$ rpki-client -vvvf rpkica.twnic.tw/rpki/SDTV/0/3E0AB786AB86C4D25A7BE864DDD140760CC02EEA.mft File: 3E0AB786AB86C4D25A7BE864DDD140760CC02EEA.mft (raw, json) Hash identifier: BMsbQmiSx4OuybZJQQEsBv3SIGoyWS3DvYxGS74GnBY= Subject key identifier: B4:FA:59:5D:8C:A2:EE:A2:D4:06:43:67:FC:42:B2:0D:41:D3:6A:18 Authority key identifier: 3E:0A:B7:86:AB:86:C4:D2:5A:7B:E8:64:DD:D1:40:76:0C:C0:2E:EA Certificate issuer: /CN=3E0AB786AB86C4D25A7BE864DDD140760CC02EEA Certificate serial: 47DBCC25AF0AC85D0AD7514B0D49E0E25222AD0E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3E0AB786AB86C4D25A7BE864DDD140760CC02EEA.cer Subject info access: rsync://rpkica.twnic.tw/rpki/SDTV/0/3E0AB786AB86C4D25A7BE864DDD140760CC02EEA.mft Manifest number: B2 Signing time: Mon 21 Sep 2026 12:17:04 +0000 Manifest this update: Mon 21 Sep 2026 12:12:04 +0000 Manifest next update: Tue 22 Sep 2026 13:28:04 +0000 Files and hashes: 1: 3E0AB786AB86C4D25A7BE864DDD140760CC02EEA.crl (hash: sNuYOhLfqDvVDuC7xdJhLOstz8s9IBKoXSEZrn4fP4A=) 2: 3130332e3130302e3136342e302f32322d3232203d3e20313331363131.roa (hash: LqxzSENA6MQT2gEkGTBGcnDvqFZoJ6iXojpLB0vT1ng=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/SDTV/0/3E0AB786AB86C4D25A7BE864DDD140760CC02EEA.crl rsync://rpkica.twnic.tw/rpki/SDTV/0/3E0AB786AB86C4D25A7BE864DDD140760CC02EEA.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3E0AB786AB86C4D25A7BE864DDD140760CC02EEA.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 13:28:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:db:cc:25:af:0a:c8:5d:0a:d7:51:4b:0d:49:e0:e2:52:22:ad:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E0AB786AB86C4D25A7BE864DDD140760CC02EEA Validity Not Before: Sep 21 12:12:04 2026 GMT Not After : Sep 22 13:28:04 2026 GMT Subject: CN=B4FA595D8CA2EEA2D4064367FC42B20D41D36A18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:68:74:1c:45:bb:fc:06:03:0b:88:b5:6c:55: 5d:ec:06:77:d7:34:e9:b3:7a:43:b0:03:ac:f6:b9: 17:e0:c7:27:f3:50:fd:02:5c:83:00:28:88:ac:c4: b5:e0:5f:40:4d:54:b1:f5:e7:75:e3:7f:7c:92:07: ec:72:98:e7:6b:26:d9:94:aa:d6:43:8e:14:24:3f: e3:cd:ca:86:e6:bd:09:07:15:61:72:33:4e:b8:c6: 99:7f:a6:75:87:3a:a7:7e:7e:3e:7f:16:8d:a6:ea: 64:13:54:a3:be:6d:58:25:a0:26:32:9d:26:0c:59: 48:28:20:fc:4a:4a:33:cf:9a:f9:f7:a9:38:9e:48: f8:75:a0:d4:f7:68:6f:b9:5a:3a:1c:99:43:8c:c9: fc:9e:8a:0f:d5:83:3e:d7:df:02:c4:9f:78:a0:8b: 2c:8c:cf:0e:2d:4b:ac:39:24:f6:c9:fd:cd:a8:99: 25:93:75:50:fa:a2:ac:81:ca:f7:8a:df:83:3d:67: 71:6a:9f:f3:5b:e1:23:3f:80:e3:64:f3:15:f5:55: 7a:de:d1:26:c5:59:69:8a:cc:f0:44:22:0e:e1:ca: 26:38:b5:f8:7c:3f:3f:1a:0d:53:7d:a4:a0:5a:b1: d0:a1:fb:1e:a9:43:cc:ef:77:4a:16:f8:c7:31:71: 91:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:FA:59:5D:8C:A2:EE:A2:D4:06:43:67:FC:42:B2:0D:41:D3:6A:18 X509v3 Authority Key Identifier: keyid:3E:0A:B7:86:AB:86:C4:D2:5A:7B:E8:64:DD:D1:40:76:0C:C0:2E:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/SDTV/0/3E0AB786AB86C4D25A7BE864DDD140760CC02EEA.