$ rpki-client -vvvf rpkica.twnic.tw/rpki/CARL-NET/0/73E6AC8F948D0C97D941F26531617C19223508E6.mft File: 73E6AC8F948D0C97D941F26531617C19223508E6.mft (raw, json) Hash identifier: fW+SSloO3XsQiF/OGZ3ncxaKO6GIXGqKiiSN9KkAiLU= Subject key identifier: 25:2D:50:F6:F2:62:73:58:3E:BE:2D:0F:26:CF:26:CC:A5:5F:E7:3D Authority key identifier: 73:E6:AC:8F:94:8D:0C:97:D9:41:F2:65:31:61:7C:19:22:35:08:E6 Certificate issuer: /CN=73E6AC8F948D0C97D941F26531617C19223508E6 Certificate serial: 692663952AB117F70619529E720336E70DCDF431 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/73E6AC8F948D0C97D941F26531617C19223508E6.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CARL-NET/0/73E6AC8F948D0C97D941F26531617C19223508E6.mft Manifest number: B9 Signing time: Thu 24 Sep 2026 07:49:12 +0000 Manifest this update: Thu 24 Sep 2026 07:44:12 +0000 Manifest next update: Fri 25 Sep 2026 09:10:12 +0000 Files and hashes: 1: 3130332e3130332e38302e302f32322d3234203d3e2037353336.roa (hash: dGPLq2lyYCFxtDkCnYUjXrZAi+ZIN3xKzHo/rdmq9Wo=) 2: 73E6AC8F948D0C97D941F26531617C19223508E6.crl (hash: +so2FS/RU2078SULZXqE/i2JAe/zzj8OxizZcpFNQO4=) 3: 3231312e37392e3130322e302f32332d3234203d3e2037353336.roa (hash: 3v3LP5j06Samtgaxz1mv2fEZi56D7EIyXnL/h/+knlQ=) 4: 3231312e37392e3130322e302f32332d3234203d3e203231383539.roa (hash: L57nfmyeojiXaTZf4zjU8tXgEtvksvbfz2DcpLr9SbM=) 5: 3130332e3130332e38302e302f32322d3234203d3e20313331363138.roa (hash: BJzz6G8VxovxCWAhRC1tIl3CH9yMcG4c36K4NUZF6DE=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CARL-NET/0/73E6AC8F948D0C97D941F26531617C19223508E6.crl rsync://rpkica.twnic.tw/rpki/CARL-NET/0/73E6AC8F948D0C97D941F26531617C19223508E6.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/73E6AC8F948D0C97D941F26531617C19223508E6.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 09:10:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:26:63:95:2a:b1:17:f7:06:19:52:9e:72:03:36:e7:0d:cd:f4:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73E6AC8F948D0C97D941F26531617C19223508E6 Validity Not Before: Sep 24 07:44:12 2026 GMT Not After : Sep 25 09:10:12 2026 GMT Subject: CN=252D50F6F26273583EBE2D0F26CF26CCA55FE73D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:5a:ac:3a:bf:78:fb:bd:93:a4:48:71:74:06: de:c7:96:70:47:4c:e5:ef:88:a4:e6:47:20:e1:a6: 47:04:bb:9f:47:de:f7:7b:0f:2f:a4:6d:53:e5:f3: 8f:df:7a:70:c0:bf:03:66:23:3f:2c:db:3f:9d:06: 11:3d:be:c2:2d:fa:37:15:f5:8b:31:b5:00:db:c4: 8c:35:61:c2:a2:e5:60:1e:cf:2b:6b:e9:1d:6a:7b: 01:d6:76:58:a1:45:c3:70:1d:eb:a7:2e:66:c4:7e: dd:90:3a:31:4e:43:df:57:c8:0e:ff:2c:c3:81:07: 4d:0a:af:50:d4:83:e1:ea:2b:c4:5e:a7:03:ac:d6: 91:8c:dc:ce:a7:65:47:d3:6e:81:12:83:80:47:51: 23:16:17:b4:9f:ce:a4:26:0d:36:3f:fa:81:8b:bc: 8f:9d:ca:22:ff:d2:ca:57:c7:31:77:0c:d1:ff:0c: ae:ed:5d:3c:53:e6:3b:9b:09:a8:33:d0:4e:bf:7b: 23:4c:9b:14:97:4b:60:36:35:7c:60:cc:e5:77:77: 1b:84:7a:e5:80:c1:62:b7:b5:ca:89:2d:55:e6:a3: a8:9a:87:de:b0:32:d4:e7:37:ed:e6:7c:48:47:85: f9:36:27:ad:e9:04:e5:88:86:8e:a4:9c:7c:ab:aa: a8:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:2D:50:F6:F2:62:73:58:3E:BE:2D:0F:26:CF:26:CC:A5:5F:E7:3D X509v3 Authority Key Identifier: keyid:73:E6:AC:8F:94:8D:0C:97:D9:41:F2:65:31:61:7C:19:22:35:08:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CARL-NET/0/73E6AC8F948D0C97D941F26531617C19223508E6.