$ rpki-client -vvvf rpkica.twnic.tw/rpki/SONET/0/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.mft File: 3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.mft (raw, json) Hash identifier: uMvRpoXlKkg4zevQd9neHX1ajHGGxtOEpjE6fnwjU7Q= Subject key identifier: 1F:09:55:0B:AE:A6:DC:0B:4C:DA:DC:CA:E4:4F:B7:22:3C:84:E3:BD Authority key identifier: 3F:6D:33:C9:B3:9C:FC:95:0A:2D:3D:BC:78:13:1E:1A:AF:8C:C8:EF Certificate issuer: /CN=3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF Certificate serial: 0958376341EDC82B1326AA02F57B85A30D164F6D Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.cer Subject info access: rsync://rpkica.twnic.tw/rpki/SONET/0/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.mft Manifest number: C9 Signing time: Mon 21 Sep 2026 20:57:11 +0000 Manifest this update: Mon 21 Sep 2026 20:52:11 +0000 Manifest next update: Wed 23 Sep 2026 00:26:11 +0000 Files and hashes: 1: 323430343a38303a3a2f32382d3438203d3e203138313832.roa (hash: gD1x4xXT4Z6eEJ+bwB2oDJNQCUbNjWpPyKuQClgUoNQ=) 2: 33392e312e302e302f31362d3234203d3e203138313832.roa (hash: CffvCFfDEQybZwp62g5aXFZex+pvcH1gSZG/H/2FRO0=) 3: 33392e312e302e302f32302d3234203d3e2039393232.roa (hash: XsN+8OXikSiKwT554Z/8JtJMRKlDNFZ1zHxkg1sQLrI=) 4: 33392e312e31362e302f32302d3234203d3e2039393232.roa (hash: o5tck8QLFY02tn9jNvUElQeuTpHy+ammIuF39TN/Cn4=) 5: 33392e312e34352e302f32342d3234203d3e2039393232.roa (hash: ryqYKYb9ZEnNDprKt9KNFJe6hMX8qggWXnAtJIFQzic=) 6: 3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.crl (hash: JaoSNFjH50Y56H1Ik+qlx2cEkIQMnKC370yfigLcbQo=) 7: 33392e312e34342e302f32342d3234203d3e2039393232.roa (hash: dh03y3MeArVsb+oESUBRNDxrsrn5jbUmgM4ZXBS0tXU=) 8: 3231392e38352e302e302f31362d3234203d3e203138313832.roa (hash: TkTwJY6tgXdxY0w+yf0JfiJDrdGZLKSEjlzpI3ieJUU=) 9: 36312e35362e3132382e302f31392d3234203d3e203138313832.roa (hash: Wz4YbIAlDY3Rql9HeEh2BYj6+M1ftVPyXgPvQ2mi8EE=) 10: 33392e312e34372e302f32342d3234203d3e2039393232.roa (hash: Drtv5JpDCKBUTLlwm2QdYijdfjd//4f1UxcFzmvf4Yg=) 11: 33392e312e34362e302f32342d3234203d3e2039393232.roa (hash: onwq6khytNt8j9JeiESYQPMZkrctbzkf2UmQhqWpjYw=) 12: 33392e312e34382e302f32302d3234203d3e2039393232.roa (hash: TTEoeJ1Nt73LCduyQM6y6wzx3+jdUSQumP9bhes2+UY=) 13: 32372e3130352e3230362e302f32342d3234203d3e203435343734.roa (hash: 9Cuads8Xj/H3SUpgMMXmElqrysGMLgLQcPn8+WPxZaA=) 14: 3231392e38342e302e302f31362d3234203d3e203138313832.roa (hash: 8fiqTkiu9MOMh1suF5MiCOJuDwIsVQ34W7YS4b6Ylb8=) 15: 33392e312e39362e302f32302d3234203d3e203138343139.roa (hash: