$ rpki-client -vvvf rpkica.twnic.tw/rpki/DONGFONG/1/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.mft File: 65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.mft (raw, json) Hash identifier: jTxShhFBhM1QBBYGvwN+FwqxF+va6Jg+3JNsq+Vrbis= Subject key identifier: 7C:FC:0E:81:B8:B0:5D:4C:73:68:43:DC:BA:2C:C4:4A:4B:D1:54:01 Authority key identifier: 65:E9:4C:77:89:AD:A7:E5:F5:40:FD:BE:95:82:D8:EA:7A:A4:6A:94 Certificate issuer: /CN=65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94 Certificate serial: 7E4A7A2A9B89F298975F884128968CF70FDA031A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.cer Subject info access: rsync://rpkica.twnic.tw/rpki/DONGFONG/1/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.mft Manifest number: BD Signing time: Sun 20 Sep 2026 14:04:41 +0000 Manifest this update: Sun 20 Sep 2026 13:59:41 +0000 Manifest next update: Mon 21 Sep 2026 14:44:41 +0000 Files and hashes: 1: 65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.crl (hash: PGMk9e80BE4ZdJv0FnWb9EfKJjfW/+Z8gmSwwAr/Se0=) 2: 3135392e3131372e38342e302f32342d3234203d3e203138303436.roa (hash: k6/jJKCg7k9igf9mXdOBVLZ2L1gd68NXx+o3im+bxhY=) 3: 3135392e3131372e36342e302f31392d3234203d3e203138303436.roa (hash: BnOw5LV6cVAcgowH1P0wBRFgURzOj7EomMXHxAWHT28=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/DONGFONG/1/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.crl rsync://rpkica.twnic.tw/rpki/DONGFONG/1/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 14:44:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:4a:7a:2a:9b:89:f2:98:97:5f:88:41:28:96:8c:f7:0f:da:03:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94 Validity Not Before: Sep 20 13:59:41 2026 GMT Not After : Sep 21 14:44:41 2026 GMT Subject: CN=7CFC0E81B8B05D4C736843DCBA2CC44A4BD15401 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9b:f8:a5:9d:3f:24:66:49:db:58:b4:af:22: 32:78:91:5a:33:8f:26:26:42:ed:d6:34:a7:1e:48: d0:4f:ee:2a:c9:e3:78:be:cf:6b:38:3e:ac:91:4b: a1:f6:7f:02:10:a4:3f:16:1a:0b:4e:f1:fe:76:7e: 9c:b5:45:9b:4e:fa:76:43:04:b4:c4:28:83:78:d3: c7:b1:09:c3:56:d9:6c:1c:a5:53:1a:17:68:ea:53: 52:3d:1a:b7:9f:51:71:9a:8a:f2:e0:65:b2:cd:f9: d4:5e:d3:4c:09:7a:5c:68:42:72:a9:6e:53:ba:b0: 19:87:ad:b7:2d:b8:5f:65:21:6f:80:c6:e1:f6:0b: 3f:b9:c7:c0:bd:00:51:52:10:30:0a:4b:2c:80:45: 23:e0:c3:64:50:a0:77:0f:19:99:80:01:9c:dc:1c: f8:f9:ed:cd:b1:93:16:34:b6:17:b5:8d:41:09:d7: da:5d:81:82:e5:18:e7:6b:03:9c:76:a6:f8:7b:e0: d4:6e:16:5c:d1:36:6a:e3:3b:45:de:47:ae:00:0d: 63:04:d9:d5:14:31:f7:d7:26:63:e8:12:1f:5d:73: ca:21:d0:46:46:b0:69:c1:45:6a:73:43:ac:14:a5: 08:f0:4a:df:fd:8d:7d:21:26:4d:92:70:c2:ae:d4: 46:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:FC:0E:81:B8:B0:5D:4C:73:68:43:DC:BA:2C:C4:4A:4B:D1:54:01 