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/73E6AC8F948D0C97D941F26531617C19223508E6.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CARL-NET/0/73E6AC8F948D0C97D941F26531617C19223508E6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:2c:7b:ff:20:87:c3:20:79:6c:04:1a:d4:3e:8a:4c:3a:17: fa:27:c5:64:f1:ad:54:c6:5f:70:3e:50:de:03:6f:81:75:6f: 18:52:c0:d8:ef:94:ba:69:5f:cf:44:82:8c:4a:7c:f1:74:5b: 11:0b:b0:b4:8b:b7:72:bc:c5:02:37:9e:f2:61:81:3c:03:f7: 4e:38:81:cc:ac:fb:af:49:f8:fb:11:ca:79:70:e9:cb:28:55: 74:05:98:bd:60:ea:83:52:35:96:88:d7:4e:b3:ca:db:0a:11: 6e:43:a8:c5:bd:4c:35:de:9a:3e:39:6d:f3:42:65:78:3c:fb: d7:1b:a5:e7:13:61:73:c2:c7:1f:d1:ed:c8:87:b8:a9:d4:a9: c1:8c:31:1f:a3:fd:f8:69:00:bc:b2:49:90:1e:38:93:ba:10: d1:0d:c5:31:82:7a:f4:8d:1b:86:b3:7d:04:69:7c:30:c9:8b: 85:d5:62:31:c3:63:22:21:ff:5b:22:7f:c5:18:6b:0b:00:12: a4:53:18:44:d3:39:e5:ce:6e:5b:da:b3:9c:eb:2e:43:8e:de: 76:15:1a:f2:89:99:d4:52:57:74:17:b4:d4:8b:28:83:89:9e: 9d:a3:50:6b:20:bb:88:e4:ab:67:ec:e7:bc:55:94:08:21:cf: 3b:e1:19:82 -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUaSZjlSqxF/cGGVKecgM25w3N9DEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzNFNkFDOEY5NDhEMEM5N0Q5NDFGMjY1MzE2MTdDMTky MjM1MDhFNjAeFw0yNjA5MjQwNzQ0MTJaFw0yNjA5MjUwOTEwMTJaMDMxMTAvBgNV BAMTKDI1MkQ1MEY2RjI2MjczNTgzRUJFMkQwRjI2Q0YyNkNDQTU1RkU3M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiWqw6v3j7vZOkSHF0Bt7HlnBH TOXviKTmRyDhpkcEu59H3vd7Dy+kbVPl84/fenDAvwNmIz8s2z+dBhE9vsIt+jcV 9YsxtQDbxIw1YcKi5WAezytr6R1qewHWdlihRcNwHeunLmbEft2QOjFOQ99XyA7/ LMOBB00Kr1DUg+HqK8RepwOs1pGM3M6nZUfTboESg4BHUSMWF7SfzqQmDTY/+oGL vI+dyiL/0spXxzF3DNH/DK7tXTxT5jubCagz0E6/eyNMmxSXS2A2NXxgzOV3dxuE euWAwWK3tcqJLVXmo6iah96wMtTnN+3mfEhHhfk2J63pBOWIho6knHyrqqhzAgMB AAGjggHyMIIB7jAdBgNVHQ4EFgQUJS1Q9vJic1g+vi0PJs8mzKVf5z0wHwYDVR0j BBgwFoAUc+asj5SNDJfZQfJlMWF8GSI1COYwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0FSTC1O RVQvMC83M0U2QUM4Rjk0OEQwQzk3RDk0MUYyNjUzMTYxN0MxOTIyMzUwOEU2LmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8xLzczRTZBQzhGOTQ4RDBDOTdEOTQxRjI2NTMx NjE3QzE5MjIzNTA4RTYuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9DQVJMLU5FVC8wLzczRTZBQzhG OTQ4RDBDOTdEOTQxRjI2NTMxNjE3QzE5MjIzNTA4RTYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQASLHv/ IIfDIHlsBBrUPopMOhf6J8Vk8a1Uxl9wPlDeA2+BdW8YUsDY75S6aV/PRIKMSnzx dFsRC7C0i7dyvMUCN57yYYE8A/dOOIHMrPuvSfj7Ecp5cOnLKFV0BZi9YOqDUjWW iNdOs8rbChFuQ6jFvUw13po+OW3zQmV4PPvXG6XnE2Fzwscf0e3Ih7ip1KnBjDEf o/34aQC8skmQHjiTuhDRDcUxgnr0jRuGs30EaXwwyYuF1WIxw2MiIf9bIn/FGGsL ABKkUxhE0znlzm5b2rOc6y5Djt52FRryiZnUUld0F7TUiyiDiZ6do1BrILuI5Ktn 7Oe8VZQIIc874RmC -----END CERTIFICATE-----Generated at Thu Sep 24 22:45:40 2026 by rpki-client