$ rpki-client -vvvf rpkica.twnic.tw/rpki/DOWNWIN/0/A067A95CB7882938BA5EE0BF9E47C2E030EDF6FB.mft File: A067A95CB7882938BA5EE0BF9E47C2E030EDF6FB.mft (raw, json) Hash identifier: web2lPpkH5ffTkl1/0vMsKTU6sUGxogHscLKknfXxtQ= Subject key identifier: B8:C3:EE:C5:A5:C0:FA:89:D6:29:A3:79:B8:B6:7E:1B:64:E6:8F:CC Authority key identifier: A0:67:A9:5C:B7:88:29:38:BA:5E:E0:BF:9E:47:C2:E0:30:ED:F6:FB Certificate issuer: /CN=A067A95CB7882938BA5EE0BF9E47C2E030EDF6FB Certificate serial: 29725FAC161E4FC0BBDDCA824C3382C49E13BACF Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A067A95CB7882938BA5EE0BF9E47C2E030EDF6FB.cer Subject info access: rsync://rpkica.twnic.tw/rpki/DOWNWIN/0/A067A95CB7882938BA5EE0BF9E47C2E030EDF6FB.mft Manifest number: B2 Signing time: Mon 21 Sep 2026 17:41:46 +0000 Manifest this update: Mon 21 Sep 2026 17:36:46 +0000 Manifest next update: Tue 22 Sep 2026 18:46:46 +0000 Files and hashes: 1: A067A95CB7882938BA5EE0BF9E47C2E030EDF6FB.crl (hash: gqO/y/mam44mhypHKPyenRg+fsDm0EgBuQX6lPHFSxE=) 2: 3130332e3131382e3134382e302f32332d3332203d3e20313331313439.roa (hash: 37E46pfPxEq9A4RxL1D37D3fAAtA0Gnx6vMhsNaTo4A=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/DOWNWIN/0/A067A95CB7882938BA5EE0BF9E47C2E030EDF6FB.crl rsync://rpkica.twnic.tw/rpki/DOWNWIN/0/A067A95CB7882938BA5EE0BF9E47C2E030EDF6FB.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A067A95CB7882938BA5EE0BF9E47C2E030EDF6FB.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 18:46:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:72:5f:ac:16:1e:4f:c0:bb:dd:ca:82:4c:33:82:c4:9e:13:ba:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A067A95CB7882938BA5EE0BF9E47C2E030EDF6FB Validity Not Before: Sep 21 17:36:46 2026 GMT Not After : Sep 22 18:46:46 2026 GMT Subject: CN=B8C3EEC5A5C0FA89D629A379B8B67E1B64E68FCC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:fa:0e:0f:a1:4b:9b:ba:05:9f:eb:bf:36:3a: 11:e1:2b:b6:61:01:30:9c:41:bf:75:72:31:d8:a3: e0:d4:16:08:10:d1:e2:76:f8:f9:cc:8b:63:f8:ab: f6:9b:dd:f3:0a:e8:6b:90:9e:b5:90:cb:a4:a8:c9: ee:d1:90:1b:ae:d9:07:9d:f3:11:e4:f4:5f:8f:4c: 71:ee:bd:50:09:bc:1a:8b:49:c6:27:c7:cc:42:36: b7:bf:f9:3f:c3:bd:87:c5:00:93:42:bd:ec:e0:9d: a8:41:96:f3:41:62:df:78:b1:52:e6:ea:4a:95:95: b6:1c:7a:4b:c4:ea:99:c8:f6:61:d0:14:a3:dc:80: bc:11:df:34:1b:07:cc:73:0d:4b:41:8c:9f:1e:55: 5f:43:da:e1:09:1b:6f:71:ad:c7:59:c7:e8:03:e2: 9b:88:73:00:74:e9:d8:57:bc:97:e0:26:29:d9:84: bb:58:8a:5a:51:4b:2a:c1:c1:d0:49:76:bf:b5:80: f6:35:06:01:2f:16:21:ae:39:30:86:ec:c3:ee:ef: 07:5c:fc:fa:b9:c7:5a:2a:d1:22:be:ff:05:09:9c: fb:e6:a0:f5:57:3a:39:f3:4e:1b:b6:86:ed:4a:83: d8:93:bd:00:af:68:61:40:a4:87:cd:00:1b:ab:1d: 49:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:C3:EE:C5:A5:C0:FA:89:D6:29:A3:79:B8:B6:7E:1B:64:E6:8F:CC X509v3 Authority Key Identifier: keyid:A0:67:A9:5C:B7:88:29:38:BA:5E:E0:BF:9E:47:C2:E0:30:ED:F6:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/DOWNWIN/0/A067A95CB7882938BA5EE0BF9E47C2E030EDF6FB.