$ rpki-client -vvvf rpkica.twnic.tw/rpki/CCP1138480/0/46B3BED406C1C960F5CFACC01A7EE79C741FB3A3.mft File: 46B3BED406C1C960F5CFACC01A7EE79C741FB3A3.mft (raw, json) Hash identifier: Y0+T9AzJ43Qb8ILadexrN4KeszIQ1o3EvBrXlXgIlf0= Subject key identifier: FF:EA:18:2A:E4:D7:86:BE:5C:3B:FA:5E:4C:16:79:CE:5E:11:A6:2F Authority key identifier: 46:B3:BE:D4:06:C1:C9:60:F5:CF:AC:C0:1A:7E:E7:9C:74:1F:B3:A3 Certificate issuer: /CN=46B3BED406C1C960F5CFACC01A7EE79C741FB3A3 Certificate serial: 7B2AAB4595DEE152DFA6BC898CFF6A70BDC2BC71 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/46B3BED406C1C960F5CFACC01A7EE79C741FB3A3.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CCP1138480/0/46B3BED406C1C960F5CFACC01A7EE79C741FB3A3.mft Manifest number: B2 Signing time: Sun 20 Sep 2026 16:09:56 +0000 Manifest this update: Sun 20 Sep 2026 16:04:56 +0000 Manifest next update: Mon 21 Sep 2026 16:34:56 +0000 Files and hashes: 1: 46B3BED406C1C960F5CFACC01A7EE79C741FB3A3.crl (hash: BfC06tN1wooxhF3fLjxOUu5FZOVDc5Pg78ifCECul4k=) 2: 323430303a353061303a3a2f33322d3634203d3e203633383933.roa (hash: TnjJryb+Qul3lN6BZH0PnHfwQC0HukNIzPm52sh0EhY=) 3: 3130332e3138302e31362e302f32332d3234203d3e203633383933.roa (hash: 5tICSwbzk1GhyxpTua1hBI7Pmc3s/aXZo1jpw+tiEn0=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CCP1138480/0/46B3BED406C1C960F5CFACC01A7EE79C741FB3A3.crl rsync://rpkica.twnic.tw/rpki/CCP1138480/0/46B3BED406C1C960F5CFACC01A7EE79C741FB3A3.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/46B3BED406C1C960F5CFACC01A7EE79C741FB3A3.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 16:34:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:2a:ab:45:95:de:e1:52:df:a6:bc:89:8c:ff:6a:70:bd:c2:bc:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46B3BED406C1C960F5CFACC01A7EE79C741FB3A3 Validity Not Before: Sep 20 16:04:56 2026 GMT Not After : Sep 21 16:34:56 2026 GMT Subject: CN=FFEA182AE4D786BE5C3BFA5E4C1679CE5E11A62F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e8:31:95:eb:12:8a:ef:c6:ce:cd:68:d6:ac: b0:df:30:3b:37:51:1d:96:c8:38:89:93:48:d4:c4: d8:f3:2f:fc:5e:69:18:23:2f:d6:50:7e:be:fa:03: f3:c1:03:e7:9f:df:20:a8:7c:71:8f:6f:7f:e3:b7: b5:bf:b3:00:b8:c0:c7:14:e8:3c:29:05:f9:9f:bb: b0:be:14:a6:49:8f:f9:0d:81:e3:06:85:f1:0c:f5: 85:8a:54:d7:d8:f1:69:f3:c8:63:bb:74:bc:23:e1: 97:c9:d2:fa:81:1f:af:3d:ea:c2:87:44:3b:38:1d: 3b:55:07:e2:56:d9:94:2f:c4:4b:4c:20:c0:e2:3f: 2e:eb:90:28:db:4f:f0:36:68:e3:a8:46:fc:ea:1b: 36:fe:e2:35:d1:48:ac:ef:31:61:f0:c7:0f:c2:a9: 04:e2:e1:e6:01:74:b7:3c:6f:f8:43:e7:98:d9:0d: 3f:70:42:ce:b1:c8:eb:fb:9c:26:ad:5c:04:cb:8a: 03:16:d6:57:d9:94:86:cf:86:13:99:8d:d0:d0:0e: dc:b0:ae:60:77:d3:60:7d:5f:e9:96:2f:1a:5a:41: 73:64:99:4f:e2:e3:c0:dc:69:1d:fd:0d:28:53:95: 8c:a8:11:8b:25:c2:8d:01:b2:2a:94:61:7b:d3:92: 38:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:EA:18:2A:E4:D7:86:BE:5C:3B:FA:5E:4C:16:79:CE:5E:11:A6:2F X509v3 Authority Key Identifier: keyid:46:B3:BE:D4:06:C1:C9:60:F5:CF:AC:C0:1A:7E:E7:9C:74:1F:B3:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CCP1138480/0/46B3BED406C1C960F5CFACC01A7EE79C741FB3A3.