$ rpki-client -vvvf rpkica.twnic.tw/rpki/CSPTEK/0/8F1212A19454D2A49786359CAC45368F821417D6.mft File: 8F1212A19454D2A49786359CAC45368F821417D6.mft (raw, json) Hash identifier: vgHyaf8JzITGEHz4HM7tnUKY2xPbVxosqo96L0bnIpo= Subject key identifier: 74:79:F8:0F:16:ED:FD:4C:4A:32:EB:66:67:69:CD:13:DE:A8:FF:03 Authority key identifier: 8F:12:12:A1:94:54:D2:A4:97:86:35:9C:AC:45:36:8F:82:14:17:D6 Certificate issuer: /CN=8F1212A19454D2A49786359CAC45368F821417D6 Certificate serial: 5A336ADFAD8D6E068F881A48B08E042FCC4E11CD Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8F1212A19454D2A49786359CAC45368F821417D6.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CSPTEK/0/8F1212A19454D2A49786359CAC45368F821417D6.mft Manifest number: B6 Signing time: Mon 21 Sep 2026 05:30:51 +0000 Manifest this update: Mon 21 Sep 2026 05:25:51 +0000 Manifest next update: Tue 22 Sep 2026 08:52:51 +0000 Files and hashes: 1: 323430363a643763303a3a2f33322d3438203d3e203338383339.roa (hash: Z694/6d2G+L3RUACrnL4ZOBmDtfn2t+JQdVIPZHPNRw=) 2: 3130332e3135392e3137362e302f32332d3234203d3e203338383339.roa (hash: fgIPz4pRjg9MozWHN5C9tmdzsbKi6XEfF4wUaKsvsnA=) 3: 323430363a643763303a3a2f33322d3438203d3e203338303038.roa (hash: uMtY/GmVL72No2RBdo9smGFIzi+iIhlXKaPRp7r/VTo=) 4: 8F1212A19454D2A49786359CAC45368F821417D6.crl (hash: a+Sdalu2ihhXQ7A7VAlQF0KFr/RzVYuTsYHWIJABQvE=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CSPTEK/0/8F1212A19454D2A49786359CAC45368F821417D6.crl rsync://rpkica.twnic.tw/rpki/CSPTEK/0/8F1212A19454D2A49786359CAC45368F821417D6.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8F1212A19454D2A49786359CAC45368F821417D6.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 08:52:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:33:6a:df:ad:8d:6e:06:8f:88:1a:48:b0:8e:04:2f:cc:4e:11:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F1212A19454D2A49786359CAC45368F821417D6 Validity Not Before: Sep 21 05:25:51 2026 GMT Not After : Sep 22 08:52:51 2026 GMT Subject: CN=7479F80F16EDFD4C4A32EB666769CD13DEA8FF03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:12:9f:5f:f8:28:9b:4d:08:74:5b:84:dc:02: 1f:b5:b2:9d:d5:5b:c6:06:f2:0b:8a:fa:f9:73:b8: 40:7f:f7:3f:2c:63:4b:42:81:1b:57:d6:2c:38:d5: 30:04:ca:6b:3e:1a:17:d4:70:f4:75:f1:05:32:fd: 5b:9f:65:ee:5e:e9:89:43:38:f0:95:84:65:62:e2: ee:24:aa:20:1e:d9:4f:17:c9:87:09:a5:0b:ff:94: 86:44:c3:81:47:84:16:7a:3e:19:31:83:26:c9:80: 0a:f0:ec:bb:fd:f7:e2:d2:67:60:57:f3:2a:aa:a7: 7d:20:13:f0:e6:3a:66:42:54:40:4f:0b:10:37:bf: cd:95:68:10:89:f2:88:c8:4d:19:d2:3f:f1:a8:2d: 6c:17:78:94:f1:67:7f:58:6d:b3:8d:94:d3:5b:be: c7:50:ec:7b:e9:29:cb:ee:3a:16:c4:b8:81:d2:5e: d1:8a:98:55:20:16:ae:14:cc:38:66:07:2f:da:68: 8a:ee:36:1d:eb:4a:65:48:fa:6c:69:a2:21:1f:a6: f4:d1:4a:61:f7:9a:d8:5d:78:82:58:49:d5:5e:48: 96:85:5c:14:b2:79:f0:da:99:d6:fb:d7:40:fd:d5: 4f:ba:b3:08:7d:7d:c6:ee:53:33:cf:19:39:84:23: 64:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:79:F8:0F:16:ED:FD:4C:4A:32:EB:66:67:69:CD:13:DE:A8:FF:03 X509v3 Authority Key Identifier: keyid:8F:12:12:A1:94:54:D2:A4:97:86:35:9C:AC:45:36:8F:82:14:17:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CSPTEK/0/8F1212A19454D2A49786359CAC45368F821417D6.