$ rpki-client -vvvf rpkica.twnic.tw/rpki/SONET/0/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.mft File: 3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.mft (raw, json) Hash identifier: 62eP8hlsRy0I2uJpc96JIQ1ny9+EHhsH1/DRCdnWaJ4= Subject key identifier: 0F:2F:6D:D4:0A:01:CF:F4:9E:7E:68:2A:76:ED:FF:75:EB:28:8E:BE Authority key identifier: 3F:6D:33:C9:B3:9C:FC:95:0A:2D:3D:BC:78:13:1E:1A:AF:8C:C8:EF Certificate issuer: /CN=3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF Certificate serial: 10FF19AB3686E9F5412444D31464DC645D0FC9CF Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.cer Subject info access: rsync://rpkica.twnic.tw/rpki/SONET/0/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.mft Manifest number: 0112 Signing time: Sun 15 Nov 2026 14:26:47 +0000 Manifest this update: Sun 15 Nov 2026 14:21:47 +0000 Manifest next update: Mon 16 Nov 2026 15:54:47 +0000 Files and hashes: 1: 33392e312e34352e302f32342d3234203d3e2039393232.roa (hash: ryqYKYb9ZEnNDprKt9KNFJe6hMX8qggWXnAtJIFQzic=) 2: 323430343a38303a3a2f32382d3438203d3e203138313832.roa (hash: gD1x4xXT4Z6eEJ+bwB2oDJNQCUbNjWpPyKuQClgUoNQ=) 3: 3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.crl (hash: 8f39dTn2iWaeUpKvsbRlf5IfbqXrjh4P5tt9Qdgj92A=) 4: 33392e312e34372e302f32342d3234203d3e2039393232.roa (hash: Drtv5JpDCKBUTLlwm2QdYijdfjd//4f1UxcFzmvf4Yg=) 5: 33392e312e36342e302f32302d3234203d3e2039393232.roa (hash: juMnZBysyILQxgKPuDDStLHZSQ2rmujkQS4MrnwwJ/s=) 6: 3231392e38352e302e302f31362d3234203d3e203138313832.roa (hash: TkTwJY6tgXdxY0w+yf0JfiJDrdGZLKSEjlzpI3ieJUU=) 7: 32372e3130352e38322e302f32342d3234203d3e203332373837.roa (hash: 1sg7Wk2e/ZdonH5PhiuzAv6jLByDCAyoVpPFtRuPk6A=) 8: 33392e312e31362e302f32302d3234203d3e2039393232.roa (hash: o5tck8QLFY02tn9jNvUElQeuTpHy+ammIuF39TN/Cn4=) 9: 36312e35362e3132382e302f31392d3234203d3e203138313832.roa (hash: Wz4YbIAlDY3Rql9HeEh2BYj6+M1ftVPyXgPvQ2mi8EE=) 10: 33392e312e302e302f32302d3234203d3e2039393232.roa (hash: XsN+8OXikSiKwT554Z/8JtJMRKlDNFZ1zHxkg1sQLrI=) 11: 33392e312e39362e302f32302d3234203d3e203138343139.roa (hash: W4A9R2ruP8BpTxaCGm9udnAE3yQmyw/+pOzjhpIfz0Y=) 12: 33392e312e34382e302f32302d3234203d3e2039393232.roa (hash: TTEoeJ1Nt73LCduyQM6y6wzx3+jdUSQumP9bhes2+UY=) 13: 36312e36342e3132382e302f31372d3234203d3e203138313832.roa (hash: AP04YgE4U4X0DbCKpFBdjCNZlauxNQuycSDnxfq2LBo=) 14: 36312e36322e302e302f31362d3234203d3e203138313832.roa (hash: ifIFQrYUhM297jse0mQ1w+HqkUSGHCWju3weIN7aUQs=) 15: 36312e36342e36342e302f31382d3234203d3e203138313832.roa (hash: