$ rpki-client -vvvf rpkica.twnic.tw/rpki/COCHENTEK/0/540D5EB957E44D80783D8B880FD2A47A69077A24.mft File: 540D5EB957E44D80783D8B880FD2A47A69077A24.mft (raw, json) Hash identifier: u64N/oUP3Hvb9BFLgAuhvqOo/A6kioVQPB7WUmCwFrA= Subject key identifier: C5:09:ED:CE:C4:5A:FF:2C:47:48:47:2C:B7:CE:28:B7:0C:9C:98:91 Authority key identifier: 54:0D:5E:B9:57:E4:4D:80:78:3D:8B:88:0F:D2:A4:7A:69:07:7A:24 Certificate issuer: /CN=540D5EB957E44D80783D8B880FD2A47A69077A24 Certificate serial: 219F66B79E76B1950FC3A2F9EA1772EF448F6D67 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/540D5EB957E44D80783D8B880FD2A47A69077A24.cer Subject info access: rsync://rpkica.twnic.tw/rpki/COCHENTEK/0/540D5EB957E44D80783D8B880FD2A47A69077A24.mft Manifest number: B7 Signing time: Wed 23 Sep 2026 08:07:01 +0000 Manifest this update: Wed 23 Sep 2026 08:02:01 +0000 Manifest next update: Thu 24 Sep 2026 11:08:01 +0000 Files and hashes: 1: 3130332e33362e32342e302f32342d3234203d3e203233343536.roa (hash: p/w43y2DPRvlMQR+IzDyNE2Tat+jQWqMf06/CS3XHqI=) 2: 540D5EB957E44D80783D8B880FD2A47A69077A24.crl (hash: UbjNC98UtdDA1j7P5cDMpoLR90nsFvmxua4qJFiXwzI=) 3: 3130332e33362e32342e302f32332d3234203d3e203233343536.roa (hash: 5VqRFEAHfoYwMvZ0tfnuV3to7ncxhe7kaQUJ2iNVZ0M=) 4: 323430303a626561303a3a2f33322d3332203d3e203233343536.roa (hash: 7EISQbTz08S8vCeQ9Io6cF/M5d2qZgpTRijYGhMKT8Q=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/COCHENTEK/0/540D5EB957E44D80783D8B880FD2A47A69077A24.crl rsync://rpkica.twnic.tw/rpki/COCHENTEK/0/540D5EB957E44D80783D8B880FD2A47A69077A24.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/540D5EB957E44D80783D8B880FD2A47A69077A24.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 08:30:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:9f:66:b7:9e:76:b1:95:0f:c3:a2:f9:ea:17:72:ef:44:8f:6d:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=540D5EB957E44D80783D8B880FD2A47A69077A24 Validity Not Before: Sep 23 08:02:01 2026 GMT Not After : Sep 24 11:08:01 2026 GMT Subject: CN=C509EDCEC45AFF2C4748472CB7CE28B70C9C9891 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:9d:35:e5:ea:b7:6e:cd:c7:14:a0:f8:75:28: a7:7a:17:c3:93:7f:1e:88:e0:38:9c:2b:53:fc:96: 72:a8:24:17:4b:95:eb:63:98:ac:63:38:73:1e:e5: b1:0b:a8:98:9f:1d:93:32:a4:f4:fd:6c:93:85:c5: c9:b5:e5:0f:af:e2:71:c5:1e:04:a8:cc:87:25:44: f2:2a:d9:93:57:f0:14:e9:7e:66:07:ad:48:e3:5c: 62:d2:78:c5:cc:4f:bd:9d:90:00:15:77:b0:48:c5: 6e:9f:9f:ef:b7:ec:c9:b3:8a:93:e2:83:8e:6e:30: 81:8e:0e:76:f2:e6:de:e8:e9:ec:e5:84:e3:32:c2: 34:48:c6:93:6a:7b:22:d0:4f:36:05:3f:49:b3:e5: 4c:54:1f:cb:cc:ce:1d:f9:6c:58:38:b1:70:ec:a8: 15:4d:5b:cd:9b:ef:91:d8:38:43:7e:37:f3:3a:03: c6:a6:54:81:0c:72:04:3d:df:6f:1a:02:8e:69:88: 4e:3f:76:8f:4c:a1:7f:64:fc:7c:13:52:26:5a:3b: 9a:77:dd:5d:c1:92:ed:87:5c:ad:07:d5:7a:f2:31: b7:a2:66:62:05:dd:86:d5:e8:c7:59:48:d4:20:a4: 7e:98:ec:5e:ee:88:be:da:6a:97:23:25:15:c0:41: 5a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:09:ED:CE:C4:5A:FF:2C:47:48:47:2C:B7:CE:28:B7:0C:9C:98:91 X509v3 Authority Key Identifier: keyid:54:0D:5E:B9:57:E4:4D:80:78:3D:8B:88:0F:D2:A4:7A:69:07:7A:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/COCHENTEK/0/540D5EB957E44D80783D8B880FD2A47A69077A24.