$ rpki-client -vvvf rpkica.twnic.tw/rpki/CARLWATCH/0/6A8F810EB0BF683DFCA74C403A7B03D37E16F268.mft File: 6A8F810EB0BF683DFCA74C403A7B03D37E16F268.mft (raw, json) Hash identifier: Ru4mUEkJvy0n61P2HcXXo9K7JFa51BozrNb1SFTQsBo= Subject key identifier: 44:8D:33:61:82:E1:D4:1E:12:4C:B3:60:B7:76:CA:44:93:B3:CF:17 Authority key identifier: 6A:8F:81:0E:B0:BF:68:3D:FC:A7:4C:40:3A:7B:03:D3:7E:16:F2:68 Certificate issuer: /CN=6A8F810EB0BF683DFCA74C403A7B03D37E16F268 Certificate serial: 7A3BB8417F96CB6CBA1879A029951850746C4FD8 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6A8F810EB0BF683DFCA74C403A7B03D37E16F268.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CARLWATCH/0/6A8F810EB0BF683DFCA74C403A7B03D37E16F268.mft Manifest number: B7 Signing time: Thu 24 Sep 2026 00:14:20 +0000 Manifest this update: Thu 24 Sep 2026 00:09:20 +0000 Manifest next update: Fri 25 Sep 2026 03:06:20 +0000 Files and hashes: 1: 6A8F810EB0BF683DFCA74C403A7B03D37E16F268.crl (hash: V2M82JvYQbVr4AUma4zDXilC6znttfG8VZZD8RcF2ZI=) 2: 3130332e3136312e362e302f32332d3234203d3e20313331363138.roa (hash: HW3fNW9yAqboou7jAhk1cKMCcOPZDWYktjmxy1gjfvo=) 3: 3130332e3136312e362e302f32332d3234203d3e203231383539.roa (hash: uWZD4+YbW51xLCVpXbXAANNn4P9xs+4KtJrLiouzkvQ=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CARLWATCH/0/6A8F810EB0BF683DFCA74C403A7B03D37E16F268.crl rsync://rpkica.twnic.tw/rpki/CARLWATCH/0/6A8F810EB0BF683DFCA74C403A7B03D37E16F268.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6A8F810EB0BF683DFCA74C403A7B03D37E16F268.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 02:19:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:3b:b8:41:7f:96:cb:6c:ba:18:79:a0:29:95:18:50:74:6c:4f:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A8F810EB0BF683DFCA74C403A7B03D37E16F268 Validity Not Before: Sep 24 00:09:20 2026 GMT Not After : Sep 25 03:06:20 2026 GMT Subject: CN=448D336182E1D41E124CB360B776CA4493B3CF17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:69:c3:d2:ab:15:3b:de:2a:fd:32:9e:c9:3c: 70:d8:8b:65:7e:f4:0a:c7:7b:28:18:41:6c:b6:af: 17:e9:6c:a3:26:97:01:fc:a2:5c:d3:ef:34:94:8f: 4e:69:85:b1:31:3c:65:65:28:da:4f:f1:35:d1:51: 2c:6d:58:c5:ab:af:6a:7d:da:3b:53:a8:f3:78:de: 60:c1:77:97:72:9c:1c:2d:97:b8:16:4d:2f:5b:ca: b0:bc:4a:41:0a:89:e8:da:4a:69:23:88:b2:39:f4: de:3a:3b:9f:f1:be:ff:0d:1a:5a:69:8b:e0:fe:1b: ee:2f:80:ef:9f:47:36:51:d9:e2:d7:bc:61:1e:cb: 7f:8b:a0:81:21:58:19:3b:26:01:a6:11:00:e9:a1: f2:93:84:6d:76:f3:46:6b:3c:57:3d:25:6b:d5:11: 61:fc:6e:00:1d:2a:f7:c4:c4:88:38:6d:34:fb:89: 99:12:e3:c7:ea:d5:b0:a9:96:96:ce:89:e2:35:f1: fb:b3:ab:b7:95:9b:2b:95:e2:5c:6d:3d:cd:13:32: 58:50:22:d8:09:a1:9b:e1:dd:43:f0:00:30:c0:41: 7d:b4:21:52:73:ff:d2:aa:22:17:6a:36:82:a9:da: 98:05:06:fc:f9:d7:9c:fe:47:3d:91:ff:db:17:97: c6:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:8D:33:61:82:E1:D4:1E:12:4C:B3:60:B7:76:CA:44:93:B3:CF:17 X509v3 Authority Key Identifier: keyid:6A:8F:81:0E:B0:BF:68:3D:FC:A7:4C:40:3A:7B:03:D3:7E:16:F2:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CARLWATCH/0/6A8F810EB0BF683DFCA74C403A7B03D37E16F268.