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8F1212A19454D2A49786359CAC45368F821417D6.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CSPTEK/0/8F1212A19454D2A49786359CAC45368F821417D6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:25:58:37:98:37:e9:40:e4:d3:bb:bc:46:44:26:52:11:ca: 48:24:16:f9:69:9f:c9:c4:be:fd:fb:30:0b:ea:53:f0:7c:1a: dc:1b:d8:96:37:1b:c6:8a:c9:35:e6:83:43:79:35:62:ac:bf: 83:b8:87:fd:f5:35:12:ea:4d:5c:df:8b:b1:aa:74:4d:ea:35: 47:c6:99:20:07:d8:7f:f9:65:1a:92:07:94:51:3f:3c:14:f3: 18:f9:44:91:34:6b:42:2e:21:a3:a5:64:0f:ad:4b:6e:5c:5e: cf:de:91:92:6d:b1:e4:1c:de:b3:fd:47:1b:03:cf:84:f2:a2: 3d:97:3a:b9:a8:e9:67:81:7a:e5:92:2e:af:df:eb:9c:33:13: ba:22:e5:3f:f4:f9:d4:39:60:a7:5b:59:d3:58:a1:8c:59:99: 71:02:73:f1:f3:63:74:4f:e5:01:f1:40:f5:68:28:08:23:7d: f9:ba:7a:bc:69:fd:e9:ff:2b:83:17:fd:65:e6:84:0e:46:0e: ba:a3:b2:36:cc:18:52:e4:75:f8:19:93:8c:7d:2c:e7:fc:11: 8e:d8:fd:ce:e4:84:b5:ad:7b:2f:1d:fe:8d:d1:fa:fa:c9:f4: dd:93:1a:d5:a5:bc:c1:9a:96:ea:ca:51:ea:5d:f8:ab:ae:f1: 87:a5:08:86 -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUWjNq362NbgaPiBpIsI4EL8xOEc0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEYxMjEyQTE5NDU0RDJBNDk3ODYzNTlDQUM0NTM2OEY4 MjE0MTdENjAeFw0yNjA5MjEwNTI1NTFaFw0yNjA5MjIwODUyNTFaMDMxMTAvBgNV BAMTKDc0NzlGODBGMTZFREZENEM0QTMyRUI2NjY3NjlDRDEzREVBOEZGMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Ep9f+CibTQh0W4TcAh+1sp3V W8YG8guK+vlzuEB/9z8sY0tCgRtX1iw41TAEyms+GhfUcPR18QUy/VufZe5e6YlD OPCVhGVi4u4kqiAe2U8XyYcJpQv/lIZEw4FHhBZ6PhkxgybJgArw7Lv99+LSZ2BX 8yqqp30gE/DmOmZCVEBPCxA3v82VaBCJ8ojITRnSP/GoLWwXeJTxZ39YbbONlNNb vsdQ7HvpKcvuOhbEuIHSXtGKmFUgFq4UzDhmBy/aaIruNh3rSmVI+mxpoiEfpvTR SmH3mthdeIJYSdVeSJaFXBSyefDamdb710D91U+6swh9fcbuUzPPGTmEI2TXAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQUdHn4Dxbt/UxKMutmZ2nNE96o/wMwHwYDVR0j BBgwFoAUjxISoZRU0qSXhjWcrEU2j4IUF9YwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ1NQVEVL LzAvOEYxMjEyQTE5NDU0RDJBNDk3ODYzNTlDQUM0NTM2OEY4MjE0MTdENi5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMS84RjEyMTJBMTk0NTREMkE0OTc4NjM1OUNBQzQ1 MzY4RjgyMTQxN0Q2LmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ1NQVEVLLzAvOEYxMjEyQTE5NDU0 RDJBNDk3ODYzNTlDQUM0NTM2OEY4MjE0MTdENi5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJMlWDeYN+lA 5NO7vEZEJlIRykgkFvlpn8nEvv37MAvqU/B8Gtwb2JY3G8aKyTXmg0N5NWKsv4O4 h/31NRLqTVzfi7GqdE3qNUfGmSAH2H/5ZRqSB5RRPzwU8xj5RJE0a0IuIaOlZA+t S25cXs/ekZJtseQc3rP9RxsDz4Tyoj2XOrmo6WeBeuWSLq/f65wzE7oi5T/0+dQ5 YKdbWdNYoYxZmXECc/HzY3RP5QHxQPVoKAgjffm6erxp/en/K4MX/WXmhA5GDrqj sjbMGFLkdfgZk4x9LOf8EY7Y/c7khLWtey8d/o3R+vrJ9N2TGtWlvMGalurKUepd +Kuu8YelCIY= -----END CERTIFICATE-----Generated at Tue Sep 22 00:29:49 2026 by rpki-client