$ rpki-client -vvvf rpkica.twnic.tw/rpki/TCSKY/1/3E6938BA00070CF3245F2491B7C88740A397A2D6.mft File: 3E6938BA00070CF3245F2491B7C88740A397A2D6.mft (raw, json) Hash identifier: KMipZ2VyI+gaAr4MwI0Nt28Eeax6wgu8/1Pz9IoVX38= Subject key identifier: 03:7B:25:B4:D2:72:86:F6:FF:8F:AF:8B:2C:12:2A:7B:9D:E9:D3:4E Authority key identifier: 3E:69:38:BA:00:07:0C:F3:24:5F:24:91:B7:C8:87:40:A3:97:A2:D6 Certificate issuer: /CN=3E6938BA00070CF3245F2491B7C88740A397A2D6 Certificate serial: 0405CD45A8C6D1AF815834B0A5F942E6DB846562 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/3E6938BA00070CF3245F2491B7C88740A397A2D6.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TCSKY/1/3E6938BA00070CF3245F2491B7C88740A397A2D6.mft Manifest number: B5 Signing time: Tue 22 Sep 2026 11:26:30 +0000 Manifest this update: Tue 22 Sep 2026 11:21:30 +0000 Manifest next update: Wed 23 Sep 2026 11:52:30 +0000 Files and hashes: 1: 3136302e3139312e3230322e302f32332d3234203d3e203633393038.roa (hash: VL6yJyugn4Z1qBRj+96zRBJlpWCdeFWKLM0ISWuy9EE=) 2: 3E6938BA00070CF3245F2491B7C88740A397A2D6.crl (hash: Ux0yagTzB0fvvThmGuAIdPhJd9hggwCzwRUDQQDR1FQ=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TCSKY/1/3E6938BA00070CF3245F2491B7C88740A397A2D6.crl rsync://rpkica.twnic.tw/rpki/TCSKY/1/3E6938BA00070CF3245F2491B7C88740A397A2D6.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/3E6938BA00070CF3245F2491B7C88740A397A2D6.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 11:52:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:05:cd:45:a8:c6:d1:af:81:58:34:b0:a5:f9:42:e6:db:84:65:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E6938BA00070CF3245F2491B7C88740A397A2D6 Validity Not Before: Sep 22 11:21:30 2026 GMT Not After : Sep 23 11:52:30 2026 GMT Subject: CN=037B25B4D27286F6FF8FAF8B2C122A7B9DE9D34E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a1:dc:73:98:49:a4:fb:dd:ba:4f:ed:b4:8f: 56:5c:88:41:80:45:7f:ff:02:ab:11:f7:4d:71:2c: 98:fb:e7:7f:10:50:76:18:af:a4:86:4c:9e:be:0f: 0f:53:2c:4a:37:1d:1e:ff:c9:33:a0:e5:e6:15:92: b9:00:55:fe:97:3e:37:4b:99:fe:0d:b7:05:e8:bf: 68:7c:b7:6c:a1:b5:8d:2c:a6:87:bf:5e:ea:8c:ad: fb:7f:d0:42:ed:37:5d:9e:51:6c:e2:df:04:9e:8a: f3:92:3f:3e:c4:8f:81:ec:f6:a1:a0:92:a5:03:f4: 5f:b1:52:c0:82:c5:3c:ac:5a:8b:0b:8c:14:2f:f0: 89:46:60:d6:93:0b:32:36:84:b5:5d:21:6b:a9:e0: 20:c7:0d:e9:2c:32:48:ed:4b:2a:cf:3b:12:51:73: 4d:96:ba:53:3d:79:da:a4:c0:4f:be:e3:e3:08:1d: aa:6d:c6:c9:d9:9c:5d:3a:1e:71:fe:2b:bc:2c:10: cb:2e:5c:2a:04:99:d6:dc:9e:76:eb:c2:75:72:62: 4e:fe:e8:ec:1a:6b:bf:4b:f8:54:41:6f:b4:ca:82: e7:c5:8b:cb:a6:bc:d5:1f:b2:1f:bc:cf:ed:e9:19: 23:d8:e2:37:3f:1e:cc:da:52:d7:06:18:9d:1a:3b: 7c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:7B:25:B4:D2:72:86:F6:FF:8F:AF:8B:2C:12:2A:7B:9D:E9:D3:4E X509v3 Authority Key Identifier: keyid:3E:69:38:BA:00:07:0C:F3:24:5F:24:91:B7:C8:87:40:A3:97:A2:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TCSKY/1/3E6938BA00070CF3245F2491B7C88740A397A2D6.