$ rpki-client -vvvf rpkica.twnic.tw/rpki/STW/0/2963CB623A578334B7033062B58BFED2DC07BB04.mft File: 2963CB623A578334B7033062B58BFED2DC07BB04.mft (raw, json) Hash identifier: oHCVsNIK0919OWyhj8glUDMfLHi0ca4ZgyQ7FWWKTU0= Subject key identifier: E9:51:9D:4A:80:59:6F:15:36:F8:44:63:A6:4D:DE:86:F2:0A:C0:0E Authority key identifier: 29:63:CB:62:3A:57:83:34:B7:03:30:62:B5:8B:FE:D2:DC:07:BB:04 Certificate issuer: /CN=2963CB623A578334B7033062B58BFED2DC07BB04 Certificate serial: 1252688DE105D5D747CED7A3FA916AE6002E294D Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2963CB623A578334B7033062B58BFED2DC07BB04.cer Subject info access: rsync://rpkica.twnic.tw/rpki/STW/0/2963CB623A578334B7033062B58BFED2DC07BB04.mft Manifest number: B4 Signing time: Mon 21 Sep 2026 16:37:39 +0000 Manifest this update: Mon 21 Sep 2026 16:32:39 +0000 Manifest next update: Tue 22 Sep 2026 17:14:39 +0000 Files and hashes: 1: 2963CB623A578334B7033062B58BFED2DC07BB04.crl (hash: kASFjmtUWxdPL0aCYh2To/K8XwTQgTu6UKxHZaNQDN8=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/STW/0/2963CB623A578334B7033062B58BFED2DC07BB04.crl rsync://rpkica.twnic.tw/rpki/STW/0/2963CB623A578334B7033062B58BFED2DC07BB04.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2963CB623A578334B7033062B58BFED2DC07BB04.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 03:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:52:68:8d:e1:05:d5:d7:47:ce:d7:a3:fa:91:6a:e6:00:2e:29:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2963CB623A578334B7033062B58BFED2DC07BB04 Validity Not Before: Sep 21 16:32:39 2026 GMT Not After : Sep 22 17:14:39 2026 GMT Subject: CN=E9519D4A80596F1536F84463A64DDE86F20AC00E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:20:b8:f4:5e:58:4b:8b:12:13:07:dd:e0:74: bc:ec:40:ba:69:4f:58:c8:1f:13:2d:79:b3:10:9d: 7f:cf:92:19:06:5a:1e:15:d9:67:45:50:7d:a8:5c: 97:0b:69:7e:d6:fe:bc:d0:38:db:68:47:79:64:c8: 39:55:59:25:6b:0c:3f:97:17:90:1e:8c:3b:b1:8a: ba:b7:38:98:08:10:ad:34:16:27:c5:3e:fb:c1:6e: 22:7a:59:38:7b:5a:2b:33:b0:34:64:13:86:b7:73: 8d:a6:11:b7:5f:6f:27:64:9b:88:1a:8b:1b:64:c2: 8c:66:cf:66:bb:c5:f6:22:fd:dc:7d:10:ba:9e:61: 58:2b:00:4c:c7:da:ef:4c:ea:de:bd:df:3d:be:7b: 0b:8f:0c:fa:ce:5b:ef:e3:3a:77:0c:c1:bb:c7:c9: cc:5d:54:eb:18:e4:6a:15:3e:41:63:ee:1b:e1:cf: 66:cc:a6:51:6b:24:50:6e:d4:0e:9f:f4:d7:7b:14: 98:02:f9:b5:6f:0a:44:3b:84:d8:1b:5a:3e:6d:96: 4d:79:9d:6d:a2:86:03:e2:c5:e2:52:a2:6f:ea:5b: a5:16:ef:89:41:80:85:4b:82:2a:b1:50:5f:4e:66: 22:d3:4b:15:4b:bc:96:91:78:97:a1:a0:50:39:62: 5d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:51:9D:4A:80:59:6F:15:36:F8:44:63:A6:4D:DE:86:F2:0A:C0:0E X509v3 Authority Key Identifier: keyid:29:63:CB:62:3A:57:83:34:B7:03:30:62:B5:8B:FE:D2:DC:07:BB:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/STW/0/2963CB623A578334B7033062B58BFED2DC07BB04.