$ rpki-client -vvvf rpkica.twnic.tw/rpki/UNIGATE/0/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.mft File: 3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.mft (raw, json) Hash identifier: ywybcQszjsohmOmkyFAWgNnlXidvBfQ6+DzIE1Kr4zw= Subject key identifier: 33:80:02:2C:24:1A:CE:3E:5D:A9:17:A9:6C:43:69:1C:3B:E7:C0:85 Authority key identifier: 34:42:A3:43:01:CC:61:0C:F2:72:F7:65:AB:BA:FC:9E:D1:F4:A9:BE Certificate issuer: /CN=3442A34301CC610CF272F765ABBAFC9ED1F4A9BE Certificate serial: 3D7416A5A34946B94EDD8327869DBE273C4BBF86 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/UNIGATE/0/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.mft Manifest number: C2 Signing time: Mon 21 Sep 2026 17:11:40 +0000 Manifest this update: Mon 21 Sep 2026 17:06:40 +0000 Manifest next update: Tue 22 Sep 2026 19:25:40 +0000 Files and hashes: 1: 323430333a613363303a3a2f33322d3438203d3e20313331363030.roa (hash: XCT7s3NCwXJ69S7zo+KJz8lVVlArsSIbihOeA7c8fho=) 2: 323430333a616434303a3a2f33322d3438203d3e203137343038.roa (hash: wJNtwVwWGV2Ew01tEuJttk+ffpjPnv9QiD0Qlhkb3gk=) 3: 3130332e3132342e34322e302f32332d3234203d3e20313331363237.roa (hash: ahzbTn0ryIxcgtgNPBswFdM5hAnHdiiLMvDKSEOceoQ=) 4: 3130332e3132332e3134302e302f32322d3234203d3e203137343038.roa (hash: AK+3PKMDVdG06X9V5wJGENZB5ww85T0dXxYb87LZIBM=) 5: 323430333a613363303a3a2f33322d3634203d3e20313331363030.roa (hash: YRy2uONSplRfIX6wYvcL6ju1JnuSbWlYj0VFYl1Cy7Y=) 6: 3130332e3132342e3135302e302f32332d3234203d3e203633313939.roa (hash: b2ZalweDzcakKyrLFwHtXt+tJpyBR6TY8NnJJnA3Zrc=) 7: 3130332e3132332e3235322e302f32322d3234203d3e203137343038.roa (hash: K11AKM5sK22jpCOO0qM2jx2kuIkROi3ckOE3FDdau4Q=) 8: 3130332e3133302e39362e302f32322d3234203d3e203138343139.roa (hash: jmiWW03d5gkshbGnGPU/JnRLFc/IWZsVf7gkk91c90A=) 9: 3130332e3132342e3137362e302f32322d3234203d3e20313331363237.roa (hash: B76iUUauraI1kihuK+kvTleORdpwdo32DEFBdPbyoJw=) 10: 3130332e3132342e3134382e302f32342d3234203d3e20313331363136.roa (hash: E5kPA+xRb0WD5EZHBZjgrSgPglYWgXmCYwr3HzWV3pk=) 11: 3130332e3132342e3134392e302f32342d3234203d3e203633313939.roa (hash: IHX6knBAbyoCMbNTiCX2cYkm03r5ZVJalgMfPgOlByo=) 12: 3130332e3133302e302e302f32322d3234203d3e203137343038.roa (hash: MqUpOjYcs+DThs4PEdfgWe16ib+Pm8Uun845j7bvpQE=) 13: 3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.crl (hash: xKEOMo7BPm3oi09p7WSdPh8zmeo2jCM/ljVSWZvPb2Q=) 14: 3130332e3132342e34302e302f32332d3234203d3e20313331363036.roa (hash: kJ6HcU/Qq1IqXEBiPGlvzo0MYuVJktlWTrE9zqJ5X60=) 15: 3130332e3132332e3134302e302f32342d3234203d3e203137343038.roa (hash: 9fFqGEZgCqmDZaHQYhGEG410naqEyxqFLnrF5q8mDOo=) 16: 3130332e3133302e39322e302f32322d3234203d3e203138343139.roa (hash: mqMrdcKlCIt7VJ32GwiC+l4+/ZkUaeX/w0lvhAkww/M=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/UNIGATE/0/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.crl rsync://rpkica.twnic.tw/rpki/UNIGATE/0/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 03:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:74:16:a5:a3:49:46:b9:4e:dd:83:27:86:9d:be:27:3c:4b:bf:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3442A34301CC610CF272F765ABBAFC9ED1F4A9BE Validity Not Before: Sep 21 17:06:40 2026 GMT Not After : Sep 22 19:25:40 2026 GMT Subject: CN=3380022C241ACE3E5DA917A96C43691C3BE7C085 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:a7:8b:5b:b6:42:6b:3b:a0:78:c5:be:fb:e8: 44:a6:19:af:c3:f7:69:09:41:ac:e2:e6:08:35:78: 65:82:ce:ff:89:52:6f:35:88:4a:ce:4a:e0:55:d8: 