$ rpki-client -vvvf rpkica.twnic.tw/rpki/JDA/0/3E0842CB09173FD62797099AF95D837AFF05C8C1.mft File: 3E0842CB09173FD62797099AF95D837AFF05C8C1.mft (raw, json) Hash identifier: UUcuWOPAzPweMDamx0veNXArFgk2UJX1Gt9zGLmrdRY= Subject key identifier: D1:F4:45:F7:99:D9:74:01:E4:0A:27:D7:37:6F:69:9E:85:2B:C3:BE Authority key identifier: 3E:08:42:CB:09:17:3F:D6:27:97:09:9A:F9:5D:83:7A:FF:05:C8:C1 Certificate issuer: /CN=3E0842CB09173FD62797099AF95D837AFF05C8C1 Certificate serial: 7D45AAEBD7596FC51D951FF3DF8E02DA8E5A71E5 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3E0842CB09173FD62797099AF95D837AFF05C8C1.cer Subject info access: rsync://rpkica.twnic.tw/rpki/JDA/0/3E0842CB09173FD62797099AF95D837AFF05C8C1.mft Manifest number: B6 Signing time: Tue 22 Sep 2026 01:48:21 +0000 Manifest this update: Tue 22 Sep 2026 01:43:21 +0000 Manifest next update: Wed 23 Sep 2026 03:56:21 +0000 Files and hashes: 1: 3231302e37392e3135342e302f32332d3234203d3e203338313336.roa (hash: dBOQT7bQagPeeSG1nSOxtcaQ3wS6JFXvLy9ydXd5jHY=) 2: 3E0842CB09173FD62797099AF95D837AFF05C8C1.crl (hash: e8jaFMuIHBYzwSZ66LcELXqR5VnbbikOnJ7cM1AIgkY=) 3: 323430313a353565303a3a2f33322d3332203d3e203138303431.roa (hash: qBti13dNoJJvS8VN2rEdP5+tGcjEGWujArPyCZdW53g=) 4: 3231302e37392e3135342e302f32332d3234203d3e203138303431.roa (hash: 6gHJfiK63fKOqTCfE1ImEP6HSow+veqBLLBJ8NhAMVM=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/JDA/0/3E0842CB09173FD62797099AF95D837AFF05C8C1.crl rsync://rpkica.twnic.tw/rpki/JDA/0/3E0842CB09173FD62797099AF95D837AFF05C8C1.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3E0842CB09173FD62797099AF95D837AFF05C8C1.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 22:16:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:45:aa:eb:d7:59:6f:c5:1d:95:1f:f3:df:8e:02:da:8e:5a:71:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E0842CB09173FD62797099AF95D837AFF05C8C1 Validity Not Before: Sep 22 01:43:21 2026 GMT Not After : Sep 23 03:56:21 2026 GMT Subject: CN=D1F445F799D97401E40A27D7376F699E852BC3BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:be:43:0f:2f:26:b8:1e:b8:a8:1b:42:5f:42: b7:83:ed:b1:97:ad:71:9c:d6:ca:dc:d5:43:fa:29: 55:4a:33:65:f6:35:8d:c4:0f:74:9e:42:bb:5f:29: 6d:10:3e:43:09:e7:90:a0:56:ab:8d:3c:a2:d8:24: c6:a8:47:b5:1b:83:5c:c6:1d:df:d7:1b:3f:12:80: 3a:cf:b6:e5:05:65:58:fd:54:3b:54:15:64:25:eb: 33:e0:23:11:59:58:9f:33:99:33:92:97:8e:d9:f6: f1:9d:f8:87:a2:e3:5b:0b:91:77:84:96:2d:3a:88: 02:be:4c:45:6b:0f:1a:eb:db:83:96:f9:0c:0b:73: f8:eb:c7:23:74:31:2c:23:73:bb:7a:ad:0f:0d:2d: 52:79:81:d9:5f:b2:b2:d6:55:31:aa:01:4a:fa:f4: 9f:ce:20:ac:61:f7:f8:a0:45:47:e9:c4:8f:b3:48: af:d2:3e:3c:d4:0d:14:88:20:d3:59:59:b1:04:dc: b0:27:4f:13:e6:8e:d2:7d:86:d3:7d:c7:38:b2:a0: 2d:06:56:d4:41:27:c6:aa:95:a1:32:38:e2:7f:42: c6:ca:ea:f8:ce:5f:2a:4b:57:18:54:8b:85:56:bb: 9d:92:34:da:7d:25:75:13:a7:e5:e3:30:64:59:55: 96:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:F4:45:F7:99:D9:74:01:E4:0A:27:D7:37:6F:69:9E:85:2B:C3:BE X509v3 Authority Key Identifier: keyid:3E:08:42:CB:09:17:3F:D6:27:97:09:9A:F9:5D:83:7A:FF:05:C8:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/JDA/0/3E0842CB09173FD62797099AF95D837AFF05C8C1.