$ rpki-client -vvvf rpkica.twnic.tw/rpki/AOTERNET/1/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.mft File: DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.mft (raw, json) Hash identifier: rUWynbqYpMMxLSwBpuhVrcx2k6G9DuY2YQsoGxcn8Eg= Subject key identifier: DC:0C:BB:E8:B5:8D:EE:6D:96:D0:56:BD:28:6B:B2:76:DB:BF:5F:0B Authority key identifier: DB:E0:6A:5F:C5:A5:E2:89:AC:EB:48:7B:50:C5:EC:D3:B6:DE:23:4C Certificate issuer: /CN=DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C Certificate serial: 1B30540CA21D34414D952AA3436BBDDEE91A07F4 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.cer Subject info access: rsync://rpkica.twnic.tw/rpki/AOTERNET/1/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.mft Manifest number: 011B Signing time: Sat 14 Nov 2026 08:20:55 +0000 Manifest this update: Sat 14 Nov 2026 08:15:55 +0000 Manifest next update: Sun 15 Nov 2026 10:20:55 +0000 Files and hashes: 1: 3134342e37392e3233362e302f32342d3332203d3e203138303430.roa (hash: 1FIFjMBcizShdvw6u5phvDGtZhnMBusqAuzpJLq+G90=) 2: DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.crl (hash: yfeMSawU6HxMwjtFSV5ytXgc/7HgmhnYP3EzIsOXeuk=) 3: 3134342e37392e3233372e302f32342d3234203d3e203138303430.roa (hash: YiNfhn2rfnFW/2M2Ag4d3OUBywy0FERwAc5K7Q8vyfc=) 4: 3134342e37392e3233362e302f32342d3234203d3e203138303430.roa (hash: ZudjpagHov1aZlrdTbsVSXtYt3YeCsmSW4h5XCZ/uzs=) 5: 3134342e37392e3233372e302f32342d3332203d3e203138303430.roa (hash: r6p1Am50m6SY4C22THPfAzr++Eba9JH1Hgnd4WmFLsA=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/AOTERNET/1/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.crl rsync://rpkica.twnic.tw/rpki/AOTERNET/1/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 10:20:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:30:54:0c:a2:1d:34:41:4d:95:2a:a3:43:6b:bd:de:e9:1a:07:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C Validity Not Before: Nov 14 08:15:55 2026 GMT Not After : Nov 15 10:20:55 2026 GMT Subject: CN=DC0CBBE8B58DEE6D96D056BD286BB276DBBF5F0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ca:70:ff:36:01:13:a2:fb:4e:36:2d:22:f6: 88:c8:99:a6:0f:22:9a:2e:02:03:80:8c:65:75:3b: 20:79:c2:0f:a0:af:29:1d:b1:3a:3a:f8:af:14:dd: 9e:a8:6b:ce:d9:7f:d5:d0:19:e7:f1:21:9d:1d:71: ac:1b:17:36:df:92:78:9e:67:14:11:39:02:76:4d: 20:2b:bd:76:94:0e:b3:27:c6:a8:fe:76:9d:cb:8d: 24:29:4e:fe:c8:38:17:76:f2:62:17:05:0a:1b:04: c0:e6:4d:25:54:6d:08:c3:18:09:a3:ca:e1:69:89: cc:e3:6b:1e:bf:23:d6:e1:99:a9:8b:5a:b5:75:d0: 28:48:07:9b:db:1d:2f:9a:d6:c4:d2:00:04:56:b7: df:e4:24:36:70:06:98:f4:7d:8b:5f:e5:39:4a:e0: 4d:dd:86:45:df:36:4d:48:f5:a5:91:7c:02:2b:de: a8:db:c2:7f:97:ba:28:0d:30:f1:4f:ca:15:ba:b2: 91:71:34:1c:15:6c:1e:38:77:bd:e1:7f:d7:99:a6: 6a:fb:e1:69:d8:d9:10:5c:c4:ea:46:ba:51:06:57: b2:21:de:2f:82:7e:21:5e:9a:fc:b6:57:0d:1d:59: db:42:86:1c:7d:9e:fa:d5:16:e9:aa:04:b5:48:2a: 