$ rpki-client -vvvf rpkica.twnic.tw/rpki/CHINALIFE/0/CE5A8100BA0994A2B807F5F4FB741C528EEACCDD.mft File: CE5A8100BA0994A2B807F5F4FB741C528EEACCDD.mft (raw, json) Hash identifier: ft47mXCUifaaglIdC7cKxBQBXgH7yd+WmMSeSO0aVkg= Subject key identifier: E8:06:70:DD:61:14:6E:93:52:D5:A6:BE:A8:71:EB:B2:B9:C1:36:46 Authority key identifier: CE:5A:81:00:BA:09:94:A2:B8:07:F5:F4:FB:74:1C:52:8E:EA:CC:DD Certificate issuer: /CN=CE5A8100BA0994A2B807F5F4FB741C528EEACCDD Certificate serial: 01C8BAA41E1FEACEE07463CEE62154B1DB2A1B63 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE5A8100BA0994A2B807F5F4FB741C528EEACCDD.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CHINALIFE/0/CE5A8100BA0994A2B807F5F4FB741C528EEACCDD.mft Manifest number: B5 Signing time: Mon 21 Sep 2026 03:10:37 +0000 Manifest this update: Mon 21 Sep 2026 03:05:37 +0000 Manifest next update: Tue 22 Sep 2026 05:33:37 +0000 Files and hashes: 1: 3130332e3132332e3138382e302f32342d3234203d3e203138303432.roa (hash: VGG3iALCYmsIo1frTwJ57vcG6Z53Cw4xXzO8I+lKQrc=) 2: 3130332e3132332e3139302e302f32342d3234203d3e2039393234.roa (hash: MkYfWxcvdtrJJbnLts1+66GKlU7GZ8ty9L0jiRzo53o=) 3: CE5A8100BA0994A2B807F5F4FB741C528EEACCDD.crl (hash: v1UqLRqF5q9KP7uWrMZrPynMIKGxzSbDYPrd2/heHjo=) 4: 3130332e3132332e3138392e302f32342d3234203d3e2039393234.roa (hash: ehfoOrBXE/RYfQPRqQV54VXyN1X6HRTFxmEyqkWRtOI=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CHINALIFE/0/CE5A8100BA0994A2B807F5F4FB741C528EEACCDD.crl rsync://rpkica.twnic.tw/rpki/CHINALIFE/0/CE5A8100BA0994A2B807F5F4FB741C528EEACCDD.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE5A8100BA0994A2B807F5F4FB741C528EEACCDD.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 03:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:c8:ba:a4:1e:1f:ea:ce:e0:74:63:ce:e6:21:54:b1:db:2a:1b:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE5A8100BA0994A2B807F5F4FB741C528EEACCDD Validity Not Before: Sep 21 03:05:37 2026 GMT Not After : Sep 22 05:33:37 2026 GMT Subject: CN=E80670DD61146E9352D5A6BEA871EBB2B9C13646 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b5:56:ce:56:3a:df:36:1d:18:02:55:96:0c: 0e:14:71:05:31:56:3c:3e:11:53:e6:a9:98:ba:2e: 9f:58:26:f7:ba:6a:96:79:51:10:b6:d7:9d:87:a5: 47:ec:cf:f7:db:c5:30:a2:59:07:3e:d5:1a:47:cc: 17:81:0f:4a:fa:09:d8:1a:f6:d9:a2:7a:60:41:51: 15:86:25:f4:e0:c0:d3:ac:85:68:ba:d3:6d:56:23: 7f:ea:dc:4f:a7:d1:58:8a:9f:1c:d1:d4:4d:c9:e0: be:4e:de:33:93:5d:e5:6d:37:77:b5:41:ee:8e:8e: 09:2e:cc:a1:e2:79:8c:6c:1e:64:cf:b7:9c:85:55: 17:2a:5b:82:e6:b4:f7:69:e7:e1:d3:44:00:f3:24: 85:eb:42:91:44:d7:e6:e0:7c:df:1c:23:69:05:9c: 79:30:98:0d:4f:42:8e:f2:66:43:c8:0c:c2:22:fe: e6:87:dc:6c:ec:4d:a6:27:4d:21:29:84:9d:f7:c5: 82:c6:39:fd:f7:93:3d:41:c9:db:aa:a5:1d:ca:48: db:44:e0:75:d0:af:dd:93:59:dc:e7:d3:ed:52:df: bb:58:17:4e:0d:0a:32:b7:8a:00:11:25:38:d1:49: 65:16:88:ed:8e:4a:46:82:41:d5:55:f9:e7:f6:d7: 2d:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:06:70:DD:61:14:6E:93:52:D5:A6:BE:A8:71:EB:B2:B9:C1:36:46 X509v3 Authority Key Identifier: keyid:CE:5A:81:00:BA:09:94:A2:B8:07:F5:F4:FB:74:1C:52:8E:EA:CC:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CHINALIFE/0/CE5A8100BA0994A2B807F5F4FB741C528EEACCDD.