X509v3 Authority Key Identifier: keyid:65:E9:4C:77:89:AD:A7:E5:F5:40:FD:BE:95:82:D8:EA:7A:A4:6A:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/DONGFONG/1/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DONGFONG/1/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:a3:0d:b7:79:f4:f2:6b:5e:99:63:84:7e:5a:e6:b2:1b:39: 3f:16:d6:40:cb:e0:c5:c8:ce:e0:9c:d2:df:9c:8c:25:b2:ea: 59:76:60:db:68:b2:69:b4:f9:bf:ab:f0:11:04:71:06:a3:22: bb:aa:80:c4:dc:73:c3:ed:2d:a7:69:16:89:e8:07:bd:58:48: 0e:7c:53:9f:cd:1e:94:c9:bc:19:94:6e:e8:d4:43:40:c9:44: ee:57:cb:5b:69:fa:cd:4a:0b:8a:d4:ec:9e:13:76:de:09:3f: 28:bf:49:e4:2c:44:a6:b6:10:36:93:32:77:9b:60:e9:00:2a: 70:c1:55:2b:30:8e:65:bc:2d:ba:1a:ab:02:1e:16:38:f2:f5: 90:f0:6d:bd:15:b8:17:ae:6f:14:fa:a7:ff:eb:be:ef:75:f5: 79:04:86:40:3d:1f:07:8c:58:3e:30:78:fc:bf:f9:98:b6:45: 61:e7:d1:b7:79:d4:2a:4f:36:0b:15:eb:84:87:4f:10:4b:1f: 65:d9:3e:eb:05:25:97:b6:b2:fc:bf:3f:41:f2:d9:eb:30:69: 1b:03:90:92:1e:4b:97:d3:aa:67:38:56:c1:82:65:d7:42:e0: 26:b1:09:08:5f:35:e3:f9:9a:e8:f4:c7:a3:b4:f5:8f:00:71: 9a:4d:42:45 -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUfkp6KpuJ8piXX4hBKJaM9w/aAxowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjVFOTRDNzc4OUFEQTdFNUY1NDBGREJFOTU4MkQ4RUE3 QUE0NkE5NDAeFw0yNjA5MjAxMzU5NDFaFw0yNjA5MjExNDQ0NDFaMDMxMTAvBgNV BAMTKDdDRkMwRTgxQjhCMDVENEM3MzY4NDNEQ0JBMkNDNDRBNEJEMTU0MDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0m/ilnT8kZknbWLSvIjJ4kVoz jyYmQu3WNKceSNBP7irJ43i+z2s4PqyRS6H2fwIQpD8WGgtO8f52fpy1RZtO+nZD BLTEKIN408exCcNW2WwcpVMaF2jqU1I9GrefUXGaivLgZbLN+dRe00wJelxoQnKp blO6sBmHrbctuF9lIW+AxuH2Cz+5x8C9AFFSEDAKSyyARSPgw2RQoHcPGZmAAZzc HPj57c2xkxY0the1jUEJ19pdgYLlGOdrA5x2pvh74NRuFlzRNmrjO0XeR64ADWME 2dUUMffXJmPoEh9dc8oh0EZGsGnBRWpzQ6wUpQjwSt/9jX0hJk2ScMKu1EaFAgMB AAGjggHyMIIB7jAdBgNVHQ4EFgQUfPwOgbiwXUxzaEPcuizESkvRVAEwHwYDVR0j BBgwFoAUZelMd4mtp+X1QP2+lYLY6nqkapQwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRE9OR0ZP TkcvMS82NUU5NEM3Nzg5QURBN0U1RjU0MEZEQkU5NTgyRDhFQTdBQTQ2QTk0LmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8wLzY1RTk0Qzc3ODlBREE3RTVGNTQwRkRCRTk1 ODJEOEVBN0FBNDZBOTQuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9ET05HRk9ORy8xLzY1RTk0Qzc3 ODlBREE3RTVGNTQwRkRCRTk1ODJEOEVBN0FBNDZBOTQubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA0ow23 efTya16ZY4R+WuayGzk/FtZAy+DFyM7gnNLfnIwlsupZdmDbaLJptPm/q/ARBHEG oyK7qoDE3HPD7S2naRaJ6Ae9WEgOfFOfzR6UybwZlG7o1ENAyUTuV8tbafrNSguK 1OyeE3beCT8ov0nkLESmthA2kzJ3m2DpACpwwVUrMI5lvC26GqsCHhY48vWQ8G29 FbgXrm8U+qf/677vdfV5BIZAPR8HjFg+MHj8v/mYtkVh59G3edQqTzYLFeuEh08Q Sx9l2T7rBSWXtrL8vz9B8tnrMGkbA5CSHkuX06pnOFbBgmXXQuAmsQkIXzXj+Zro 9MejtPWPAHGaTUJF -----END CERTIFICATE-----Generated at Mon Sep 21 09:52:25 2026 by rpki-client