W4A9R2ruP8BpTxaCGm9udnAE3yQmyw/+pOzjhpIfz0Y=) 16: 33392e312e36342e302f32302d3234203d3e2039393232.roa (hash: juMnZBysyILQxgKPuDDStLHZSQ2rmujkQS4MrnwwJ/s=) 17: 32372e3130352e302e302f31362d3234203d3e203138313832.roa (hash: LmAW7PeQcegNvt2M9HNQbyVlYetXrEvSkZVhVCt+ooY=) 18: 36312e36342e36342e302f31382d3234203d3e203138313832.roa (hash: ZufTl96QJSTGjjHHnlV902JYYFFNTIDFxh070LDkULs=) 19: 33392e312e34302e302f32322d3234203d3e2039393232.roa (hash: z5CRvkmrV5KJFcdljtPbVmXZST0Ame/3ck3rEFg8aGM=) 20: 33392e312e33322e302f32312d3234203d3e2039393232.roa (hash: VNQcRXeOE/j/rdkFQwcA1LclvGgGVBSj6YxVH+Y+B5E=) 21: 36312e36342e3132382e302f31372d3234203d3e203138313832.roa (hash: AP04YgE4U4X0DbCKpFBdjCNZlauxNQuycSDnxfq2LBo=) 22: 36312e36322e302e302f31362d3234203d3e203138313832.roa (hash: ifIFQrYUhM297jse0mQ1w+HqkUSGHCWju3weIN7aUQs=) 23: 32372e3130352e38322e302f32342d3234203d3e203332373837.roa (hash: 1sg7Wk2e/ZdonH5PhiuzAv6jLByDCAyoVpPFtRuPk6A=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/SONET/0/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.crl rsync://rpkica.twnic.tw/rpki/SONET/0/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 22:16:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:58:37:63:41:ed:c8:2b:13:26:aa:02:f5:7b:85:a3:0d:16:4f:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF Validity Not Before: Sep 21 20:52:11 2026 GMT Not After : Sep 23 00:26:11 2026 GMT Subject: CN=1F09550BAEA6DC0B4CDADCCAE44FB7223C84E3BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:22:bf:4f:42:9c:e4:48:72:4a:16:8b:2c:a9: 5e:b6:f0:b6:ef:b9:6a:fc:80:48:3b:83:79:c1:24: 3a:cc:62:e4:c8:0f:52:7c:c3:7f:24:07:29:bd:ed: f1:2e:f4:8b:b4:5f:ed:ab:64:fe:a5:ae:40:7f:c9: 37:9a:87:a7:93:ea:da:96:6d:35:82:0b:14:30:50: 6c:5a:04:f9:ae:e6:fe:c2:7d:28:ba:d8:de:0f:a6: 6e:ae:6d:ca:61:15:21:40:3f:59:24:3f:f7:05:1c: 84:65:32:60:8d:af:77:bc:36:80:ee:08:c1:ae:19: cf:dd:20:02:85:ce:16:62:b5:b7:db:77:62:91:00: c7:58:11:60:14:01:70:7d:54:f9:c6:9d:1b:94:54: 7e:58:3d:00:52:ba:c9:f1:f3:a1:e5:cb:ac:1d:e9: c2:a8:25:a9:b4:78:17:80:ed:95:66:f5:6e:56:6b: dc:f1:9e:9d:0f:e2:58:c2:ee:c1:55:7a:8f:27:16: f9:7f:c9:93:13:f2:ec:ed:a0:11:bb:9c:28:81:4a: 7d:96:1d:74:60:73:83:9b:52:47:2e:fc:5f:4b:b7: fa:48:23:bf:6f:9e:e7:0e:b2:ed:6a:d2:26:22:88: 2b:07:60:5b:bc:40:27:49:6e:c9:a3:e9:af:fc:eb: 02:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:09:55:0B:AE:A6:DC:0B:4C:DA:DC:CA:E4:4F:B7:22:3C:84:E3:BD X509v3 Authority Key Identifier: