$ rpki-client -vvf rpkica.twnic.tw/rpki/CKMATES/0/3D576C4841082805B3CDBD7337F3963A8833174B.mft File: 3D576C4841082805B3CDBD7337F3963A8833174B.mft (raw, json) Hash identifier: SRDqKVE9oo775T853LfDXjL2q67EF5DEmS4Kqdx+E28= Subject key identifier: 5D:82:C2:11:F8:CA:9A:82:65:B3:46:C4:EE:FB:FC:B3:D5:27:EC:52 Authority key identifier: 3D:57:6C:48:41:08:28:05:B3:CD:BD:73:37:F3:96:3A:88:33:17:4B Certificate issuer: /CN=3D576C4841082805B3CDBD7337F3963A8833174B Certificate serial: 240AC908F11D6C8E9A5F2AB8770FE629ECD10EC6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3D576C4841082805B3CDBD7337F3963A8833174B.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CKMATES/0/3D576C4841082805B3CDBD7337F3963A8833174B.mft Manifest number: 34 Signing time: Fri 12 Jun 2026 20:58:06 +0000 Manifest this update: Fri 12 Jun 2026 20:53:06 +0000 Manifest next update: Sun 14 Jun 2026 00:36:06 +0000 Files and hashes: 1: 3130332e3131392e3231322e302f32322d3234203d3e20313333373437.roa (hash: zPQusnanznelCXG1KdOD21zkqA+VphGwDoshIYxRbJ0=) 2: 3130332e3131392e3231342e302f32342d3234203d3e20313339363337.roa (hash: BkQPXEKbvmbpHuwtKiewh9JYhpq3BksNtpHsw33H1fI=) 3: 3130332e3131392e3231342e302f32342d3234203d3e20313331363239.roa (hash: ATTGrI+LdxvHy7tZZvIf74Pi92V/OccZmHc6iAFqFXM=) 4: 3130332e3131392e3231322e302f32322d3234203d3e20313331363239.roa (hash: eXsmebarUaems23bSj2ZcVD8dLS2085WCpxoaq88x4M=) 5: 3130332e3131392e3231332e302f32342d3234203d3e203134363138.roa (hash: sldyxDcFqyW0yrBmnmv5iDOduZFppPbQvxaSJnOI1Vw=) 6: 3D576C4841082805B3CDBD7337F3963A8833174B.crl (hash: HiwFegRFbSgvt8IYgqGk6N9za2E2JGET/5Ja7VF8Ik4=) 7: 3130332e3131392e3231332e302f32342d3234203d3e20313331363239.roa (hash: EJjmwH6YAXPBMwmijz6eL3wQvRP4K1M4tTn06rZJrIA=) 8: 3130332e3131392e3231332e302f32342d3234203d3e203136353039.roa (hash: PL2cz2Hbk/JdNHMN06li8HzqoQzLhVGaxZWqRcHi6hM=) 9: 3130332e3131392e3231352e302f32342d3234203d3e20313339363337.roa (hash: jPTm5d5SYsezMtn+BRkYU2/hKNSbQfuFpXU/01PcOeQ=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CKMATES/0/3D576C4841082805B3CDBD7337F3963A8833174B.crl rsync://rpkica.twnic.tw/rpki/CKMATES/0/3D576C4841082805B3CDBD7337F3963A8833174B.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3D576C4841082805B3CDBD7337F3963A8833174B.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 00:20:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:0a:c9:08:f1:1d:6c:8e:9a:5f:2a:b8:77:0f:e6:29:ec:d1:0e:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D576C4841082805B3CDBD7337F3963A8833174B Validity Not Before: Jun 12 20:53:06 2026 GMT Not After : Jun 14 00:36:06 2026 GMT Subject: CN=5D82C211F8CA9A8265B346C4EEFBFCB3D527EC52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:9d:8d:35:0d:75:62:16:b8:23:66:08:60:93: f2:a7:e1:8c:2f:1e:dc:ef:67:f8:e4:8a:16:c6:be: 97:97:3c:60:56:d9:93:b1:7e:87:fb:a0:32:8d:94: c5:aa:e8:a0:d8:a0:c3:cf:79:66:41:6e:4a:55:33: 84:77:e2:e6:7b:c7:2a:7a:53:28:76:bd:94:fc:23: b0:52:18:79:3d:6a:dd:ed:bf:55:81:29:9f:9d:c4: cd:95:42:5b:dc:1d:41:d9:2b:43:bd:31:81:d1:c7: e1:cc:80:08:7b:68:e7:a7:f0:54:14:a7:1d:53:1e: 3a:6e:6b:ba:5a:20:67:37:bb:e8:31:59:ce:69:59: 52:ff:af:6d:3b:79:e5:3b:ac:1e:df:f7:f9:b1:6d: e0:02:91:12:e5:d6:bb:0e:61:23:27:b2:1c:23:31: ae:3a:a1:26:4c:9a:bc:d8:47:f1:d7:4d:a6:1b:e6: 