$ rpki-client -vvvf rpkica.twnic.tw/rpki/ZAT/0/0291B733B1EED1AF7E817D958CE6F13A585F0695.mft File: 0291B733B1EED1AF7E817D958CE6F13A585F0695.mft (raw, json) Hash identifier: C6370nu5LMcphTxfHPwnMESLNgk7E70qXcV/XJfR2rY= Subject key identifier: A2:FC:B2:A3:21:25:5D:91:9C:09:6E:8F:AA:ED:AD:B0:AE:FB:8F:39 Authority key identifier: 02:91:B7:33:B1:EE:D1:AF:7E:81:7D:95:8C:E6:F1:3A:58:5F:06:95 Certificate issuer: /CN=0291B733B1EED1AF7E817D958CE6F13A585F0695 Certificate serial: 62413F02D22062A37CC5476927DAA4DA2560C428 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0291B733B1EED1AF7E817D958CE6F13A585F0695.cer Subject info access: rsync://rpkica.twnic.tw/rpki/ZAT/0/0291B733B1EED1AF7E817D958CE6F13A585F0695.mft Manifest number: B3 Signing time: Sun 20 Sep 2026 22:14:34 +0000 Manifest this update: Sun 20 Sep 2026 22:09:34 +0000 Manifest next update: Mon 21 Sep 2026 23:45:34 +0000 Files and hashes: 1: 323430313a353561303a3a2f33322d3332203d3e203138303431.roa (hash: CrzulhqYuNBjNzDQRC8BOsQxP+QuAw4ZbCFe65kH3fw=) 2: 3231302e37392e3135302e302f32332d3234203d3e203138303431.roa (hash: XF9vSkheKC1NRFUS3alvj8iCKGl0+/ZaB+X31yisdf0=) 3: 0291B733B1EED1AF7E817D958CE6F13A585F0695.crl (hash: SlpPUgdhMRDNYRqslYZiEWPHgUU1GgTWHYbGPhEE+XA=) 4: 3231302e37392e3135312e302f32342d3234203d3e20323031323137.roa (hash: WRpRpWc9nNYJzvwhsCMAvWKmyMgtn7Z1UBftNahQj4c=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/ZAT/0/0291B733B1EED1AF7E817D958CE6F13A585F0695.crl rsync://rpkica.twnic.tw/rpki/ZAT/0/0291B733B1EED1AF7E817D958CE6F13A585F0695.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0291B733B1EED1AF7E817D958CE6F13A585F0695.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 23:45:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:41:3f:02:d2:20:62:a3:7c:c5:47:69:27:da:a4:da:25:60:c4:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0291B733B1EED1AF7E817D958CE6F13A585F0695 Validity Not Before: Sep 20 22:09:34 2026 GMT Not After : Sep 21 23:45:34 2026 GMT Subject: CN=A2FCB2A321255D919C096E8FAAEDADB0AEFB8F39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b5:39:1a:18:d3:28:31:e1:59:0c:50:57:c3: 58:27:78:ec:8e:fd:84:db:de:18:69:91:1c:70:66: 7e:cb:dc:64:ee:77:28:7b:4e:f5:6e:ed:d6:33:1e: 4d:f9:d4:23:d0:85:71:43:e4:b1:ea:9b:1d:01:ea: 6d:3c:75:15:d2:5c:25:2b:81:eb:94:14:6d:7d:7c: 16:0e:f3:f5:e2:4e:6c:53:33:fd:6c:1a:36:73:45: 04:40:a3:99:0c:ff:f9:b7:f5:9f:81:dd:a7:ad:b6: 53:ec:a8:f5:b4:8b:79:09:8b:50:62:30:c0:76:9b: 08:c5:13:9a:76:09:92:3d:9b:ff:b1:b9:48:75:8f: 71:8e:7b:2e:8f:13:ea:5a:f5:68:5d:6c:2a:6a:ea: a4:f9:0a:13:be:86:6f:55:14:55:6d:95:7e:77:4a: b0:f4:f0:f8:7d:ff:03:6c:97:e7:ca:09:11:c9:a7: cc:06:61:7b:db:1c:8b:2a:c8:50:43:64:29:dd:cf: b5:8c:db:e7:ea:fa:2b:b5:60:33:88:e0:41:39:72: 9a:78:38:98:c3:b3:74:17:68:e6:77:b9:b2:56:d7: 2b:79:09:a3:a4:20:d6:df:3f:55:ae:af:f9:3b:f9: d9:87:45:2d:fb:16:35:a5:78:8f:2a:2e:21:bf:7c: cb:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:FC:B2:A3:21:25:5D:91:9C:09:6E:8F:AA:ED:AD:B0:AE:FB:8F:39 X509v3 Authority Key Identifier: keyid:02:91:B7:33:B1:EE:D1:AF:7E:81:7D:95:8C:E6:F1:3A:58:5F:06:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/ZAT/0/0291B733B1EED1AF7E817D958CE6F13A585F0695.