$ rpki-client -vvvf rpkica.twnic.tw/rpki/DOWTEK/0/4DC8A0E80696AD1A2419ACE881334BE812506228.mft File: 4DC8A0E80696AD1A2419ACE881334BE812506228.mft (raw, json) Hash identifier: AxOw8hegRch9BvDbBOPAc5QCtz1M+2aSh+eZ15o8xuU= Subject key identifier: 06:5C:80:4C:68:D7:6D:CA:9C:81:78:70:56:E6:AC:01:4D:5F:2F:D1 Authority key identifier: 4D:C8:A0:E8:06:96:AD:1A:24:19:AC:E8:81:33:4B:E8:12:50:62:28 Certificate issuer: /CN=4DC8A0E80696AD1A2419ACE881334BE812506228 Certificate serial: 43612C779D67AC5B8C0883AB20FD5A2A7778C516 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/4DC8A0E80696AD1A2419ACE881334BE812506228.cer Subject info access: rsync://rpkica.twnic.tw/rpki/DOWTEK/0/4DC8A0E80696AD1A2419ACE881334BE812506228.mft Manifest number: A3 Signing time: Mon 21 Sep 2026 19:22:00 +0000 Manifest this update: Mon 21 Sep 2026 19:17:00 +0000 Manifest next update: Tue 22 Sep 2026 21:56:00 +0000 Files and hashes: 1: 3136322e342e3233372e302f32342d3234203d3e20313331363531.roa (hash: tMr8ixZh2K6SpaPqReDJg4BecbXaqw7Rmztiq3kVMJk=) 2: 4DC8A0E80696AD1A2419ACE881334BE812506228.crl (hash: FvuZH7Ih+mXDSKsZ1At3IAtJw5c+T8usrjgws3P/mq8=) 3: 3136322e342e3233362e302f32342d3234203d3e20323136313338.roa (hash: t0sxX/J7DHyA7+RMNuIhT3/1j3L5qbFI7k7wb/onnz8=) 4: 3136322e342e3233362e302f32342d3234203d3e20323032373336.roa (hash: rqIFLfCYjTacr84/afinxLOCwaaiUV1aCFWFsa89OVU=) 5: 3136322e342e3233362e302f32342d3234203d3e20313937353337.roa (hash: rkewqH+q2MmefgvP9xLiHPbeb7043RwX6NEiRy6AeiQ=) 6: 3136322e342e3233362e302f32332d3233203d3e20313331363330.roa (hash: W1CiJP1fcJGIBc6vJyxp+aVBKQhzLI93m00Pia4UGPk=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/DOWTEK/0/4DC8A0E80696AD1A2419ACE881334BE812506228.crl rsync://rpkica.twnic.tw/rpki/DOWTEK/0/4DC8A0E80696AD1A2419ACE881334BE812506228.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/4DC8A0E80696AD1A2419ACE881334BE812506228.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 21:56:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:61:2c:77:9d:67:ac:5b:8c:08:83:ab:20:fd:5a:2a:77:78:c5:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DC8A0E80696AD1A2419ACE881334BE812506228 Validity Not Before: Sep 21 19:17:00 2026 GMT Not After : Sep 22 21:56:00 2026 GMT Subject: CN=065C804C68D76DCA9C81787056E6AC014D5F2FD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e5:b3:f9:50:15:44:7c:00:77:46:6d:cd:f6: c7:50:03:0c:51:4d:c1:72:18:76:61:30:49:86:3e: 92:9e:3f:b5:5f:18:c0:5a:ff:6b:67:43:52:76:ce: 38:27:e0:04:13:27:83:1b:cb:88:f9:85:b7:52:8c: aa:97:3c:04:0e:c7:20:c9:b4:a3:10:44:3f:e4:09: c9:6d:63:fd:8f:85:19:a6:39:d2:19:97:bf:b8:54: 1c:c9:8d:29:99:77:2a:9a:66:fb:59:af:0c:74:59: 3f:9b:66:fb:54:9e:1d:8c:ce:47:2a:54:e2:ab:e2: fb:6e:4e:b3:84:ec:39:8f:16:09:da:7d:e5:be:58: df:01:04:c7:5d:e8:db:05:98:5c:4b:96:8c:ed:26: 70:12:af:ee:8e:c8:51:85:0c:c8:85:27:0f:f5:34: 98:5b:03:a9:d6:73:ea:27:31:d6:bc:d2:be:07:ca: 44:1f:02:d9:92:7b:ba:03:f5:b8:6e:6e:bd:fc:3f: 74:50:1c:c1:39:b5:8b:f8:48:15:14:a0:ce:ee:29: 65:40:99:f8:e2:0c:29:be:82:83:41:ee:81:34:70: c0:d9:b8:dd:6a:4a:cd:74:95:bf:bb:5e:46:35:e7: 46:16:bb:c2:aa:77:c6:38:49:94:01:aa:30:72:43: f4:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:5C:80:4C:68:D7:6D:CA:9C:81:78:70:56:E6:AC:01:4D:5F:2F:D1 X509v3 Authority Key Identifier: keyid:4D:C8:A0:E8:06:96:AD:1A:24:19:AC:E8:81:33:4B:E8:12:50:62:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/DOWTEK/0/4DC8A0E80696AD1A2419ACE881334BE812506228.