$ rpki-client -vvvf rpkica.twnic.tw/rpki/ZEROONEINF/0/6276E9A9117C6BDB5F372D44D0BB9ACDC5F2CAD6.mft File: 6276E9A9117C6BDB5F372D44D0BB9ACDC5F2CAD6.mft (raw, json) Hash identifier: okxC9tjZZb+0Nwd3FrU7/aGCwvU4p76KlnKKVfMahR4= Subject key identifier: 9F:C7:35:56:89:83:11:09:5A:90:E5:B0:3A:C7:BB:B7:A7:A2:6D:E5 Authority key identifier: 62:76:E9:A9:11:7C:6B:DB:5F:37:2D:44:D0:BB:9A:CD:C5:F2:CA:D6 Certificate issuer: /CN=6276E9A9117C6BDB5F372D44D0BB9ACDC5F2CAD6 Certificate serial: 1DEE32AD46B922EB8FFB28EF911FBFCBA986F805 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6276E9A9117C6BDB5F372D44D0BB9ACDC5F2CAD6.cer Subject info access: rsync://rpkica.twnic.tw/rpki/ZEROONEINF/0/6276E9A9117C6BDB5F372D44D0BB9ACDC5F2CAD6.mft Manifest number: B3 Signing time: Mon 21 Sep 2026 10:16:52 +0000 Manifest this update: Mon 21 Sep 2026 10:11:52 +0000 Manifest next update: Tue 22 Sep 2026 13:59:52 +0000 Files and hashes: 1: 6276E9A9117C6BDB5F372D44D0BB9ACDC5F2CAD6.crl (hash: dteBXICbxtjlfv/Z1tviZPvo3bxJ6k93xzbmDMQYRv8=) 2: 3136332e3232372e3137332e302f32342d3234203d3e20313937353337.roa (hash: P5QLHoBtt6SbxYucP/7Z4dIJgiwE8f3I3JbpUYs0g0M=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/ZEROONEINF/0/6276E9A9117C6BDB5F372D44D0BB9ACDC5F2CAD6.crl rsync://rpkica.twnic.tw/rpki/ZEROONEINF/0/6276E9A9117C6BDB5F372D44D0BB9ACDC5F2CAD6.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6276E9A9117C6BDB5F372D44D0BB9ACDC5F2CAD6.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 03:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:ee:32:ad:46:b9:22:eb:8f:fb:28:ef:91:1f:bf:cb:a9:86:f8:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6276E9A9117C6BDB5F372D44D0BB9ACDC5F2CAD6 Validity Not Before: Sep 21 10:11:52 2026 GMT Not After : Sep 22 13:59:52 2026 GMT Subject: CN=9FC73556898311095A90E5B03AC7BBB7A7A26DE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7b:7a:57:57:39:b6:9b:44:ac:28:db:2a:46: 59:b5:92:ff:aa:bb:a6:1b:38:e6:42:d9:80:82:5f: 4b:67:60:9e:f3:68:a4:9a:29:15:65:de:ff:8f:05: 41:f5:7d:dc:9a:38:1b:d8:f7:bb:32:f0:b6:37:99: 71:ae:6f:d2:e9:ae:25:c6:4e:1b:72:2a:ab:29:e5: 32:63:33:ed:65:f0:cc:25:1f:08:6c:21:64:fa:8d: 2d:26:13:cd:12:db:6c:5f:57:32:fd:cd:fc:43:f5: a5:c2:7f:80:79:48:6f:f5:60:02:db:1e:87:77:0b: 17:c4:68:ce:16:b6:09:1d:5e:9f:e1:2f:e5:1e:54: 25:d9:7a:b1:86:cb:ab:33:c7:50:e7:84:0b:99:59: d2:14:2e:87:29:8e:a3:f1:ea:bf:04:6a:bd:2b:e5: b0:72:88:3f:0b:ff:ae:fd:3e:c4:1c:3b:56:8c:35: c6:e3:70:bb:57:67:2e:c2:15:04:08:2a:66:15:c0: b4:76:81:72:0d:81:0a:7f:07:c9:9a:1b:79:3c:05: f4:6d:5d:c5:e9:63:9e:48:55:54:c2:7d:40:c7:18: a0:fe:24:04:08:22:79:82:d0:8b:45:52:88:ce:08: ff:44:e5:cf:59:b7:ca:8c:4a:52:b9:7c:66:50:bc: 8d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:C7:35:56:89:83:11:09:5A:90:E5:B0:3A:C7:BB:B7:A7:A2:6D:E5 X509v3 Authority Key Identifier: keyid:62:76:E9:A9:11:7C:6B:DB:5F:37:2D:44:D0:BB:9A:CD:C5:F2:CA:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/ZEROONEINF/0/6276E9A9117C6BDB5F372D44D0BB9ACDC5F2CAD6.