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3E0AB786AB86C4D25A7BE864DDD140760CC02EEA.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SDTV/0/3E0AB786AB86C4D25A7BE864DDD140760CC02EEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:bc:5a:b8:59:07:19:36:d8:c0:54:b7:6c:dc:56:4f:b7:b0: 47:b9:12:47:2c:83:80:fb:bf:79:cf:ab:cb:3d:3d:7b:60:88: ae:4e:65:5a:d1:df:e9:fc:53:ed:7c:1c:99:ac:a1:f5:b8:01: c3:5f:43:35:ca:9e:42:9d:ec:7a:48:d0:62:75:75:b9:e2:7a: 26:c2:de:d4:7f:93:04:00:6d:39:cd:cb:69:d8:0a:96:e8:0f: ba:bf:7e:fd:78:d2:b4:81:5c:de:85:11:99:fa:24:80:2f:3d: 28:3d:76:c0:e6:6c:5b:23:e9:e4:09:b9:8a:4a:08:78:31:ac: 56:15:c2:03:3c:48:8f:28:55:4f:c9:ca:23:03:0c:77:8b:96: 2f:70:68:ab:b5:4a:64:56:7b:18:18:64:2f:5c:32:25:23:d9: 32:41:fd:5a:82:c9:7f:c8:4f:e6:80:e6:21:66:4f:c7:2f:ea: 60:71:4b:18:ce:f4:8b:32:15:fe:70:09:af:db:d4:71:81:bc: 57:1c:21:4b:4e:83:c5:c7:a7:b0:7b:06:e0:12:9e:77:53:01: b8:85:90:db:34:40:22:a4:2a:a4:82:27:4e:06:70:6e:b4:a1: 11:8c:b5:97:4d:06:c0:80:89:7c:69:ca:54:e0:d8:a7:ad:97: 88:a2:fb:e0 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUR9vMJa8KyF0K11FLDUng4lIirQ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0UwQUI3ODZBQjg2QzREMjVBN0JFODY0REREMTQwNzYw Q0MwMkVFQTAeFw0yNjA5MjExMjEyMDRaFw0yNjA5MjIxMzI4MDRaMDMxMTAvBgNV BAMTKEI0RkE1OTVEOENBMkVFQTJENDA2NDM2N0ZDNDJCMjBENDFEMzZBMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1aHQcRbv8BgMLiLVsVV3sBnfX NOmzekOwA6z2uRfgxyfzUP0CXIMAKIisxLXgX0BNVLH153Xjf3ySB+xymOdrJtmU qtZDjhQkP+PNyobmvQkHFWFyM064xpl/pnWHOqd+fj5/Fo2m6mQTVKO+bVgloCYy nSYMWUgoIPxKSjPPmvn3qTieSPh1oNT3aG+5WjocmUOMyfyeig/Vgz7X3wLEn3ig iyyMzw4tS6w5JPbJ/c2omSWTdVD6oqyByveK34M9Z3Fqn/Nb4SM/gONk8xX1VXre 0SbFWWmKzPBEIg7hyiY4tfh8Pz8aDVN9pKBasdCh+x6pQ8zvd0oW+McxcZGJAgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQUtPpZXYyi7qLUBkNn/EKyDUHTahgwHwYDVR0j BBgwFoAUPgq3hquGxNJae+hk3dFAdgzALuowDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0RUVi8w LzNFMEFCNzg2QUI4NkM0RDI1QTdCRTg2NERERDE0MDc2MENDMDJFRUEuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvM0UwQUI3ODZBQjg2QzREMjVBN0JFODY0REREMTQw NzYwQ0MwMkVFQS5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1NEVFYvMC8zRTBBQjc4NkFCODZDNEQy NUE3QkU4NjREREQxNDA3NjBDQzAyRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOLxauFkHGTbYwFS3 bNxWT7ewR7kSRyyDgPu/ec+ryz09e2CIrk5lWtHf6fxT7Xwcmayh9bgBw19DNcqe Qp3sekjQYnV1ueJ6JsLe1H+TBABtOc3LadgKlugPur9+/XjStIFc3oURmfokgC89 KD12wOZsWyPp5Am5ikoIeDGsVhXCAzxIjyhVT8nKIwMMd4uWL3Boq7VKZFZ7GBhk L1wyJSPZMkH9WoLJf8hP5oDmIWZPxy/qYHFLGM70izIV/nAJr9vUcYG8VxwhS06D xcensHsG4BKed1MBuIWQ2zRAIqQqpIInTgZwbrShEYy1l00GwICJfGnKVODYp62X iKL74A== -----END CERTIFICATE-----Generated at Tue Sep 22 03:17:53 2026 by rpki-client