ZufTl96QJSTGjjHHnlV902JYYFFNTIDFxh070LDkULs=) 16: 32372e3130352e302e302f31362d3234203d3e203138313832.roa (hash: LmAW7PeQcegNvt2M9HNQbyVlYetXrEvSkZVhVCt+ooY=) 17: 33392e312e34342e302f32342d3234203d3e2039393232.roa (hash: dh03y3MeArVsb+oESUBRNDxrsrn5jbUmgM4ZXBS0tXU=) 18: 33392e312e302e302f31362d3234203d3e203138313832.roa (hash: CffvCFfDEQybZwp62g5aXFZex+pvcH1gSZG/H/2FRO0=) 19: 33392e312e34302e302f32322d3234203d3e2039393232.roa (hash: z5CRvkmrV5KJFcdljtPbVmXZST0Ame/3ck3rEFg8aGM=) 20: 32372e3130352e3230362e302f32342d3234203d3e203435343734.roa (hash: 9Cuads8Xj/H3SUpgMMXmElqrysGMLgLQcPn8+WPxZaA=) 21: 3231392e38342e302e302f31362d3234203d3e203138313832.roa (hash: 8fiqTkiu9MOMh1suF5MiCOJuDwIsVQ34W7YS4b6Ylb8=) 22: 33392e312e33322e302f32312d3234203d3e2039393232.roa (hash: VNQcRXeOE/j/rdkFQwcA1LclvGgGVBSj6YxVH+Y+B5E=) 23: 33392e312e34362e302f32342d3234203d3e2039393232.roa (hash: onwq6khytNt8j9JeiESYQPMZkrctbzkf2UmQhqWpjYw=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/SONET/0/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.crl rsync://rpkica.twnic.tw/rpki/SONET/0/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 08:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:ff:19:ab:36:86:e9:f5:41:24:44:d3:14:64:dc:64:5d:0f:c9:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF Validity Not Before: Nov 15 14:21:47 2026 GMT Not After : Nov 16 15:54:47 2026 GMT Subject: CN=0F2F6DD40A01CFF49E7E682A76EDFF75EB288EBE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0a:ff:7c:81:fa:16:d2:cf:1f:82:01:26:bd: 35:57:a3:31:85:c2:21:47:a9:41:90:4f:5f:e9:5a: 73:0a:b3:ae:81:ac:72:e1:a7:64:5b:ce:a5:86:07: 55:0d:22:fc:6e:4b:87:9a:72:50:1c:11:e2:82:0e: 09:ec:11:28:ff:33:c9:1f:b4:67:35:2f:39:95:af: 84:22:2e:8c:cd:0d:bd:75:c7:20:9e:87:e5:86:5c: 98:fe:1c:1c:df:61:09:5d:15:22:15:11:e7:9f:a4: 71:95:be:38:da:ba:0a:42:79:f0:72:e6:2a:7e:e6: 5b:71:09:f9:2d:d6:e7:e2:f8:ef:a7:48:e1:bc:e6: ae:4d:02:78:95:91:b5:b1:dd:d4:7c:8f:8b:f3:8e: ca:65:ed:4a:fb:c6:93:93:e5:f3:b1:1c:e3:65:ad: 05:98:f7:81:6d:6e:17:a6:de:f0:06:3d:dc:6d:98: d3:54:f1:aa:e2:c5:9f:0f:d6:7b:1f:34:4d:aa:05: 74:27:b4:8f:d6:53:c5:45:38:b1:b4:80:f5:51:ba: 3a:4d:8f:4c:98:8e:b7:08:fa:33:ce:59:cc:23:43: f9:4b:65:20:26:63:df:0f:29:07:10:44:a6:b0:d0: 03:a5:40:3e:b7:78:82:85:76:88:0d:41:7b:bd:42: 95:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:2F:6D:D4:0A:01:CF:F4:9E:7E:68:2A:76:ED:FF:75:EB:28:8E:BE X509v3 Authority Key Identifier: keyid:3F:6D:33:C9:B3:9C:FC:95:0A:2D:3D:BC:78:13:1E:1A:AF:8C:C8:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/SONET/0/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SONET/0/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:ec:9c:37:1e:a2:e0:19:df:70:30:6f:f1:a6:6a:bb:c1:d6: 66:ca:5c:7b:ff:b8:c1:1f:3c:13:11:dc:39:8e:c3:2d:a9:fe: d6:be:7e:f7:2e:68:6a:67:91:d6:84:5b:13:82:64:80:2a:ee: 31:76:6b:c7:8a:a7:63:cf:9b:e2:58:c2:da:3d:da:04:5e:09: dd:ab:d0:aa:5f:7e:6d:e5:83:34:de:08:3c:af:16:84:0c:c7: e1:83:fb:7b:e5:f4:5c:1b:86:4f:91:89:09:ba:e7:cb:04:a7: e8:3d:f4:c8:45:4a:d3:c2:b6:16:d2:6d:6d:a2:be:30:c0:ec: 4a:14:1e:a2:c3:35:fd:ec:25:8c:7e:32:d8:1e:ea:e2:5c:e0: de:40:3d:8d:ea:3f:fd:d8:aa:54:7b:3d:19:88:7a:57:2b:e1: ec:a2:5c:bb:04:be:0d:e8:ed:10:23:4c:ee:03:92:4e:38:f3: e7:42:ed:75:ae:bf:a5:77:9b:57:eb:b4:0c:09:4d:de:cc:80: ba:2a:42:b7:e2:e2:eb:d1:a1:1b:55:bb:0c:28:22:2b:1d:8f: 6f:f8:95:49:9f:cd:43:06:e2:21:43:bf:61:fa:7c:4f:f8:6c: d1:68:e8:22:8e:88:1f:c4:6c:f1:ff:e8:f4:84:80:ab:4a:f7: 41:84:d3:ba -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUEP8ZqzaG6fVBJETTFGTcZF0Pyc8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Y2RDMzQzlCMzlDRkM5NTBBMkQzREJDNzgxMzFFMUFB RjhDQzhFRjAeFw0yNjExMTUxNDIxNDdaFw0yNjExMTYxNTU0NDdaMDMxMTAvBgNV BAMTKDBGMkY2REQ0MEEwMUNGRjQ5RTdFNjgyQTc2RURGRjc1RUIyODhFQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBCv98gfoW0s8fggEmvTVXozGF wiFHqUGQT1/pWnMKs66BrHLhp2RbzqWGB1UNIvxuS4eaclAcEeKCDgnsESj/M8kf tGc1LzmVr4QiLozNDb11xyCeh+WGXJj+HBzfYQldFSIVEeefpHGVvjjaugpCefBy 5ip+5ltxCfkt1ufi+O+nSOG85q5NAniVkbWx3dR8j4vzjspl7Ur7xpOT5fOxHONl rQWY94Ftbhem3vAGPdxtmNNU8arixZ8P1nsfNE2qBXQntI/WU8VFOLG0gPVRujpN j0yYjrcI+jPOWcwjQ/lLZSAmY98PKQcQRKaw0AOlQD63eIKFdogNQXu9QpUxAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUDy9t1AoBz/Sefmgqdu3/desojr4wHwYDVR0j BBgwFoAUP20zybOc/JUKLT28eBMeGq+MyO8wDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU09ORVQv MC8zRjZEMzNDOUIzOUNGQzk1MEEyRDNEQkM3ODEzMUUxQUFGOENDOEVGLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzNGNkQzM0M5QjM5Q0ZDOTUwQTJEM0RCQzc4MTMx RTFBQUY4Q0M4RUYuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9TT05FVC8wLzNGNkQzM0M5QjM5Q0ZD OTUwQTJEM0RCQzc4MTMxRTFBQUY4Q0M4RUYubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAU7Jw3HqLgGd9w MG/xpmq7wdZmylx7/7jBHzwTEdw5jsMtqf7Wvn73LmhqZ5HWhFsTgmSAKu4xdmvH iqdjz5viWMLaPdoEXgndq9CqX35t5YM03gg8rxaEDMfhg/t75fRcG4ZPkYkJuufL BKfoPfTIRUrTwrYW0m1tor4wwOxKFB6iwzX97CWMfjLYHuriXODeQD2N6j/92KpU ez0ZiHpXK+Hsoly7BL4N6O0QI0zuA5JOOPPnQu11rr+ld5tX67QMCU3ezIC6KkK3 4uLr0aEbVbsMKCIrHY9v+JVJn81DBuIhQ79h+nxP+GzRaOgijogfxGzx/+j0hICr SvdBhNO6 -----END CERTIFICATE-----Generated at Sun Nov 15 16:51:56 2026 by rpki-client