$ rpki-client -vvvf rpkica.twnic.tw/rpki/MITACMDC/0/F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.mft File: F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.mft (raw, json) Hash identifier: 3LNWz94xVFqRT0XQbNll6yBEz3zYzjmezmjU74EdSYY= Subject key identifier: AE:E5:65:27:A7:E8:22:A3:AB:2C:4D:37:14:EC:5B:DC:AB:85:11:6A Authority key identifier: F1:CE:AE:4A:E1:3A:71:AF:6A:07:09:A4:C3:00:AD:A4:62:3A:2C:AA Certificate issuer: /CN=F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA Certificate serial: 297B2E16FA56CB08065DAA2B1504004A9ABB100C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.cer Subject info access: rsync://rpkica.twnic.tw/rpki/MITACMDC/0/F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.mft Manifest number: B7 Signing time: Tue 22 Sep 2026 00:28:11 +0000 Manifest this update: Tue 22 Sep 2026 00:23:11 +0000 Manifest next update: Wed 23 Sep 2026 04:18:11 +0000 Files and hashes: 1: 3231312e37382e3234302e302f32302d3232203d3e203138313739.roa (hash: wtDOplvpAqeejc+mSEqtFsj/OGKvnvcOzFKX6zd6nQY=) 2: 3130332e32302e3137362e302f32322d3232203d3e203138313739.roa (hash: PNKjey9tKMdDR4FRuzXEfmnFsMhGJbtdw6pFSO4K0J8=) 3: 3130332e31362e3234342e302f32322d3232203d3e203138313739.roa (hash: 7gfsjGvmdQGtAgO0An6FiUxxSYVdxi5kO9sx5OvgxYQ=) 4: F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.crl (hash: kvo6sFeQvMo2ymj4/PGF1ws7U1RQxlWxUE1ZurW0+jQ=) 5: 323430343a646230303a3a2f33322d3332203d3e203138313739.roa (hash: ScKz5v7qY5jPX8fFHjF9zU3+yWebwV6lUVVjO7sfadI=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/MITACMDC/0/F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.crl rsync://rpkica.twnic.tw/rpki/MITACMDC/0/F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 04:18:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:7b:2e:16:fa:56:cb:08:06:5d:aa:2b:15:04:00:4a:9a:bb:10:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA Validity Not Before: Sep 22 00:23:11 2026 GMT Not After : Sep 23 04:18:11 2026 GMT Subject: CN=AEE56527A7E822A3AB2C4D3714EC5BDCAB85116A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:cf:c9:3f:2b:5e:f5:81:fb:f3:82:1d:45:29: d7:51:61:13:95:0f:22:6d:2b:ea:fe:c0:2b:89:7c: 06:cd:ed:93:ef:b6:53:99:54:60:ad:6d:46:60:5a: 1e:1d:bf:a8:d1:0b:a9:25:bc:6f:52:12:c9:56:14: df:40:e4:31:7d:ce:b6:af:94:33:58:43:85:f5:52: da:b1:af:75:31:63:e3:4f:c4:55:89:d7:29:5b:d0: 2f:df:70:0b:62:dd:9d:86:e3:27:81:43:61:1e:87: 4a:04:d0:04:9f:98:3b:0d:ab:1c:43:e3:37:1b:80: c0:9a:70:a7:36:e2:51:23:e3:cd:72:ff:3e:6b:64: e3:46:0e:94:e9:5f:87:8e:08:f1:1d:76:6e:d1:1c: da:a0:84:ef:03:1f:0b:60:36:a0:be:72:8d:f6:2e: bb:f0:06:01:58:09:8a:48:e7:9f:58:52:6f:67:95: ad:71:f1:4b:2e:42:74:01:ab:6c:3c:aa:b8:4b:a7: db:af:33:d7:d0:5b:49:79:d7:91:7a:9d:62:82:f7: d5:de:15:72:bb:81:b5:00:89:c3:fa:6b:12:d5:5a: 93:da:c8:73:ee:21:68:88:c7:d9:fc:b7:67:6d:57: 09:e4:fa:36:6b:43:09:9f:f1:c8:71:60:69:ff:a8: 