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6A8F810EB0BF683DFCA74C403A7B03D37E16F268.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CARLWATCH/0/6A8F810EB0BF683DFCA74C403A7B03D37E16F268.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:72:a0:2a:ce:e3:94:7c:cb:18:ff:6e:ce:53:24:ec:00:e3: 3c:66:16:28:00:75:7e:21:ba:eb:6f:25:00:e6:d3:28:74:89: 6f:0c:6b:a1:0c:f7:f1:54:e2:40:f2:bd:be:7c:99:f3:75:54: e9:13:84:dc:23:14:6a:a6:f7:f9:f1:82:f4:17:1b:bf:b6:ee: 34:3b:85:8e:52:c4:f2:d4:29:0f:75:a5:f5:74:91:aa:96:14: 7e:2d:ca:8e:56:31:58:60:01:73:f1:16:65:8d:4a:94:43:2f: 98:7c:c9:bc:31:7c:e9:47:52:d7:59:eb:ab:26:8d:3d:f0:c3: 74:f0:08:8b:92:44:01:c3:94:33:c6:49:2e:a6:6c:2f:9a:e8: e6:30:4e:40:f5:79:c5:03:66:3c:93:96:fc:26:22:21:7e:cf: ad:98:c3:7c:2b:2c:31:3d:4f:0d:23:bb:b3:fd:ee:96:66:19: 9a:7e:28:c6:2b:b8:4d:55:51:af:b8:44:06:40:80:2f:5e:75: 1a:fb:91:c0:fa:a9:3e:19:3b:46:65:f1:84:85:64:f4:8b:ca: 50:b8:64:b4:4e:bc:19:56:0b:e8:d2:bc:e4:8d:4f:08:a9:35: 13:b3:1f:5f:ea:ad:4c:95:2a:d2:79:b8:60:09:8c:a1:45:b7: 7c:3d:56:49 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUeju4QX+Wy2y6GHmgKZUYUHRsT9gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkE4RjgxMEVCMEJGNjgzREZDQTc0QzQwM0E3QjAzRDM3 RTE2RjI2ODAeFw0yNjA5MjQwMDA5MjBaFw0yNjA5MjUwMzA2MjBaMDMxMTAvBgNV BAMTKDQ0OEQzMzYxODJFMUQ0MUUxMjRDQjM2MEI3NzZDQTQ0OTNCM0NGMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCracPSqxU73ir9Mp7JPHDYi2V+ 9ArHeygYQWy2rxfpbKMmlwH8olzT7zSUj05phbExPGVlKNpP8TXRUSxtWMWrr2p9 2jtTqPN43mDBd5dynBwtl7gWTS9byrC8SkEKiejaSmkjiLI59N46O5/xvv8NGlpp i+D+G+4vgO+fRzZR2eLXvGEey3+LoIEhWBk7JgGmEQDpofKThG1280ZrPFc9JWvV EWH8bgAdKvfExIg4bTT7iZkS48fq1bCplpbOieI18fuzq7eVmyuV4lxtPc0TMlhQ ItgJoZvh3UPwADDAQX20IVJz/9KqIhdqNoKp2pgFBvz515z+Rz2R/9sXl8aLAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQURI0zYYLh1B4STLNgt3bKRJOzzxcwHwYDVR0j BBgwFoAUao+BDrC/aD38p0xAOnsD034W8mgwDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0FSTFdB VENILzAvNkE4RjgxMEVCMEJGNjgzREZDQTc0QzQwM0E3QjAzRDM3RTE2RjI2OC5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMS82QThGODEwRUIwQkY2ODNERkNBNzRDNDAz QTdCMDNEMzdFMTZGMjY4LmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0FSTFdBVENILzAvNkE4Rjgx MEVCMEJGNjgzREZDQTc0QzQwM0E3QjAzRDM3RTE2RjI2OC5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBABhy oCrO45R8yxj/bs5TJOwA4zxmFigAdX4huutvJQDm0yh0iW8Ma6EM9/FU4kDyvb58 mfN1VOkThNwjFGqm9/nxgvQXG7+27jQ7hY5SxPLUKQ91pfV0kaqWFH4tyo5WMVhg AXPxFmWNSpRDL5h8ybwxfOlHUtdZ66smjT3ww3TwCIuSRAHDlDPGSS6mbC+a6OYw TkD1ecUDZjyTlvwmIiF+z62Yw3wrLDE9Tw0ju7P97pZmGZp+KMYruE1VUa+4RAZA gC9edRr7kcD6qT4ZO0Zl8YSFZPSLylC4ZLROvBlWC+jSvOSNTwipNROzH1/qrUyV KtJ5uGAJjKFFt3w9Vkk= -----END CERTIFICATE-----Generated at Thu Sep 24 12:56:48 2026 by rpki-client