$ rpki-client -vvvf rpkica.twnic.tw/rpki/WANGTIAN/0/137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.mft File: 137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.mft (raw, json) Hash identifier: C9K/vFa7+4NZAkhxULfX+sg8A7JcWLZxXyD211YISkw= Subject key identifier: 10:F0:19:D7:FB:58:E6:90:6D:C3:3D:E6:7B:97:CE:9E:2B:4A:12:45 Authority key identifier: 13:7D:CF:3F:E1:8E:3C:9D:B3:3A:C6:C5:0E:8B:E3:57:D0:72:99:91 Certificate issuer: /CN=137DCF3FE18E3C9DB33AC6C50E8BE357D0729991 Certificate serial: 6DE3853C8FBE3EA983FE0658020CF0FA64BA6E5C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.cer Subject info access: rsync://rpkica.twnic.tw/rpki/WANGTIAN/0/137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.mft Manifest number: B5 Signing time: Mon 21 Sep 2026 19:06:59 +0000 Manifest this update: Mon 21 Sep 2026 19:01:59 +0000 Manifest next update: Tue 22 Sep 2026 19:18:59 +0000 Files and hashes: 1: 3136312e3234382e3134342e302f32342d3234203d3e20313438393936.roa (hash: 0xOt/alcpAMDww+3hdnLaeae14FERuOIKEuHy9m9JLc=) 2: 3136312e3234382e3134342e302f32332d3234203d3e203338303432.roa (hash: qRkyiJdn63qokFKKv0HxSqaEykqKM4bsKkcH46FpFZc=) 3: 137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.crl (hash: 0DsUjFqEMaiWpBsFBlJ7UXovl+IVYecT3wKPv1juGvE=) 4: 3136312e3234382e3134342e302f32332d3234203d3e20313334383233.roa (hash: yCZqZR2AGCBzXj4ey9qRZrUJv2f1vti5atnbmciNS40=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/WANGTIAN/0/137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.crl rsync://rpkica.twnic.tw/rpki/WANGTIAN/0/137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 19:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:e3:85:3c:8f:be:3e:a9:83:fe:06:58:02:0c:f0:fa:64:ba:6e:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=137DCF3FE18E3C9DB33AC6C50E8BE357D0729991 Validity Not Before: Sep 21 19:01:59 2026 GMT Not After : Sep 22 19:18:59 2026 GMT Subject: CN=10F019D7FB58E6906DC33DE67B97CE9E2B4A1245 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:a3:08:dc:3c:dc:7e:0b:8e:cd:89:e0:9f:31: ec:d3:d0:12:43:10:d9:e2:93:80:98:34:5e:52:d5: 4d:56:81:4c:48:b3:8e:b5:3f:de:cd:64:47:14:cc: 32:c3:2a:2b:a5:11:ab:82:4c:6d:1e:9c:98:af:9a: fb:a9:e9:ae:3f:1d:2a:df:3f:ed:c4:ec:05:7d:c9: ce:e7:57:42:e1:b7:e2:a0:a3:35:3f:37:e8:ce:7e: 96:a5:fc:16:db:eb:24:d4:be:72:d3:2f:15:97:c7: 43:c1:18:f4:8f:84:7c:dc:86:47:67:cb:e9:1f:59: 5a:89:97:b0:52:3a:76:50:f5:1e:2d:fa:e1:c7:fb: 6f:39:2e:af:aa:be:3b:e2:f9:12:d7:a9:93:25:a1: 4a:15:61:ac:a7:8e:3f:0c:98:8e:84:3a:99:07:7d: 86:53:8c:d0:27:6c:15:7d:8b:53:f7:f3:34:8b:ce: df:bd:9c:37:c9:9d:92:ca:47:02:2d:b2:25:1d:f1: b7:83:58:1c:24:ad:88:ea:02:e6:2d:1e:29:99:00: 84:b9:6a:9a:1e:48:f7:1d:8a:41:a8:5e:6d:eb:9b: 24:be:ec:43:a0:05:63:1d:84:6d:e9:34:0e:85:d8: 96:14:0d:59:73:9e:40:32:c6:7f:bb:9b:f8:13:10: