$ rpki-client -vvvf rpkica.twnic.tw/rpki/CKMATES/0/3D576C4841082805B3CDBD7337F3963A8833174B.mft File: 3D576C4841082805B3CDBD7337F3963A8833174B.mft (raw, json) Hash identifier: EWJ/q48juH46KXbJgQfPa3v9O8e+2IvTwhVx6kHrPFo= Subject key identifier: 7C:0E:E7:CB:A0:00:B8:9F:BA:1F:F9:0C:4E:8C:C2:E2:AD:99:88:63 Authority key identifier: 3D:57:6C:48:41:08:28:05:B3:CD:BD:73:37:F3:96:3A:88:33:17:4B Certificate issuer: /CN=3D576C4841082805B3CDBD7337F3963A8833174B Certificate serial: 293033038AFD87A3A2658980581AD452D5AB273C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3D576C4841082805B3CDBD7337F3963A8833174B.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CKMATES/0/3D576C4841082805B3CDBD7337F3963A8833174B.mft Manifest number: B8 Signing time: Sun 20 Sep 2026 14:09:41 +0000 Manifest this update: Sun 20 Sep 2026 14:04:41 +0000 Manifest next update: Mon 21 Sep 2026 18:03:41 +0000 Files and hashes: 1: 3130332e3131392e3231322e302f32322d3234203d3e20313331363239.roa (hash: eXsmebarUaems23bSj2ZcVD8dLS2085WCpxoaq88x4M=) 2: 3130332e3131392e3231352e302f32342d3234203d3e20313339363337.roa (hash: jPTm5d5SYsezMtn+BRkYU2/hKNSbQfuFpXU/01PcOeQ=) 3: 3130332e3131392e3231332e302f32342d3234203d3e20313331363239.roa (hash: EJjmwH6YAXPBMwmijz6eL3wQvRP4K1M4tTn06rZJrIA=) 4: 3D576C4841082805B3CDBD7337F3963A8833174B.crl (hash: ldSrv7UXRknU5fj3RnnSbXtHHBc3ACdgUphTAEksb50=) 5: 3130332e3131392e3231322e302f32322d3234203d3e20313333373437.roa (hash: zPQusnanznelCXG1KdOD21zkqA+VphGwDoshIYxRbJ0=) 6: 3130332e3131392e3231342e302f32342d3234203d3e20313339363337.roa (hash: BkQPXEKbvmbpHuwtKiewh9JYhpq3BksNtpHsw33H1fI=) 7: 3130332e3131392e3231342e302f32342d3234203d3e20313331363239.roa (hash: ATTGrI+LdxvHy7tZZvIf74Pi92V/OccZmHc6iAFqFXM=) 8: 3130332e3131392e3231332e302f32342d3234203d3e203136353039.roa (hash: PL2cz2Hbk/JdNHMN06li8HzqoQzLhVGaxZWqRcHi6hM=) 9: 3130332e3131392e3231342e302f32342d3234203d3e20313333333735.roa (hash: /UvybhcLKT1KK1desdUWoCsOTWNrRkdvIjVquH9d4MA=) 10: 3130332e3131392e3231332e302f32342d3234203d3e203134363138.roa (hash: sldyxDcFqyW0yrBmnmv5iDOduZFppPbQvxaSJnOI1Vw=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CKMATES/0/3D576C4841082805B3CDBD7337F3963A8833174B.crl rsync://rpkica.twnic.tw/rpki/CKMATES/0/3D576C4841082805B3CDBD7337F3963A8833174B.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3D576C4841082805B3CDBD7337F3963A8833174B.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 18:03:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:30:33:03:8a:fd:87:a3:a2:65:89:80:58:1a:d4:52:d5:ab:27:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D576C4841082805B3CDBD7337F3963A8833174B Validity Not Before: Sep 20 14:04:41 2026 GMT Not After : Sep 21 18:03:41 2026 GMT Subject: CN=7C0EE7CBA000B89FBA1FF90C4E8CC2E2AD998863 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ba:76:6b:aa:77:9f:3c:8d:be:0f:63:b6:c8: 05:51:7c:81:85:c9:d8:43:80:d0:f2:b0:13:e9:10: 16:64:e6:7d:d3:62:ea:01:9e:db:28:ce:40:a5:55: 88:42:a6:97:90:40:d5:e5:f3:cb:28:3b:ef:1b:ac: 4f:e7:fb:d7:8a:5f:15:cd:1c:b6:cc:46:ea:82:9b: aa:04:2a:0c:34:70:fd:ae:77:73:65:fd:86:98:4e: 45:e9:0f:8a:70:9f:0d:f1:64:9d:59:52:86:15:7f: 73:f0:f2:d5:59:31:0f:0b:b1:66:68:a7:4f:fb:67: e5:4a:54:45:be:29:88:97:62:11:b0:db:79:e9:97: 23:4c:07:81:4b:c7:c9:41:c1:75:30:7b:6d:88:2e: 66:a8:0b:50:72:4e:79:04:51:2b:36:a0:12:3d:00: