRDVBRi5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMS8yMURCRkQxOTIxMTIxRjczMEM2MTRDMERFNjIx MkNENjk0OUNENUFGLmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0FUSERELzAvMjFEQkZEMTkyMTEy MUY3MzBDNjE0QzBERTYyMTJDRDY5NDlDRDVBRi5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJDjPORoYC2M SWBq2DdMKM0i5q5utYZH1wY09lg+7roHn7Zq7H5HoqdTruUH5dK48L0kzV784+QJ C9M0OKSsaK06gWzL92waYckZMH84uC4PtoXRy0ohiXdi00/mTkUKXr6FsCezJ1ig uykrlb3t29IBJgqyeWeTmLn1luwblLrAkGh2tafO5U2k5nEGIyaML0dYPiFVZ9eN hWvJNI9p/9wPv93hYfBVAVD+J7+BcC65yr2ogdSAm3IHSrxam1L9kC1S/IcPvfyy WeicJDIm0YAOyUzQFS4HiUWDV29V/4HRSZ9srTAyiukVenCR3L5kvmut+cO11iny qNBQ2fSD2bc= -----END CERTIFICATE-----Generated at Mon Sep 21 05:02:04 2026 by rpki-client