$ rpki-client -vvvf rpkica.twnic.tw/rpki/CCETECH/1/3BFFB675B95FCD73A993F3228774251092970E7B.mft File: 3BFFB675B95FCD73A993F3228774251092970E7B.mft (raw, json) Hash identifier: SqUI69itKrDmBzuAf4PH88dh860bnvTXu0D5LmzUl3M= Subject key identifier: 2D:2D:EC:8A:E6:03:05:6A:61:03:C6:93:83:0D:8B:39:DB:46:22:38 Authority key identifier: 3B:FF:B6:75:B9:5F:CD:73:A9:93:F3:22:87:74:25:10:92:97:0E:7B Certificate issuer: /CN=3BFFB675B95FCD73A993F3228774251092970E7B Certificate serial: 46E37ACA562B26EC9A6993C7ABA52F2D779588E5 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/3BFFB675B95FCD73A993F3228774251092970E7B.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CCETECH/1/3BFFB675B95FCD73A993F3228774251092970E7B.mft Manifest number: B9 Signing time: Thu 24 Sep 2026 07:59:12 +0000 Manifest this update: Thu 24 Sep 2026 07:54:12 +0000 Manifest next update: Fri 25 Sep 2026 08:57:12 +0000 Files and hashes: 1: 3136302e32352e3130342e302f32332d3233203d3e20323038323233.roa (hash: 76EIdBl2ALW8D1iaU6elJyjtVPcLevkpSbCfYsK03xY=) 2: 3136302e32352e3130352e302f32342d3234203d3e20323038323233.roa (hash: YdBvwjNi4bXGDm/SLY5b1QLMeyyL4E2okhg4V5ia0DI=) 3: 3136302e32352e3130342e302f32342d3234203d3e20323038323233.roa (hash: /9BFFQzw0cKcAkYyhzrX90hfsn9yx3G5YlAAOT7vnaE=) 4: 3BFFB675B95FCD73A993F3228774251092970E7B.crl (hash: lUrNqeez7JtwPV/dUl2TNaR4mS1A8xFpUC3GJQrVSKo=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CCETECH/1/3BFFB675B95FCD73A993F3228774251092970E7B.crl rsync://rpkica.twnic.tw/rpki/CCETECH/1/3BFFB675B95FCD73A993F3228774251092970E7B.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/3BFFB675B95FCD73A993F3228774251092970E7B.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 08:57:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:e3:7a:ca:56:2b:26:ec:9a:69:93:c7:ab:a5:2f:2d:77:95:88:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3BFFB675B95FCD73A993F3228774251092970E7B Validity Not Before: Sep 24 07:54:12 2026 GMT Not After : Sep 25 08:57:12 2026 GMT Subject: CN=2D2DEC8AE603056A6103C693830D8B39DB462238 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:43:ae:e1:15:91:8b:10:d2:66:c0:67:b8:32: b2:a5:e0:5f:aa:c6:5b:31:03:7a:ff:b4:55:45:fc: 06:45:fe:d4:89:95:f4:a6:b9:a4:49:b6:49:44:44: 57:71:e1:e2:05:ae:3e:f4:93:b6:1f:b0:0f:23:29: 56:c7:45:f0:a5:67:81:76:1b:5c:fd:7e:1d:9f:94: 4b:12:eb:1a:8d:1e:fc:5f:67:dd:19:92:df:50:e7: e6:47:ad:94:24:5b:31:a8:7d:e0:4a:e2:19:8b:7b: 8a:39:fc:31:2c:36:0a:da:9d:04:25:c7:9a:f9:3c: 61:d7:eb:82:8e:c8:b0:11:d6:35:6e:4d:4b:7b:76: 0a:87:69:85:60:14:ee:78:72:51:57:40:c2:1c:a8: 80:4e:db:1c:1b:7c:d8:a6:cc:d6:38:a6:db:be:26: b8:e4:62:70:33:a6:ee:70:ec:ba:07:7f:e8:ec:38: a7:d1:ed:a0:6f:f1:53:dc:34:ca:e2:89:a3:92:e3: 62:56:bb:27:ca:b9:18:db:c8:8a:f0:d6:02:6e:a2: 24:aa:06:ae:13:46:fa:60:3d:36:e7:26:72:ff:f6: 4f:ac:55:41:f2:ee:f2:e4:a0:50:a6:5d:8c:b2:0c: c1:b4:44:6a:3f:7a:00:51:da:fc:da:0d:e6:02:21: b0:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:2D:EC:8A:E6:03:05:6A:61:03:C6:93:83:0D:8B:39:DB:46:22:38 X509v3 Authority Key Identifier: keyid:3B:FF:B6:75:B9:5F:CD:73:A9:93:F3:22:87:74:25:10:92:97:0E:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CCETECH/1/3BFFB675B95FCD73A993F3228774251092970E7B.