$ rpki-client -vvvf rpkica.twnic.tw/rpki/WANTEASY/0/E2FEF6929D00129C0EC91DE25524363E78F319D7.mft File: E2FEF6929D00129C0EC91DE25524363E78F319D7.mft (raw, json) Hash identifier: jS0FZmTeeTkuzSO+Ahg9hxNdYQpIlji4C6ZyZPuE0W0= Subject key identifier: A7:3C:82:96:CA:2B:42:DD:C0:DA:69:1C:4C:F1:34:FB:EA:B1:4F:4B Authority key identifier: E2:FE:F6:92:9D:00:12:9C:0E:C9:1D:E2:55:24:36:3E:78:F3:19:D7 Certificate issuer: /CN=E2FEF6929D00129C0EC91DE25524363E78F319D7 Certificate serial: 3FD8B1CEC07BCA8768BE719E85A645CF153C5C20 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E2FEF6929D00129C0EC91DE25524363E78F319D7.cer Subject info access: rsync://rpkica.twnic.tw/rpki/WANTEASY/0/E2FEF6929D00129C0EC91DE25524363E78F319D7.mft Manifest number: B5 Signing time: Mon 21 Sep 2026 10:26:54 +0000 Manifest this update: Mon 21 Sep 2026 10:21:54 +0000 Manifest next update: Tue 22 Sep 2026 12:53:54 +0000 Files and hashes: 1: E2FEF6929D00129C0EC91DE25524363E78F319D7.crl (hash: 2gvZ5soFfU+H0WD/PzCwbnmRBYmvTOxRxSLekg3NNuo=) 2: 3130332e3133382e3130362e302f32332d3234203d3e203137343038.roa (hash: nhkWWbEcHMQGryDxoH+6rKNwicNf5iRZvw6pvqc84z4=) 3: 3130332e3133382e3130372e302f32342d3234203d3e203137343038.roa (hash: De1HIXtsANXzLfuAQRrXgqC4plFB3ZURvmTwZ7qHlC8=) 4: 3130332e3133382e3130362e302f32342d3234203d3e203137343038.roa (hash: 7hhipyt4Di6KylqpdZkFLgokgRg/ZHGamIeaZ0lFOO0=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/WANTEASY/0/E2FEF6929D00129C0EC91DE25524363E78F319D7.crl rsync://rpkica.twnic.tw/rpki/WANTEASY/0/E2FEF6929D00129C0EC91DE25524363E78F319D7.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E2FEF6929D00129C0EC91DE25524363E78F319D7.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 12:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:d8:b1:ce:c0:7b:ca:87:68:be:71:9e:85:a6:45:cf:15:3c:5c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E2FEF6929D00129C0EC91DE25524363E78F319D7 Validity Not Before: Sep 21 10:21:54 2026 GMT Not After : Sep 22 12:53:54 2026 GMT Subject: CN=A73C8296CA2B42DDC0DA691C4CF134FBEAB14F4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:93:44:d9:dc:65:be:bf:e1:5c:fa:07:3d:17: 5d:09:44:2b:a3:ce:a3:5a:51:cb:d4:47:42:c5:bc: 78:f8:23:f1:da:78:62:4c:c2:e3:a6:b1:91:ad:c9: 11:98:a5:f9:05:42:f5:ec:94:c7:43:74:5f:46:b2: 38:2e:24:eb:21:eb:05:77:08:6f:6e:91:00:50:31: 56:3d:a3:de:75:8c:91:e0:75:8a:a1:95:0b:96:3d: ba:51:92:9c:eb:c4:21:bd:26:85:67:9d:76:34:54: 8b:8e:69:bb:db:e0:fb:9b:8a:01:6f:5f:4c:1b:68: f5:b3:46:2e:bc:01:51:48:97:8c:b4:60:52:bc:47: 23:5b:75:af:ae:4a:9f:00:f4:4f:04:f9:8e:08:6a: b8:62:5f:ab:b2:55:20:a4:ec:13:d7:fe:9c:3a:de: 99:b4:87:b7:c9:b0:c1:21:ad:a7:0c:61:2b:5a:0a: 92:4f:c3:6a:31:4e:c3:a6:de:3e:83:1b:65:64:e7: 5c:39:12:79:8d:cc:09:ba:73:8a:0a:98:0b:fa:da: d8:b7:c4:30:37:61:84:f5:a4:a5:61:fc:be:a6:6f: b6:9c:5f:8f:32:c9:c2:d0:18:60:7e:c4:b3:93:36: 40:93:a1:c9:b9:0a:28:da:cd:98:cc:d4:40:87:57: f3:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:3C:82:96:CA:2B:42:DD:C0:DA:69:1C:4C:F1:34:FB:EA:B1:4F:4B X509v3 Authority Key Identifier: keyid:E2:FE:F6:92:9D:00:12:9C:0E:C9:1D:E2:55:24:36:3E:78:F3:19:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/WANTEASY/0/E2FEF6929D00129C0EC91DE25524363E78F319D7.