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3E0842CB09173FD62797099AF95D837AFF05C8C1.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/JDA/0/3E0842CB09173FD62797099AF95D837AFF05C8C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:94:a7:57:28:ed:b6:7c:2f:4a:8b:3f:2e:ee:e7:e7:21:db: b0:ee:5e:22:3e:fe:35:8f:4d:b4:30:7a:03:e8:13:28:f6:3f: 07:1d:7c:33:2b:21:a1:a5:1b:c7:3f:05:bc:38:a2:cc:f2:09: b8:f4:67:c0:dd:c7:75:09:fd:9d:67:ce:c4:48:c8:97:87:35: e5:2a:79:fb:81:eb:44:29:d4:ce:e7:a3:fd:28:e3:26:9d:85: 33:91:64:e9:50:75:2c:70:7a:64:74:cc:e9:94:93:5e:13:21: a4:c1:42:f5:00:04:7a:2c:f2:0f:1c:a5:ca:84:55:3b:9e:c9: af:ed:0c:3c:e3:cf:d3:49:48:fb:33:22:d8:13:16:ab:ac:7e: de:bb:5b:e7:d7:a4:b8:88:b3:0a:f5:c0:1b:b8:3d:4c:c5:1a: a8:09:86:93:0d:f9:88:88:13:e8:2e:e7:35:52:f8:91:3c:cd: f4:32:ff:5b:9c:76:96:07:d7:4f:f4:01:c9:e4:7d:20:ff:3b: 75:7c:9a:60:1f:1a:8b:e7:69:df:c2:f5:6b:d5:13:74:f6:88: e9:67:be:ed:03:59:aa:19:cf:d6:80:2b:fc:0f:0c:b8:c7:28: a4:e8:f8:bb:0a:01:c9:ed:d6:19:56:b6:3c:3b:24:93:9e:d6: 0c:f9:04:7c -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUfUWq69dZb8UdlR/z344C2o5aceUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0UwODQyQ0IwOTE3M0ZENjI3OTcwOTlBRjk1RDgzN0FG RjA1QzhDMTAeFw0yNjA5MjIwMTQzMjFaFw0yNjA5MjMwMzU2MjFaMDMxMTAvBgNV BAMTKEQxRjQ0NUY3OTlEOTc0MDFFNDBBMjdENzM3NkY2OTlFODUyQkMzQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBvkMPLya4HrioG0JfQreD7bGX rXGc1src1UP6KVVKM2X2NY3ED3SeQrtfKW0QPkMJ55CgVquNPKLYJMaoR7Ubg1zG Hd/XGz8SgDrPtuUFZVj9VDtUFWQl6zPgIxFZWJ8zmTOSl47Z9vGd+Iei41sLkXeE li06iAK+TEVrDxrr24OW+QwLc/jrxyN0MSwjc7t6rQ8NLVJ5gdlfsrLWVTGqAUr6 9J/OIKxh9/igRUfpxI+zSK/SPjzUDRSIINNZWbEE3LAnTxPmjtJ9htN9xziyoC0G VtRBJ8aqlaEyOOJ/QsbK6vjOXypLVxhUi4VWu52SNNp9JXUTp+XjMGRZVZZRAgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQU0fRF95nZdAHkCifXN29pnoUrw74wHwYDVR0j BBgwFoAUPghCywkXP9Ynlwma+V2Dev8FyMEwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSkRBLzAv M0UwODQyQ0IwOTE3M0ZENjI3OTcwOTlBRjk1RDgzN0FGRjA1QzhDMS5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS8zRTA4NDJDQjA5MTczRkQ2Mjc5NzA5OUFGOTVEODM3 QUZGMDVDOEMxLmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSkRBLzAvM0UwODQyQ0IwOTE3M0ZENjI3 OTcwOTlBRjk1RDgzN0FGRjA1QzhDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAB2Up1co7bZ8L0qLPy7u 5+ch27DuXiI+/jWPTbQwegPoEyj2PwcdfDMrIaGlG8c/Bbw4oszyCbj0Z8Ddx3UJ /Z1nzsRIyJeHNeUqefuB60Qp1M7no/0o4yadhTORZOlQdSxwemR0zOmUk14TIaTB QvUABHos8g8cpcqEVTueya/tDDzjz9NJSPszItgTFqusft67W+fXpLiIswr1wBu4 PUzFGqgJhpMN+YiIE+gu5zVS+JE8zfQy/1ucdpYH10/0AcnkfSD/O3V8mmAfGovn ad/C9WvVE3T2iOlnvu0DWaoZz9aAK/wPDLjHKKTo+LsKAcnt1hlWtjw7JJOe1gz5 BHw= -----END CERTIFICATE-----Generated at Tue Sep 22 06:37:29 2026 by rpki-client