$ rpki-client -vvvf rpkica.twnic.tw/rpki/GSNET/0/A67F7A72FC031B1A33774C937883F79C7342B848.mft File: A67F7A72FC031B1A33774C937883F79C7342B848.mft (raw, json) Hash identifier: VN4F25Jid7n5nzqLzRCvib6rwg66xW9fB+gUrKKfdB4= Subject key identifier: EE:B5:72:AF:D9:0E:CF:2F:54:CD:B5:C7:78:10:F8:8E:EA:3B:62:AE Authority key identifier: A6:7F:7A:72:FC:03:1B:1A:33:77:4C:93:78:83:F7:9C:73:42:B8:48 Certificate issuer: /CN=A67F7A72FC031B1A33774C937883F79C7342B848 Certificate serial: 68E93FE139D839EA679BB35EB21E2FA54E97F0FD Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A67F7A72FC031B1A33774C937883F79C7342B848.cer Subject info access: rsync://rpkica.twnic.tw/rpki/GSNET/0/A67F7A72FC031B1A33774C937883F79C7342B848.mft Manifest number: B2 Signing time: Sun 20 Sep 2026 23:09:37 +0000 Manifest this update: Sun 20 Sep 2026 23:04:37 +0000 Manifest next update: Mon 21 Sep 2026 23:46:37 +0000 Files and hashes: 1: A67F7A72FC031B1A33774C937883F79C7342B848.crl (hash: lU4E1jj5H6AFMhGqZbgtHUr88HdU8M/A+mWJC15CgRM=) 2: 3231312e37382e36342e302f32302d3234203d3e203338383337.roa (hash: BXuBK0LMjwx4Feg0mEC7/E23SnCajtY0CpedBH0UNLE=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/GSNET/0/A67F7A72FC031B1A33774C937883F79C7342B848.crl rsync://rpkica.twnic.tw/rpki/GSNET/0/A67F7A72FC031B1A33774C937883F79C7342B848.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A67F7A72FC031B1A33774C937883F79C7342B848.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 23:46:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:e9:3f:e1:39:d8:39:ea:67:9b:b3:5e:b2:1e:2f:a5:4e:97:f0:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A67F7A72FC031B1A33774C937883F79C7342B848 Validity Not Before: Sep 20 23:04:37 2026 GMT Not After : Sep 21 23:46:37 2026 GMT Subject: CN=EEB572AFD90ECF2F54CDB5C77810F88EEA3B62AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:00:91:c4:80:1c:a8:40:2a:55:2b:40:11:37: 44:9e:c5:e0:bf:44:14:29:4e:60:94:be:c1:89:a7: 73:70:8c:eb:f3:bb:e0:b5:9f:5e:54:7e:6b:92:70: 9d:5c:ee:38:7a:12:08:41:bd:49:71:0a:10:a2:cc: 66:02:1a:e0:7d:ee:dd:7a:a9:14:94:14:2c:84:52: b5:4e:99:72:51:ce:61:9d:7e:98:4c:44:98:0e:14: 43:a7:2a:5f:9c:27:d6:9f:c4:98:a2:c0:9d:8b:cd: 67:dd:f6:9a:d8:9c:b3:f0:14:3f:a8:07:d4:c7:c5: 5d:03:15:8e:fe:1d:3c:5d:6a:b5:64:56:26:5d:59: a3:ac:07:51:d6:19:bc:d8:f4:8a:08:a5:42:1f:bd: 66:41:17:49:67:0c:32:4e:4b:a5:b4:a6:f8:96:aa: 03:6b:b6:ab:8f:2a:7b:10:4c:dd:e4:4b:9c:82:eb: e3:81:28:84:ea:3f:77:0e:7a:ef:91:29:a2:e6:1b: 1f:bb:87:78:38:a3:92:df:4f:37:1e:eb:07:03:b0: d6:16:9f:6a:a4:09:eb:9b:1e:21:9a:b8:04:2c:c9: 3b:39:49:5b:a1:2f:3e:1f:bc:f6:d1:9e:6b:f3:91: 91:9e:74:cd:bf:da:1d:81:9a:be:ea:09:60:84:1c: 80:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:B5:72:AF:D9:0E:CF:2F:54:CD:B5:C7:78:10:F8:8E:EA:3B:62:AE X509v3 Authority Key Identifier: keyid:A6:7F:7A:72:FC:03:1B:1A:33:77:4C:93:78:83:F7:9C:73:42:B8:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/GSNET/0/A67F7A72FC031B1A33774C937883F79C7342B848.