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2963CB623A578334B7033062B58BFED2DC07BB04.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/STW/0/2963CB623A578334B7033062B58BFED2DC07BB04.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:f1:fd:ba:b6:c2:5d:2c:9f:32:0a:3b:e3:47:65:c1:50:7d: 90:83:09:59:60:14:1c:b9:7e:d3:01:90:42:f6:03:43:d3:54: 65:3d:6a:51:ad:4a:81:25:6d:86:c4:d2:80:c3:61:5e:bb:07: 30:c7:b6:91:41:17:9c:40:2c:5d:30:4f:42:3b:5c:23:48:06: 87:2d:54:e3:6f:3c:13:0a:f9:18:36:3b:62:08:40:2c:f0:f9: cc:2d:f4:56:16:2f:4d:33:9d:73:ee:24:54:c4:ee:bc:19:28: 06:31:38:0d:35:84:ac:6d:a4:90:fe:26:76:54:fc:7f:3d:79: 9b:90:8e:f4:28:3b:74:d8:a6:3c:02:50:74:8c:df:17:a5:d0: 46:89:ca:55:21:a3:0a:e4:5c:ff:59:a6:08:be:8a:26:24:75: 9d:5f:da:70:87:cd:4f:99:30:bd:63:fd:db:5a:30:f1:60:bf: bc:dc:6f:f9:f8:0a:1a:31:7b:65:4e:53:f4:9c:f3:b4:39:73: 48:ed:15:d0:0c:60:bd:29:54:59:ae:dd:02:91:c7:7b:77:f8: 57:59:92:a8:d8:0c:a1:8a:bd:0c:9b:f8:7a:fc:9d:5d:76:ce: b3:ce:8b:f6:4a:43:8b:3a:4a:58:14:72:f0:c5:f3:91:03:28: 4d:58:f8:4c -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUElJojeEF1ddHztej+pFq5gAuKU0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk2M0NCNjIzQTU3ODMzNEI3MDMzMDYyQjU4QkZFRDJE QzA3QkIwNDAeFw0yNjA5MjExNjMyMzlaFw0yNjA5MjIxNzE0MzlaMDMxMTAvBgNV BAMTKEU5NTE5RDRBODA1OTZGMTUzNkY4NDQ2M0E2NERERTg2RjIwQUMwMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzILj0XlhLixITB93gdLzsQLpp T1jIHxMtebMQnX/PkhkGWh4V2WdFUH2oXJcLaX7W/rzQONtoR3lkyDlVWSVrDD+X F5AejDuxirq3OJgIEK00FifFPvvBbiJ6WTh7WiszsDRkE4a3c42mEbdfbydkm4ga ixtkwoxmz2a7xfYi/dx9ELqeYVgrAEzH2u9M6t693z2+ewuPDPrOW+/jOncMwbvH ycxdVOsY5GoVPkFj7hvhz2bMplFrJFBu1A6f9Nd7FJgC+bVvCkQ7hNgbWj5tlk15 nW2ihgPixeJSom/qW6UW74lBgIVLgiqxUF9OZiLTSxVLvJaReJehoFA5Yl39AgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQU6VGdSoBZbxU2+ERjpk3ehvIKwA4wHwYDVR0j BBgwFoAUKWPLYjpXgzS3AzBitYv+0twHuwQwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU1RXLzAv Mjk2M0NCNjIzQTU3ODMzNEI3MDMzMDYyQjU4QkZFRDJEQzA3QkIwNC5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS8yOTYzQ0I2MjNBNTc4MzM0QjcwMzMwNjJCNThCRkVE MkRDMDdCQjA0LmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU1RXLzAvMjk2M0NCNjIzQTU3ODMzNEI3 MDMzMDYyQjU4QkZFRDJEQzA3QkIwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBACjx/bq2wl0snzIKO+NH ZcFQfZCDCVlgFBy5ftMBkEL2A0PTVGU9alGtSoElbYbE0oDDYV67BzDHtpFBF5xA LF0wT0I7XCNIBoctVONvPBMK+Rg2O2IIQCzw+cwt9FYWL00znXPuJFTE7rwZKAYx OA01hKxtpJD+JnZU/H89eZuQjvQoO3TYpjwCUHSM3xel0EaJylUhowrkXP9Zpgi+ iiYkdZ1f2nCHzU+ZML1j/dtaMPFgv7zcb/n4Choxe2VOU/Sc87Q5c0jtFdAMYL0p VFmu3QKRx3t3+FdZkqjYDKGKvQyb+Hr8nV12zrPOi/ZKQ4s6SlgUcvDF85EDKE1Y +Ew= -----END CERTIFICATE-----Generated at Mon Sep 21 22:21:15 2026 by rpki-client