$ rpki-client -vvvf rpkica.twnic.tw/rpki/OPENRICH/0/61F2C234A51074E0978404BDC79AA79130040B00.mft File: 61F2C234A51074E0978404BDC79AA79130040B00.mft (raw, json) Hash identifier: Ei0zg1HgOGEaYcZPPIKyfn45tVifQ8LxjVKh6jBytJg= Subject key identifier: 6D:DA:CB:07:17:CA:23:16:30:6A:9A:83:EC:15:2E:6D:54:65:9C:17 Authority key identifier: 61:F2:C2:34:A5:10:74:E0:97:84:04:BD:C7:9A:A7:91:30:04:0B:00 Certificate issuer: /CN=61F2C234A51074E0978404BDC79AA79130040B00 Certificate serial: 796113CCBF55D039D103060345AA594778DF06F6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/61F2C234A51074E0978404BDC79AA79130040B00.cer Subject info access: rsync://rpkica.twnic.tw/rpki/OPENRICH/0/61F2C234A51074E0978404BDC79AA79130040B00.mft Manifest number: BB Signing time: Thu 24 Sep 2026 18:08:33 +0000 Manifest this update: Thu 24 Sep 2026 18:03:32 +0000 Manifest next update: Fri 25 Sep 2026 19:48:32 +0000 Files and hashes: 1: 323430353a623863303a3a2f33322d3634203d3e20313331363734.roa (hash: zPchVf+BzdWdK6jtiyFuKEMvAaWvPZafeIufyi+NDAU=) 2: 3130332e3134372e3133302e302f32332d3234203d3e20313331363737.roa (hash: VGWA54tpU9ZSYiEjleM6DRC35GLg1lZvqOaYCzFR4yI=) 3: 61F2C234A51074E0978404BDC79AA79130040B00.crl (hash: NxyrtCXos6SshuO62UMuCgngmQsYGnrqgwkMJKQWWzg=) 4: 3130332e3134372e3133302e302f32332d3234203d3e20313331363734.roa (hash: hPsd6S2D9hMin8P77QyQ2OhAm+/bYf9j5m2G2tBdGrg=) 5: 323430353a623863303a3a2f33322d3634203d3e20313331363737.roa (hash: AnPDeDj6hR2bEdYvy6SAFA3A/pHmArnFaxzCcI0NAKA=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/OPENRICH/0/61F2C234A51074E0978404BDC79AA79130040B00.crl rsync://rpkica.twnic.tw/rpki/OPENRICH/0/61F2C234A51074E0978404BDC79AA79130040B00.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/61F2C234A51074E0978404BDC79AA79130040B00.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 19:48:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:61:13:cc:bf:55:d0:39:d1:03:06:03:45:aa:59:47:78:df:06:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61F2C234A51074E0978404BDC79AA79130040B00 Validity Not Before: Sep 24 18:03:32 2026 GMT Not After : Sep 25 19:48:32 2026 GMT Subject: CN=6DDACB0717CA2316306A9A83EC152E6D54659C17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f9:b7:70:05:86:6a:b4:b0:9f:d4:35:09:04: ef:e7:aa:3e:ee:ba:3d:f7:28:ce:59:cc:95:ec:97: f9:d6:d2:37:d3:b7:fc:79:b4:ad:9a:f1:77:97:b1: 3d:3c:9d:1a:4b:cd:62:de:d4:7b:51:6f:36:20:70: c0:ea:cb:e3:60:de:13:da:7c:68:51:5c:39:e1:3d: dd:e8:30:81:2d:5d:35:08:24:a6:a4:fe:15:d7:a4: 60:54:9b:4a:a4:1b:59:cb:d5:dc:5b:84:09:d2:46: 4a:1d:54:16:a5:b4:c8:f5:1f:5a:79:36:0c:98:b4: 2c:f2:5d:09:9c:63:07:99:3a:94:ea:e5:71:03:8e: 11:75:4e:fc:d6:05:24:ef:c1:17:64:87:f8:a1:a6: 4e:de:f9:3e:d9:de:7b:c6:a6:89:5b:8a:3d:ae:40: aa:df:4b:e8:22:44:ad:aa:3b:6c:4e:21:6e:e5:d9: 59:de:66:77:05:42:d3:ef:91:c4:2a:6b:bb:5c:32: a4:fc:ae:18:8d:81:a9:6b:72:f0:8c:55:4f:7e:b2: fe:a3:ce:51:4a:6c:11:cb:47:61:98:31:25:79:4c: c5:ce:d5:68:57:3a:90:c8:27:6e:4e:13:d9:5c:2f: be:17:44:ce:a1:98:bc:38:d8:3d:9b:f4:2d:c6:f3: 13:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:DA:CB:07:17:CA:23:16:30:6A:9A:83:EC:15:2E:6D:54:65:9C:17 X509v3 Authority Key Identifier: keyid:61:F2:C2:34:A5:10:74:E0:97:84:04:BD:C7:9A:A7:91:30:04:0B:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/OPENRICH/0/61F2C234A51074E0978404BDC79AA79130040B00.