$ rpki-client -vvvf rpkica.twnic.tw/rpki/DOWTEK/1/E68C4C103029B84142A5CAB3EFB852FDC1A39BB0.mft File: E68C4C103029B84142A5CAB3EFB852FDC1A39BB0.mft (raw, json) Hash identifier: z7eBZURJ3JV7f+Qj/bmexsWdBoRJBsvGWc62mCiO130= Subject key identifier: 8A:03:4D:5D:D8:86:F2:5B:AF:E9:F7:EA:2D:38:5A:ED:42:CB:4C:7E Authority key identifier: E6:8C:4C:10:30:29:B8:41:42:A5:CA:B3:EF:B8:52:FD:C1:A3:9B:B0 Certificate issuer: /CN=E68C4C103029B84142A5CAB3EFB852FDC1A39BB0 Certificate serial: 35CD71BCDF779B7A23C18D63EF5DC266DC3E05E3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E68C4C103029B84142A5CAB3EFB852FDC1A39BB0.cer Subject info access: rsync://rpkica.twnic.tw/rpki/DOWTEK/1/E68C4C103029B84142A5CAB3EFB852FDC1A39BB0.mft Manifest number: A6 Signing time: Thu 24 Sep 2026 12:24:46 +0000 Manifest this update: Thu 24 Sep 2026 12:19:46 +0000 Manifest next update: Fri 25 Sep 2026 13:04:46 +0000 Files and hashes: 1: E68C4C103029B84142A5CAB3EFB852FDC1A39BB0.crl (hash: LNxZq9+7K6xAkPnNoQ4JxoWi99OXwG07+OR4nNDb2i0=) 2: 323430323a363432303a3a2f33322d3438203d3e20313331363330.roa (hash: oxQPGNBMj2CJJd3CtDlG2Tl/miuEDB0GkZlm0cd0pJk=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/DOWTEK/1/E68C4C103029B84142A5CAB3EFB852FDC1A39BB0.crl rsync://rpkica.twnic.tw/rpki/DOWTEK/1/E68C4C103029B84142A5CAB3EFB852FDC1A39BB0.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E68C4C103029B84142A5CAB3EFB852FDC1A39BB0.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 13:04:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:cd:71:bc:df:77:9b:7a:23:c1:8d:63:ef:5d:c2:66:dc:3e:05:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E68C4C103029B84142A5CAB3EFB852FDC1A39BB0 Validity Not Before: Sep 24 12:19:46 2026 GMT Not After : Sep 25 13:04:46 2026 GMT Subject: CN=8A034D5DD886F25BAFE9F7EA2D385AED42CB4C7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c5:26:4b:b7:ea:7f:2c:19:7b:e1:5b:ee:34: b9:12:cb:70:f4:ce:dc:dd:bb:34:40:5b:40:92:59: 38:ad:1f:d7:d4:5e:4e:24:a8:9c:87:87:4f:b2:a3: 59:7c:da:ec:26:b5:80:d1:50:2f:41:83:c0:01:54: 28:fb:aa:0a:5d:e4:5e:09:1d:d1:a8:b8:1e:96:b4: ae:9a:88:49:60:78:b5:e3:36:f2:e4:e9:b0:78:81: cb:71:22:2f:df:39:9c:48:97:36:88:eb:ad:f6:d1: 2c:2f:61:19:40:57:8e:28:5d:d8:71:62:ec:c8:9f: 85:d3:f3:e2:a4:a4:81:4a:44:81:98:2d:f0:bb:98: 43:4b:08:0f:01:cb:18:74:7b:6a:41:2d:4a:01:c3: 4c:0d:7a:63:17:bd:e6:34:1b:57:a4:b3:c4:14:de: 58:28:ef:83:d1:92:33:be:11:db:86:51:1b:9d:38: e4:84:6c:86:b5:52:92:c4:e3:be:57:12:da:7d:4d: c9:70:22:5e:96:63:5c:97:ae:33:75:c2:e8:14:7f: 42:d0:45:d3:89:d5:a2:5b:7d:82:63:6f:40:59:14: e8:80:00:73:d2:8c:61:76:ce:ae:60:f2:08:a9:56: 8c:11:5e:78:86:0e:d7:ee:5a:b7:d8:c6:7e:6f:08: 6b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:03:4D:5D:D8:86:F2:5B:AF:E9:F7:EA:2D:38:5A:ED:42:CB:4C:7E X509v3 Authority Key Identifier: keyid:E6:8C:4C:10:30:29:B8:41:42:A5:CA:B3:EF:B8:52:FD:C1:A3:9B:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/DOWTEK/1/E68C4C103029B84142A5CAB3EFB852FDC1A39BB0.