$ rpki-client -vvvf rpkica.twnic.tw/rpki/COLIN/0/3135985A244571EE521F17A73A1F0D6341A35ED5.mft File: 3135985A244571EE521F17A73A1F0D6341A35ED5.mft (raw, json) Hash identifier: +qVhpyIxty1Y8bSVKAO1jfxsLH5Cc4Sa0z+oPduxIE0= Subject key identifier: 2F:C2:F9:D5:5B:27:53:31:32:2C:34:CD:03:63:18:8D:2D:D8:13:BE Authority key identifier: 31:35:98:5A:24:45:71:EE:52:1F:17:A7:3A:1F:0D:63:41:A3:5E:D5 Certificate issuer: /CN=3135985A244571EE521F17A73A1F0D6341A35ED5 Certificate serial: 0CE3CAFFC0FCE4000B277A5F52FF0528EBE88D57 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3135985A244571EE521F17A73A1F0D6341A35ED5.cer Subject info access: rsync://rpkica.twnic.tw/rpki/COLIN/0/3135985A244571EE521F17A73A1F0D6341A35ED5.mft Manifest number: B3 Signing time: Tue 22 Sep 2026 10:41:13 +0000 Manifest this update: Tue 22 Sep 2026 10:36:13 +0000 Manifest next update: Wed 23 Sep 2026 11:06:13 +0000 Files and hashes: 1: 3130332e362e3132342e302f32332d3332203d3e20313530373638.roa (hash: 6vguh3CJd68lcmEK8FAHm7dq7zEm2fYFwl9UdWFuOJk=) 2: 3135985A244571EE521F17A73A1F0D6341A35ED5.crl (hash: UkyTHiReJl5RIsTRotzOkKvtx5cno8xBMMKxVHMvhJ0=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/COLIN/0/3135985A244571EE521F17A73A1F0D6341A35ED5.crl rsync://rpkica.twnic.tw/rpki/COLIN/0/3135985A244571EE521F17A73A1F0D6341A35ED5.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3135985A244571EE521F17A73A1F0D6341A35ED5.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 22:16:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:e3:ca:ff:c0:fc:e4:00:0b:27:7a:5f:52:ff:05:28:eb:e8:8d:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3135985A244571EE521F17A73A1F0D6341A35ED5 Validity Not Before: Sep 22 10:36:13 2026 GMT Not After : Sep 23 11:06:13 2026 GMT Subject: CN=2FC2F9D55B275331322C34CD0363188D2DD813BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1c:bf:08:e1:ad:76:b2:3f:97:50:be:8f:e9: 28:fd:17:66:25:6b:18:20:1f:06:a0:f1:c1:69:19: 09:3f:ca:fe:a6:d0:e1:0d:39:c4:40:39:f5:6e:63: 23:83:fc:9d:75:19:15:01:ba:77:3e:95:79:1a:41: 63:5d:90:f1:5b:46:04:cc:a9:1e:fa:48:22:d3:a3: 2c:11:d9:f4:1d:24:82:c9:67:7d:46:5d:2c:99:b2: 4a:64:32:1c:7c:69:c7:d9:fc:a2:c1:ec:19:70:58: 7e:9b:25:ea:79:d4:bd:9b:67:96:f4:3d:a9:0d:7e: 61:f9:5f:99:00:d3:d8:5b:10:79:c7:cc:82:f0:bc: d7:d3:dd:ad:38:5f:26:0f:14:a6:b0:09:02:c0:86: 9e:10:2e:4e:ee:a3:01:94:9a:46:1b:93:20:0b:e7: ea:44:85:a1:da:90:cd:1c:71:92:72:03:07:97:6d: f5:3c:d4:07:35:e2:a5:aa:2e:b1:ac:d8:8e:b4:7b: d1:dc:20:e3:60:15:5c:75:18:58:cc:6e:b9:79:38: 95:9c:5f:16:87:36:9b:4c:73:48:ac:75:ce:88:1f: 55:ef:94:55:f0:9b:7a:24:6e:58:41:66:a7:fd:f8: 0e:5b:3c:ee:e9:ff:e6:71:1f:fe:31:a5:1b:0b:e8: b6:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:C2:F9:D5:5B:27:53:31:32:2C:34:CD:03:63:18:8D:2D:D8:13:BE X509v3 Authority Key Identifier: keyid:31:35:98:5A:24:45:71:EE:52:1F:17:A7:3A:1F:0D:63:41:A3:5E:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/COLIN/0/3135985A244571EE521F17A73A1F0D6341A35ED5.