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/46B3BED406C1C960F5CFACC01A7EE79C741FB3A3.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CCP1138480/0/46B3BED406C1C960F5CFACC01A7EE79C741FB3A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:47:ff:dc:ef:f7:09:ef:48:a2:3f:67:ff:50:df:3e:69:3d: b3:dc:0f:93:9b:c6:62:ac:0a:91:64:28:0e:37:98:b1:43:c3: b5:7d:49:57:36:d1:51:b8:a5:e4:4d:5b:02:8d:ea:20:00:24: 40:ed:37:bc:0b:65:3b:52:14:92:cd:e5:2b:e5:88:a9:f5:d9: f5:b7:61:0b:60:de:7a:58:a1:23:55:7e:0a:4d:65:a3:78:f9: 3b:87:ba:df:9d:70:fc:b7:a2:98:03:19:40:11:fc:07:23:23: 11:4c:fb:1f:d3:26:96:e8:8e:d7:e6:a7:3d:ce:11:f7:2a:76: 88:e3:a4:83:71:c2:71:c1:e5:55:5d:42:d5:a7:31:5f:47:52: 4d:fb:da:b6:bb:87:b8:7d:f2:e0:a5:11:2d:ae:6d:b3:5b:e9: 7f:28:9e:39:88:5b:50:e3:d1:57:b6:e9:46:5f:5e:0e:26:c9: a0:26:17:b0:2c:48:6f:6c:84:7d:ae:9a:d7:19:ab:32:cf:7e: c1:49:f5:08:16:5b:b6:92:e1:95:f2:8c:fa:2b:9c:fd:b6:e0: 24:98:73:11:11:98:d9:48:3d:27:11:c6:52:a8:99:d6:39:2d: 5a:20:c9:f1:3d:7a:72:87:63:ce:5a:18:13:61:e6:14:a7:90: 48:18:88:96 -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgIUeyqrRZXe4VLfpryJjP9qcL3CvHEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDZCM0JFRDQwNkMxQzk2MEY1Q0ZBQ0MwMUE3RUU3OUM3 NDFGQjNBMzAeFw0yNjA5MjAxNjA0NTZaFw0yNjA5MjExNjM0NTZaMDMxMTAvBgNV BAMTKEZGRUExODJBRTRENzg2QkU1QzNCRkE1RTRDMTY3OUNFNUUxMUE2MkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC46DGV6xKK78bOzWjWrLDfMDs3 UR2WyDiJk0jUxNjzL/xeaRgjL9ZQfr76A/PBA+ef3yCofHGPb3/jt7W/swC4wMcU 6DwpBfmfu7C+FKZJj/kNgeMGhfEM9YWKVNfY8WnzyGO7dLwj4ZfJ0vqBH6896sKH RDs4HTtVB+JW2ZQvxEtMIMDiPy7rkCjbT/A2aOOoRvzqGzb+4jXRSKzvMWHwxw/C qQTi4eYBdLc8b/hD55jZDT9wQs6xyOv7nCatXATLigMW1lfZlIbPhhOZjdDQDtyw rmB302B9X+mWLxpaQXNkmU/i48DcaR39DShTlYyoEYslwo0BsiqUYXvTkji5AgMB AAGjggH2MIIB8jAdBgNVHQ4EFgQU/+oYKuTXhr5cO/peTBZ5zl4Rpi8wHwYDVR0j BBgwFoAURrO+1AbByWD1z6zAGn7nnHQfs6MwDgYDVR0PAQH/BAQDAgeAMGcGA1Ud HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0NQMTEz ODQ4MC8wLzQ2QjNCRUQ0MDZDMUM5NjBGNUNGQUNDMDFBN0VFNzlDNzQxRkIzQTMu Y3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBLzEvNDZCM0JFRDQwNkMxQzk2MEY1Q0ZBQ0Mw MUE3RUU3OUM3NDFGQjNBMy5jZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzAL hlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0NDUDExMzg0ODAvMC80NkIz QkVENDA2QzFDOTYwRjVDRkFDQzAxQTdFRTc5Qzc0MUZCM0EzLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA oUf/3O/3Ce9Ioj9n/1DfPmk9s9wPk5vGYqwKkWQoDjeYsUPDtX1JVzbRUbil5E1b Ao3qIAAkQO03vAtlO1IUks3lK+WIqfXZ9bdhC2DeelihI1V+Ck1lo3j5O4e6351w /LeimAMZQBH8ByMjEUz7H9MmluiO1+anPc4R9yp2iOOkg3HCccHlVV1C1acxX0dS TfvatruHuH3y4KURLa5ts1vpfyieOYhbUOPRV7bpRl9eDibJoCYXsCxIb2yEfa6a 1xmrMs9+wUn1CBZbtpLhlfKM+iuc/bbgJJhzERGY2Ug9JxHGUqiZ1jktWiDJ8T16 codjzloYE2HmFKeQSBiIlg== -----END CERTIFICATE-----Generated at Mon Sep 21 09:49:55 2026 by rpki-client