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE5A8100BA0994A2B807F5F4FB741C528EEACCDD.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHINALIFE/0/CE5A8100BA0994A2B807F5F4FB741C528EEACCDD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:8e:e2:67:0f:7c:c5:33:55:55:f4:dc:4e:01:83:de:f0:42: 52:b0:c9:6f:32:a5:c6:70:29:74:c0:58:08:75:96:e5:73:a2: 9d:5a:07:28:28:ed:7f:43:b1:2f:28:99:f7:f6:15:b7:ef:8f: 4f:71:d7:7c:e4:f6:d1:96:c6:57:30:08:5c:a4:8d:19:76:4b: 8d:46:25:5c:b4:75:85:2a:b0:8b:ed:ae:49:f0:3a:d9:23:d8: eb:e1:f9:e5:97:d5:16:8e:86:38:16:34:cc:7b:97:4a:f2:f0: 78:40:33:6c:ff:ee:dd:46:67:cd:e4:2d:b5:83:bf:3e:07:9a: 51:cb:fb:a3:48:7e:e8:6c:92:68:c0:fd:b4:50:4e:63:a9:82: 32:37:c9:c0:38:92:dd:95:b9:70:64:ae:b8:93:d2:82:24:b0: 44:df:e3:40:ad:6f:60:a2:ec:a1:06:f5:d2:c9:69:47:94:56: 68:64:3d:a9:6e:93:1e:eb:0b:3f:24:1f:fb:df:d8:9b:e5:0a: 91:0e:4d:e3:71:93:15:c3:48:e1:61:e4:15:29:1d:a2:62:13: fb:d4:47:5a:76:52:c1:47:55:18:4e:3e:56:30:c9:1d:4b:0e: 9b:4d:b7:c8:82:80:64:63:1d:43:c6:8b:5a:ab:ca:09:8a:f3: c0:3a:cf:b1 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUAci6pB4f6s7gdGPO5iFUsdsqG2MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0U1QTgxMDBCQTA5OTRBMkI4MDdGNUY0RkI3NDFDNTI4 RUVBQ0NERDAeFw0yNjA5MjEwMzA1MzdaFw0yNjA5MjIwNTMzMzdaMDMxMTAvBgNV BAMTKEU4MDY3MERENjExNDZFOTM1MkQ1QTZCRUE4NzFFQkIyQjlDMTM2NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCltVbOVjrfNh0YAlWWDA4UcQUx Vjw+EVPmqZi6Lp9YJve6apZ5URC2152HpUfsz/fbxTCiWQc+1RpHzBeBD0r6Cdga 9tmiemBBURWGJfTgwNOshWi6021WI3/q3E+n0ViKnxzR1E3J4L5O3jOTXeVtN3e1 Qe6OjgkuzKHieYxsHmTPt5yFVRcqW4LmtPdp5+HTRADzJIXrQpFE1+bgfN8cI2kF nHkwmA1PQo7yZkPIDMIi/uaH3GzsTaYnTSEphJ33xYLGOf33kz1ByduqpR3KSNtE 4HXQr92TWdzn0+1S37tYF04NCjK3igARJTjRSWUWiO2OSkaCQdVV+ef21y1XAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQU6AZw3WEUbpNS1aa+qHHrsrnBNkYwHwYDVR0j BBgwFoAUzlqBALoJlKK4B/X0+3QcUo7qzN0wDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0hJTkFM SUZFLzAvQ0U1QTgxMDBCQTA5OTRBMkI4MDdGNUY0RkI3NDFDNTI4RUVBQ0NERC5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMS9DRTVBODEwMEJBMDk5NEEyQjgwN0Y1RjRG Qjc0MUM1MjhFRUFDQ0RELmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0hJTkFMSUZFLzAvQ0U1QTgx MDBCQTA5OTRBMkI4MDdGNUY0RkI3NDFDNTI4RUVBQ0NERC5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAAyO 4mcPfMUzVVX03E4Bg97wQlKwyW8ypcZwKXTAWAh1luVzop1aBygo7X9DsS8omff2 Fbfvj09x13zk9tGWxlcwCFykjRl2S41GJVy0dYUqsIvtrknwOtkj2Ovh+eWX1RaO hjgWNMx7l0ry8HhAM2z/7t1GZ83kLbWDvz4HmlHL+6NIfuhskmjA/bRQTmOpgjI3 ycA4kt2VuXBkrriT0oIksETf40Ctb2Ci7KEG9dLJaUeUVmhkPalukx7rCz8kH/vf 2JvlCpEOTeNxkxXDSOFh5BUpHaJiE/vUR1p2UsFHVRhOPlYwyR1LDptNt8iCgGRj HUPGi1qrygmK88A6z7E= -----END CERTIFICATE-----Generated at Mon Sep 21 12:07:09 2026 by rpki-client