$ rpki-client -vvvf rpkica.twnic.tw/rpki/PNI/1/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.mft File: 3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.mft (raw, json) Hash identifier: VuWkUjoeM9z5f9k1Q8leuMUkfOWy8oK509ysTCUnnDM= Subject key identifier: B5:27:AA:A0:9D:13:95:D9:27:E0:C2:16:5B:1E:2B:89:C7:FC:14:3F Authority key identifier: 3C:21:92:63:F2:6B:99:E2:DB:37:5C:D0:CD:FE:5E:54:B5:7B:5C:26 Certificate issuer: /CN=3C219263F26B99E2DB375CD0CDFE5E54B57B5C26 Certificate serial: 0FEF5B75F391851BEF12AFD95A4257481A37E6E6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/2/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.cer Subject info access: rsync://rpkica.twnic.tw/rpki/PNI/1/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.mft Manifest number: C9 Signing time: Mon 21 Sep 2026 17:36:43 +0000 Manifest this update: Mon 21 Sep 2026 17:31:43 +0000 Manifest next update: Tue 22 Sep 2026 19:39:43 +0000 Files and hashes: 1: 3138372e37392e3234332e302f32342d3332203d3e20313532363237.roa (hash: g5g71SS0hEmKR6eQgaJ7zWq0tOfD6hYFf5XTJJ5szwg=) 2: 3138372e37392e3234302e302f32312d3332203d3e20313331363432.roa (hash: 3hkv3oIEXxYKcJ6+wpyKK8B+zNNvwWzz7gTiuX5XoeM=) 3: 3138372e37392e3234372e302f32342d3234203d3e203134383734.roa (hash: xrdOBfPyCEULsjixsbr/Px/rQubD5zMfCzYg1CD5bIk=) 4: 3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.crl (hash: j2NlaZkfTN2TXEcpIh6rPNrzdRTS/FLMgrgZcSivTkg=) 5: 3138372e37392e3234352e302f32342d3332203d3e20313530373638.roa (hash: Hs6nQhcgL92iGp+zVUZzGJBIRibLpPYWP2j8Qnvkw6Y=) 6: 3138372e37392e3234312e302f32342d3332203d3e203633393037.roa (hash: OBpRfi4+lv5ccoc6iNCMiesrl6Hu6/OIxdIRidZn29s=) 7: 3138372e37392e3234322e302f32342d3332203d3e20313532363237.roa (hash: rDdKFeMf3jMoCFWR1NywslztzyvdRKt2kDtU6UZnvp8=) 8: 3138372e37392e3234362e302f32332d3234203d3e203138313738.roa (hash: lvDvOodv8M6LrOgAyDJTwNdJGzoBoLeykAhTF1kRzCI=) 9: 3138372e37392e3234342e302f32332d3332203d3e20313331363538.roa (hash: yumD0lxBQJ+80NWqiC1APAnKFuIvqRgJ6DwlCxndQ/c=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/PNI/1/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.crl rsync://rpkica.twnic.tw/rpki/PNI/1/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/2/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 04:35:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:ef:5b:75:f3:91:85:1b:ef:12:af:d9:5a:42:57:48:1a:37:e6:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C219263F26B99E2DB375CD0CDFE5E54B57B5C26 Validity Not Before: Sep 21 17:31:43 2026 GMT Not After : Sep 22 19:39:43 2026 GMT Subject: CN=B527AAA09D1395D927E0C2165B1E2B89C7FC143F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:58:18:ef:4a:02:d2:d6:b6:7d:cb:37:98:bd: 36:0c:3d:7f:58:ee:4c:71:f1:75:6c:63:e9:64:db: 25:50:5d:f5:a4:d0:f7:19:ea:31:3a:a7:c1:0c:bb: 35:4f:10:73:41:98:3f:10:4d:8a:9d:a2:cf:b5:70: d8:97:04:cf:55:a7:b2:c8:53:16:11:56:1f:b5:81: 5e:bb:38:af:f6:58:fb:b4:0f:7d:8b:1e:ff:32:31: 66:27:0b:1a:6f:f6:bf:e0:18:33:0b:77:d0:8b:4c: 8d:c8:c4:4e:3a:df:dd:f9:f2:54:66:6d:c9:11:0f: 0a:f8:d7:ad:9a:ec:5e:8c:9d:cc:95:52:16:ac:f0: 12:fd:19:a3:f2:59:29:9d:ca:b5:e8:e4:25:a8:74: