$ rpki-client -vvf rpkica.twnic.tw/rpki/JDA/0/3E0842CB09173FD62797099AF95D837AFF05C8C1.mft File: 3E0842CB09173FD62797099AF95D837AFF05C8C1.mft (raw, json) Hash identifier: +33Bwr8cnNrwkARR97yefFHYyv3CLzAcZ2zqoVNPspo= Subject key identifier: 6D:2C:6A:58:AE:BA:68:AF:EE:4C:3C:86:D6:B3:28:2C:61:AD:38:60 Authority key identifier: 3E:08:42:CB:09:17:3F:D6:27:97:09:9A:F9:5D:83:7A:FF:05:C8:C1 Certificate issuer: /CN=3E0842CB09173FD62797099AF95D837AFF05C8C1 Certificate serial: 2FB43A5A91DB83EF7D44763AC355E630B1DF5ADA Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3E0842CB09173FD62797099AF95D837AFF05C8C1.cer Subject info access: rsync://rpkica.twnic.tw/rpki/JDA/0/3E0842CB09173FD62797099AF95D837AFF05C8C1.mft Manifest number: 30 Signing time: Sat 13 Jun 2026 00:53:34 +0000 Manifest this update: Sat 13 Jun 2026 00:48:34 +0000 Manifest next update: Sun 14 Jun 2026 04:40:34 +0000 Files and hashes: 1: 3E0842CB09173FD62797099AF95D837AFF05C8C1.crl (hash: hXBECQxHRUNJWdrof8qPqMdojAZkfWq0Uknj4q9tLz8=) 2: 3231302e37392e3135342e302f32332d3234203d3e203138303431.roa (hash: 6gHJfiK63fKOqTCfE1ImEP6HSow+veqBLLBJ8NhAMVM=) 3: 3231302e37392e3135342e302f32332d3234203d3e203338313336.roa (hash: dBOQT7bQagPeeSG1nSOxtcaQ3wS6JFXvLy9ydXd5jHY=) 4: 323430313a353565303a3a2f33322d3332203d3e203138303431.roa (hash: qBti13dNoJJvS8VN2rEdP5+tGcjEGWujArPyCZdW53g=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/JDA/0/3E0842CB09173FD62797099AF95D837AFF05C8C1.crl rsync://rpkica.twnic.tw/rpki/JDA/0/3E0842CB09173FD62797099AF95D837AFF05C8C1.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3E0842CB09173FD62797099AF95D837AFF05C8C1.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 00:20:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:b4:3a:5a:91:db:83:ef:7d:44:76:3a:c3:55:e6:30:b1:df:5a:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E0842CB09173FD62797099AF95D837AFF05C8C1 Validity Not Before: Jun 13 00:48:34 2026 GMT Not After : Jun 14 04:40:34 2026 GMT Subject: CN=6D2C6A58AEBA68AFEE4C3C86D6B3282C61AD3860 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:6a:ad:1a:28:f3:45:2a:b4:4a:c0:0f:65:57: 40:df:f5:63:57:fe:e0:7a:4e:4d:46:fb:3f:f4:42: 0f:fe:bd:b6:be:b0:43:d6:fe:c1:41:3f:41:e9:b9: 0a:f4:e4:1a:74:a2:51:e4:0c:06:49:51:96:c7:2e: b3:91:ba:53:bd:1d:fe:52:48:0b:b3:df:e0:c7:27: f4:e1:3b:fc:eb:d7:3c:b1:0f:9b:74:22:09:3e:90: 99:50:9e:09:21:13:88:a2:83:52:b3:4c:71:47:05: a8:10:74:9f:ba:17:f0:fe:aa:7b:ee:df:d0:ad:26: d7:ab:52:5b:cd:0c:7c:64:42:ba:17:ed:4d:ec:f6: ee:f2:90:a9:02:8f:5f:b8:05:b7:78:6c:82:1c:48: ab:ee:9c:ec:56:98:e5:24:1f:33:42:28:7f:f0:8a: 8c:f8:b4:c6:02:74:2d:09:cc:fd:ed:bd:6a:09:91: f3:65:a2:78:99:30:c2:bd:0e:86:26:21:fc:48:21: e7:f2:a9:26:9f:58:bb:f7:93:02:de:bc:d6:55:ab: 50:18:f2:90:c3:a2:7a:a0:df:2d:e3:f1:6f:76:b6: ec:3d:71:4f:e6:bb:f4:78:63:fb:5a:05:ce:11:6e: 64:32:8c:39:ac:db:61:0c:7a:af:98:ee:7a:7c:8b: e9:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:2C:6A:58:AE:BA:68:AF:EE:4C:3C:86:D6:B3:28:2C:61:AD:38:60 X509v3 Authority Key Identifier: keyid:3E:08:42:CB:09:17:3F:D6:27:97:09:9A:F9:5D:83:7A:FF:05:C8:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/JDA/0/3E0842CB09173FD62797099AF95D837AFF05C8C1.