89:a2:54:bf:63:55:ca:fb:6d:73:a2:b4:d9:dd:d6: d1:e8:24:74:f0:b8:bc:b1:9b:3b:d6:2a:d1:a8:f7: 90:46:2d:4f:ae:7c:3c:68:ca:16:27:9f:15:35:18: 33:9d:12:d9:ef:a4:9d:9b:72:1c:8f:26:36:7b:61: bf:83:89:87:ef:31:4d:07:2f:e7:86:0f:69:42:e2: e2:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:82:C2:11:F8:CA:9A:82:65:B3:46:C4:EE:FB:FC:B3:D5:27:EC:52 X509v3 Authority Key Identifier: keyid:3D:57:6C:48:41:08:28:05:B3:CD:BD:73:37:F3:96:3A:88:33:17:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CKMATES/0/3D576C4841082805B3CDBD7337F3963A8833174B.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3D576C4841082805B3CDBD7337F3963A8833174B.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CKMATES/0/3D576C4841082805B3CDBD7337F3963A8833174B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:74:1d:cd:aa:29:c9:63:d2:ef:35:33:1d:58:18:a9:5a:07: 0d:7d:6f:93:cc:c2:10:0d:2a:17:63:76:1d:72:a5:9e:61:88: 13:0f:ff:8e:2c:ff:35:15:99:70:74:ef:83:51:36:a8:01:22: 3c:45:eb:b3:d6:01:da:b0:f5:30:58:b2:c8:52:be:3c:5d:75: 8e:70:a9:a7:88:40:03:b5:5a:8a:33:72:19:ef:29:31:4f:ca: a2:3b:57:e5:2f:fe:de:d7:1b:97:67:80:ff:d6:c8:e0:44:00: 49:07:72:cf:a2:7b:ee:52:f1:15:96:95:6a:a0:2a:07:b6:68: d8:13:d3:c8:68:5c:ab:16:23:da:b9:7b:c7:fa:45:9c:ff:96: 68:86:36:8c:52:51:da:0f:f4:b8:0d:4e:af:9a:a8:30:db:00: 27:09:c0:cf:24:c6:b1:22:c5:cc:54:5e:54:ed:e5:a0:09:85: ae:c7:e1:4a:fb:14:89:69:ea:ea:2c:91:ff:3f:b3:54:5d:14: b1:db:3c:d8:44:a9:cf:23:95:91:a9:d9:73:67:22:15:b6:39: 49:cb:bc:28:db:04:5f:d1:6e:1c:00:c4:a2:ac:7d:ee:57:77: 3f:69:75:d1:0e:f3:e3:26:f5:34:b9:b5:86:f0:d4:8a:dc:d8: 63:d0:fd:f6 -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIUJArJCPEdbI6aXyq4dw/mKezRDsYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q1NzZDNDg0MTA4MjgwNUIzQ0RCRDczMzdGMzk2M0E4 ODMzMTc0QjAeFw0yNjA2MTIyMDUzMDZaFw0yNjA2MTQwMDM2MDZaMDMxMTAvBgNV BAMTKDVEODJDMjExRjhDQTlBODI2NUIzNDZDNEVFRkJGQ0IzRDUyN0VDNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnnY01DXViFrgjZghgk/Kn4Ywv HtzvZ/jkihbGvpeXPGBW2ZOxfof7oDKNlMWq6KDYoMPPeWZBbkpVM4R34uZ7xyp6 Uyh2vZT8I7BSGHk9at3tv1WBKZ+dxM2VQlvcHUHZK0O9MYHRx+HMgAh7aOen8FQU px1THjpua7paIGc3u+gxWc5pWVL/r207eeU7rB7f9/mxbeACkRLl1rsOYSMnshwj Ma46oSZMmrzYR/HXTaYb5omiVL9jVcr7bXOitNnd1tHoJHTwuLyxmzvWKtGo95BG LU+ufDxoyhYnnxU1GDOdEtnvpJ2bchyPJjZ7Yb+DiYfvMU0HL+eGD2lC4uKRAgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQUXYLCEfjKmoJls0bE7vv8s9Un7FIwHwYDVR0j BBgwFoAUPVdsSEEIKAWzzb1zN/OWOogzF0swDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0tNQVRF Uy8wLzNENTc2QzQ4NDEwODI4MDVCM0NEQkQ3MzM3RjM5NjNBODgzMzE3NEIuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvM0Q1NzZDNDg0MTA4MjgwNUIzQ0RCRDczMzdG Mzk2M0E4ODMzMTc0Qi5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0NLTUFURVMvMC8zRDU3NkM0ODQx MDgyODA1QjNDREJENzMzN0YzOTYzQTg4MzMxNzRCLm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfXQdzaop yWPS7zUzHVgYqVoHDX1vk8zCEA0qF2N2HXKlnmGIEw//jiz/NRWZcHTvg1E2qAEi PEXrs9YB2rD1MFiyyFK+PF11jnCpp4hAA7VaijNyGe8pMU/KojtX5S/+3tcbl2eA /9bI4EQASQdyz6J77lLxFZaVaqAqB7Zo2BPTyGhcqxYj2rl7x/pFnP+WaIY2jFJR 2g/0uA1Or5qoMNsAJwnAzyTGsSLFzFReVO3loAmFrsfhSvsUiWnq6iyR/z+zVF0U sds82ESpzyOVkanZc2ciFbY5Scu8KNsEX9FuHADEoqx97ld3P2l10Q7z4yb1NLm1 hvDUitzYY9D99g== -----END CERTIFICATE-----Generated at Sat Jun 13 12:55:17 2026 by rpki-client