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3135985A244571EE521F17A73A1F0D6341A35ED5.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/COLIN/0/3135985A244571EE521F17A73A1F0D6341A35ED5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e5:a3:81:e9:14:10:97:e4:39:1c:cf:8f:e8:42:09:2b:01:49: 99:1e:29:5a:74:18:fe:ae:ac:0b:4b:fb:af:a1:38:41:f7:f8: c2:65:2f:90:da:45:16:55:f5:24:9a:6c:13:1b:69:d6:2e:df: 3d:de:10:6f:a3:d5:d4:b2:1c:13:e3:4c:01:ee:bc:ef:27:cd: 52:0f:0c:8f:66:d5:7e:fb:58:04:27:14:15:6a:3c:9c:28:ce: c6:8c:eb:ef:75:24:b1:f5:f6:e8:30:46:5c:83:d0:04:ec:e3: 14:06:e0:aa:32:da:90:d9:ba:fc:3e:24:1a:7f:e1:1c:4e:fb: 53:25:6a:3e:cf:96:0e:a6:b3:21:6c:b7:30:89:eb:c3:65:34: aa:7e:4e:9c:fd:ae:77:c8:11:25:55:27:77:5f:63:36:7c:af: 10:83:7d:5f:ee:b9:3e:8c:69:cf:14:33:27:50:23:5b:5e:87: 9d:b6:bb:02:3d:d7:47:e3:59:5d:af:22:de:c6:87:40:e2:43: fd:1f:d8:30:f7:5d:ce:d1:6a:2a:ca:bc:7a:4a:05:72:cf:2d: f8:96:66:67:5c:c1:dc:6f:3e:52:2d:ec:b5:48:8d:64:d6:65: 72:f7:b8:3b:f3:ec:57:1f:6c:58:9d:f1:9f:f5:8d:90:a8:63: 22:64:de:e4 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUDOPK/8D85AALJ3pfUv8FKOvojVcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzEzNTk4NUEyNDQ1NzFFRTUyMUYxN0E3M0ExRjBENjM0 MUEzNUVENTAeFw0yNjA5MjIxMDM2MTNaFw0yNjA5MjMxMTA2MTNaMDMxMTAvBgNV BAMTKDJGQzJGOUQ1NUIyNzUzMzEzMjJDMzRDRDAzNjMxODhEMkREODEzQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqHL8I4a12sj+XUL6P6Sj9F2Yl axggHwag8cFpGQk/yv6m0OENOcRAOfVuYyOD/J11GRUBunc+lXkaQWNdkPFbRgTM qR76SCLToywR2fQdJILJZ31GXSyZskpkMhx8acfZ/KLB7BlwWH6bJep51L2bZ5b0 PakNfmH5X5kA09hbEHnHzILwvNfT3a04XyYPFKawCQLAhp4QLk7uowGUmkYbkyAL 5+pEhaHakM0ccZJyAweXbfU81Ac14qWqLrGs2I60e9HcIONgFVx1GFjMbrl5OJWc XxaHNptMc0isdc6IH1XvlFXwm3okblhBZqf9+A5bPO7p/+ZxH/4xpRsL6LYBAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUL8L51VsnUzEyLDTNA2MYjS3YE74wHwYDVR0j BBgwFoAUMTWYWiRFce5SHxenOh8NY0GjXtUwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ09MSU4v MC8zMTM1OTg1QTI0NDU3MUVFNTIxRjE3QTczQTFGMEQ2MzQxQTM1RUQ1LmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzMxMzU5ODVBMjQ0NTcxRUU1MjFGMTdBNzNBMUYw RDYzNDFBMzVFRDUuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9DT0xJTi8wLzMxMzU5ODVBMjQ0NTcx RUU1MjFGMTdBNzNBMUYwRDYzNDFBMzVFRDUubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDlo4HpFBCX5Dkc z4/oQgkrAUmZHiladBj+rqwLS/uvoThB9/jCZS+Q2kUWVfUkmmwTG2nWLt893hBv o9XUshwT40wB7rzvJ81SDwyPZtV++1gEJxQVajycKM7GjOvvdSSx9fboMEZcg9AE 7OMUBuCqMtqQ2br8PiQaf+EcTvtTJWo+z5YOprMhbLcwievDZTSqfk6c/a53yBEl VSd3X2M2fK8Qg31f7rk+jGnPFDMnUCNbXoedtrsCPddH41ldryLexodA4kP9H9gw 913O0Woqyrx6SgVyzy34lmZnXMHcbz5SLey1SI1k1mVy97g78+xXH2xYnfGf9Y2Q qGMiZN7k -----END CERTIFICATE-----Generated at Tue Sep 22 12:49:35 2026 by rpki-client