$ rpki-client -vvvf rpkica.twnic.tw/rpki/DCC1223342/0/67919719E801E94CCA89D7569D37B67D252A261F.mft File: 67919719E801E94CCA89D7569D37B67D252A261F.mft (raw, json) Hash identifier: JM/olDItRxWSFu2GGCg2yKdCOLQMkQkSwyzWOhuJnrc= Subject key identifier: 7A:D8:A6:7F:05:62:99:C8:7A:74:80:37:22:B1:EF:51:CC:9F:32:53 Authority key identifier: 67:91:97:19:E8:01:E9:4C:CA:89:D7:56:9D:37:B6:7D:25:2A:26:1F Certificate issuer: /CN=67919719E801E94CCA89D7569D37B67D252A261F Certificate serial: 31A50EA248BEFFAA49A5592FB9992E6A5BC42FAC Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/67919719E801E94CCA89D7569D37B67D252A261F.cer Subject info access: rsync://rpkica.twnic.tw/rpki/DCC1223342/0/67919719E801E94CCA89D7569D37B67D252A261F.mft Manifest number: BA Signing time: Sat 26 Sep 2026 04:10:14 +0000 Manifest this update: Sat 26 Sep 2026 04:05:14 +0000 Manifest next update: Sun 27 Sep 2026 06:10:14 +0000 Files and hashes: 1: 67919719E801E94CCA89D7569D37B67D252A261F.crl (hash: jdRd37ZL8jlrDwmHI/nRVqs4MrY3Q2jp9QSs15obf5w=) 2: 323430303a353065303a3a2f33322d3634203d3e203633383933.roa (hash: W+Ffc6VUEComE7wKXCSRqfcLvgJdlvoiPW+6XMV3r6s=) 3: 3130332e3138302e31382e302f32332d3234203d3e203633383933.roa (hash: YHu6xUiyV20ecZfxOWBbvKCz1hQvQ5fZsJlGMsXnUjk=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/DCC1223342/0/67919719E801E94CCA89D7569D37B67D252A261F.crl rsync://rpkica.twnic.tw/rpki/DCC1223342/0/67919719E801E94CCA89D7569D37B67D252A261F.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/67919719E801E94CCA89D7569D37B67D252A261F.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 06:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:a5:0e:a2:48:be:ff:aa:49:a5:59:2f:b9:99:2e:6a:5b:c4:2f:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67919719E801E94CCA89D7569D37B67D252A261F Validity Not Before: Sep 26 04:05:14 2026 GMT Not After : Sep 27 06:10:14 2026 GMT Subject: CN=7AD8A67F056299C87A74803722B1EF51CC9F3253 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:6c:f5:d6:a0:b9:49:ce:5f:af:51:83:2e:03: 02:73:e9:48:6d:ba:69:ed:d2:13:49:c9:cd:eb:05: 3b:cb:fb:ed:16:4e:75:9f:bd:72:3f:13:7b:de:b1: 75:22:50:35:ba:ff:1d:fd:c8:24:73:76:3f:e6:f1: a8:84:ce:4a:f3:6b:ca:e7:21:89:60:2f:a9:23:76: 41:ca:ff:bb:70:94:32:a8:f5:22:af:a1:66:bd:43: bb:14:4e:59:cc:82:02:4c:63:a7:67:a9:aa:0c:0f: ed:ea:2f:6d:b0:1b:c1:0c:83:d0:05:13:24:87:91: 33:45:dc:2e:e2:f1:0c:a6:74:dd:ce:f4:be:d2:59: 7b:d1:c5:6e:7f:66:98:23:c7:65:22:26:c8:19:65: d5:1b:73:45:86:98:d3:1c:30:73:5a:ad:25:3b:4c: 30:c9:d9:bc:3a:d2:fe:fb:de:a2:17:b2:ec:e0:39: 6e:ac:af:69:b9:f3:fc:6b:26:69:cd:77:c0:b5:95: a4:f4:55:dc:21:58:4c:f6:cc:c4:ee:a7:86:f6:fa: 79:00:e6:b4:81:81:73:ba:a4:1f:02:fe:34:f5:62: 89:8c:31:0a:8f:6f:3b:53:51:8a:a6:e6:f8:1c:31: af:02:d6:27:06:b3:e4:ce:3d:20:83:e1:f9:24:4c: a2:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:D8:A6:7F:05:62:99:C8:7A:74:80:37:22:B1:EF:51:CC:9F:32:53 X509v3 Authority Key Identifier: keyid:67:91:97:19:E8:01:E9:4C:CA:89:D7:56:9D:37:B6:7D:25:2A:26:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/DCC1223342/0/67919719E801E94CCA89D7569D37B67D252A261F.