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/4DC8A0E80696AD1A2419ACE881334BE812506228.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DOWTEK/0/4DC8A0E80696AD1A2419ACE881334BE812506228.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:08:61:ac:2c:c8:e4:35:d0:cb:ba:8e:d2:23:71:23:3e:63: 9a:48:eb:72:6b:32:64:73:9a:55:c2:44:de:9a:d4:62:2e:7f: 90:fd:33:31:b8:c2:64:d4:2e:85:bc:6f:8e:5a:4e:3f:98:b0: c4:47:a8:fa:af:2e:c7:05:ff:3b:77:83:eb:9d:d9:f3:fd:09: 91:89:fd:ac:2d:9f:4b:33:47:dd:0d:1b:12:69:87:63:44:6d: d7:ac:21:15:e8:ff:10:78:e7:42:11:04:7f:d3:55:56:bd:5c: 32:48:de:ec:ca:da:d0:08:e4:0c:a1:fc:f4:00:ac:a5:88:47: 15:4b:d8:f1:82:42:29:a0:db:d4:db:f6:d2:7c:a0:9c:7c:9b: ad:1b:96:fb:66:b7:eb:38:fd:fb:24:a0:4e:a1:d5:9d:05:70: f4:1c:80:b6:6c:e1:e9:89:d6:32:8d:28:33:04:44:c0:dd:8f: f6:ab:46:7d:a3:ac:d5:8f:fa:52:4a:7b:2b:c9:81:0e:17:b1: cf:92:ef:c5:70:25:44:04:cc:d5:77:9d:50:6a:39:d8:37:b5: 53:e6:5c:a6:6b:02:71:cf:51:9a:ed:c5:00:b5:7a:a4:32:68: e1:a4:ad:56:89:30:e0:10:4f:c4:f6:fc:ce:21:a7:f2:16:94: 98:57:0c:e8 -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUQ2Esd51nrFuMCIOrIP1aKnd4xRYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERDOEEwRTgwNjk2QUQxQTI0MTlBQ0U4ODEzMzRCRTgx MjUwNjIyODAeFw0yNjA5MjExOTE3MDBaFw0yNjA5MjIyMTU2MDBaMDMxMTAvBgNV BAMTKDA2NUM4MDRDNjhENzZEQ0E5QzgxNzg3MDU2RTZBQzAxNEQ1RjJGRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX5bP5UBVEfAB3Rm3N9sdQAwxR TcFyGHZhMEmGPpKeP7VfGMBa/2tnQ1J2zjgn4AQTJ4Mby4j5hbdSjKqXPAQOxyDJ tKMQRD/kCcltY/2PhRmmOdIZl7+4VBzJjSmZdyqaZvtZrwx0WT+bZvtUnh2Mzkcq VOKr4vtuTrOE7DmPFgnafeW+WN8BBMdd6NsFmFxLloztJnASr+6OyFGFDMiFJw/1 NJhbA6nWc+onMda80r4HykQfAtmSe7oD9bhubr38P3RQHME5tYv4SBUUoM7uKWVA mfjiDCm+goNB7oE0cMDZuN1qSs10lb+7XkY150YWu8Kqd8Y4SZQBqjByQ/RrAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQUBlyATGjXbcqcgXhwVuasAU1fL9EwHwYDVR0j BBgwFoAUTcig6AaWrRokGazogTNL6BJQYigwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRE9XVEVL LzAvNERDOEEwRTgwNjk2QUQxQTI0MTlBQ0U4ODEzMzRCRTgxMjUwNjIyOC5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMC80REM4QTBFODA2OTZBRDFBMjQxOUFDRTg4MTMz NEJFODEyNTA2MjI4LmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRE9XVEVLLzAvNERDOEEwRTgwNjk2 QUQxQTI0MTlBQ0U4ODEzMzRCRTgxMjUwNjIyOC5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBALkIYawsyOQ1 0Mu6jtIjcSM+Y5pI63JrMmRzmlXCRN6a1GIuf5D9MzG4wmTULoW8b45aTj+YsMRH qPqvLscF/zt3g+ud2fP9CZGJ/awtn0szR90NGxJph2NEbdesIRXo/xB450IRBH/T VVa9XDJI3uzK2tAI5Ayh/PQArKWIRxVL2PGCQimg29Tb9tJ8oJx8m60blvtmt+s4 /fskoE6h1Z0FcPQcgLZs4emJ1jKNKDMERMDdj/arRn2jrNWP+lJKeyvJgQ4Xsc+S 78VwJUQEzNV3nVBqOdg3tVPmXKZrAnHPUZrtxQC1eqQyaOGkrVaJMOAQT8T2/M4h p/IWlJhXDOg= -----END CERTIFICATE-----Generated at Tue Sep 22 14:28:21 2026 by rpki-client