$ rpki-client -vvvf rpkica.twnic.tw/rpki/SHINETEL/0/DF363D7461650156F76A26CBA12EB3420DB3D849.mft File: DF363D7461650156F76A26CBA12EB3420DB3D849.mft (raw, json) Hash identifier: AHRwdcz51zNLx7XgN5oSTtIBpaGGLkLYO/0VAfnUbMo= Subject key identifier: F0:B8:FD:53:5B:BC:6D:BF:20:9D:66:C3:96:99:0C:F2:61:FC:7B:C6 Authority key identifier: DF:36:3D:74:61:65:01:56:F7:6A:26:CB:A1:2E:B3:42:0D:B3:D8:49 Certificate issuer: /CN=DF363D7461650156F76A26CBA12EB3420DB3D849 Certificate serial: 1D2E87F9F4B709E7F786E8EFD45A649532102AD1 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DF363D7461650156F76A26CBA12EB3420DB3D849.cer Subject info access: rsync://rpkica.twnic.tw/rpki/SHINETEL/0/DF363D7461650156F76A26CBA12EB3420DB3D849.mft Manifest number: B2 Signing time: Sun 20 Sep 2026 21:09:24 +0000 Manifest this update: Sun 20 Sep 2026 21:04:24 +0000 Manifest next update: Mon 21 Sep 2026 22:13:24 +0000 Files and hashes: 1: DF363D7461650156F76A26CBA12EB3420DB3D849.crl (hash: KwuWw+EZJpVzLjMRAQ2TermA9ALFuJuMb4F8ljqh61E=) 2: 3130332e3131362e31342e302f32332d3234203d3e203633393032.roa (hash: ngTeNrAtpPC35YX71ipwovbw5e/8zCnuwIl4yirC2Qs=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/SHINETEL/0/DF363D7461650156F76A26CBA12EB3420DB3D849.crl rsync://rpkica.twnic.tw/rpki/SHINETEL/0/DF363D7461650156F76A26CBA12EB3420DB3D849.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DF363D7461650156F76A26CBA12EB3420DB3D849.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 22:13:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:2e:87:f9:f4:b7:09:e7:f7:86:e8:ef:d4:5a:64:95:32:10:2a:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF363D7461650156F76A26CBA12EB3420DB3D849 Validity Not Before: Sep 20 21:04:24 2026 GMT Not After : Sep 21 22:13:24 2026 GMT Subject: CN=F0B8FD535BBC6DBF209D66C396990CF261FC7BC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:9d:1a:5f:bc:a8:f6:79:bc:ff:e3:72:2e:4c: 40:3d:6e:fd:84:81:e0:2e:39:91:1e:a1:b1:62:4d: 7a:60:58:a2:34:ea:ce:e9:49:f7:31:9b:53:40:ea: cd:6f:3b:00:73:ef:16:a0:8e:32:0c:de:97:e9:f1: 8f:0c:5c:c5:f1:08:ca:e3:0a:34:9e:2c:33:74:b4: 61:89:0a:4c:6c:3c:1b:4c:e5:3f:d5:4c:49:96:3d: 06:46:7a:04:c9:6b:bf:1e:d4:7e:7b:a8:b4:2c:63: d0:79:27:2e:f7:34:30:42:74:73:97:da:ee:fc:2b: e0:1c:7f:2a:01:4b:99:14:2b:5e:f1:a5:f1:85:22: 56:16:1e:fc:9d:7d:8d:6c:48:1d:d6:66:39:d1:d3: 35:56:fc:e7:93:bd:f3:16:0a:67:6f:23:7c:b7:a0: 0f:47:41:e9:76:ba:a0:3d:e2:62:a5:82:bb:b8:62: 03:de:94:65:d2:ff:dd:56:52:9d:4e:0b:07:c8:a7: c6:b0:30:be:0d:2f:eb:f0:d3:41:fe:c9:7d:fb:f1: 6a:1c:68:22:71:c8:bf:39:f9:b1:88:a9:45:b1:88: b4:c4:02:27:11:19:d6:f4:36:b6:d0:a3:f6:5f:0b: d7:c9:c8:52:33:cf:2d:24:1a:56:2e:5f:db:dd:e8: 4e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:B8:FD:53:5B:BC:6D:BF:20:9D:66:C3:96:99:0C:F2:61:FC:7B:C6 X509v3 Authority Key Identifier: keyid:DF:36:3D:74:61:65:01:56:F7:6A:26:CB:A1:2E:B3:42:0D:B3:D8:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/SHINETEL/0/DF363D7461650156F76A26CBA12EB3420DB3D849.