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A67F7A72FC031B1A33774C937883F79C7342B848.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/GSNET/0/A67F7A72FC031B1A33774C937883F79C7342B848.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:b4:c0:45:7f:d4:ed:8f:b1:e0:26:17:b5:1a:7b:9f:6f:47: 99:6f:89:46:fa:fe:e8:34:c7:be:86:0c:96:b3:de:18:c6:92: 81:a5:4e:c1:64:10:6e:02:70:ab:24:93:d6:f7:a0:bd:81:0b: 65:8d:ce:b1:66:76:95:1a:84:f5:de:94:8c:f1:e2:be:a1:bd: a9:d7:5d:4e:4a:26:7a:56:89:e8:c0:33:62:e8:bb:aa:26:0d: af:b6:db:4a:3f:8f:4a:5f:28:a6:ff:3f:65:d7:4a:4e:92:9c: d8:e3:e8:d1:39:c7:c5:2a:d4:9a:de:cb:36:1e:f4:90:f2:1f: 38:e1:c3:07:a0:e8:61:44:82:15:d0:99:95:4b:30:86:39:4b: fd:05:ff:f5:5e:db:c1:b4:45:25:d6:0b:6a:f3:7a:ae:be:ac: b9:32:43:77:6e:bd:f8:81:4d:3b:ac:c8:1d:7d:7e:e0:42:e8: 84:1e:27:98:3c:7d:7e:45:8e:b9:9d:23:0a:ef:9d:bc:e8:f7: 45:63:80:e4:14:11:15:38:6c:b3:d0:11:08:60:dd:d5:7a:78: 56:5c:00:bb:8e:73:bc:f9:94:30:8a:25:34:41:dc:e3:4c:c0: 33:73:25:2f:79:55:2f:da:f5:c4:7a:e3:1a:1f:5d:c7:65:25: aa:61:4b:ed -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUaOk/4TnYOepnm7Nesh4vpU6X8P0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTY3RjdBNzJGQzAzMUIxQTMzNzc0QzkzNzg4M0Y3OUM3 MzQyQjg0ODAeFw0yNjA5MjAyMzA0MzdaFw0yNjA5MjEyMzQ2MzdaMDMxMTAvBgNV BAMTKEVFQjU3MkFGRDkwRUNGMkY1NENEQjVDNzc4MTBGODhFRUEzQjYyQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCAJHEgByoQCpVK0ARN0SexeC/ RBQpTmCUvsGJp3NwjOvzu+C1n15UfmuScJ1c7jh6EghBvUlxChCizGYCGuB97t16 qRSUFCyEUrVOmXJRzmGdfphMRJgOFEOnKl+cJ9afxJiiwJ2LzWfd9prYnLPwFD+o B9THxV0DFY7+HTxdarVkViZdWaOsB1HWGbzY9IoIpUIfvWZBF0lnDDJOS6W0pviW qgNrtquPKnsQTN3kS5yC6+OBKITqP3cOeu+RKaLmGx+7h3g4o5LfTzce6wcDsNYW n2qkCeubHiGauAQsyTs5SVuhLz4fvPbRnmvzkZGedM2/2h2Bmr7qCWCEHIChAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQU7rVyr9kOzy9UzbXHeBD4juo7Yq4wHwYDVR0j BBgwFoAUpn96cvwDGxozd0yTeIP3nHNCuEgwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvR1NORVQv MC9BNjdGN0E3MkZDMDMxQjFBMzM3NzRDOTM3ODgzRjc5QzczNDJCODQ4LmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xL0E2N0Y3QTcyRkMwMzFCMUEzMzc3NEM5Mzc4ODNG NzlDNzM0MkI4NDguY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9HU05FVC8wL0E2N0Y3QTcyRkMwMzFC MUEzMzc3NEM5Mzc4ODNGNzlDNzM0MkI4NDgubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCjtMBFf9Ttj7Hg Jhe1Gnufb0eZb4lG+v7oNMe+hgyWs94YxpKBpU7BZBBuAnCrJJPW96C9gQtljc6x ZnaVGoT13pSM8eK+ob2p111OSiZ6VonowDNi6LuqJg2vtttKP49KXyim/z9l10pO kpzY4+jROcfFKtSa3ss2HvSQ8h844cMHoOhhRIIV0JmVSzCGOUv9Bf/1XtvBtEUl 1gtq83quvqy5MkN3br34gU07rMgdfX7gQuiEHieYPH1+RY65nSMK75286PdFY4Dk FBEVOGyz0BEIYN3VenhWXAC7jnO8+ZQwiiU0QdzjTMAzcyUveVUv2vXEeuMaH13H ZSWqYUvt -----END CERTIFICATE-----Generated at Mon Sep 21 16:54:09 2026 by rpki-client