7a:e0:2b:0c:d9:79:66:b6:6a:98:fe:6e:3d:3d:4b: ea:64:1a:c3:42:44:cf:c7:1e:5b:0f:ca:d1:10:60: b3:63:f0:ea:09:6b:09:08:ce:63:e5:c2:b0:dc:b5: da:57:38:ef:1b:fd:0b:58:a9:d1:05:58:ed:04:ad: 2b:17:d7:0e:08:7c:a1:9b:92:c4:d4:22:6f:0f:ee: e0:83:06:e1:ed:df:d2:b0:b9:a6:61:9f:30:56:76: 29:90:ab:15:14:aa:af:b3:fb:14:4c:a8:c1:b0:0a: 65:88:bb:77:25:8d:d8:53:2b:c4:a2:ae:1b:c5:74: 3b:9f:64:80:5a:92:e7:92:52:98:fa:65:9d:7b:79: c0:55:d4:67:29:58:3f:c3:4a:f2:cc:90:11:4c:ac: 2d:bd:db:37:7a:1c:b1:bd:54:de:5e:4e:a4:0c:c3: 99:b0:4e:2e:5e:c5:ae:0d:2d:ff:a8:32:e3:fd:56: 10:02:49:cf:56:44:54:c7:bb:36:7c:0d:a0:56:dc: 82:2b:a7:fa:57:cc:8a:f0:f2:d7:cf:43:39:51:73: 62:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:80:02:2C:24:1A:CE:3E:5D:A9:17:A9:6C:43:69:1C:3B:E7:C0:85 X509v3 Authority Key Identifier: keyid:34:42:A3:43:01:CC:61:0C:F2:72:F7:65:AB:BA:FC:9E:D1:F4:A9:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/UNIGATE/0/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/UNIGATE/0/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d3:db:9a:92:bd:b7:5f:38:75:1e:20:21:14:3d:78:75:c6:5d: 09:c4:5b:29:63:0d:5f:a5:62:90:70:2c:f0:54:aa:88:87:b0: 40:cc:f7:60:ff:91:3c:80:5d:db:ff:56:4a:63:ad:70:76:13: 29:3e:14:40:c3:5d:08:15:2c:76:41:b0:d1:3e:c9:a1:11:86: 15:d3:fe:1f:3a:1c:12:15:ac:7b:5c:eb:b7:29:9f:79:82:69: 3e:3b:b7:7d:aa:63:6d:f0:48:85:89:e8:d6:1b:1b:66:b5:dc: ff:54:14:03:7e:dd:95:62:a0:af:1a:63:94:eb:f5:bf:1a:1d: 2c:7f:f2:66:4b:d5:f8:2c:04:67:0d:98:a3:e4:26:49:e1:b9: d3:15:11:77:24:4b:92:74:64:2f:8e:d8:d3:5f:b4:9b:e0:ee: 54:66:5f:3f:0f:d4:fd:fa:c4:f6:54:74:b0:d3:4e:26:46:e9: 1a:b8:c5:01:0f:4a:54:f9:cb:82:44:09:fa:2d:24:b3:49:d3: 78:d1:47:d5:7d:3e:14:ab:b0:8e:72:8e:19:b9:a8:b0:40:62: 61:5e:5c:3b:f9:cb:0a:a1:85:73:95:8a:96:f9:b5:88:bc:5e: e4:0f:f6:5a:f5:cf:48:9a:21:02:01:c3:99:9d:b9:fd:4a:e1: 29:12:8a:fc -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIUPXQWpaNJRrlO3YMnhp2+JzxLv4YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQ0MkEzNDMwMUNDNjEwQ0YyNzJGNzY1QUJCQUZDOUVE MUY0QTlCRTAeFw0yNjA5MjExNzA2NDBaFw0yNjA5MjIxOTI1NDBaMDMxMTAvBgNV BAMTKDMzODAwMjJDMjQxQUNFM0U1REE5MTdBOTZDNDM2OTFDM0JFN0MwODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSp4tbtkJrO6B4xb776ESmGa/D 92kJQazi5gg1eGWCzv+JUm81iErOSuBV2HrgKwzZeWa2apj+bj09S+pkGsNCRM/H HlsPytEQYLNj8OoJawkIzmPlwrDctdpXOO8b/QtYqdEFWO0ErSsX1w4IfKGbksTU Im8P7uCDBuHt39KwuaZhnzBWdimQqxUUqq+z+xRMqMGwCmWIu3cljdhTK8SirhvF dDufZIBakueSUpj6ZZ17ecBV1GcpWD/DSvLMkBFMrC292zd6HLG9VN5eTqQMw5mw Ti5exa4NLf+oMuP9VhACSc9WRFTHuzZ8DaBW3IIrp/pXzIrw8tfPQzlRc2LNAgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQUM4ACLCQazj5dqRepbENpHDvnwIUwHwYDVR0j BBgwFoAUNEKjQwHMYQzycvdlq7r8ntH0qb4wDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVU5JR0FU RS8wLzM0NDJBMzQzMDFDQzYxMENGMjcyRjc2NUFCQkFGQzlFRDFGNEE5QkUuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvMzQ0MkEzNDMwMUNDNjEwQ0YyNzJGNzY1QUJC QUZDOUVEMUY0QTlCRS5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1VOSUdBVEUvMC8zNDQyQTM0MzAx Q0M2MTBDRjI3MkY3NjVBQkJBRkM5RUQxRjRBOUJFLm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA09uakr23 Xzh1HiAhFD14dcZdCcRbKWMNX6VikHAs8FSqiIewQMz3YP+RPIBd2/9WSmOtcHYT KT4UQMNdCBUsdkGw0T7JoRGGFdP+HzocEhWse1zrtymfeYJpPju3fapjbfBIhYno 1hsbZrXc/1QUA37dlWKgrxpjlOv1vxodLH/yZkvV+CwEZw2Yo+QmSeG50xURdyRL knRkL47Y01+0m+DuVGZfPw/U/frE9lR0sNNOJkbpGrjFAQ9KVPnLgkQJ+i0ks0nT eNFH1X0+FKuwjnKOGbmosEBiYV5cO/nLCqGFc5WKlvm1iLxe5A/2WvXPSJohAgHD mZ25/UrhKRKK/A== -----END CERTIFICATE-----Generated at Mon Sep 21 22:18:00 2026 by rpki-client