$ rpki-client -vvvf rpkica.twnic.tw/rpki/CHINATRUST/0/8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D.mft File: 8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D.mft (raw, json) Hash identifier: PBf1oaQEemaLbYfyAp/VmkTrZMwvzT6hmXBjzmrFo68= Subject key identifier: 0E:CF:E3:C5:D9:AA:A8:F4:0F:B3:50:0B:85:40:2A:EA:CC:B5:9E:1F Authority key identifier: 80:99:DF:C0:CF:C8:3C:5D:DF:D9:0C:A5:EA:31:4C:C9:A8:67:7F:2D Certificate issuer: /CN=8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D Certificate serial: 6E5E8FF95BED5E724C53987B171122EA2390704A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CHINATRUST/0/8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D.mft Manifest number: B6 Signing time: Mon 21 Sep 2026 17:16:40 +0000 Manifest this update: Mon 21 Sep 2026 17:11:40 +0000 Manifest next update: Tue 22 Sep 2026 18:45:40 +0000 Files and hashes: 1: 3130332e3132362e3136342e302f32322d3234203d3e20313331313433.roa (hash: GE6WCLDpaYk350arhm6T0hTObeMU3HA8Pi8MilsnVwk=) 2: 323430353a333330303a3a2f33322d3936203d3e20313331313433.roa (hash: ZKiaer8NjI3ngd1EbZw69ZFOR2ZlmwyGwjPK8gzDQck=) 3: 8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D.crl (hash: gh3kfGPeyyNsCjCrQKKTGtxO5H3TZBLEwn2V+8UEdmM=) 4: 3137352e3138342e3234302e302f32312d3234203d3e20313331313433.roa (hash: 0QQUBFrsQpXXTYt4aIh8/MbRTgI4V9RhZAxoH9bVt18=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CHINATRUST/0/8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D.crl rsync://rpkica.twnic.tw/rpki/CHINATRUST/0/8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 18:45:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:5e:8f:f9:5b:ed:5e:72:4c:53:98:7b:17:11:22:ea:23:90:70:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D Validity Not Before: Sep 21 17:11:40 2026 GMT Not After : Sep 22 18:45:40 2026 GMT Subject: CN=0ECFE3C5D9AAA8F40FB3500B85402AEACCB59E1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:18:97:5e:45:d7:06:3c:4d:74:82:25:63:e3: 82:3b:67:97:1e:9f:76:3a:f5:a3:45:7d:4e:aa:99: 57:5c:ed:58:e0:92:6b:60:9d:04:c1:c1:61:6f:8f: cd:eb:69:d2:54:b6:e0:5f:8c:d1:2b:d8:ed:6e:35: 42:56:60:c5:66:3a:1b:de:7e:ef:b2:fe:8a:60:94: e6:3f:1b:12:75:29:89:3c:ae:33:9e:87:66:71:ff: f2:e9:02:55:41:80:67:e6:71:57:5f:7a:ee:2d:ce: 94:3e:d0:24:be:00:80:56:cc:8c:01:5f:ca:e8:84: b3:b3:95:f6:5d:a7:8c:37:ff:01:3f:a1:a6:4e:3b: 47:73:75:78:dc:cf:21:f5:45:0c:d3:bd:b4:f9:6c: 47:71:be:d4:8c:d6:19:7a:01:72:83:6f:56:92:87: 83:8c:e6:a0:4d:b9:1c:68:b7:24:14:84:9f:b4:7e: f6:90:b0:d6:35:c1:cf:a8:26:19:70:18:fb:47:07: bf:2a:65:cf:53:ca:54:35:8a:39:5d:a8:51:05:cf: 15:e1:f7:29:5a:97:b0:51:26:d9:55:67:c5:59:98: ce:b5:7b:01:68:94:83:f4:79:1e:d4:c5:3f:aa:9a: 99:98:ec:96:b6:96:88:b9:36:0f:ca:0c:3b:ec:1d: 02:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:CF:E3:C5:D9:AA:A8:F4:0F:B3:50:0B:85:40:2A:EA:CC:B5:9E:1F