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0291B733B1EED1AF7E817D958CE6F13A585F0695.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ZAT/0/0291B733B1EED1AF7E817D958CE6F13A585F0695.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:96:e8:1f:2b:a8:d7:a7:90:09:fd:44:6b:d3:53:d5:87:4a: 0e:60:26:24:bb:33:a1:57:29:a7:d5:63:cb:c3:e3:bb:0e:7b: 74:1a:f4:75:66:52:7c:d2:0e:b4:7d:19:2d:fb:02:7c:1b:8a: e1:02:9e:f1:bd:c7:48:10:82:b4:c1:af:ff:c7:7b:15:14:b7: 2e:01:8e:4f:10:c7:02:45:1b:57:f0:d8:5d:7b:e8:a4:d9:4a: cf:a1:1c:1f:bc:b4:6d:45:1d:25:08:8a:96:2b:5a:68:b9:68: 60:41:bf:f0:91:84:23:fb:26:86:83:06:09:df:b0:3c:21:b7: ac:b1:7c:bf:a5:5f:98:da:f4:44:f8:e6:42:13:9b:49:dc:06: 55:40:9e:4a:ee:59:f1:2a:67:fb:76:2e:e5:41:bd:b9:d6:99: 3f:6a:4a:d6:97:b4:12:ec:4a:6a:66:54:84:5f:39:78:6f:59: 57:af:a3:c4:ff:8a:c0:d9:e6:90:ec:16:c4:37:2a:5b:b4:4c: d7:37:30:d4:42:b3:fe:72:24:06:07:c2:8e:bd:6d:2e:2e:f9: e1:2a:a1:8a:f8:64:9a:89:58:11:06:c4:f9:d1:a8:de:08:f3: 93:fe:4b:14:ff:f7:6c:fd:6d:a3:44:8c:43:c1:08:00:7b:a0: 55:1a:e0:1f -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUYkE/AtIgYqN8xUdpJ9qk2iVgxCgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI5MUI3MzNCMUVFRDFBRjdFODE3RDk1OENFNkYxM0E1 ODVGMDY5NTAeFw0yNjA5MjAyMjA5MzRaFw0yNjA5MjEyMzQ1MzRaMDMxMTAvBgNV BAMTKEEyRkNCMkEzMjEyNTVEOTE5QzA5NkU4RkFBRURBREIwQUVGQjhGMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwtTkaGNMoMeFZDFBXw1gneOyO /YTb3hhpkRxwZn7L3GTudyh7TvVu7dYzHk351CPQhXFD5LHqmx0B6m08dRXSXCUr geuUFG19fBYO8/XiTmxTM/1sGjZzRQRAo5kM//m39Z+B3aettlPsqPW0i3kJi1Bi MMB2mwjFE5p2CZI9m/+xuUh1j3GOey6PE+pa9WhdbCpq6qT5ChO+hm9VFFVtlX53 SrD08Ph9/wNsl+fKCRHJp8wGYXvbHIsqyFBDZCndz7WM2+fq+iu1YDOI4EE5cpp4 OJjDs3QXaOZ3ubJW1yt5CaOkINbfP1Wur/k7+dmHRS37FjWleI8qLiG/fMv1AgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUovyyoyElXZGcCW6Pqu2tsK77jzkwHwYDVR0j BBgwFoAUApG3M7Hu0a9+gX2VjObxOlhfBpUwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvWkFULzAv MDI5MUI3MzNCMUVFRDFBRjdFODE3RDk1OENFNkYxM0E1ODVGMDY5NS5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS8wMjkxQjczM0IxRUVEMUFGN0U4MTdEOTU4Q0U2RjEz QTU4NUYwNjk1LmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvWkFULzAvMDI5MUI3MzNCMUVFRDFBRjdF ODE3RDk1OENFNkYxM0E1ODVGMDY5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBADCW6B8rqNenkAn9RGvT U9WHSg5gJiS7M6FXKafVY8vD47sOe3Qa9HVmUnzSDrR9GS37AnwbiuECnvG9x0gQ grTBr//HexUUty4Bjk8QxwJFG1fw2F176KTZSs+hHB+8tG1FHSUIipYrWmi5aGBB v/CRhCP7JoaDBgnfsDwht6yxfL+lX5ja9ET45kITm0ncBlVAnkruWfEqZ/t2LuVB vbnWmT9qStaXtBLsSmpmVIRfOXhvWVevo8T/isDZ5pDsFsQ3Klu0TNc3MNRCs/5y JAYHwo69bS4u+eEqoYr4ZJqJWBEGxPnRqN4I85P+SxT/92z9baNEjEPBCAB7oFUa 4B8= -----END CERTIFICATE-----Generated at Mon Sep 21 13:22:13 2026 by rpki-client