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E2FEF6929D00129C0EC91DE25524363E78F319D7.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/WANTEASY/0/E2FEF6929D00129C0EC91DE25524363E78F319D7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:b6:e0:7c:35:c1:0c:76:f1:48:9b:d5:ef:68:11:a1:d6:58: 11:49:bb:43:a1:c1:de:55:e4:86:9f:b3:3e:1a:36:7e:6f:1c: 90:3a:6d:dc:46:4e:f8:15:5b:26:ba:a5:6f:f0:c6:79:6a:bd: 20:42:86:57:dc:e6:a6:23:a4:d6:ee:08:9e:e2:17:aa:8e:08: 50:fa:e4:4c:aa:b4:88:8f:98:28:40:b8:73:b7:dd:58:8c:9d: 2d:50:fe:12:e1:b5:f4:e4:f7:a5:f1:94:8e:52:ec:63:fb:87: ef:ad:04:82:28:b3:a2:7c:88:25:6f:f5:92:89:08:ba:e2:65: 36:96:be:91:67:bc:24:ac:59:9a:70:e8:cc:34:7c:d5:73:dd: 2d:b4:13:2a:33:9f:96:d8:db:42:d3:c5:ff:f7:f1:26:72:7a: a7:05:30:d0:1e:2a:0f:bd:ad:53:b5:8d:52:84:ed:60:62:80: 2c:c1:7b:5c:1f:0b:e6:15:d7:f2:4c:7d:8d:44:b5:a7:36:da: 70:ab:f5:c7:6d:30:4c:d4:5e:84:8c:e4:87:be:22:52:ef:ea: 3d:b6:ae:e0:32:08:f3:15:a5:c9:b7:49:11:91:b5:c2:97:f7: e4:5f:b1:a5:51:c7:5f:4f:82:e0:a2:d2:ce:7e:61:6a:3d:ae: 49:36:f6:55 -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUP9ixzsB7yodovnGehaZFzxU8XCAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTJGRUY2OTI5RDAwMTI5QzBFQzkxREUyNTUyNDM2M0U3 OEYzMTlENzAeFw0yNjA5MjExMDIxNTRaFw0yNjA5MjIxMjUzNTRaMDMxMTAvBgNV BAMTKEE3M0M4Mjk2Q0EyQjQyRERDMERBNjkxQzRDRjEzNEZCRUFCMTRGNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBk0TZ3GW+v+Fc+gc9F10JRCuj zqNaUcvUR0LFvHj4I/HaeGJMwuOmsZGtyRGYpfkFQvXslMdDdF9GsjguJOsh6wV3 CG9ukQBQMVY9o951jJHgdYqhlQuWPbpRkpzrxCG9JoVnnXY0VIuOabvb4PubigFv X0wbaPWzRi68AVFIl4y0YFK8RyNbda+uSp8A9E8E+Y4IarhiX6uyVSCk7BPX/pw6 3pm0h7fJsMEhracMYStaCpJPw2oxTsOm3j6DG2Vk51w5EnmNzAm6c4oKmAv62ti3 xDA3YYT1pKVh/L6mb7acX48yycLQGGB+xLOTNkCTocm5CijazZjM1ECHV/MTAgMB AAGjggHyMIIB7jAdBgNVHQ4EFgQUpzyClsorQt3A2mkcTPE0++qxT0swHwYDVR0j BBgwFoAU4v72kp0AEpwOyR3iVSQ2PnjzGdcwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvV0FOVEVB U1kvMC9FMkZFRjY5MjlEMDAxMjlDMEVDOTFERTI1NTI0MzYzRTc4RjMxOUQ3LmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8xL0UyRkVGNjkyOUQwMDEyOUMwRUM5MURFMjU1 MjQzNjNFNzhGMzE5RDcuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9XQU5URUFTWS8wL0UyRkVGNjky OUQwMDEyOUMwRUM5MURFMjU1MjQzNjNFNzhGMzE5RDcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBvtuB8 NcEMdvFIm9XvaBGh1lgRSbtDocHeVeSGn7M+GjZ+bxyQOm3cRk74FVsmuqVv8MZ5 ar0gQoZX3OamI6TW7gie4heqjghQ+uRMqrSIj5goQLhzt91YjJ0tUP4S4bX05Pel 8ZSOUuxj+4fvrQSCKLOifIglb/WSiQi64mU2lr6RZ7wkrFmacOjMNHzVc90ttBMq M5+W2NtC08X/9/EmcnqnBTDQHioPva1TtY1ShO1gYoAswXtcHwvmFdfyTH2NRLWn Ntpwq/XHbTBM1F6EjOSHviJS7+o9tq7gMgjzFaXJt0kRkbXCl/fkX7GlUcdfT4Lg otLOfmFqPa5JNvZV -----END CERTIFICATE-----Generated at Tue Sep 22 01:05:31 2026 by rpki-client