X509v3 Authority Key Identifier: keyid:80:99:DF:C0:CF:C8:3C:5D:DF:D9:0C:A5:EA:31:4C:C9:A8:67:7F:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CHINATRUST/0/8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHINATRUST/0/8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:a0:29:5d:38:aa:c2:0d:50:fa:9d:0f:99:0e:ea:94:03:dd: 3c:12:e4:37:b6:14:ed:64:fa:51:f6:29:fd:11:de:50:64:38: 69:a9:72:00:f8:ed:72:7c:1c:ab:05:fd:e2:ce:a3:26:6b:5b: 5e:ac:0f:0d:50:69:94:bf:c6:d1:ba:09:c2:a6:3e:0e:e5:c0: 79:ae:9f:65:42:d4:63:f1:5b:de:92:55:6a:2b:43:92:36:c7: a2:9a:93:a3:fd:06:88:c7:c9:2a:ea:e8:4b:c7:44:32:24:2b: f9:4f:07:6d:7f:bb:99:a9:55:f7:0b:3a:d7:f8:f2:7b:b4:b8: ee:68:52:cf:96:21:66:73:80:c5:f5:77:da:62:8b:f5:45:84: aa:ac:e2:7d:0c:fc:7e:a2:e4:c5:2f:cf:67:27:e4:97:8a:d1: ba:3b:0a:b4:47:5d:5c:ce:d4:30:a7:06:69:fa:88:a2:dc:ef: 0d:42:9c:e8:42:4e:71:7f:a2:6b:9b:0e:ce:fc:2f:ef:dc:17: 73:94:b4:53:3c:a3:a3:04:f8:7a:33:53:bb:eb:f4:6e:e4:13: 1d:cc:66:20:dd:40:41:f7:81:a2:f2:03:2e:f8:85:3f:b0:15: c3:ed:31:cd:de:c4:cd:18:1f:70:fc:b0:ae:58:fe:3f:f3:a3: 34:78:15:e5 -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgIUbl6P+VvtXnJMU5h7FxEi6iOQcEowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODA5OURGQzBDRkM4M0M1RERGRDkwQ0E1RUEzMTRDQzlB ODY3N0YyRDAeFw0yNjA5MjExNzExNDBaFw0yNjA5MjIxODQ1NDBaMDMxMTAvBgNV BAMTKDBFQ0ZFM0M1RDlBQUE4RjQwRkIzNTAwQjg1NDAyQUVBQ0NCNTlFMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaGJdeRdcGPE10giVj44I7Z5ce n3Y69aNFfU6qmVdc7VjgkmtgnQTBwWFvj83radJUtuBfjNEr2O1uNUJWYMVmOhve fu+y/opglOY/GxJ1KYk8rjOeh2Zx//LpAlVBgGfmcVdfeu4tzpQ+0CS+AIBWzIwB X8rohLOzlfZdp4w3/wE/oaZOO0dzdXjczyH1RQzTvbT5bEdxvtSM1hl6AXKDb1aS h4OM5qBNuRxotyQUhJ+0fvaQsNY1wc+oJhlwGPtHB78qZc9TylQ1ijldqFEFzxXh 9ylal7BRJtlVZ8VZmM61ewFolIP0eR7UxT+qmpmY7Ja2loi5Ng/KDDvsHQKZAgMB AAGjggH2MIIB8jAdBgNVHQ4EFgQUDs/jxdmqqPQPs1ALhUAq6sy1nh8wHwYDVR0j BBgwFoAUgJnfwM/IPF3f2Qyl6jFMyahnfy0wDgYDVR0PAQH/BAQDAgeAMGcGA1Ud HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0hJTkFU UlVTVC8wLzgwOTlERkMwQ0ZDODNDNURERkQ5MENBNUVBMzE0Q0M5QTg2NzdGMkQu Y3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBLzEvODA5OURGQzBDRkM4M0M1RERGRDkwQ0E1 RUEzMTRDQzlBODY3N0YyRC5jZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzAL hlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0NISU5BVFJVU1QvMC84MDk5 REZDMENGQzgzQzVEREZEOTBDQTVFQTMxNENDOUE4Njc3RjJELm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA FqApXTiqwg1Q+p0PmQ7qlAPdPBLkN7YU7WT6UfYp/RHeUGQ4aalyAPjtcnwcqwX9 4s6jJmtbXqwPDVBplL/G0boJwqY+DuXAea6fZULUY/Fb3pJVaitDkjbHopqTo/0G iMfJKuroS8dEMiQr+U8HbX+7malV9ws61/jye7S47mhSz5YhZnOAxfV32mKL9UWE qqzifQz8fqLkxS/PZyfkl4rRujsKtEddXM7UMKcGafqIotzvDUKc6EJOcX+ia5sO zvwv79wXc5S0UzyjowT4ejNTu+v0buQTHcxmIN1AQfeBovIDLviFP7AVw+0xzd7E zRgfcPywrlj+P/OjNHgV5Q== -----END CERTIFICATE-----Generated at Tue Sep 22 01:19:59 2026 by rpki-client