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/540D5EB957E44D80783D8B880FD2A47A69077A24.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/COCHENTEK/0/540D5EB957E44D80783D8B880FD2A47A69077A24.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:dc:a3:80:18:7f:3d:2e:c0:91:ca:5f:ed:7a:ed:fb:9f:2c: 06:ed:a0:01:75:1d:e7:df:6e:9a:9c:4f:48:8e:d8:7d:31:7d: 63:e6:e0:93:ca:fb:08:75:20:60:3c:1b:b7:90:49:fe:59:58: 17:e2:63:29:34:cd:d2:fa:ed:1d:83:2a:5c:d5:20:24:4d:8e: 90:6f:65:3d:5f:53:76:60:91:c8:05:72:fd:a6:4b:78:c4:bb: 78:5e:fc:e2:92:66:b0:fb:87:b8:31:1b:dd:b6:76:e5:6b:4e: 56:2e:5f:44:18:7f:d7:96:a3:80:6a:7f:1a:ec:60:fc:d3:70: c9:c4:ee:1e:e2:19:23:55:d8:bb:d8:14:1e:b6:87:02:f0:de: ef:8a:85:c5:17:05:c0:9f:0e:07:62:ac:c6:6a:e3:c2:a5:c8: 7f:9b:d5:8f:9d:1c:66:c8:2d:f7:eb:c6:d8:ef:80:69:1d:dc: 19:63:f1:28:75:81:c8:1e:b6:c7:0d:a8:ff:cf:4e:1b:22:fb: 63:9a:b2:7d:76:0c:18:9d:78:0d:71:58:90:f0:c5:76:f2:c7: 84:bf:04:86:07:73:98:9b:5f:88:ba:82:ec:7e:87:7b:52:c1: be:40:91:7a:6f:7a:b5:e0:01:6b:39:a7:4e:10:19:0a:4c:ad: 8b:9b:f1:9b -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUIZ9mt552sZUPw6L56hdy70SPbWcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTQwRDVFQjk1N0U0NEQ4MDc4M0Q4Qjg4MEZEMkE0N0E2 OTA3N0EyNDAeFw0yNjA5MjMwODAyMDFaFw0yNjA5MjQxMTA4MDFaMDMxMTAvBgNV BAMTKEM1MDlFRENFQzQ1QUZGMkM0NzQ4NDcyQ0I3Q0UyOEI3MEM5Qzk4OTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDonTXl6rduzccUoPh1KKd6F8OT fx6I4DicK1P8lnKoJBdLletjmKxjOHMe5bELqJifHZMypPT9bJOFxcm15Q+v4nHF HgSozIclRPIq2ZNX8BTpfmYHrUjjXGLSeMXMT72dkAAVd7BIxW6fn++37MmzipPi g45uMIGODnby5t7o6ezlhOMywjRIxpNqeyLQTzYFP0mz5UxUH8vMzh35bFg4sXDs qBVNW82b75HYOEN+N/M6A8amVIEMcgQ9328aAo5piE4/do9MoX9k/HwTUiZaO5p3 3V3Bku2HXK0H1XryMbeiZmIF3YbV6MdZSNQgpH6Y7F7uiL7aapcjJRXAQVqVAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUxQntzsRa/yxHSEcst84otwycmJEwHwYDVR0j BBgwFoAUVA1euVfkTYB4PYuID9KkemkHeiQwDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ09DSEVO VEVLLzAvNTQwRDVFQjk1N0U0NEQ4MDc4M0Q4Qjg4MEZEMkE0N0E2OTA3N0EyNC5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMS81NDBENUVCOTU3RTQ0RDgwNzgzRDhCODgw RkQyQTQ3QTY5MDc3QTI0LmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ09DSEVOVEVLLzAvNTQwRDVF Qjk1N0U0NEQ4MDc4M0Q4Qjg4MEZEMkE0N0E2OTA3N0EyNC5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAI3c o4AYfz0uwJHKX+167fufLAbtoAF1HeffbpqcT0iO2H0xfWPm4JPK+wh1IGA8G7eQ Sf5ZWBfiYyk0zdL67R2DKlzVICRNjpBvZT1fU3ZgkcgFcv2mS3jEu3he/OKSZrD7 h7gxG922duVrTlYuX0QYf9eWo4BqfxrsYPzTcMnE7h7iGSNV2LvYFB62hwLw3u+K hcUXBcCfDgdirMZq48KlyH+b1Y+dHGbILffrxtjvgGkd3Blj8Sh1gcgetscNqP/P Thsi+2Oasn12DBideA1xWJDwxXbyx4S/BIYHc5ibX4i6gux+h3tSwb5AkXpverXg AWs5p04QGQpMrYub8Zs= -----END CERTIFICATE-----Generated at Thu Sep 24 00:42:24 2026 by rpki-client