$ rpki-client -vvvf rpkica.twnic.tw/rpki/CPSYS/0/4CB3ABB1B4A024A701223CD715911D996706E3AA.mft File: 4CB3ABB1B4A024A701223CD715911D996706E3AA.mft (raw, json) Hash identifier: z+YTmumc6QoYVIwLA/icTjoqvtgW6JfM6EkQcskE34s= Subject key identifier: 20:FD:39:EE:06:3B:F6:B4:07:C2:0A:3A:DF:6C:DE:95:52:49:DB:56 Authority key identifier: 4C:B3:AB:B1:B4:A0:24:A7:01:22:3C:D7:15:91:1D:99:67:06:E3:AA Certificate issuer: /CN=4CB3ABB1B4A024A701223CD715911D996706E3AA Certificate serial: 64C234F309312FC828EAB910BF9D01A039A1A2E1 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4CB3ABB1B4A024A701223CD715911D996706E3AA.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CPSYS/0/4CB3ABB1B4A024A701223CD715911D996706E3AA.mft Manifest number: B3 Signing time: Sun 20 Sep 2026 21:59:32 +0000 Manifest this update: Sun 20 Sep 2026 21:54:32 +0000 Manifest next update: Tue 22 Sep 2026 01:23:32 +0000 Files and hashes: 1: 4CB3ABB1B4A024A701223CD715911D996706E3AA.crl (hash: 4GdD7ypQ97NolYqdoTDXMqez9W3mn+OJkps6iShEziQ=) 2: 3130332e31342e3137302e302f32332d3234203d3e203338303432.roa (hash: 5mtwz/x5xstPzEWwV0mjjdNtyAKuFHozbJj1pgp59P4=) 3: 323430303a623061303a3a2f33322d3332203d3e203633393038.roa (hash: zreCdGN4BpY2/KXE7Xi0nbMj8CRAQTw3exmLLk8qka8=) 4: 3130332e31342e3137302e302f32332d3234203d3e20313532313739.roa (hash: 0yV6274hzedLbyBXIX24PIgFkE/qG4nC2HGR5DvDDRk=) 5: 3130332e31342e3137302e302f32332d3234203d3e20313334383233.roa (hash: GNYnz7E4zPrfGEpitBkpgKcXAY1dNLMFN8QmTypJQrA=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CPSYS/0/4CB3ABB1B4A024A701223CD715911D996706E3AA.crl rsync://rpkica.twnic.tw/rpki/CPSYS/0/4CB3ABB1B4A024A701223CD715911D996706E3AA.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4CB3ABB1B4A024A701223CD715911D996706E3AA.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 01:23:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:c2:34:f3:09:31:2f:c8:28:ea:b9:10:bf:9d:01:a0:39:a1:a2:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4CB3ABB1B4A024A701223CD715911D996706E3AA Validity Not Before: Sep 20 21:54:32 2026 GMT Not After : Sep 22 01:23:32 2026 GMT Subject: CN=20FD39EE063BF6B407C20A3ADF6CDE955249DB56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1f:81:f9:e1:47:d9:22:90:fc:e4:b2:44:a5: c5:3d:d2:ce:36:a8:50:5f:a9:93:d4:ca:26:cc:2a: b0:fb:c1:ce:1d:39:b5:98:9b:63:bf:ac:15:86:8a: 26:48:1d:42:50:62:01:65:76:67:79:07:05:f4:43: b8:8e:94:9a:10:70:f2:6e:60:30:32:b3:d2:54:0f: 3e:03:f8:24:86:62:94:bb:b1:39:1e:ab:3f:f2:95: b8:4a:e1:a1:e0:84:b7:14:2d:2f:0c:73:c9:55:e0: ea:3d:98:60:ec:e9:5e:4d:fc:1e:89:aa:70:9d:ec: eb:e2:42:ff:ce:57:30:93:f7:fb:75:6b:f6:e7:95: ad:7a:c1:b9:78:2e:7f:b1:9e:cc:b9:9d:f1:c5:8e: a7:2f:72:9d:e9:87:1b:45:e3:ac:75:4e:8f:25:ec: f2:fc:e2:72:b9:86:7d:8f:06:d0:39:cd:68:21:57: ea:1a:bf:c2:c0:44:47:2b:bc:43:61:ea:b0:57:24: 9b:4b:60:ab:78:a9:f9:32:2c:b5:4e:0f:fe:ac:84: 6d:af:a7:72:05:ae:2c:e7:e8:a3:6c:8a:d8:9d:d0: 66:c3:46:7c:33:92:4c:7a:a8:c9:b4:b8:da:44:74: d3:6c:74:cf:ca:47:b9:39:84:74:7a:6c:5c:51:f4: 2e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:FD:39:EE:06:3B:F6:B4:07:C2:0A:3A:DF:6C:DE:95:52:49:DB:56 X509v3 Authority Key Identifier: keyid:4C:B3:AB:B1:B4:A0:24:A7:01:22:3C:D7:15:91:1D:99:67:06:E3:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CPSYS/0/4CB3ABB1B4A024A701223CD715911D996706E3AA.