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DF363D7461650156F76A26CBA12EB3420DB3D849.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SHINETEL/0/DF363D7461650156F76A26CBA12EB3420DB3D849.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:67:62:b0:76:9b:31:33:e8:d9:02:b0:5e:eb:93:26:06:c1: 1e:98:15:7f:6c:f1:1c:ed:05:80:26:b7:fd:53:57:fd:6b:c0: b9:16:2e:c1:2b:d4:2b:fe:27:06:03:c0:4d:53:06:cf:c8:ae: 62:7b:57:dd:ef:3b:cd:45:a0:76:f0:97:e8:03:1a:29:d5:88: de:d4:07:2e:2a:4b:66:75:4d:eb:60:01:43:79:68:22:bf:15: b6:ad:69:d9:1b:d1:74:c8:7b:d4:e1:a1:20:88:57:08:77:0a: 41:14:ed:c6:2a:73:de:58:98:9b:b5:d9:8a:72:49:ce:88:0e: 39:e4:3c:fb:74:b6:2f:a5:65:4c:8f:ed:1d:2e:1e:c3:44:56: 25:59:77:b4:64:59:63:83:dc:29:11:7b:da:29:dd:87:a0:4a: ce:71:26:ab:6d:2b:18:ed:d9:06:17:a1:7a:98:81:4c:2c:b4: 49:45:b6:b8:56:35:31:8e:90:fc:71:d3:78:54:01:00:19:3f: 0e:47:36:99:e1:20:c1:9a:ee:0d:74:be:d9:a2:b7:a0:3d:15: ce:4a:0c:55:92:9b:45:1d:52:cf:ce:a2:30:79:b3:8a:b3:d4: ab:45:dd:04:68:0f:5d:10:fe:e9:c6:28:8e:40:3e:42:e0:0e: e5:37:85:99 -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUHS6H+fS3Cef3hujv1FpklTIQKtEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREYzNjNENzQ2MTY1MDE1NkY3NkEyNkNCQTEyRUIzNDIw REIzRDg0OTAeFw0yNjA5MjAyMTA0MjRaFw0yNjA5MjEyMjEzMjRaMDMxMTAvBgNV BAMTKEYwQjhGRDUzNUJCQzZEQkYyMDlENjZDMzk2OTkwQ0YyNjFGQzdCQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/nRpfvKj2ebz/43IuTEA9bv2E geAuOZEeobFiTXpgWKI06s7pSfcxm1NA6s1vOwBz7xagjjIM3pfp8Y8MXMXxCMrj CjSeLDN0tGGJCkxsPBtM5T/VTEmWPQZGegTJa78e1H57qLQsY9B5Jy73NDBCdHOX 2u78K+AcfyoBS5kUK17xpfGFIlYWHvydfY1sSB3WZjnR0zVW/OeTvfMWCmdvI3y3 oA9HQel2uqA94mKlgru4YgPelGXS/91WUp1OCwfIp8awML4NL+vw00H+yX378Woc aCJxyL85+bGIqUWxiLTEAicRGdb0NrbQo/ZfC9fJyFIzzy0kGlYuX9vd6E4hAgMB AAGjggHyMIIB7jAdBgNVHQ4EFgQU8Lj9U1u8bb8gnWbDlpkM8mH8e8YwHwYDVR0j BBgwFoAU3zY9dGFlAVb3aibLoS6zQg2z2EkwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0hJTkVU RUwvMC9ERjM2M0Q3NDYxNjUwMTU2Rjc2QTI2Q0JBMTJFQjM0MjBEQjNEODQ5LmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8xL0RGMzYzRDc0NjE2NTAxNTZGNzZBMjZDQkEx MkVCMzQyMERCM0Q4NDkuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9TSElORVRFTC8wL0RGMzYzRDc0 NjE2NTAxNTZGNzZBMjZDQkExMkVCMzQyMERCM0Q4NDkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCrZ2Kw dpsxM+jZArBe65MmBsEemBV/bPEc7QWAJrf9U1f9a8C5Fi7BK9Qr/icGA8BNUwbP yK5ie1fd7zvNRaB28JfoAxop1Yje1AcuKktmdU3rYAFDeWgivxW2rWnZG9F0yHvU 4aEgiFcIdwpBFO3GKnPeWJibtdmKcknOiA455Dz7dLYvpWVMj+0dLh7DRFYlWXe0 ZFljg9wpEXvaKd2HoErOcSarbSsY7dkGF6F6mIFMLLRJRba4VjUxjpD8cdN4VAEA GT8ORzaZ4SDBmu4NdL7ZoregPRXOSgxVkptFHVLPzqIwebOKs9SrRd0EaA9dEP7p xiiOQD5C4A7lN4WZ -----END CERTIFICATE-----Generated at Mon Sep 21 13:16:27 2026 by rpki-client