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/61F2C234A51074E0978404BDC79AA79130040B00.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/OPENRICH/0/61F2C234A51074E0978404BDC79AA79130040B00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:24:a4:42:8a:54:e6:8d:e1:c8:57:97:dd:db:dd:83:49:37: 76:db:a7:04:e4:d7:3d:0e:69:21:fd:d1:0e:f8:93:ab:a4:ff: d9:e8:8b:60:e5:c4:ef:ba:98:d5:ad:df:91:32:22:8b:f4:13: bd:c1:68:2b:fe:8a:a9:66:f9:79:1f:46:5a:6c:6b:fe:90:7c: 74:2c:56:1f:16:e2:39:99:5b:ab:5a:12:09:dc:85:fc:52:b6: 40:95:7d:ff:98:e9:9e:66:e9:da:f5:53:33:c1:54:6b:6b:82: 79:91:f7:92:3e:d4:31:25:53:36:8d:03:c5:89:da:4f:25:b5: 70:ce:ab:40:ba:6d:43:e7:27:c5:09:45:c3:dc:d5:40:5b:3f: 92:84:a1:89:f7:22:39:41:52:65:29:af:02:7e:34:c9:83:90: 1b:46:45:52:ad:99:b1:b9:36:f9:bf:98:74:ec:f2:32:f2:ad: 28:20:b3:2e:9d:a5:31:54:09:b7:ce:ad:a9:dc:07:3f:d2:ae: 0c:1e:d4:b4:96:dc:4b:75:5d:59:a9:8d:57:21:e5:fa:1c:8b: dc:b6:be:e9:ff:7a:f1:d7:f3:25:20:38:95:f2:c5:59:5e:d5: 6d:8e:24:2b:f9:9d:83:79:fa:ea:7c:62:11:0f:3a:98:76:fb: 5c:e0:1d:0e -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUeWETzL9V0DnRAwYDRapZR3jfBvYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjFGMkMyMzRBNTEwNzRFMDk3ODQwNEJEQzc5QUE3OTEz MDA0MEIwMDAeFw0yNjA5MjQxODAzMzJaFw0yNjA5MjUxOTQ4MzJaMDMxMTAvBgNV BAMTKDZEREFDQjA3MTdDQTIzMTYzMDZBOUE4M0VDMTUyRTZENTQ2NTlDMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/+bdwBYZqtLCf1DUJBO/nqj7u uj33KM5ZzJXsl/nW0jfTt/x5tK2a8XeXsT08nRpLzWLe1HtRbzYgcMDqy+Ng3hPa fGhRXDnhPd3oMIEtXTUIJKak/hXXpGBUm0qkG1nL1dxbhAnSRkodVBaltMj1H1p5 NgyYtCzyXQmcYweZOpTq5XEDjhF1TvzWBSTvwRdkh/ihpk7e+T7Z3nvGpolbij2u QKrfS+giRK2qO2xOIW7l2VneZncFQtPvkcQqa7tcMqT8rhiNgalrcvCMVU9+sv6j zlFKbBHLR2GYMSV5TMXO1WhXOpDIJ25OE9lcL74XRM6hmLw42D2b9C3G8xMlAgMB AAGjggHyMIIB7jAdBgNVHQ4EFgQUbdrLBxfKIxYwapqD7BUubVRlnBcwHwYDVR0j BBgwFoAUYfLCNKUQdOCXhAS9x5qnkTAECwAwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvT1BFTlJJ Q0gvMC82MUYyQzIzNEE1MTA3NEUwOTc4NDA0QkRDNzlBQTc5MTMwMDQwQjAwLmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8xLzYxRjJDMjM0QTUxMDc0RTA5Nzg0MDRCREM3 OUFBNzkxMzAwNDBCMDAuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9PUEVOUklDSC8wLzYxRjJDMjM0 QTUxMDc0RTA5Nzg0MDRCREM3OUFBNzkxMzAwNDBCMDAubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBOJKRC ilTmjeHIV5fd292DSTd226cE5Nc9Dmkh/dEO+JOrpP/Z6Itg5cTvupjVrd+RMiKL 9BO9wWgr/oqpZvl5H0ZabGv+kHx0LFYfFuI5mVurWhIJ3IX8UrZAlX3/mOmeZuna 9VMzwVRra4J5kfeSPtQxJVM2jQPFidpPJbVwzqtAum1D5yfFCUXD3NVAWz+ShKGJ 9yI5QVJlKa8CfjTJg5AbRkVSrZmxuTb5v5h07PIy8q0oILMunaUxVAm3zq2p3Ac/ 0q4MHtS0ltxLdV1ZqY1XIeX6HIvctr7p/3rx1/MlIDiV8sVZXtVtjiQr+Z2Defrq fGIRDzqYdvtc4B0O -----END CERTIFICATE-----Generated at Fri Sep 25 08:13:56 2026 by rpki-client