$ rpki-client -vvvf rpkica.twnic.tw/rpki/AOTERNET/1/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.mft File: DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.mft (raw, json) Hash identifier: STHBBI/p2DatnhdiOcAq4kq79/+K813SHllERXYJXXY= Subject key identifier: 22:31:6F:5C:09:7E:AD:5E:F4:DF:6A:D8:06:09:4D:59:EB:C5:98:BB Authority key identifier: DB:E0:6A:5F:C5:A5:E2:89:AC:EB:48:7B:50:C5:EC:D3:B6:DE:23:4C Certificate issuer: /CN=DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C Certificate serial: 15C8BD865A5031DC7C2726F87A748D1247A961E9 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.cer Subject info access: rsync://rpkica.twnic.tw/rpki/AOTERNET/1/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.mft Manifest number: D6 Signing time: Fri 25 Sep 2026 12:04:01 +0000 Manifest this update: Fri 25 Sep 2026 11:59:01 +0000 Manifest next update: Sat 26 Sep 2026 16:01:01 +0000 Files and hashes: 1: 3134342e37392e3233372e302f32342d3332203d3e203138303430.roa (hash: r6p1Am50m6SY4C22THPfAzr++Eba9JH1Hgnd4WmFLsA=) 2: 3134342e37392e3233362e302f32342d3234203d3e203138303430.roa (hash: ZudjpagHov1aZlrdTbsVSXtYt3YeCsmSW4h5XCZ/uzs=) 3: DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.crl (hash: 5+1N8dgMT9krX41Q3hoT7DuwtSUn1c8+jJiT70f4s38=) 4: 3134342e37392e3233362e302f32332d3234203d3e203138303430.roa (hash: swWMMhQXlSR0PFV4e85I459ba4C8/nyQkI/jb0Kgt70=) 5: 3134342e37392e3233362e302f32342d3332203d3e203138303430.roa (hash: 1FIFjMBcizShdvw6u5phvDGtZhnMBusqAuzpJLq+G90=) 6: 3134342e37392e3233372e302f32342d3234203d3e203138303430.roa (hash: YiNfhn2rfnFW/2M2Ag4d3OUBywy0FERwAc5K7Q8vyfc=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/AOTERNET/1/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.crl rsync://rpkica.twnic.tw/rpki/AOTERNET/1/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 16:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:c8:bd:86:5a:50:31:dc:7c:27:26:f8:7a:74:8d:12:47:a9:61:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C Validity Not Before: Sep 25 11:59:01 2026 GMT Not After : Sep 26 16:01:01 2026 GMT Subject: CN=22316F5C097EAD5EF4DF6AD806094D59EBC598BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:06:ae:da:40:39:f9:0f:7c:fb:27:f5:88:6b: 25:63:80:63:da:25:45:37:ba:28:56:56:7c:16:ec: 2a:3e:ec:8f:bf:f2:2e:b4:bd:b3:cf:d7:8b:eb:9c: a9:6a:e9:c6:d4:92:6c:ec:12:02:4a:43:37:ef:b8: 40:2b:3b:3f:bd:64:d3:4d:57:3c:86:71:64:72:0b: f1:16:6d:56:b5:71:ad:93:a8:a9:e7:ba:cb:4d:63: bd:b9:9d:3c:a3:2d:b5:fe:10:61:30:c5:3c:9f:c2: e3:75:ee:3d:09:78:95:e0:b8:a3:ed:01:ed:78:56: 14:eb:dc:42:fb:68:81:ee:81:5c:35:f0:cc:46:c4: 69:a7:c4:53:a1:4c:5d:78:e9:7a:c0:03:4c:53:a3: 8f:64:98:7b:94:76:b2:25:15:84:56:8d:19:bc:9f: ba:1d:f4:6f:77:f7:2a:be:44:1e:03:bc:1f:c8:54: b2:b3:49:49:97:20:62:f6:84:d7:72:12:68:75:8c: fb:a1:81:db:1d:2b:e8:ec:96:92:9c:1e:27:7d:e0: d6:1c:48:e1:42:b1:e7:3f:d4:f0:ef:40:0c:33:a4: 