e4:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:F0:19:D7:FB:58:E6:90:6D:C3:3D:E6:7B:97:CE:9E:2B:4A:12:45 X509v3 Authority Key Identifier: keyid:13:7D:CF:3F:E1:8E:3C:9D:B3:3A:C6:C5:0E:8B:E3:57:D0:72:99:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/WANGTIAN/0/137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/WANGTIAN/0/137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:1d:3d:8d:73:69:c2:ab:8b:d1:85:a5:06:8f:5b:58:c9:cd: b9:a9:ba:67:87:6b:86:a1:2c:a9:c6:80:55:b7:d2:06:b8:21: 7b:40:ef:de:20:0d:e7:cb:81:8f:f4:b9:fc:df:2f:70:90:b0: 2a:32:64:1f:92:81:48:54:0a:f5:16:a7:1a:d8:b4:ae:f8:fa: 8a:f4:0f:49:fe:09:2b:2b:3d:37:f4:bd:c2:d8:47:c4:cb:db: 75:fe:8a:cd:9e:5c:59:25:cb:d0:16:07:94:41:8b:1f:be:55: 38:5d:69:16:99:1d:ac:b6:1a:ea:ac:34:ac:12:d8:44:11:52: 67:71:a6:9e:ed:21:6b:33:09:b5:0c:18:c8:b8:f3:99:62:15: 14:3c:74:b8:5b:8a:ac:c1:61:ce:e0:6f:43:54:a7:6c:8a:5f: a4:75:f2:7e:70:d0:17:aa:36:a3:37:b7:44:65:f3:87:a2:30: 4c:e4:de:5c:a6:93:dc:6a:4a:24:51:37:e8:5d:1d:f6:93:4c: 8d:f7:b6:4a:82:7b:88:59:81:00:61:1c:0f:7e:a9:17:2e:13: f6:69:4b:d2:c1:3d:0a:7a:07:68:fe:ee:23:d3:97:ea:3e:ce: 3b:40:22:05:64:f7:37:b6:02:ae:60:8e:56:e8:db:a2:0c:88: 07:99:1d:3f -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUbeOFPI++PqmD/gZYAgzw+mS6blwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTM3RENGM0ZFMThFM0M5REIzM0FDNkM1MEU4QkUzNTdE MDcyOTk5MTAeFw0yNjA5MjExOTAxNTlaFw0yNjA5MjIxOTE4NTlaMDMxMTAvBgNV BAMTKDEwRjAxOUQ3RkI1OEU2OTA2REMzM0RFNjdCOTdDRTlFMkI0QTEyNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXowjcPNx+C47NieCfMezT0BJD ENnik4CYNF5S1U1WgUxIs461P97NZEcUzDLDKiulEauCTG0enJivmvup6a4/HSrf P+3E7AV9yc7nV0Lht+KgozU/N+jOfpal/Bbb6yTUvnLTLxWXx0PBGPSPhHzchkdn y+kfWVqJl7BSOnZQ9R4t+uHH+285Lq+qvjvi+RLXqZMloUoVYaynjj8MmI6EOpkH fYZTjNAnbBV9i1P38zSLzt+9nDfJnZLKRwItsiUd8beDWBwkrYjqAuYtHimZAIS5 apoeSPcdikGoXm3rmyS+7EOgBWMdhG3pNA6F2JYUDVlznkAyxn+7m/gTEOTfAgMB AAGjggHyMIIB7jAdBgNVHQ4EFgQUEPAZ1/tY5pBtwz3me5fOnitKEkUwHwYDVR0j BBgwFoAUE33PP+GOPJ2zOsbFDovjV9BymZEwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvV0FOR1RJ QU4vMC8xMzdEQ0YzRkUxOEUzQzlEQjMzQUM2QzUwRThCRTM1N0QwNzI5OTkxLmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8wLzEzN0RDRjNGRTE4RTNDOURCMzNBQzZDNTBF OEJFMzU3RDA3Mjk5OTEuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9XQU5HVElBTi8wLzEzN0RDRjNG RTE4RTNDOURCMzNBQzZDNTBFOEJFMzU3RDA3Mjk5OTEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAVHT2N c2nCq4vRhaUGj1tYyc25qbpnh2uGoSypxoBVt9IGuCF7QO/eIA3ny4GP9Ln83y9w kLAqMmQfkoFIVAr1Fqca2LSu+PqK9A9J/gkrKz039L3C2EfEy9t1/orNnlxZJcvQ FgeUQYsfvlU4XWkWmR2sthrqrDSsEthEEVJncaae7SFrMwm1DBjIuPOZYhUUPHS4 W4qswWHO4G9DVKdsil+kdfJ+cNAXqjajN7dEZfOHojBM5N5cppPcakokUTfoXR32 k0yN97ZKgnuIWYEAYRwPfqkXLhP2aUvSwT0Kegdo/u4j05fqPs47QCIFZPc3tgKu YI5W6NuiDIgHmR0/ -----END CERTIFICATE-----Generated at Tue Sep 22 14:19:50 2026 by rpki-client