1c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:E5:65:27:A7:E8:22:A3:AB:2C:4D:37:14:EC:5B:DC:AB:85:11:6A X509v3 Authority Key Identifier: keyid:F1:CE:AE:4A:E1:3A:71:AF:6A:07:09:A4:C3:00:AD:A4:62:3A:2C:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/MITACMDC/0/F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MITACMDC/0/F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:08:4d:b2:56:1f:aa:18:23:8a:6f:d3:ce:bc:ac:b7:41:1b: 47:16:30:86:7c:c0:a7:bc:fe:02:6d:7a:37:6a:1c:f5:04:58: 4b:e2:73:96:23:79:05:a9:23:07:ff:63:fb:08:56:33:bd:64: f7:bb:d8:f5:c8:2a:b2:69:20:83:b3:b0:59:d5:64:36:8f:8a: 38:38:ac:a5:85:9d:72:5d:ac:92:d7:22:4f:89:27:dd:16:10: 67:cc:63:00:bb:05:e4:21:dc:cf:47:85:37:5f:6e:e8:a1:4d: 8b:5c:4c:01:90:aa:ad:4e:5f:11:2e:9f:14:a0:73:0b:8e:c4: 32:10:b0:cf:0a:9f:02:4f:db:76:d4:06:b5:01:1a:89:55:ab: 96:ce:3f:5d:0f:39:29:3a:b3:e3:f5:0d:5b:fb:9c:54:be:7f: 2f:e6:c4:14:56:9f:97:88:21:11:2c:a0:e7:73:b7:c8:32:3a: b2:6f:20:8b:b7:18:7f:07:99:2f:41:61:16:b7:ba:08:cc:c9: 56:f1:59:fc:0d:7e:9d:ae:1d:6e:07:6a:01:c0:35:a3:79:c6: 2c:64:60:e8:3f:65:53:0e:0a:3a:14:02:ec:3f:45:74:82:3e: fb:b7:c3:ab:ae:4c:ee:a2:04:3b:11:e9:b9:ff:02:6b:46:34: fe:30:c4:ae -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUKXsuFvpWywgGXaorFQQASpq7EAwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjFDRUFFNEFFMTNBNzFBRjZBMDcwOUE0QzMwMEFEQTQ2 MjNBMkNBQTAeFw0yNjA5MjIwMDIzMTFaFw0yNjA5MjMwNDE4MTFaMDMxMTAvBgNV BAMTKEFFRTU2NTI3QTdFODIyQTNBQjJDNEQzNzE0RUM1QkRDQUI4NTExNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiz8k/K171gfvzgh1FKddRYROV DyJtK+r+wCuJfAbN7ZPvtlOZVGCtbUZgWh4dv6jRC6klvG9SEslWFN9A5DF9zrav lDNYQ4X1Utqxr3UxY+NPxFWJ1ylb0C/fcAti3Z2G4yeBQ2Eeh0oE0ASfmDsNqxxD 4zcbgMCacKc24lEj481y/z5rZONGDpTpX4eOCPEddm7RHNqghO8DHwtgNqC+co32 LrvwBgFYCYpI559YUm9nla1x8UsuQnQBq2w8qrhLp9uvM9fQW0l515F6nWKC99Xe FXK7gbUAicP6axLVWpPayHPuIWiIx9n8t2dtVwnk+jZrQwmf8chxYGn/qBw1AgMB AAGjggHyMIIB7jAdBgNVHQ4EFgQUruVlJ6foIqOrLE03FOxb3KuFEWowHwYDVR0j BBgwFoAU8c6uSuE6ca9qBwmkwwCtpGI6LKowDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTUlUQUNN REMvMC9GMUNFQUU0QUUxM0E3MUFGNkEwNzA5QTRDMzAwQURBNDYyM0EyQ0FBLmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8xL0YxQ0VBRTRBRTEzQTcxQUY2QTA3MDlBNEMz MDBBREE0NjIzQTJDQUEuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9NSVRBQ01EQy8wL0YxQ0VBRTRB RTEzQTcxQUY2QTA3MDlBNEMzMDBBREE0NjIzQTJDQUEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBRCE2y Vh+qGCOKb9POvKy3QRtHFjCGfMCnvP4CbXo3ahz1BFhL4nOWI3kFqSMH/2P7CFYz vWT3u9j1yCqyaSCDs7BZ1WQ2j4o4OKylhZ1yXayS1yJPiSfdFhBnzGMAuwXkIdzP R4U3X27ooU2LXEwBkKqtTl8RLp8UoHMLjsQyELDPCp8CT9t21Aa1ARqJVauWzj9d DzkpOrPj9Q1b+5xUvn8v5sQUVp+XiCERLKDnc7fIMjqybyCLtxh/B5kvQWEWt7oI zMlW8Vn8DX6drh1uB2oBwDWjecYsZGDoP2VTDgo6FALsP0V0gj77t8OrrkzuogQ7 Eem5/wJrRjT+MMSu -----END CERTIFICATE-----Generated at Tue Sep 22 21:37:38 2026 by rpki-client