0c:24:43:2a:d6:ca:fe:a6:e0:b3:bc:aa:4c:30:a3: db:c7:25:e3:84:5d:5e:95:38:8f:70:bf:5e:95:f6: d4:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:31:6F:5C:09:7E:AD:5E:F4:DF:6A:D8:06:09:4D:59:EB:C5:98:BB X509v3 Authority Key Identifier: keyid:DB:E0:6A:5F:C5:A5:E2:89:AC:EB:48:7B:50:C5:EC:D3:B6:DE:23:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/AOTERNET/1/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/AOTERNET/1/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:3d:7b:dd:03:78:b4:2b:fa:fb:59:3f:1d:6e:05:5f:ad:d7: 94:30:20:cb:84:bf:fb:4b:f3:6b:b4:5b:a2:4f:fe:77:ae:be: 93:c9:15:0d:97:04:89:ff:39:d9:c5:48:67:d1:37:f4:bc:84: d3:d3:90:01:c2:8e:15:cd:fa:44:dd:05:d5:74:c3:95:81:db: a5:99:33:fc:0f:45:aa:36:89:01:cc:94:b9:58:e1:b2:e3:0d: b5:a8:08:7e:14:20:43:c2:88:eb:f3:ac:fe:7d:e2:5d:91:c1: 38:2d:f5:95:43:e1:8e:20:30:16:f3:89:10:91:45:f2:09:97: 70:00:0d:a0:22:fa:e4:f9:bb:c8:2a:5c:6c:23:cf:1f:57:03: 09:9c:67:b6:df:de:cc:5e:f1:16:4d:60:c1:1a:28:51:e2:c8: 93:0a:80:6e:10:b7:8d:d4:6d:65:c6:95:d1:28:12:75:1b:38: 96:85:e1:9f:c6:e5:43:48:d1:1b:db:c2:62:d6:b4:c7:6f:ae: 0e:eb:d0:cf:5c:c3:19:fc:49:12:8b:aa:09:0a:36:5d:9c:29: 36:74:cf:49:8b:3f:b9:bd:d3:23:b4:14:f6:8f:83:2d:f7:a6: dd:74:f2:5f:da:e4:cb:ec:31:47:94:d5:7d:4b:2d:46:88:2e: df:13:46:59 -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUFci9hlpQMdx8Jyb4enSNEkepYekwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJFMDZBNUZDNUE1RTI4OUFDRUI0ODdCNTBDNUVDRDNC NkRFMjM0QzAeFw0yNjA5MjUxMTU5MDFaFw0yNjA5MjYxNjAxMDFaMDMxMTAvBgNV BAMTKDIyMzE2RjVDMDk3RUFENUVGNERGNkFEODA2MDk0RDU5RUJDNTk4QkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiBq7aQDn5D3z7J/WIayVjgGPa JUU3uihWVnwW7Co+7I+/8i60vbPP14vrnKlq6cbUkmzsEgJKQzfvuEArOz+9ZNNN VzyGcWRyC/EWbVa1ca2TqKnnustNY725nTyjLbX+EGEwxTyfwuN17j0JeJXguKPt Ae14VhTr3EL7aIHugVw18MxGxGmnxFOhTF146XrAA0xTo49kmHuUdrIlFYRWjRm8 n7od9G939yq+RB4DvB/IVLKzSUmXIGL2hNdyEmh1jPuhgdsdK+jslpKcHid94NYc SOFCsec/1PDvQAwzpAwkQyrWyv6m4LO8qkwwo9vHJeOEXV6VOI9wv16V9tSlAgMB AAGjggHyMIIB7jAdBgNVHQ4EFgQUIjFvXAl+rV7032rYBglNWevFmLswHwYDVR0j BBgwFoAU2+BqX8Wl4oms60h7UMXs07beI0wwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQU9URVJO RVQvMS9EQkUwNkE1RkM1QTVFMjg5QUNFQjQ4N0I1MEM1RUNEM0I2REUyMzRDLmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8wL0RCRTA2QTVGQzVBNUUyODlBQ0VCNDg3QjUw QzVFQ0QzQjZERTIzNEMuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9BT1RFUk5FVC8xL0RCRTA2QTVG QzVBNUUyODlBQ0VCNDg3QjUwQzVFQ0QzQjZERTIzNEMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB5PXvd A3i0K/r7WT8dbgVfrdeUMCDLhL/7S/NrtFuiT/53rr6TyRUNlwSJ/znZxUhn0Tf0 vITT05ABwo4VzfpE3QXVdMOVgdulmTP8D0WqNokBzJS5WOGy4w21qAh+FCBDwojr 86z+feJdkcE4LfWVQ+GOIDAW84kQkUXyCZdwAA2gIvrk+bvIKlxsI88fVwMJnGe2 397MXvEWTWDBGihR4siTCoBuELeN1G1lxpXRKBJ1GziWheGfxuVDSNEb28Ji1rTH b64O69DPXMMZ/EkSi6oJCjZdnCk2dM9Jiz+5vdMjtBT2j4Mt96bddPJf2uTL7DFH lNV9Sy1GiC7fE0ZZ -----END CERTIFICATE-----Generated at Sat Sep 26 08:42:48 2026 by rpki-client