$ rpki-client -vvvf rpkica.twnic.tw/rpki/DOIT/0/F6C5469B49682AFB105330FD4510981DC05154B0.mft File: F6C5469B49682AFB105330FD4510981DC05154B0.mft (raw, json) Hash identifier: qmY7Zcejj7A0AFex77XitfqLlQ/1yK92W6jbdAE7crc= Subject key identifier: 16:5D:AA:6E:24:DB:DC:56:FB:F4:F2:B4:9E:D2:E2:C4:29:77:43:A7 Authority key identifier: F6:C5:46:9B:49:68:2A:FB:10:53:30:FD:45:10:98:1D:C0:51:54:B0 Certificate issuer: /CN=F6C5469B49682AFB105330FD4510981DC05154B0 Certificate serial: 4B35FA699FB3D94605CF4D5557109DEE7BC70F36 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F6C5469B49682AFB105330FD4510981DC05154B0.cer Subject info access: rsync://rpkica.twnic.tw/rpki/DOIT/0/F6C5469B49682AFB105330FD4510981DC05154B0.mft Manifest number: B4 Signing time: Mon 21 Sep 2026 17:56:48 +0000 Manifest this update: Mon 21 Sep 2026 17:51:48 +0000 Manifest next update: Tue 22 Sep 2026 17:58:48 +0000 Files and hashes: 1: F6C5469B49682AFB105330FD4510981DC05154B0.crl (hash: cVcicUQEGl9QKUF/wXLRFzKNcKYL9DYIrCoO+d3ziNo=) 2: 3130332e3136302e38362e302f32332d3233203d3e2034373832.roa (hash: GRhSIbyJPAbQUnesG8A33zSz+yXABdlL/f8zNkiDVII=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/DOIT/0/F6C5469B49682AFB105330FD4510981DC05154B0.crl rsync://rpkica.twnic.tw/rpki/DOIT/0/F6C5469B49682AFB105330FD4510981DC05154B0.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F6C5469B49682AFB105330FD4510981DC05154B0.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 03:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:35:fa:69:9f:b3:d9:46:05:cf:4d:55:57:10:9d:ee:7b:c7:0f:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F6C5469B49682AFB105330FD4510981DC05154B0 Validity Not Before: Sep 21 17:51:48 2026 GMT Not After : Sep 22 17:58:48 2026 GMT Subject: CN=165DAA6E24DBDC56FBF4F2B49ED2E2C4297743A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:87:1f:9c:ab:fa:24:98:0c:4c:65:b4:5b:89: 08:db:b8:15:60:46:28:83:a5:72:aa:c9:0e:8f:b7: 24:34:10:9c:8a:c7:61:0a:4f:06:ee:23:c6:b4:6e: da:62:88:51:ed:65:b9:07:7b:67:76:60:f2:62:c4: da:d0:b2:7f:e6:27:70:28:86:cd:44:96:be:5e:30: ed:03:07:93:38:66:00:6b:6c:c9:1e:0d:8d:b3:35: 12:92:5c:6b:4c:99:ad:ab:23:c8:44:ba:df:af:04: 15:e5:2a:9d:21:75:17:a5:cd:9a:d4:64:d0:00:98: e8:2e:ee:ef:08:aa:69:c1:08:51:b9:78:b4:5e:cb: bd:ce:82:50:a7:46:ba:84:96:d4:f8:76:8e:e4:4e: c8:54:6a:4d:2f:24:1f:6c:64:74:7c:25:42:86:47: 26:eb:4a:33:ae:51:2f:73:da:c9:28:5e:fc:d5:a5: c4:d7:8c:44:c4:21:fa:f6:78:b0:da:15:ca:82:47: e2:68:61:95:4a:09:b1:1e:5d:3b:77:81:d3:c6:e2: 38:9d:aa:d2:12:04:53:19:1f:64:ec:67:c7:bb:e9: 74:b7:de:7b:61:36:e9:29:55:5f:6e:5f:d6:69:c1: b0:52:90:94:85:83:f7:ee:2d:91:cc:21:3e:4a:73: 06:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:5D:AA:6E:24:DB:DC:56:FB:F4:F2:B4:9E:D2:E2:C4:29:77:43:A7 X509v3 Authority Key Identifier: keyid:F6:C5:46:9B:49:68:2A:FB:10:53:30:FD:45:10:98:1D:C0:51:54:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/DOIT/0/F6C5469B49682AFB105330FD4510981DC05154B0.