$ rpki-client -vvvf rpkica.twnic.tw/rpki/DONGFONG/1/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.mft File: 65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.mft (raw, json) Hash identifier: CT1JAtLNIevQv+rqdhlZar74vWJCMdAGoPzjOVKmNxw= Subject key identifier: E2:08:B0:10:55:F2:56:ED:38:6C:89:B8:B2:41:0E:44:AC:5B:AA:DC Authority key identifier: 65:E9:4C:77:89:AD:A7:E5:F5:40:FD:BE:95:82:D8:EA:7A:A4:6A:94 Certificate issuer: /CN=65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94 Certificate serial: 467CD04CF7BFD954A8E954E9D87A6184E9388D37 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.cer Subject info access: rsync://rpkica.twnic.tw/rpki/DONGFONG/1/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.mft Manifest number: 0107 Signing time: Sat 14 Nov 2026 20:31:20 +0000 Manifest this update: Sat 14 Nov 2026 20:26:20 +0000 Manifest next update: Sun 15 Nov 2026 23:50:20 +0000 Files and hashes: 1: 65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.crl (hash: hwIBNdMRzOXIKhaPQvKbynV8cKWaXeltVSi57xBWSmQ=) 2: 3135392e3131372e36342e302f31392d3234203d3e203138303436.roa (hash: BnOw5LV6cVAcgowH1P0wBRFgURzOj7EomMXHxAWHT28=) 3: 3135392e3131372e38342e302f32342d3234203d3e203138303436.roa (hash: k6/jJKCg7k9igf9mXdOBVLZ2L1gd68NXx+o3im+bxhY=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/DONGFONG/1/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.crl rsync://rpkica.twnic.tw/rpki/DONGFONG/1/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 23:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:7c:d0:4c:f7:bf:d9:54:a8:e9:54:e9:d8:7a:61:84:e9:38:8d:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94 Validity Not Before: Nov 14 20:26:20 2026 GMT Not After : Nov 15 23:50:20 2026 GMT Subject: CN=E208B01055F256ED386C89B8B2410E44AC5BAADC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:74:32:6c:5b:7d:72:bb:70:00:ca:ca:95:ac: 27:41:95:8c:c5:a4:92:13:8b:81:95:fa:98:03:7e: 41:39:60:1f:b0:e2:e1:bc:c6:f1:ed:14:b7:23:c4: 52:7d:67:d7:8b:43:fd:5a:bd:3f:8d:c3:d9:85:a8: b3:9a:08:ea:47:5f:5a:7c:f0:3d:5d:c0:4f:23:c6: 7e:ec:8b:0c:4b:8f:95:dd:d6:49:2c:91:c2:7d:26: aa:44:33:83:ef:7f:3b:b8:45:a0:95:63:cb:5b:c3: 17:93:fa:3b:51:4a:c8:2d:a7:95:d8:ab:db:ee:1c: 57:46:97:1e:8b:f7:bb:58:9c:61:94:3a:bf:67:59: 0d:08:1f:e5:af:c9:7f:8f:4e:20:84:cb:13:8c:1c: 07:4a:6e:15:c0:7e:02:b5:9b:28:67:ba:7c:44:3e: 64:0b:53:bb:b5:75:e9:41:a0:c7:23:a9:c5:24:c4: cb:1f:86:d4:2c:21:77:43:9f:58:86:9f:15:d6:cf: ae:8e:8d:6b:da:24:5a:2f:bd:03:d8:2b:05:fa:9d: 9e:44:47:36:3b:80:97:30:25:df:29:32:7e:52:79: db:9b:fa:26:ec:e2:d4:14:3a:2b:cb:0a:1a:33:38: eb:c2:d0:6d:13:3b:b6:4f:b8:7a:b6:a6:9a:e6:f7: b8:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:08:B0:10:55:F2:56:ED:38:6C:89:B8:B2:41:0E:44:AC:5B:AA:DC