d5:84:ed:31:5f:88:8e:54:26:ca:21:7d:f7:81:62: 42:65:f2:ad:68:26:52:3c:a6:99:32:c8:c6:ce:7a: a3:df:8f:66:25:a2:42:ad:4f:c6:f8:c1:3b:53:b3: 26:9a:e9:b7:8b:29:4b:64:69:6c:19:51:8f:32:8f: b9:2b:10:70:39:11:49:01:46:83:d6:90:93:64:f1: 1f:90:5f:64:95:bb:b6:d8:a0:56:57:2f:f9:7f:4e: e0:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:0E:E7:CB:A0:00:B8:9F:BA:1F:F9:0C:4E:8C:C2:E2:AD:99:88:63 X509v3 Authority Key Identifier: keyid:3D:57:6C:48:41:08:28:05:B3:CD:BD:73:37:F3:96:3A:88:33:17:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CKMATES/0/3D576C4841082805B3CDBD7337F3963A8833174B.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3D576C4841082805B3CDBD7337F3963A8833174B.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CKMATES/0/3D576C4841082805B3CDBD7337F3963A8833174B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:e7:2d:77:9c:15:6a:bb:c6:a8:b9:93:cd:2c:31:d1:22:00: 2f:3c:d6:61:c7:2d:6d:31:89:6f:70:61:e1:97:f3:9e:ae:7c: 8a:e4:fc:a7:95:cf:81:f8:38:cf:36:44:f1:31:c4:e0:d5:05: ee:b5:dd:82:35:65:4b:49:d8:e6:fc:d6:a7:37:56:59:5d:d0: 4a:cb:b3:d0:b3:c5:42:35:be:78:d9:75:8e:e9:82:b4:97:14: eb:e6:8b:25:29:22:cc:a2:38:13:a7:e9:52:97:36:a3:d5:a6: 92:27:84:66:2e:7b:59:51:19:97:27:54:31:e0:a1:d7:b7:3b: 6b:76:95:94:2a:91:ab:ae:81:15:d0:2f:fc:ce:f3:cd:2f:2d: 24:b7:ee:9f:be:5d:a6:67:b0:c8:1d:89:91:4f:99:e1:36:b5: 7e:12:52:e4:db:25:eb:e6:95:f3:5a:6c:7b:47:05:0e:f2:d1: 3d:a6:a9:b4:e7:b9:db:3b:75:71:88:b8:83:24:f4:aa:07:7b: 2d:97:72:8c:b4:eb:51:ff:3c:03:84:57:24:c3:f2:e0:95:57: 22:0e:85:f7:e8:b0:df:5b:00:60:a5:e0:0a:3f:08:06:54:88: cc:51:34:9b:b0:79:50:0e:8a:7a:62:e8:92:2c:84:32:7f:90: d7:85:be:3e -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIUKTAzA4r9h6OiZYmAWBrUUtWrJzwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q1NzZDNDg0MTA4MjgwNUIzQ0RCRDczMzdGMzk2M0E4 ODMzMTc0QjAeFw0yNjA5MjAxNDA0NDFaFw0yNjA5MjExODAzNDFaMDMxMTAvBgNV BAMTKDdDMEVFN0NCQTAwMEI4OUZCQTFGRjkwQzRFOENDMkUyQUQ5OTg4NjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuunZrqnefPI2+D2O2yAVRfIGF ydhDgNDysBPpEBZk5n3TYuoBntsozkClVYhCppeQQNXl88soO+8brE/n+9eKXxXN HLbMRuqCm6oEKgw0cP2ud3Nl/YaYTkXpD4pwnw3xZJ1ZUoYVf3Pw8tVZMQ8LsWZo p0/7Z+VKVEW+KYiXYhGw23nplyNMB4FLx8lBwXUwe22ILmaoC1ByTnkEUSs2oBI9 ANWE7TFfiI5UJsohffeBYkJl8q1oJlI8ppkyyMbOeqPfj2YlokKtT8b4wTtTsyaa 6beLKUtkaWwZUY8yj7krEHA5EUkBRoPWkJNk8R+QX2SVu7bYoFZXL/l/TuDRAgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQUfA7ny6AAuJ+6H/kMTozC4q2ZiGMwHwYDVR0j BBgwFoAUPVdsSEEIKAWzzb1zN/OWOogzF0swDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0tNQVRF Uy8wLzNENTc2QzQ4NDEwODI4MDVCM0NEQkQ3MzM3RjM5NjNBODgzMzE3NEIuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvM0Q1NzZDNDg0MTA4MjgwNUIzQ0RCRDczMzdG Mzk2M0E4ODMzMTc0Qi5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0NLTUFURVMvMC8zRDU3NkM0ODQx MDgyODA1QjNDREJENzMzN0YzOTYzQTg4MzMxNzRCLm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANOctd5wV arvGqLmTzSwx0SIALzzWYcctbTGJb3Bh4Zfznq58iuT8p5XPgfg4zzZE8THE4NUF 7rXdgjVlS0nY5vzWpzdWWV3QSsuz0LPFQjW+eNl1jumCtJcU6+aLJSkizKI4E6fp Upc2o9WmkieEZi57WVEZlydUMeCh17c7a3aVlCqRq66BFdAv/M7zzS8tJLfun75d pmewyB2JkU+Z4Ta1fhJS5Nsl6+aV81pse0cFDvLRPaaptOe52zt1cYi4gyT0qgd7 LZdyjLTrUf88A4RXJMPy4JVXIg6F9+iw31sAYKXgCj8IBlSIzFE0m7B5UA6KemLo kiyEMn+Q14W+Pg== -----END CERTIFICATE-----Generated at Mon Sep 21 13:31:25 2026 by rpki-client