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F6C5469B49682AFB105330FD4510981DC05154B0.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DOIT/0/F6C5469B49682AFB105330FD4510981DC05154B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:8d:75:ba:8c:0d:93:69:8e:31:47:c2:c3:4a:9b:3d:ea:5c: d0:55:4d:d2:7d:02:db:c0:f1:10:a1:5b:b5:b2:e4:0e:2e:74: 12:54:18:0a:c9:ee:88:d9:2b:92:b2:f2:a8:e0:6b:b8:90:c1: a4:f8:07:da:fa:c5:32:56:0b:c2:26:6a:d8:f7:5a:97:5c:19: ad:93:85:c7:8a:66:66:0b:88:be:07:fc:3a:8f:55:85:40:77: 3e:63:1d:9e:4a:c1:66:8f:f6:cb:66:69:01:c2:97:a6:fd:3d: 06:20:39:74:74:36:ba:d6:33:ea:0b:7a:88:15:e5:17:a2:94: 87:5f:39:c9:52:b0:eb:41:79:f4:fb:19:63:a3:fa:dc:67:cf: 82:a3:97:27:c2:11:21:3d:66:68:03:2a:6f:27:1a:ba:f3:42: 3a:25:6b:ac:b4:61:84:11:c9:63:9d:75:01:98:4b:23:59:fe: f8:8a:25:87:94:00:0e:76:10:22:6f:41:00:ae:e8:20:66:c6: 37:2f:4c:2b:cb:5e:09:91:dc:a2:77:d5:37:9a:84:17:60:66: da:3c:72:23:a7:36:cf:01:ff:2f:8a:b1:cb:30:04:33:19:ed: 24:94:b1:d7:17:75:1b:6c:18:4d:fd:46:2e:02:d4:a6:37:b3: 7d:ac:6c:57 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUSzX6aZ+z2UYFz01VVxCd7nvHDzYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjZDNTQ2OUI0OTY4MkFGQjEwNTMzMEZENDUxMDk4MURD MDUxNTRCMDAeFw0yNjA5MjExNzUxNDhaFw0yNjA5MjIxNzU4NDhaMDMxMTAvBgNV BAMTKDE2NURBQTZFMjREQkRDNTZGQkY0RjJCNDlFRDJFMkM0Mjk3NzQzQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkhx+cq/okmAxMZbRbiQjbuBVg RiiDpXKqyQ6PtyQ0EJyKx2EKTwbuI8a0btpiiFHtZbkHe2d2YPJixNrQsn/mJ3Ao hs1Elr5eMO0DB5M4ZgBrbMkeDY2zNRKSXGtMma2rI8hEut+vBBXlKp0hdRelzZrU ZNAAmOgu7u8IqmnBCFG5eLRey73OglCnRrqEltT4do7kTshUak0vJB9sZHR8JUKG RybrSjOuUS9z2skoXvzVpcTXjETEIfr2eLDaFcqCR+JoYZVKCbEeXTt3gdPG4jid qtISBFMZH2TsZ8e76XS33nthNukpVV9uX9ZpwbBSkJSFg/fuLZHMIT5KcwaRAgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQUFl2qbiTb3Fb79PK0ntLixCl3Q6cwHwYDVR0j BBgwFoAU9sVGm0loKvsQUzD9RRCYHcBRVLAwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRE9JVC8w L0Y2QzU0NjlCNDk2ODJBRkIxMDUzMzBGRDQ1MTA5ODFEQzA1MTU0QjAuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvRjZDNTQ2OUI0OTY4MkFGQjEwNTMzMEZENDUxMDk4 MURDMDUxNTRCMC5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0RPSVQvMC9GNkM1NDY5QjQ5NjgyQUZC MTA1MzMwRkQ0NTEwOTgxREMwNTE1NEIwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMo11uowNk2mOMUfC w0qbPepc0FVN0n0C28DxEKFbtbLkDi50ElQYCsnuiNkrkrLyqOBruJDBpPgH2vrF MlYLwiZq2Pdal1wZrZOFx4pmZguIvgf8Oo9VhUB3PmMdnkrBZo/2y2ZpAcKXpv09 BiA5dHQ2utYz6gt6iBXlF6KUh185yVKw60F59PsZY6P63GfPgqOXJ8IRIT1maAMq bycauvNCOiVrrLRhhBHJY511AZhLI1n++Iolh5QADnYQIm9BAK7oIGbGNy9MK8te CZHconfVN5qEF2Bm2jxyI6c2zwH/L4qxyzAEMxntJJSx1xd1G2wYTf1GLgLUpjez faxsVw== -----END CERTIFICATE-----Generated at Mon Sep 21 22:15:39 2026 by rpki-client