$ rpki-client -vvvf rpkica.twnic.tw/rpki/TWNDC/0/DB30CE9B7F8573BFA8C811B88BC979C9B537831A.mft File: DB30CE9B7F8573BFA8C811B88BC979C9B537831A.mft (raw, json) Hash identifier: CynNPl63mTa92I3sFAs5RUQgm/8STTPQDk1/WwJ49+U= Subject key identifier: 2F:2F:7C:76:19:06:30:6A:96:78:84:BE:D9:74:4E:14:D6:82:C2:60 Authority key identifier: DB:30:CE:9B:7F:85:73:BF:A8:C8:11:B8:8B:C9:79:C9:B5:37:83:1A Certificate issuer: /CN=DB30CE9B7F8573BFA8C811B88BC979C9B537831A Certificate serial: 33D53E60ACDD35C2D5AEE4AD9F670C3D9E9DABDD Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DB30CE9B7F8573BFA8C811B88BC979C9B537831A.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNDC/0/DB30CE9B7F8573BFA8C811B88BC979C9B537831A.mft Manifest number: B0 Signing time: Mon 21 Sep 2026 09:16:46 +0000 Manifest this update: Mon 21 Sep 2026 09:11:46 +0000 Manifest next update: Tue 22 Sep 2026 12:05:46 +0000 Files and hashes: 1: DB30CE9B7F8573BFA8C811B88BC979C9B537831A.crl (hash: RP3u6IYcYW4Zh80q9AwpwmDQz80uwSF1zggh+No80i0=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNDC/0/DB30CE9B7F8573BFA8C811B88BC979C9B537831A.crl rsync://rpkica.twnic.tw/rpki/TWNDC/0/DB30CE9B7F8573BFA8C811B88BC979C9B537831A.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DB30CE9B7F8573BFA8C811B88BC979C9B537831A.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 12:05:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:d5:3e:60:ac:dd:35:c2:d5:ae:e4:ad:9f:67:0c:3d:9e:9d:ab:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB30CE9B7F8573BFA8C811B88BC979C9B537831A Validity Not Before: Sep 21 09:11:46 2026 GMT Not After : Sep 22 12:05:46 2026 GMT Subject: CN=2F2F7C761906306A967884BED9744E14D682C260 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a0:99:6e:09:c6:e0:dd:5b:96:f3:43:4e:d2: f8:dd:69:5a:95:c0:b5:c4:52:0e:a3:94:22:6f:49: e5:0e:13:c3:15:02:8b:63:72:dc:2f:3b:1d:8f:b7: b1:f8:ef:4d:5b:8d:23:8e:c0:2f:d3:13:50:f3:d9: 4f:cb:ae:90:87:33:2d:5c:ad:94:82:0a:d0:68:3c: 41:21:11:1c:29:63:a2:1a:d4:8e:98:e7:81:31:ca: 9e:a9:76:b8:b9:22:c9:c8:b8:73:c4:9b:b7:e5:48: 06:4d:ec:4b:cd:f6:7f:a1:b8:0f:4d:a9:ad:44:84: 77:f1:d8:b2:53:92:70:d6:24:34:4a:9d:5a:3b:52: 54:7c:f6:21:69:27:88:a0:5b:f3:9c:56:24:c4:c1: d4:64:67:ef:a7:a1:ea:44:98:a6:e4:66:6d:77:5d: 75:50:46:d8:c8:3e:cb:18:43:36:95:e3:94:6d:18: 25:d7:64:4c:97:69:7c:83:9e:68:46:ab:35:47:6a: 5d:b1:db:9c:fc:0a:85:c3:56:63:b1:cb:93:7f:c1: 10:88:99:68:9f:d9:ea:04:e3:2d:9b:9b:5b:38:b9: 52:3f:52:33:77:77:3f:94:87:14:84:9a:05:3e:8b: 7b:db:10:63:a5:97:6a:5d:f1:1a:c9:7b:11:2e:62: 34:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:2F:7C:76:19:06:30:6A:96:78:84:BE:D9:74:4E:14:D6:82:C2:60 X509v3 Authority Key Identifier: keyid:DB:30:CE:9B:7F:85:73:BF:A8:C8:11:B8:8B:C9:79:C9:B5:37:83:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNDC/0/DB30CE9B7F8573BFA8C811B88BC979C9B537831A.