a1:57:dd:c7:12:f2:b4:07:ba:dc:a0:30:96:36:52: 5d:7f:b9:ee:0f:b9:c4:29:5e:c2:ed:5c:56:e2:0a: f6:fe:a2:bf:5b:dc:75:f0:56:71:9e:5a:29:84:2f: 6a:83:58:56:32:5d:ce:7e:8e:6c:09:15:22:2f:78: cf:ba:ab:e8:bc:fd:72:f4:cc:11:67:0b:e1:e8:35: 78:72:3a:2f:16:33:cd:07:f7:25:31:b3:6a:96:77: 49:83:75:b6:5a:fb:8a:a3:f7:f8:81:54:f7:e5:3d: e2:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:27:AA:A0:9D:13:95:D9:27:E0:C2:16:5B:1E:2B:89:C7:FC:14:3F X509v3 Authority Key Identifier: keyid:3C:21:92:63:F2:6B:99:E2:DB:37:5C:D0:CD:FE:5E:54:B5:7B:5C:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/PNI/1/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PNI/1/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:91:6f:95:c9:ca:9c:03:93:31:5d:03:72:56:7c:a4:f7:bf: 4f:56:9a:e5:85:0d:71:5f:c1:c5:9a:92:bc:ac:a2:be:fd:16: 7a:5d:ba:32:9a:50:52:89:6a:40:a6:28:9e:8f:3f:c2:f3:e3: d6:a8:26:07:2f:50:53:3c:47:b7:66:16:d4:c4:50:79:e8:de: e8:dc:73:ad:38:a6:65:29:81:8b:15:27:97:6a:e8:b2:66:6d: ed:90:91:79:b5:33:30:eb:51:0d:71:68:48:dd:67:51:d3:c1: 90:4c:b3:e0:3f:34:ca:df:14:18:65:50:5a:ff:fd:df:8c:20: 71:e5:fd:5b:64:d3:f3:ff:96:ff:26:03:c7:b1:c0:9f:7f:32: 72:87:5c:ec:38:55:d5:04:d5:90:10:74:f0:a6:bf:d1:a1:89: 3b:2c:eb:fd:2a:e9:06:11:59:35:21:d9:32:50:e8:09:a1:0b: a8:44:95:7b:9e:5c:5e:51:af:91:b0:76:1a:26:ff:49:15:8a: 9b:fd:f3:6b:b6:75:f4:21:84:8e:a2:3d:d9:40:2a:39:74:46: 6e:23:c8:d2:07:76:d1:07:1b:fc:98:7a:02:57:a1:dc:fb:70: 38:87:61:9a:69:cb:bb:9d:11:29:0b:5c:63:19:b8:a4:d3:91: 71:67:cd:c0 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUD+9bdfORhRvvEq/ZWkJXSBo35uYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MyMTkyNjNGMjZCOTlFMkRCMzc1Q0QwQ0RGRTVFNTRC NTdCNUMyNjAeFw0yNjA5MjExNzMxNDNaFw0yNjA5MjIxOTM5NDNaMDMxMTAvBgNV BAMTKEI1MjdBQUEwOUQxMzk1RDkyN0UwQzIxNjVCMUUyQjg5QzdGQzE0M0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDWBjvSgLS1rZ9yzeYvTYMPX9Y 7kxx8XVsY+lk2yVQXfWk0PcZ6jE6p8EMuzVPEHNBmD8QTYqdos+1cNiXBM9Vp7LI UxYRVh+1gV67OK/2WPu0D32LHv8yMWYnCxpv9r/gGDMLd9CLTI3IxE4639358lRm bckRDwr4162a7F6MncyVUhas8BL9GaPyWSmdyrXo5CWodKFX3ccS8rQHutygMJY2 Ul1/ue4PucQpXsLtXFbiCvb+or9b3HXwVnGeWimEL2qDWFYyXc5+jmwJFSIveM+6 q+i8/XL0zBFnC+HoNXhyOi8WM80H9yUxs2qWd0mDdbZa+4qj9/iBVPflPeJtAgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUtSeqoJ0Tldkn4MIWWx4ricf8FD8wHwYDVR0j BBgwFoAUPCGSY/JrmeLbN1zQzf5eVLV7XCYwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvUE5JLzEv M0MyMTkyNjNGMjZCOTlFMkRCMzc1Q0QwQ0RGRTVFNTRCNTdCNUMyNi5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMi8zQzIxOTI2M0YyNkI5OUUyREIzNzVDRDBDREZFNUU1 NEI1N0I1QzI2LmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvUE5JLzEvM0MyMTkyNjNGMjZCOTlFMkRC Mzc1Q0QwQ0RGRTVFNTRCNTdCNUMyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAGKRb5XJypwDkzFdA3JW fKT3v09WmuWFDXFfwcWakrysor79FnpdujKaUFKJakCmKJ6PP8Lz49aoJgcvUFM8 R7dmFtTEUHno3ujcc604pmUpgYsVJ5dq6LJmbe2QkXm1MzDrUQ1xaEjdZ1HTwZBM s+A/NMrfFBhlUFr//d+MIHHl/Vtk0/P/lv8mA8exwJ9/MnKHXOw4VdUE1ZAQdPCm v9GhiTss6/0q6QYRWTUh2TJQ6AmhC6hElXueXF5Rr5Gwdhom/0kVipv982u2dfQh hI6iPdlAKjl0Rm4jyNIHdtEHG/yYegJXodz7cDiHYZppy7udESkLXGMZuKTTkXFn zcA= -----END CERTIFICATE-----Generated at Mon Sep 21 20:27:26 2026 by rpki-client