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/3BFFB675B95FCD73A993F3228774251092970E7B.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CCETECH/1/3BFFB675B95FCD73A993F3228774251092970E7B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:4d:5e:c0:32:5e:a1:05:aa:a2:e2:2b:6e:e8:96:73:e6:99: 93:73:6c:61:d6:3b:7b:4d:19:41:9d:64:1e:a2:17:49:6e:8e: 95:08:7b:00:c3:0b:c5:7c:77:85:b7:6b:6f:0d:b2:5a:01:5a: 8a:d8:56:cc:4d:27:51:7e:33:12:46:81:89:6f:8e:b1:4a:29: 96:8f:48:f6:b3:22:f1:b0:9d:81:c1:e5:e9:ab:0f:e1:a2:6a: 4b:c3:8f:7f:9d:b5:2f:82:3f:37:8e:cf:b9:b9:58:b2:63:1f: fc:49:56:f5:9d:3b:dc:d9:6c:aa:9d:d6:df:1c:a0:f1:2f:74: c5:8d:ab:3e:09:40:a6:8d:a7:7d:25:3c:e5:f6:2e:bc:ad:da: dc:7f:9b:fd:e2:4d:e6:c6:43:35:9a:47:09:c8:9f:b7:af:24: 63:f2:0f:ec:08:3a:ab:6c:a0:10:29:71:d3:91:49:ed:ff:ca: 21:30:2f:e5:98:53:68:85:a9:9f:8d:a6:2e:24:ee:17:c0:ab: 95:7b:a0:7c:7a:62:09:bf:4a:8c:97:a1:e1:c7:a3:7b:3b:b3: bf:23:7d:5a:34:fe:31:05:7d:3c:55:2e:a0:0c:28:7f:29:65: c7:50:03:9d:6f:52:90:22:3e:5d:bc:e0:8e:82:ff:9b:9c:e8: 39:13:17:e8 -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIURuN6ylYrJuyaaZPHq6UvLXeViOUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0JGRkI2NzVCOTVGQ0Q3M0E5OTNGMzIyODc3NDI1MTA5 Mjk3MEU3QjAeFw0yNjA5MjQwNzU0MTJaFw0yNjA5MjUwODU3MTJaMDMxMTAvBgNV BAMTKDJEMkRFQzhBRTYwMzA1NkE2MTAzQzY5MzgzMEQ4QjM5REI0NjIyMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIQ67hFZGLENJmwGe4MrKl4F+q xlsxA3r/tFVF/AZF/tSJlfSmuaRJtklERFdx4eIFrj70k7YfsA8jKVbHRfClZ4F2 G1z9fh2flEsS6xqNHvxfZ90Zkt9Q5+ZHrZQkWzGofeBK4hmLe4o5/DEsNgranQQl x5r5PGHX64KOyLAR1jVuTUt7dgqHaYVgFO54clFXQMIcqIBO2xwbfNimzNY4ptu+ JrjkYnAzpu5w7LoHf+jsOKfR7aBv8VPcNMriiaOS42JWuyfKuRjbyIrw1gJuoiSq Bq4TRvpgPTbnJnL/9k+sVUHy7vLkoFCmXYyyDMG0RGo/egBR2vzaDeYCIbDLAgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQULS3siuYDBWphA8aTgw2LOdtGIjgwHwYDVR0j BBgwFoAUO/+2dblfzXOpk/Mih3QlEJKXDnswDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0NFVEVD SC8xLzNCRkZCNjc1Qjk1RkNENzNBOTkzRjMyMjg3NzQyNTEwOTI5NzBFN0IuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzAvM0JGRkI2NzVCOTVGQ0Q3M0E5OTNGMzIyODc3 NDI1MTA5Mjk3MEU3Qi5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0NDRVRFQ0gvMS8zQkZGQjY3NUI5 NUZDRDczQTk5M0YzMjI4Nzc0MjUxMDkyOTcwRTdCLm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdE1ewDJe oQWqouIrbuiWc+aZk3NsYdY7e00ZQZ1kHqIXSW6OlQh7AMMLxXx3hbdrbw2yWgFa ithWzE0nUX4zEkaBiW+OsUoplo9I9rMi8bCdgcHl6asP4aJqS8OPf521L4I/N47P ublYsmMf/ElW9Z073Nlsqp3W3xyg8S90xY2rPglApo2nfSU85fYuvK3a3H+b/eJN 5sZDNZpHCcift68kY/IP7Ag6q2ygEClx05FJ7f/KITAv5ZhTaIWpn42mLiTuF8Cr lXugfHpiCb9KjJeh4cejezuzvyN9WjT+MQV9PFUuoAwofyllx1ADnW9SkCI+Xbzg joL/m5zoORMX6A== -----END CERTIFICATE-----Generated at Thu Sep 24 23:22:13 2026 by rpki-client