keyid:3F:6D:33:C9:B3:9C:FC:95:0A:2D:3D:BC:78:13:1E:1A:AF:8C:C8:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/SONET/0/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SONET/0/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:ab:ea:c0:15:a6:e7:36:d9:03:52:54:94:e6:b8:81:65:f8: 2a:b2:3f:66:a4:7d:18:ec:e6:d7:02:0a:3c:13:bb:b4:bf:1f: 63:fc:f0:ff:96:d5:99:fa:f3:a0:b8:d4:95:19:79:69:6f:b2: e8:ee:e3:61:95:53:9a:a7:cb:eb:43:07:95:49:75:5c:f8:9a: cd:8c:60:2b:28:53:c8:6e:51:e8:af:b2:f7:d6:67:b7:bd:7c: 56:ef:9f:18:93:65:47:d1:40:47:fb:c7:63:ee:43:c9:6e:c4: 23:aa:3a:46:eb:93:34:4f:dd:d7:72:6b:86:59:ad:2b:81:ff: ce:04:79:81:fc:7a:39:ad:45:05:be:be:91:40:1d:06:99:b2: 4a:de:84:8f:cd:9b:ac:7f:80:e0:df:09:fb:69:67:1e:1a:a5: 3e:c3:39:1c:b1:5f:d6:8a:d1:51:74:59:43:3b:72:32:44:2a: 5a:4b:92:b4:13:e9:5e:f0:08:d6:45:68:36:7b:72:60:a7:10: 7e:ca:88:0b:46:93:12:9b:2e:d4:cf:12:02:56:73:da:3f:17: d3:10:ed:d3:4b:89:34:42:6c:36:7f:ee:ab:d2:f3:81:c4:14: 0b:d5:c1:2c:a5:0a:70:91:b3:3f:18:66:ae:6c:5a:12:f8:d0: c8:78:15:98 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUCVg3Y0HtyCsTJqoC9XuFow0WT20wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Y2RDMzQzlCMzlDRkM5NTBBMkQzREJDNzgxMzFFMUFB RjhDQzhFRjAeFw0yNjA5MjEyMDUyMTFaFw0yNjA5MjMwMDI2MTFaMDMxMTAvBgNV BAMTKDFGMDk1NTBCQUVBNkRDMEI0Q0RBRENDQUU0NEZCNzIyM0M4NEUzQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9Ir9PQpzkSHJKFossqV628Lbv uWr8gEg7g3nBJDrMYuTID1J8w38kBym97fEu9Iu0X+2rZP6lrkB/yTeah6eT6tqW bTWCCxQwUGxaBPmu5v7CfSi62N4Ppm6ubcphFSFAP1kkP/cFHIRlMmCNr3e8NoDu CMGuGc/dIAKFzhZitbfbd2KRAMdYEWAUAXB9VPnGnRuUVH5YPQBSusnx86Hly6wd 6cKoJam0eBeA7ZVm9W5Wa9zxnp0P4ljC7sFVeo8nFvl/yZMT8uztoBG7nCiBSn2W HXRgc4ObUkcu/F9Lt/pII79vnucOsu1q0iYiiCsHYFu8QCdJbsmj6a/86wLjAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUHwlVC66m3AtM2tzK5E+3IjyE470wHwYDVR0j BBgwFoAUP20zybOc/JUKLT28eBMeGq+MyO8wDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU09ORVQv MC8zRjZEMzNDOUIzOUNGQzk1MEEyRDNEQkM3ODEzMUUxQUFGOENDOEVGLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzNGNkQzM0M5QjM5Q0ZDOTUwQTJEM0RCQzc4MTMx RTFBQUY4Q0M4RUYuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9TT05FVC8wLzNGNkQzM0M5QjM5Q0ZD OTUwQTJEM0RCQzc4MTMxRTFBQUY4Q0M4RUYubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQApq+rAFabnNtkD UlSU5riBZfgqsj9mpH0Y7ObXAgo8E7u0vx9j/PD/ltWZ+vOguNSVGXlpb7Lo7uNh lVOap8vrQweVSXVc+JrNjGArKFPIblHor7L31me3vXxW758Yk2VH0UBH+8dj7kPJ bsQjqjpG65M0T93XcmuGWa0rgf/OBHmB/Ho5rUUFvr6RQB0GmbJK3oSPzZusf4Dg 3wn7aWceGqU+wzkcsV/WitFRdFlDO3IyRCpaS5K0E+le8AjWRWg2e3JgpxB+yogL RpMSmy7UzxICVnPaPxfTEO3TS4k0Qmw2f+6r0vOBxBQL1cEspQpwkbM/GGaubFoS +NDIeBWY -----END CERTIFICATE-----Generated at Tue Sep 22 09:20:21 2026 by rpki-client