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A067A95CB7882938BA5EE0BF9E47C2E030EDF6FB.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DOWNWIN/0/A067A95CB7882938BA5EE0BF9E47C2E030EDF6FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:18:ea:e3:d7:35:09:e3:46:15:af:0e:38:43:d7:35:09:79: 16:05:05:b4:e1:3a:46:0e:5b:5b:c9:77:bb:86:15:e3:a4:f2: 04:49:0b:05:81:5f:25:a6:9c:83:4d:46:64:a2:2b:2e:86:5d: 87:ac:11:78:be:59:d8:6f:59:71:a0:c2:79:a8:18:c3:8a:5d: 18:3c:18:a3:b1:6e:6b:c8:eb:b7:06:0c:97:e2:e7:84:c9:dc: 5e:8a:88:2e:a4:65:b0:1d:b8:77:09:09:36:08:7f:10:93:93: b3:71:f9:15:0b:b3:22:89:98:fd:9d:9c:ca:86:9c:83:13:4b: 49:71:52:37:04:93:b5:70:ff:f7:ec:a8:c2:d7:0f:95:a5:37: cc:37:82:9f:c9:1f:b8:88:b4:e0:64:22:ea:7f:49:6d:6b:db: b4:38:aa:38:f0:98:85:72:57:e4:fe:ee:14:41:f7:6f:d1:b0: 59:74:4a:1b:aa:16:49:d5:eb:b6:65:87:2a:c8:0e:25:77:03: e7:60:fc:11:a1:89:ec:91:69:8a:b5:90:97:f1:65:80:f9:06: 58:15:4d:e6:8e:0a:78:c6:e0:d8:fd:e0:38:5d:90:30:81:e9: b7:79:cf:63:1e:e5:51:cc:9a:64:44:24:86:9a:4b:0a:39:a0: 6a:9d:55:09 -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIUKXJfrBYeT8C73cqCTDOCxJ4Tus8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTA2N0E5NUNCNzg4MjkzOEJBNUVFMEJGOUU0N0MyRTAz MEVERjZGQjAeFw0yNjA5MjExNzM2NDZaFw0yNjA5MjIxODQ2NDZaMDMxMTAvBgNV BAMTKEI4QzNFRUM1QTVDMEZBODlENjI5QTM3OUI4QjY3RTFCNjRFNjhGQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI+g4PoUubugWf6782OhHhK7Zh ATCcQb91cjHYo+DUFggQ0eJ2+PnMi2P4q/ab3fMK6GuQnrWQy6Soye7RkBuu2Qed 8xHk9F+PTHHuvVAJvBqLScYnx8xCNre/+T/DvYfFAJNCvezgnahBlvNBYt94sVLm 6kqVlbYcekvE6pnI9mHQFKPcgLwR3zQbB8xzDUtBjJ8eVV9D2uEJG29xrcdZx+gD 4puIcwB06dhXvJfgJinZhLtYilpRSyrBwdBJdr+1gPY1BgEvFiGuOTCG7MPu7wdc /Pq5x1oq0SK+/wUJnPvmoPVXOjnzThu2hu1Kg9iTvQCvaGFApIfNABurHUkLAgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQUuMPuxaXA+onWKaN5uLZ+G2Tmj8wwHwYDVR0j BBgwFoAUoGepXLeIKTi6XuC/nkfC4DDt9vswDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRE9XTldJ Ti8wL0EwNjdBOTVDQjc4ODI5MzhCQTVFRTBCRjlFNDdDMkUwMzBFREY2RkIuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvQTA2N0E5NUNCNzg4MjkzOEJBNUVFMEJGOUU0 N0MyRTAzMEVERjZGQi5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0RPV05XSU4vMC9BMDY3QTk1Q0I3 ODgyOTM4QkE1RUUwQkY5RTQ3QzJFMDMwRURGNkZCLm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoBjq49c1 CeNGFa8OOEPXNQl5FgUFtOE6Rg5bW8l3u4YV46TyBEkLBYFfJaacg01GZKIrLoZd h6wReL5Z2G9ZcaDCeagYw4pdGDwYo7Fua8jrtwYMl+LnhMncXoqILqRlsB24dwkJ Ngh/EJOTs3H5FQuzIomY/Z2cyoacgxNLSXFSNwSTtXD/9+yowtcPlaU3zDeCn8kf uIi04GQi6n9JbWvbtDiqOPCYhXJX5P7uFEH3b9GwWXRKG6oWSdXrtmWHKsgOJXcD 52D8EaGJ7JFpirWQl/FlgPkGWBVN5o4KeMbg2P3gOF2QMIHpt3nPYx7lUcyaZEQk hppLCjmgap1VCQ== -----END CERTIFICATE-----Generated at Tue Sep 22 03:03:25 2026 by rpki-client