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DB30CE9B7F8573BFA8C811B88BC979C9B537831A.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNDC/0/DB30CE9B7F8573BFA8C811B88BC979C9B537831A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d6:ff:57:37:88:cf:a5:22:f5:a0:1f:0f:ec:1f:f0:9d:52:c1: 2f:35:dc:6e:1f:04:ee:64:74:db:be:bd:bf:41:03:24:47:d6: 18:37:12:2b:53:9a:7f:43:23:c0:55:83:9b:c3:24:52:ef:45: 30:57:50:7c:90:b3:a5:4a:bd:f7:ba:49:b2:b2:b4:46:29:8b: 2e:51:0b:62:57:d4:12:af:ed:dd:31:c3:62:cb:0b:f0:c5:ca: dc:b6:47:ad:ee:63:41:7e:8a:b1:5b:c2:a6:68:e2:b1:a6:ce: 20:ef:e7:ca:7f:35:e4:53:ef:89:b4:56:26:15:08:0f:3f:f0: 22:fb:16:ef:78:a0:db:c3:a9:86:a3:7a:e0:17:f0:01:f7:77: b3:92:47:d4:c6:5a:0d:0e:b4:87:12:48:6d:f6:ee:45:98:5b: 4b:6e:92:e6:34:13:e3:f1:1d:95:58:09:f7:a5:bb:dd:0a:80: b1:f4:85:71:aa:83:de:41:8e:8b:c0:da:c2:42:d9:e4:0b:06: 9b:83:e5:51:ee:b2:dd:25:ba:2c:c6:1b:27:5a:de:8d:63:86: d5:26:42:20:c8:a1:af:a2:45:55:2e:93:74:2a:3c:bd:e0:d9: b2:77:f9:09:8c:9b:68:f0:84:20:d2:44:66:5d:61:ec:a9:d7: 27:8d:69:d2 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUM9U+YKzdNcLVruStn2cMPZ6dq90wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREIzMENFOUI3Rjg1NzNCRkE4QzgxMUI4OEJDOTc5QzlC NTM3ODMxQTAeFw0yNjA5MjEwOTExNDZaFw0yNjA5MjIxMjA1NDZaMDMxMTAvBgNV BAMTKDJGMkY3Qzc2MTkwNjMwNkE5Njc4ODRCRUQ5NzQ0RTE0RDY4MkMyNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBoJluCcbg3VuW80NO0vjdaVqV wLXEUg6jlCJvSeUOE8MVAotjctwvOx2Pt7H4701bjSOOwC/TE1Dz2U/LrpCHMy1c rZSCCtBoPEEhERwpY6Ia1I6Y54Exyp6pdri5IsnIuHPEm7flSAZN7EvN9n+huA9N qa1EhHfx2LJTknDWJDRKnVo7UlR89iFpJ4igW/OcViTEwdRkZ++noepEmKbkZm13 XXVQRtjIPssYQzaV45RtGCXXZEyXaXyDnmhGqzVHal2x25z8CoXDVmOxy5N/wRCI mWif2eoE4y2bm1s4uVI/UjN3dz+UhxSEmgU+i3vbEGOll2pd8RrJexEuYjQdAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQULy98dhkGMGqWeIS+2XROFNaCwmAwHwYDVR0j BBgwFoAU2zDOm3+Fc7+oyBG4i8l5ybU3gxowDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOREMv MC9EQjMwQ0U5QjdGODU3M0JGQThDODExQjg4QkM5NzlDOUI1Mzc4MzFBLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xL0RCMzBDRTlCN0Y4NTczQkZBOEM4MTFCODhCQzk3 OUM5QjUzNzgzMUEuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05EQy8wL0RCMzBDRTlCN0Y4NTcz QkZBOEM4MTFCODhCQzk3OUM5QjUzNzgzMUEubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDW/1c3iM+lIvWg Hw/sH/CdUsEvNdxuHwTuZHTbvr2/QQMkR9YYNxIrU5p/QyPAVYObwyRS70UwV1B8 kLOlSr33ukmysrRGKYsuUQtiV9QSr+3dMcNiywvwxcrctket7mNBfoqxW8KmaOKx ps4g7+fKfzXkU++JtFYmFQgPP/Ai+xbveKDbw6mGo3rgF/AB93ezkkfUxloNDrSH Ekht9u5FmFtLbpLmNBPj8R2VWAn3pbvdCoCx9IVxqoPeQY6LwNrCQtnkCwabg+VR 7rLdJbosxhsnWt6NY4bVJkIgyKGvokVVLpN0Kjy94Nmyd/kJjJto8IQg0kRmXWHs qdcnjWnS -----END CERTIFICATE-----Generated at Tue Sep 22 05:43:38 2026 by rpki-client