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4CB3ABB1B4A024A701223CD715911D996706E3AA.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CPSYS/0/4CB3ABB1B4A024A701223CD715911D996706E3AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:17:d3:4d:0c:5d:db:d0:23:a6:2a:8c:42:83:db:95:6b:88: 23:29:2f:07:f4:2b:9f:41:95:ff:d7:03:08:26:f5:86:4e:ff: e3:e3:12:9d:e4:08:67:ea:70:16:22:91:c1:f1:f9:e9:f4:7f: ef:21:7e:32:44:6f:4d:2a:42:66:d2:a7:6f:b1:19:08:82:bb: 40:02:19:9e:e0:a6:dd:6d:05:e7:c8:53:01:6b:20:4f:f4:8f: d2:a8:d8:57:cf:28:c7:07:58:92:be:87:25:e7:84:fa:1c:c7: 5c:cf:1c:6b:83:4c:c7:14:1b:3a:aa:f6:a6:ea:5c:b6:84:81: 73:b3:87:a7:4b:19:69:5a:cd:21:72:71:b5:3a:a6:fe:77:01: 31:89:bd:f6:d7:d1:a5:b5:35:0c:e3:68:59:bb:36:45:5e:6c: 2c:c2:7a:fb:c1:da:b8:22:9c:b2:e1:43:4f:79:83:74:6f:a0: 50:fd:81:01:c0:f4:c2:09:67:ee:37:bd:fe:37:87:2a:9d:a7: 90:49:a5:cd:cb:ea:80:3a:b1:9e:f8:e6:56:c4:b4:a0:30:8b: 84:ae:20:89:a1:42:5b:fe:1e:88:ec:e6:e1:7e:74:f6:91:fc: b5:f9:9a:a6:54:eb:a1:b0:ea:09:e0:68:ef:23:46:9b:57:65: 3c:12:c8:e4 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUZMI08wkxL8go6rkQv50BoDmhouEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNENCM0FCQjFCNEEwMjRBNzAxMjIzQ0Q3MTU5MTFEOTk2 NzA2RTNBQTAeFw0yNjA5MjAyMTU0MzJaFw0yNjA5MjIwMTIzMzJaMDMxMTAvBgNV BAMTKDIwRkQzOUVFMDYzQkY2QjQwN0MyMEEzQURGNkNERTk1NTI0OURCNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClH4H54UfZIpD85LJEpcU90s42 qFBfqZPUyibMKrD7wc4dObWYm2O/rBWGiiZIHUJQYgFldmd5BwX0Q7iOlJoQcPJu YDAys9JUDz4D+CSGYpS7sTkeqz/ylbhK4aHghLcULS8Mc8lV4Oo9mGDs6V5N/B6J qnCd7OviQv/OVzCT9/t1a/bnla16wbl4Ln+xnsy5nfHFjqcvcp3phxtF46x1To8l 7PL84nK5hn2PBtA5zWghV+oav8LAREcrvENh6rBXJJtLYKt4qfkyLLVOD/6shG2v p3IFrizn6KNsitid0GbDRnwzkkx6qMm0uNpEdNNsdM/KR7k5hHR6bFxR9C7tAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUIP057gY79rQHwgo632zelVJJ21YwHwYDVR0j BBgwFoAUTLOrsbSgJKcBIjzXFZEdmWcG46owDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ1BTWVMv MC80Q0IzQUJCMUI0QTAyNEE3MDEyMjNDRDcxNTkxMUQ5OTY3MDZFM0FBLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzRDQjNBQkIxQjRBMDI0QTcwMTIyM0NENzE1OTEx RDk5NjcwNkUzQUEuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9DUFNZUy8wLzRDQjNBQkIxQjRBMDI0 QTcwMTIyM0NENzE1OTExRDk5NjcwNkUzQUEubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB4F9NNDF3b0COm KoxCg9uVa4gjKS8H9CufQZX/1wMIJvWGTv/j4xKd5Ahn6nAWIpHB8fnp9H/vIX4y RG9NKkJm0qdvsRkIgrtAAhme4KbdbQXnyFMBayBP9I/SqNhXzyjHB1iSvocl54T6 HMdczxxrg0zHFBs6qvam6ly2hIFzs4enSxlpWs0hcnG1Oqb+dwExib3219GltTUM 42hZuzZFXmwswnr7wdq4Ipyy4UNPeYN0b6BQ/YEBwPTCCWfuN73+N4cqnaeQSaXN y+qAOrGe+OZWxLSgMIuEriCJoUJb/h6I7ObhfnT2kfy1+ZqmVOuhsOoJ4GjvI0ab V2U8Esjk -----END CERTIFICATE-----Generated at Mon Sep 21 13:19:53 2026 by rpki-client