X509v3 Authority Key Identifier: keyid:65:E9:4C:77:89:AD:A7:E5:F5:40:FD:BE:95:82:D8:EA:7A:A4:6A:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/DONGFONG/1/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DONGFONG/1/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:48:f9:d7:a8:28:99:6b:cc:0c:fe:f4:4f:90:7d:33:23:e6: a9:6e:c5:22:2e:8b:f4:48:52:33:20:58:b0:5c:94:7a:bf:ba: ab:41:16:1d:da:81:bb:71:ff:5a:7c:b7:cd:72:d0:85:84:b6: f1:05:79:32:a4:f2:71:a2:50:2b:eb:1a:0e:c7:5c:b1:bf:38: b1:8b:8f:dc:4b:81:8e:59:f9:fa:8e:b2:d1:92:06:8f:49:31: e1:69:42:41:02:bf:fb:e6:5b:e6:b0:c4:35:fe:9d:b8:9f:56: 43:d0:f3:69:6c:58:d9:e5:ad:96:63:c1:12:4a:52:e8:94:55: 79:0d:46:57:a2:1a:26:0d:ae:e4:cb:4f:2f:ab:9a:5b:c9:12: 38:a3:18:bc:6a:81:33:10:f8:63:c9:ae:b7:a3:7e:f9:05:f8: 7b:f7:fc:98:28:8f:66:75:9c:92:b3:26:65:c5:fe:a1:ab:d2: d8:5f:25:ba:27:91:19:cb:e0:62:18:cf:b3:96:a8:91:70:58: 74:d8:06:a1:39:d0:88:cc:45:72:8b:d4:32:de:fe:60:3b:9b: 1c:4a:95:21:3a:bb:95:2f:5f:e5:ae:90:ed:1b:6c:8d:e0:e3: a8:5c:f3:6d:c6:54:75:cb:ad:a4:ea:45:0c:6d:ab:7d:a4:3f: 20:6d:70:62 -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIURnzQTPe/2VSo6VTp2HphhOk4jTcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjVFOTRDNzc4OUFEQTdFNUY1NDBGREJFOTU4MkQ4RUE3 QUE0NkE5NDAeFw0yNjExMTQyMDI2MjBaFw0yNjExMTUyMzUwMjBaMDMxMTAvBgNV BAMTKEUyMDhCMDEwNTVGMjU2RUQzODZDODlCOEIyNDEwRTQ0QUM1QkFBREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOdDJsW31yu3AAysqVrCdBlYzF pJITi4GV+pgDfkE5YB+w4uG8xvHtFLcjxFJ9Z9eLQ/1avT+Nw9mFqLOaCOpHX1p8 8D1dwE8jxn7siwxLj5Xd1kkskcJ9JqpEM4Pvfzu4RaCVY8tbwxeT+jtRSsgtp5XY q9vuHFdGlx6L97tYnGGUOr9nWQ0IH+WvyX+PTiCEyxOMHAdKbhXAfgK1myhnunxE PmQLU7u1delBoMcjqcUkxMsfhtQsIXdDn1iGnxXWz66OjWvaJFovvQPYKwX6nZ5E RzY7gJcwJd8pMn5Sedub+ibs4tQUOivLChozOOvC0G0TO7ZPuHq2pprm97iNAgMB AAGjggHyMIIB7jAdBgNVHQ4EFgQU4giwEFXyVu04bIm4skEORKxbqtwwHwYDVR0j BBgwFoAUZelMd4mtp+X1QP2+lYLY6nqkapQwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRE9OR0ZP TkcvMS82NUU5NEM3Nzg5QURBN0U1RjU0MEZEQkU5NTgyRDhFQTdBQTQ2QTk0LmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8wLzY1RTk0Qzc3ODlBREE3RTVGNTQwRkRCRTk1 ODJEOEVBN0FBNDZBOTQuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9ET05HRk9ORy8xLzY1RTk0Qzc3 ODlBREE3RTVGNTQwRkRCRTk1ODJEOEVBN0FBNDZBOTQubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBESPnX qCiZa8wM/vRPkH0zI+apbsUiLov0SFIzIFiwXJR6v7qrQRYd2oG7cf9afLfNctCF hLbxBXkypPJxolAr6xoOx1yxvzixi4/cS4GOWfn6jrLRkgaPSTHhaUJBAr/75lvm sMQ1/p24n1ZD0PNpbFjZ5a2WY8ESSlLolFV5DUZXohomDa7ky08vq5pbyRI4oxi8 aoEzEPhjya63o375Bfh79/yYKI9mdZySsyZlxf6hq9LYXyW6J5EZy+BiGM+zlqiR cFh02AahOdCIzEVyi9Qy3v5gO5scSpUhOruVL1/lrpDtG2yN4OOoXPNtxlR1y62k 6kUMbat9pD8gbXBi -----END CERTIFICATE-----Generated at Sun Nov 15 11:44:00 2026 by rpki-client