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/67919719E801E94CCA89D7569D37B67D252A261F.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DCC1223342/0/67919719E801E94CCA89D7569D37B67D252A261F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:64:1a:f0:99:bc:e5:0b:ad:e8:26:89:06:78:c4:18:f6:fd: 48:d1:a5:07:8e:32:08:32:d3:4b:e6:f6:0d:32:c7:a7:f0:de: 79:97:6b:ad:7a:1b:69:d3:f9:51:c0:59:98:28:40:c4:0c:85: 07:c2:ff:35:de:c2:6d:fc:e2:fe:75:08:23:b9:9a:1e:59:a1: 69:f3:39:59:9f:08:88:57:a6:6e:38:b9:7d:68:ce:71:22:eb: 5a:68:99:8c:29:43:d3:00:c9:1d:71:b8:f2:bd:35:ed:ef:da: 36:78:6a:a1:57:6e:f0:0a:f6:03:c3:da:4d:9c:5a:12:7d:fa: e2:14:d8:da:2b:e5:aa:b6:39:81:7f:eb:b2:e0:6d:6e:49:c9: 9f:a6:28:3b:8f:a8:b1:b8:07:88:be:f7:c1:89:c8:a6:20:ab: ad:22:0b:9e:6e:0e:b3:a1:4e:3d:32:da:8c:ba:56:4a:aa:73: fe:65:34:fe:60:67:38:00:e9:97:56:95:b8:38:07:29:87:4a: 51:fd:24:78:74:5d:30:67:6d:dc:99:a7:92:85:a6:ff:4e:03: 72:54:e0:2e:ee:21:8a:b2:8a:7d:41:ca:8f:62:e6:d1:6b:5d: 28:3c:c4:43:e8:dc:7b:ce:e2:e8:b7:41:5b:e6:c7:ed:29:c0: c7:da:4d:df -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgIUMaUOoki+/6pJpVkvuZkualvEL6wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjc5MTk3MTlFODAxRTk0Q0NBODlENzU2OUQzN0I2N0Qy NTJBMjYxRjAeFw0yNjA5MjYwNDA1MTRaFw0yNjA5MjcwNjEwMTRaMDMxMTAvBgNV BAMTKDdBRDhBNjdGMDU2Mjk5Qzg3QTc0ODAzNzIyQjFFRjUxQ0M5RjMyNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnbPXWoLlJzl+vUYMuAwJz6Uht umnt0hNJyc3rBTvL++0WTnWfvXI/E3vesXUiUDW6/x39yCRzdj/m8aiEzkrza8rn IYlgL6kjdkHK/7twlDKo9SKvoWa9Q7sUTlnMggJMY6dnqaoMD+3qL22wG8EMg9AF EySHkTNF3C7i8QymdN3O9L7SWXvRxW5/Zpgjx2UiJsgZZdUbc0WGmNMcMHNarSU7 TDDJ2bw60v773qIXsuzgOW6sr2m58/xrJmnNd8C1laT0VdwhWEz2zMTup4b2+nkA 5rSBgXO6pB8C/jT1YomMMQqPbztTUYqm5vgcMa8C1icGs+TOPSCD4fkkTKLrAgMB AAGjggH2MIIB8jAdBgNVHQ4EFgQUetimfwVimch6dIA3IrHvUcyfMlMwHwYDVR0j BBgwFoAUZ5GXGegB6UzKiddWnTe2fSUqJh8wDgYDVR0PAQH/BAQDAgeAMGcGA1Ud HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRENDMTIy MzM0Mi8wLzY3OTE5NzE5RTgwMUU5NENDQTg5RDc1NjlEMzdCNjdEMjUyQTI2MUYu Y3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBLzEvNjc5MTk3MTlFODAxRTk0Q0NBODlENzU2 OUQzN0I2N0QyNTJBMjYxRi5jZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzAL hlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0RDQzEyMjMzNDIvMC82Nzkx OTcxOUU4MDFFOTRDQ0E4OUQ3NTY5RDM3QjY3RDI1MkEyNjFGLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA emQa8Jm85Qut6CaJBnjEGPb9SNGlB44yCDLTS+b2DTLHp/DeeZdrrXobadP5UcBZ mChAxAyFB8L/Nd7Cbfzi/nUII7maHlmhafM5WZ8IiFembji5fWjOcSLrWmiZjClD 0wDJHXG48r017e/aNnhqoVdu8Ar2A8PaTZxaEn364hTY2ivlqrY5gX/rsuBtbknJ n6YoO4+osbgHiL73wYnIpiCrrSILnm4Os6FOPTLajLpWSqpz/mU0/mBnOADpl1aV uDgHKYdKUf0keHRdMGdt3JmnkoWm/04DclTgLu4hirKKfUHKj2Lm0WtdKDzEQ+jc e87i6LdBW+bH7SnAx9pN3w== -----END CERTIFICATE-----Generated at Sat Sep 26 15:09:01 2026 by rpki-client