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3E0842CB09173FD62797099AF95D837AFF05C8C1.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/JDA/0/3E0842CB09173FD62797099AF95D837AFF05C8C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:95:2f:03:62:bf:e3:ab:9b:6b:e3:15:72:ac:ad:cc:db:fa: fa:a8:32:d9:87:25:22:fd:14:df:d0:bd:8c:e4:51:9d:73:c7: 97:59:4d:6c:97:47:66:86:07:d2:84:59:18:3d:89:21:56:6c: fc:68:e4:e2:60:20:87:6d:d4:40:a5:1a:9a:06:13:07:ba:38: e0:df:e7:7a:90:b9:ed:65:c3:db:5c:da:72:4d:7e:99:06:0d: 5f:7f:60:3b:a0:8e:8f:f1:e3:4e:2e:4e:19:5a:23:2d:0d:d5: e5:92:f5:d2:34:ba:1b:77:cf:d5:98:8c:4a:b8:8c:3e:0b:10: a0:09:51:f4:00:67:dd:6d:3d:00:f9:f1:d7:42:52:d4:0c:64: 00:cc:87:14:98:22:1b:46:70:f2:59:81:33:20:4d:2f:c9:e9: 3c:fb:6f:e1:76:9f:42:7d:43:2f:d1:72:38:bd:e6:a3:de:cd: a6:88:ac:c0:0e:60:02:50:e7:38:a8:c6:f2:dd:70:f5:e0:a4: e3:86:9f:af:0a:2c:ff:6c:a6:92:98:1e:0c:bb:8f:9f:0f:dc: ef:c7:f2:f4:3e:68:c5:a6:d0:66:48:7f:64:69:6b:14:53:5a: c4:d2:96:38:60:11:3f:23:4a:86:5a:bd:78:e1:e6:fb:d8:48: b1:6a:03:1f -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUL7Q6WpHbg+99RHY6w1XmMLHfWtowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0UwODQyQ0IwOTE3M0ZENjI3OTcwOTlBRjk1RDgzN0FG RjA1QzhDMTAeFw0yNjA2MTMwMDQ4MzRaFw0yNjA2MTQwNDQwMzRaMDMxMTAvBgNV BAMTKDZEMkM2QTU4QUVCQTY4QUZFRTRDM0M4NkQ2QjMyODJDNjFBRDM4NjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsaq0aKPNFKrRKwA9lV0Df9WNX /uB6Tk1G+z/0Qg/+vba+sEPW/sFBP0HpuQr05Bp0olHkDAZJUZbHLrORulO9Hf5S SAuz3+DHJ/ThO/zr1zyxD5t0Igk+kJlQngkhE4iig1KzTHFHBagQdJ+6F/D+qnvu 39CtJterUlvNDHxkQroX7U3s9u7ykKkCj1+4Bbd4bIIcSKvunOxWmOUkHzNCKH/w ioz4tMYCdC0JzP3tvWoJkfNloniZMMK9DoYmIfxIIefyqSafWLv3kwLevNZVq1AY 8pDDonqg3y3j8W92tuw9cU/mu/R4Y/taBc4RbmQyjDms22EMeq+Y7np8i+mTAgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUbSxqWK66aK/uTDyG1rMoLGGtOGAwHwYDVR0j BBgwFoAUPghCywkXP9Ynlwma+V2Dev8FyMEwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSkRBLzAv M0UwODQyQ0IwOTE3M0ZENjI3OTcwOTlBRjk1RDgzN0FGRjA1QzhDMS5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS8zRTA4NDJDQjA5MTczRkQ2Mjc5NzA5OUFGOTVEODM3 QUZGMDVDOEMxLmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSkRBLzAvM0UwODQyQ0IwOTE3M0ZENjI3 OTcwOTlBRjk1RDgzN0FGRjA1QzhDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAFOVLwNiv+Orm2vjFXKs rczb+vqoMtmHJSL9FN/QvYzkUZ1zx5dZTWyXR2aGB9KEWRg9iSFWbPxo5OJgIIdt 1EClGpoGEwe6OODf53qQue1lw9tc2nJNfpkGDV9/YDugjo/x404uThlaIy0N1eWS 9dI0uht3z9WYjEq4jD4LEKAJUfQAZ91tPQD58ddCUtQMZADMhxSYIhtGcPJZgTMg TS/J6Tz7b+F2n0J9Qy/Rcji95qPezaaIrMAOYAJQ5zioxvLdcPXgpOOGn68KLP9s ppKYHgy7j58P3O/H8vQ+aMWm0GZIf2RpaxRTWsTSljhgET8jSoZavXjh5vvYSLFq Ax8= -----END CERTIFICATE-----Generated at Sat Jun 13 09:05:17 2026 by rpki-client