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/3E6938BA00070CF3245F2491B7C88740A397A2D6.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TCSKY/1/3E6938BA00070CF3245F2491B7C88740A397A2D6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:da:79:42:58:3f:03:a0:4e:33:0d:08:92:8d:1f:97:fa:89: 66:31:3d:c9:d2:ed:86:4d:35:81:0b:32:ce:50:ec:10:17:58: b5:5e:c1:85:da:f1:63:25:fa:d4:b4:5a:8a:47:b6:2d:3f:cc: b4:be:8d:a8:14:8d:92:c7:f5:39:68:b6:a5:fa:8a:ea:77:cf: bb:fc:0a:94:62:3c:40:16:a2:05:57:b9:23:b9:ed:f1:ea:13: b6:db:b2:e0:21:28:06:82:dc:58:1c:7f:51:9e:e2:eb:12:b3: 47:14:0c:c9:82:a6:83:22:d4:06:30:7b:76:32:02:7f:99:9f: c6:bc:b9:eb:11:e8:2e:08:ff:d9:19:94:51:4d:e6:ca:54:8e: 78:a1:25:23:a9:2a:cc:24:9f:fd:5b:31:4b:01:dd:1c:bb:82: 98:24:88:56:8b:b9:2f:d9:53:ae:05:57:a4:5f:d0:f3:48:63: d3:3c:4b:ee:83:30:15:6c:45:08:34:ac:bb:41:56:15:26:aa: c9:4f:18:03:a4:2a:02:5a:cd:df:f7:ee:cc:1a:b5:bc:65:3d: ed:89:24:68:cd:ae:57:b6:a9:04:dc:c5:67:f0:55:a0:73:e4: dd:d1:68:3e:98:a0:07:e7:69:08:cc:bf:7a:7b:3d:bf:98:47: 42:a3:09:a0 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUBAXNRajG0a+BWDSwpflC5tuEZWIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U2OTM4QkEwMDA3MENGMzI0NUYyNDkxQjdDODg3NDBB Mzk3QTJENjAeFw0yNjA5MjIxMTIxMzBaFw0yNjA5MjMxMTUyMzBaMDMxMTAvBgNV BAMTKDAzN0IyNUI0RDI3Mjg2RjZGRjhGQUY4QjJDMTIyQTdCOURFOUQzNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmodxzmEmk+926T+20j1ZciEGA RX//AqsR901xLJj7538QUHYYr6SGTJ6+Dw9TLEo3HR7/yTOg5eYVkrkAVf6XPjdL mf4NtwXov2h8t2yhtY0spoe/XuqMrft/0ELtN12eUWzi3wSeivOSPz7Ej4Hs9qGg kqUD9F+xUsCCxTysWosLjBQv8IlGYNaTCzI2hLVdIWup4CDHDeksMkjtSyrPOxJR c02WulM9edqkwE++4+MIHaptxsnZnF06HnH+K7wsEMsuXCoEmdbcnnbrwnVyYk7+ 6Owaa79L+FRBb7TKgufFi8umvNUfsh+8z+3pGSPY4jc/HszaUtcGGJ0aO3xlAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUA3sltNJyhvb/j6+LLBIqe53p004wHwYDVR0j BBgwFoAUPmk4ugAHDPMkXySRt8iHQKOXotYwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVENTS1kv MS8zRTY5MzhCQTAwMDcwQ0YzMjQ1RjI0OTFCN0M4ODc0MEEzOTdBMkQ2LmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8wLzNFNjkzOEJBMDAwNzBDRjMyNDVGMjQ5MUI3Qzg4 NzQwQTM5N0EyRDYuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UQ1NLWS8xLzNFNjkzOEJBMDAwNzBD RjMyNDVGMjQ5MUI3Qzg4NzQwQTM5N0EyRDYubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCb2nlCWD8DoE4z DQiSjR+X+olmMT3J0u2GTTWBCzLOUOwQF1i1XsGF2vFjJfrUtFqKR7YtP8y0vo2o FI2Sx/U5aLal+orqd8+7/AqUYjxAFqIFV7kjue3x6hO227LgISgGgtxYHH9RnuLr ErNHFAzJgqaDItQGMHt2MgJ/mZ/GvLnrEeguCP/ZGZRRTebKVI54oSUjqSrMJJ/9 WzFLAd0cu4KYJIhWi7kv2VOuBVekX9DzSGPTPEvugzAVbEUINKy7QVYVJqrJTxgD pCoCWs3f9+7MGrW8ZT3tiSRoza5XtqkE3MVn8FWgc+Td0Wg+mKAH52kIzL96ez2/ mEdCowmg -----END CERTIFICATE-----Generated at Tue Sep 22 16:56:26 2026 by rpki-client