1c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:0C:BB:E8:B5:8D:EE:6D:96:D0:56:BD:28:6B:B2:76:DB:BF:5F:0B X509v3 Authority Key Identifier: keyid:DB:E0:6A:5F:C5:A5:E2:89:AC:EB:48:7B:50:C5:EC:D3:B6:DE:23:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/AOTERNET/1/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/AOTERNET/1/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:10:68:40:c3:8f:f0:3d:34:fa:49:62:4b:28:6a:55:94:b7: 68:d2:a0:05:cc:c1:c1:d8:4d:c2:c4:a9:75:99:91:3b:e7:3e: d7:b2:58:dd:2c:94:e0:b0:30:47:70:66:38:15:75:96:8a:33: a2:58:99:7c:6f:4d:20:30:ea:f5:9c:2e:69:52:3e:8d:d7:05: 26:f2:d3:64:6b:24:70:36:e2:31:b3:94:62:ef:db:d2:ab:8f: a7:59:db:00:4a:e3:ae:4e:27:27:26:c5:7b:1a:a7:8a:2a:9d: 91:0e:d1:39:0a:21:c3:1f:f0:97:51:70:ad:68:da:12:a8:09: c1:c5:e6:6f:e6:e6:67:da:92:9e:d9:36:fb:4c:f8:c5:a4:d1: 8c:2f:1d:73:81:f8:f5:d7:32:a6:8f:c4:c4:75:19:b9:d3:7f: 28:ab:6f:38:0a:1b:b4:26:44:2d:88:b9:f8:e0:3a:4b:70:a2: 57:6d:4f:fc:02:fb:0b:c1:fd:9d:b0:76:a9:eb:11:ff:79:62: e6:43:d8:9b:b7:a1:c4:24:48:1f:fd:b3:83:93:d6:9b:fd:75: b9:09:f6:41:f9:53:d8:8b:87:95:35:7e:13:53:96:8e:54:36: e6:1d:44:c5:68:f5:2f:58:ea:55:e0:9a:08:45:cf:d3:54:d8: c0:f1:af:be -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUGzBUDKIdNEFNlSqjQ2u93ukaB/QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJFMDZBNUZDNUE1RTI4OUFDRUI0ODdCNTBDNUVDRDNC NkRFMjM0QzAeFw0yNjExMTQwODE1NTVaFw0yNjExMTUxMDIwNTVaMDMxMTAvBgNV BAMTKERDMENCQkU4QjU4REVFNkQ5NkQwNTZCRDI4NkJCMjc2REJCRjVGMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmynD/NgETovtONi0i9ojImaYP IpouAgOAjGV1OyB5wg+grykdsTo6+K8U3Z6oa87Zf9XQGefxIZ0dcawbFzbfknie ZxQROQJ2TSArvXaUDrMnxqj+dp3LjSQpTv7IOBd28mIXBQobBMDmTSVUbQjDGAmj yuFpiczjax6/I9bhmamLWrV10ChIB5vbHS+a1sTSAARWt9/kJDZwBpj0fYtf5TlK 4E3dhkXfNk1I9aWRfAIr3qjbwn+XuigNMPFPyhW6spFxNBwVbB44d73hf9eZpmr7 4WnY2RBcxOpGulEGV7Ih3i+CfiFemvy2Vw0dWdtChhx9nvrVFumqBLVIKhwjAgMB AAGjggHyMIIB7jAdBgNVHQ4EFgQU3Ay76LWN7m2W0Fa9KGuydtu/XwswHwYDVR0j BBgwFoAU2+BqX8Wl4oms60h7UMXs07beI0wwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQU9URVJO RVQvMS9EQkUwNkE1RkM1QTVFMjg5QUNFQjQ4N0I1MEM1RUNEM0I2REUyMzRDLmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8wL0RCRTA2QTVGQzVBNUUyODlBQ0VCNDg3QjUw QzVFQ0QzQjZERTIzNEMuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9BT1RFUk5FVC8xL0RCRTA2QTVG QzVBNUUyODlBQ0VCNDg3QjUwQzVFQ0QzQjZERTIzNEMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAhEGhA w4/wPTT6SWJLKGpVlLdo0qAFzMHB2E3CxKl1mZE75z7XsljdLJTgsDBHcGY4FXWW ijOiWJl8b00gMOr1nC5pUj6N1wUm8tNkayRwNuIxs5Ri79vSq4+nWdsASuOuTicn JsV7GqeKKp2RDtE5CiHDH/CXUXCtaNoSqAnBxeZv5uZn2pKe2Tb7TPjFpNGMLx1z gfj11zKmj8TEdRm5038oq284Chu0JkQtiLn44DpLcKJXbU/8AvsLwf2dsHap6xH/ eWLmQ9ibt6HEJEgf/bODk9ab/XW5CfZB+VPYi4eVNX4TU5aOVDbmHUTFaPUvWOpV 4JoIRc/TVNjA8a++ -----END CERTIFICATE-----Generated at Sun Nov 15 01:05:34 2026 by rpki-client