$ rpki-client -vvvf rpkica.twnic.tw/rpki/TANET/0/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.mft File: 6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.mft (raw, json) Hash identifier: aFQFkNT8oX4eUHEDnkwYnRKG1s6y7dkifWSdNv6OeTQ= Subject key identifier: EF:A2:4E:D4:F8:48:E3:E7:37:F3:3F:E3:73:49:A3:F5:B8:D5:54:75 Authority key identifier: 6E:9C:32:26:68:2A:EF:A8:D6:7B:8A:C6:08:CC:CF:C8:A0:96:10:CD Certificate issuer: /CN=6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD Certificate serial: 41B02E5C6FBE2E27CA87FAB9EC274CF6B69A32A3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TANET/0/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.mft Manifest number: 0298 Signing time: Mon 21 Sep 2026 03:44:09 +0000 Manifest this update: Mon 21 Sep 2026 03:39:09 +0000 Manifest next update: Tue 22 Sep 2026 06:29:09 +0000 Files and hashes: 1: AS17713.roa (hash: pFGUYdrzL+OUjhFFKgHC9k6HgAQM1lZqhd8PA52A+VI=) 2: AS1659.roa (hash: j3u3V18aHfHo/NDML42g0UQSQjnXI5q9wXWoowXLBFg=) 3: AS17711.roa (hash: HXnFQ1ogZR2j1qGYqwrCTC9+3osb0O4DBAASmnaoNYs=) 4: AS17712.roa (hash: VbYsDgut+6w19G6fBh7opEe2zCUfFJuIvPm1UL4j9g8=) 5: AS131150.roa (hash: Lmloz8LiIV8pjh8sGmz95zyicNGp9fS97nBLBQY/HWc=) 6: AS18047.roa (hash: J4WakVwJWfyd/jtRhBY0Sn4bIPMH3T7PrME5BAycAxE=) 7: 6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.crl (hash: p21faHdyueqMASSG3ABjSKUT1/VD5b/rzxz7gFOBQbY=) 8: AS9916.roa (hash: bJ1r+tyqzjibU4qpONziU5YtkwR5ZUj1zImuxSjlO2M=) 9: AS1569.roa (hash: jY4pATt/jGgMLbu/QefPNwktyUJg9b+KBtuPdVhUmTk=) 10: AS18043.roa (hash: OceWabkHHIz4lY5kEFm9O1gY+H0mxDs8NOB+5bDRraU=) 11: AS18177.roa (hash: fxlV5+GVr2otH1tYq4wDBYNDHzH9J2LM+ShVYw3RZos=) 12: AS17716.roa (hash: QJfn98q9GCpZwDozPEb7vzDE8pPTD6V7DkN76r6Bpos=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TANET/0/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.crl rsync://rpkica.twnic.tw/rpki/TANET/0/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 06:29:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:b0:2e:5c:6f:be:2e:27:ca:87:fa:b9:ec:27:4c:f6:b6:9a:32:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD Validity Not Before: Sep 21 03:39:09 2026 GMT Not After : Sep 22 06:29:09 2026 GMT Subject: CN=EFA24ED4F848E3E737F33FE37349A3F5B8D55475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:cd:bf:56:84:2c:68:f7:80:3f:bc:2e:40:64: c3:9e:08:fd:95:0a:58:15:c3:83:5e:ec:02:ae:6e: 3d:5f:c9:65:cf:10:26:5a:71:e9:67:d2:5e:71:78: 8a:1d:7a:f3:bc:71:9d:89:48:91:55:6f:dd:2f:24: 92:e9:ce:42:0f:d4:64:b8:36:cd:cd:99:b0:db:e6: 7e:e6:47:ab:a6:1d:5c:78:30:f8:5e:f9:e1:91:ce: fd:bb:ae:f3:cf:8b:13:93:b4:2c:d3:0a:28:90:7d: 0c:ce:d1:56:7d:3b:4a:6b:93:db:4d:f2:a8:17:83: 88:f9:60:a7:7b:b2:a1:cb:9c:52:eb:a4:cd:93:b1: 1f:84:06:c0:87:6a:4f:e8:7a:ce:bc:be:92:7d:8e: 1a:8d:27:d9:10:fa:f2:18:23:29:9c:ef:0e:7d:76: 1c:2a:e2:09:ca:04:1c:05:76:25:84:29:25:9f:ab: 28:e1:ca:c4:4c:28:4f:27:45:3a:72:63:2e:2e:00: 24:c5:bd:1b:58:20:81:ff:f0:59:0e:b8:06:c6:6a: c3:b3:f4:90:71:3f:ef:ca:1a:72:cf:ff:a7:0c:19: 5a:a3:81:86:32:2a:b4:8b:17:f9:70:95:4d:b5:ec: e5:15:09:15:0d:0c:69:8b:d6:85:cd:16:1b:89:18: a3:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:A2:4E:D4:F8:48:E3:E7:37:F3:3F:E3:73:49:A3:F5:B8:D5:54:75 X509v3 Authority Key Identifier: keyid:6E:9C:32:26:68:2A:EF:A8:D6:7B:8A:C6:08:CC:CF:C8:A0:96:10:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TANET/0/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TANET/0/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:43:2b:9c:0f:e5:69:d3:bb:20:c5:cf:c0:b8:7a:78:ab:7d: c6:5f:90:10:0e:b9:4c:c9:07:0f:80:84:74:4c:e8:d1:8d:64: ee:89:75:24:22:80:d7:77:1d:43:e9:fb:1b:ad:9d:55:3b:19: 87:d3:a7:53:0d:70:4f:62:05:dd:b8:da:fc:a4:ec:75:69:38: b6:df:bc:bf:b3:b2:8e:2b:60:88:17:b4:24:04:32:55:6f:cd: 52:2c:f8:b7:c2:3a:45:8b:af:13:db:82:aa:df:e1:70:d9:11: cc:55:30:c9:fa:36:6a:f8:73:f1:ba:a1:bd:88:da:89:4d:0e: 21:90:6e:b5:9e:2a:30:04:5e:ee:68:4d:b3:42:50:b6:48:3f: 4e:d4:fb:e9:da:68:49:da:29:67:04:bd:7c:15:07:82:48:70: 3a:f0:c8:a2:c9:6c:01:26:6c:6d:08:81:5a:35:38:fd:4c:d9: 35:82:67:7d:32:89:e1:4e:32:f3:6e:75:e8:f2:31:e3:1d:74: 53:ff:e6:0a:51:88:11:28:01:e3:19:de:a8:6a:d3:bf:6a:54: df:5b:ef:6e:c8:b7:f8:40:98:fd:f8:5f:35:a5:e7:c0:03:e8: 45:ab:aa:c2:8f:46:5d:ce:49:27:49:89:b5:c4:25:bf:e1:0c: 4f:fd:80:ef -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUQbAuXG++LifKh/q57CdM9raaMqMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkU5QzMyMjY2ODJBRUZBOEQ2N0I4QUM2MDhDQ0NGQzhB MDk2MTBDRDAeFw0yNjA5MjEwMzM5MDlaFw0yNjA5MjIwNjI5MDlaMDMxMTAvBgNV BAMTKEVGQTI0RUQ0Rjg0OEUzRTczN0YzM0ZFMzczNDlBM0Y1QjhENTU0NzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwzb9WhCxo94A/vC5AZMOeCP2V ClgVw4Ne7AKubj1fyWXPECZaceln0l5xeIodevO8cZ2JSJFVb90vJJLpzkIP1GS4 Ns3NmbDb5n7mR6umHVx4MPhe+eGRzv27rvPPixOTtCzTCiiQfQzO0VZ9O0prk9tN 8qgXg4j5YKd7sqHLnFLrpM2TsR+EBsCHak/oes68vpJ9jhqNJ9kQ+vIYIymc7w59 dhwq4gnKBBwFdiWEKSWfqyjhysRMKE8nRTpyYy4uACTFvRtYIIH/8FkOuAbGasOz 9JBxP+/KGnLP/6cMGVqjgYYyKrSLF/lwlU217OUVCRUNDGmL1oXNFhuJGKNTAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQU76JO1PhI4+c38z/jc0mj9bjVVHUwHwYDVR0j BBgwFoAUbpwyJmgq76jWe4rGCMzPyKCWEM0wDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVEFORVQv MC82RTlDMzIyNjY4MkFFRkE4RDY3QjhBQzYwOENDQ0ZDOEEwOTYxMENELmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzZFOUMzMjI2NjgyQUVGQThENjdCOEFDNjA4Q0ND RkM4QTA5NjEwQ0QuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UQU5FVC8wLzZFOUMzMjI2NjgyQUVG QThENjdCOEFDNjA4Q0NDRkM4QTA5NjEwQ0QubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAPQyucD+Vp07sg xc/AuHp4q33GX5AQDrlMyQcPgIR0TOjRjWTuiXUkIoDXdx1D6fsbrZ1VOxmH06dT DXBPYgXduNr8pOx1aTi237y/s7KOK2CIF7QkBDJVb81SLPi3wjpFi68T24Kq3+Fw 2RHMVTDJ+jZq+HPxuqG9iNqJTQ4hkG61niowBF7uaE2zQlC2SD9O1Pvp2mhJ2iln BL18FQeCSHA68MiiyWwBJmxtCIFaNTj9TNk1gmd9MonhTjLzbnXo8jHjHXRT/+YK UYgRKAHjGd6oatO/alTfW+9uyLf4QJj9+F81pefAA+hFq6rCj0ZdzkknSYm1xCW/ 4QxP/YDv -----END CERTIFICATE-----Generated at Tue Sep 22 01:05:40 2026 by rpki-client