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6276E9A9117C6BDB5F372D44D0BB9ACDC5F2CAD6.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ZEROONEINF/0/6276E9A9117C6BDB5F372D44D0BB9ACDC5F2CAD6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:a0:58:8a:99:01:44:0c:1d:a0:83:0b:4d:d1:7d:e9:a9:9a: 84:15:d6:58:af:4f:d9:fe:9b:45:60:cf:d3:35:31:65:a9:c3: 60:5f:c3:5d:47:9b:9c:61:d5:4e:a4:7b:1f:a7:56:ce:52:ca: 57:d6:0a:5d:4a:9a:ee:fd:78:2c:45:90:7f:a2:fd:71:4d:bd: b1:b2:91:ef:77:d8:25:45:c2:6c:16:88:7d:80:64:e2:61:14: 8c:bc:1c:01:31:89:d8:67:22:99:1b:9f:30:e7:02:a0:d8:41: 40:75:65:f0:90:2f:bd:99:b4:10:f5:ea:f3:27:57:48:61:4b: 87:61:b5:9a:13:6e:7b:d9:c9:d8:27:dd:67:80:8f:54:53:f6: 6a:5a:93:be:5e:45:ca:17:38:23:62:01:5d:82:f7:8a:48:18: 42:e9:df:c8:63:45:84:b6:40:40:b0:21:43:22:bd:3f:13:b0: 68:7b:71:e6:e0:0d:4e:88:97:15:41:e1:5a:68:57:7a:d1:b6: 1b:19:eb:66:59:a4:94:63:d8:c2:be:9f:6c:7d:2e:7c:0f:0d: 0b:b3:4b:9f:52:28:92:b8:eb:ea:13:af:be:55:5c:94:09:65: 44:bd:8c:bb:a6:f6:7f:35:8a:50:77:23:5b:2a:b5:77:1e:2f: 16:6f:5c:7b -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgIUHe4yrUa5IuuP+yjvkR+/y6mG+AUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjI3NkU5QTkxMTdDNkJEQjVGMzcyRDQ0RDBCQjlBQ0RD NUYyQ0FENjAeFw0yNjA5MjExMDExNTJaFw0yNjA5MjIxMzU5NTJaMDMxMTAvBgNV BAMTKDlGQzczNTU2ODk4MzExMDk1QTkwRTVCMDNBQzdCQkI3QTdBMjZERTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7e3pXVzm2m0SsKNsqRlm1kv+q u6YbOOZC2YCCX0tnYJ7zaKSaKRVl3v+PBUH1fdyaOBvY97sy8LY3mXGub9LpriXG ThtyKqsp5TJjM+1l8MwlHwhsIWT6jS0mE80S22xfVzL9zfxD9aXCf4B5SG/1YALb Hod3CxfEaM4WtgkdXp/hL+UeVCXZerGGy6szx1DnhAuZWdIULocpjqPx6r8Ear0r 5bByiD8L/679PsQcO1aMNcbjcLtXZy7CFQQIKmYVwLR2gXINgQp/B8maG3k8BfRt XcXpY55IVVTCfUDHGKD+JAQIInmC0ItFUojOCP9E5c9Zt8qMSlK5fGZQvI2BAgMB AAGjggH2MIIB8jAdBgNVHQ4EFgQUn8c1VomDEQlakOWwOse7t6eibeUwHwYDVR0j BBgwFoAUYnbpqRF8a9tfNy1E0LuazcXyytYwDgYDVR0PAQH/BAQDAgeAMGcGA1Ud HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvWkVST09O RUlORi8wLzYyNzZFOUE5MTE3QzZCREI1RjM3MkQ0NEQwQkI5QUNEQzVGMkNBRDYu Y3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBLzEvNjI3NkU5QTkxMTdDNkJEQjVGMzcyRDQ0 RDBCQjlBQ0RDNUYyQ0FENi5jZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzAL hlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1pFUk9PTkVJTkYvMC82Mjc2 RTlBOTExN0M2QkRCNUYzNzJENDREMEJCOUFDREM1RjJDQUQ2Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA qaBYipkBRAwdoIMLTdF96amahBXWWK9P2f6bRWDP0zUxZanDYF/DXUebnGHVTqR7 H6dWzlLKV9YKXUqa7v14LEWQf6L9cU29sbKR73fYJUXCbBaIfYBk4mEUjLwcATGJ 2GcimRufMOcCoNhBQHVl8JAvvZm0EPXq8ydXSGFLh2G1mhNue9nJ2CfdZ4CPVFP2 alqTvl5Fyhc4I2IBXYL3ikgYQunfyGNFhLZAQLAhQyK9PxOwaHtx5uANToiXFUHh WmhXetG2GxnrZlmklGPYwr6fbH0ufA8NC7NLn1Iokrjr6hOvvlVclAllRL2Mu6b2 fzWKUHcjWyq1dx4vFm9cew== -----END CERTIFICATE-----Generated at Mon Sep 21 22:18:15 2026 by rpki-client