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E68C4C103029B84142A5CAB3EFB852FDC1A39BB0.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DOWTEK/1/E68C4C103029B84142A5CAB3EFB852FDC1A39BB0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:3a:66:32:63:98:9b:a4:94:57:61:d7:d9:91:cd:87:93:18: 9f:71:6e:ab:5f:da:51:90:4a:d8:f6:a4:f1:75:f9:5c:38:bb: 31:68:df:c5:c6:7a:20:92:a0:6c:9f:58:42:10:75:46:de:6c: 0d:17:7e:8f:fa:2d:c2:67:b0:7d:5b:71:fe:20:45:48:d8:06: 3f:0d:0f:81:06:2a:ff:db:9e:70:47:1d:fd:ff:12:7d:a7:75: 3c:1a:f1:e6:61:31:7e:e2:70:48:20:5c:1b:59:84:60:e3:db: c5:51:fc:f4:d5:55:26:44:95:10:82:f6:db:62:c6:c0:4d:b9: b3:35:0a:06:d8:84:82:41:fa:93:5b:c2:a7:23:eb:ce:e2:e5: fc:cb:69:f7:d3:9f:63:ca:38:b1:1f:4c:de:31:37:2c:b1:00: 42:f4:e2:24:bb:07:5b:78:8a:30:2a:0e:4f:5f:67:1e:1e:44: 45:6f:e9:a1:79:0a:8d:cd:1c:3c:d5:6b:99:ca:c2:bb:80:6a: 9e:49:2b:97:f3:2d:44:f5:a8:41:78:53:4d:42:f9:2b:86:38: 4c:f8:85:55:11:68:45:3e:31:4c:47:b1:8e:fc:87:98:af:ac: b2:f5:08:82:04:b3:f8:2c:78:91:08:7d:44:d7:2d:84:43:1c: 60:71:99:ac -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUNc1xvN93m3ojwY1j713CZtw+BeMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTY4QzRDMTAzMDI5Qjg0MTQyQTVDQUIzRUZCODUyRkRD MUEzOUJCMDAeFw0yNjA5MjQxMjE5NDZaFw0yNjA5MjUxMzA0NDZaMDMxMTAvBgNV BAMTKDhBMDM0RDVERDg4NkYyNUJBRkU5RjdFQTJEMzg1QUVENDJDQjRDN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0xSZLt+p/LBl74VvuNLkSy3D0 ztzduzRAW0CSWTitH9fUXk4kqJyHh0+yo1l82uwmtYDRUC9Bg8ABVCj7qgpd5F4J HdGouB6WtK6aiElgeLXjNvLk6bB4gctxIi/fOZxIlzaI66320SwvYRlAV44oXdhx YuzIn4XT8+KkpIFKRIGYLfC7mENLCA8Byxh0e2pBLUoBw0wNemMXveY0G1eks8QU 3lgo74PRkjO+EduGURudOOSEbIa1UpLE475XEtp9TclwIl6WY1yXrjN1wugUf0LQ RdOJ1aJbfYJjb0BZFOiAAHPSjGF2zq5g8gipVowRXniGDtfuWrfYxn5vCGsZAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQUigNNXdiG8luv6ffqLTha7ULLTH4wHwYDVR0j BBgwFoAU5oxMEDApuEFCpcqz77hS/cGjm7AwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRE9XVEVL LzEvRTY4QzRDMTAzMDI5Qjg0MTQyQTVDQUIzRUZCODUyRkRDMUEzOUJCMC5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMS9FNjhDNEMxMDMwMjlCODQxNDJBNUNBQjNFRkI4 NTJGREMxQTM5QkIwLmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRE9XVEVLLzEvRTY4QzRDMTAzMDI5 Qjg0MTQyQTVDQUIzRUZCODUyRkRDMUEzOUJCMC5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAK86ZjJjmJuk lFdh19mRzYeTGJ9xbqtf2lGQStj2pPF1+Vw4uzFo38XGeiCSoGyfWEIQdUbebA0X fo/6LcJnsH1bcf4gRUjYBj8ND4EGKv/bnnBHHf3/En2ndTwa8eZhMX7icEggXBtZ hGDj28VR/PTVVSZElRCC9ttixsBNubM1CgbYhIJB+pNbwqcj687i5fzLaffTn2PK OLEfTN4xNyyxAEL04iS7B1t4ijAqDk9fZx4eREVv6aF5Co3NHDzVa5nKwruAap5J K5fzLUT1qEF4U01C+SuGOEz4hVURaEU+MUxHsY78h5ivrLL1CIIEs/gseJEIfUTX LYRDHGBxmaw= -----END CERTIFICATE-----Generated at Thu Sep 24 21:49:42 2026 by rpki-client