$ rpki-client -vvvf rpkica.twnic.tw/rpki/CCP1138480/0/46B3BED406C1C960F5CFACC01A7EE79C741FB3A3.mft File: 46B3BED406C1C960F5CFACC01A7EE79C741FB3A3.mft (raw, json) Hash identifier: Mxa4AWlUAUjIVgUoGeZw7dQ87OvXwixIPitmrcrKqDs= Subject key identifier: 41:D5:F2:8A:3F:55:A6:40:3D:ED:FE:F2:61:E6:69:24:A5:0C:23:18 Authority key identifier: 46:B3:BE:D4:06:C1:C9:60:F5:CF:AC:C0:1A:7E:E7:9C:74:1F:B3:A3 Certificate issuer: /CN=46B3BED406C1C960F5CFACC01A7EE79C741FB3A3 Certificate serial: 1C75108B7B4DCE2183470DD9757666DB98EE792B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/46B3BED406C1C960F5CFACC01A7EE79C741FB3A3.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CCP1138480/0/46B3BED406C1C960F5CFACC01A7EE79C741FB3A3.mft Manifest number: B7 Signing time: Thu 24 Sep 2026 06:48:57 +0000 Manifest this update: Thu 24 Sep 2026 06:43:57 +0000 Manifest next update: Fri 25 Sep 2026 09:39:57 +0000 Files and hashes: 1: 3130332e3138302e31362e302f32332d3234203d3e203633383933.roa (hash: 5tICSwbzk1GhyxpTua1hBI7Pmc3s/aXZo1jpw+tiEn0=) 2: 46B3BED406C1C960F5CFACC01A7EE79C741FB3A3.crl (hash: meCKlQSXx1hGhRSCGEliO2mlrU6CW4IsIbQ7mSRegZk=) 3: 323430303a353061303a3a2f33322d3634203d3e203633383933.roa (hash: TnjJryb+Qul3lN6BZH0PnHfwQC0HukNIzPm52sh0EhY=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CCP1138480/0/46B3BED406C1C960F5CFACC01A7EE79C741FB3A3.crl rsync://rpkica.twnic.tw/rpki/CCP1138480/0/46B3BED406C1C960F5CFACC01A7EE79C741FB3A3.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/46B3BED406C1C960F5CFACC01A7EE79C741FB3A3.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 09:39:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:75:10:8b:7b:4d:ce:21:83:47:0d:d9:75:76:66:db:98:ee:79:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46B3BED406C1C960F5CFACC01A7EE79C741FB3A3 Validity Not Before: Sep 24 06:43:57 2026 GMT Not After : Sep 25 09:39:57 2026 GMT Subject: CN=41D5F28A3F55A6403DEDFEF261E66924A50C2318 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:92:75:63:85:bd:6e:ad:28:94:73:1d:ef:02: b4:72:88:a6:0f:80:49:f4:30:99:cc:95:70:f6:35: d9:09:8e:60:e5:da:92:7b:2d:31:a0:fc:ad:98:a2: 50:dd:f6:92:d4:2f:00:e0:80:d3:c5:ba:49:73:1f: 2f:bb:81:3c:39:79:06:f5:05:78:9f:ac:5a:09:2d: d3:d8:a7:bb:5d:85:51:fc:92:4c:47:90:1c:ca:fe: 98:46:66:75:e0:f9:0d:a8:72:0f:ed:fb:9b:b9:3c: e8:0b:eb:0a:fd:28:57:9c:75:03:6b:c6:cd:01:8e: 7a:29:a6:28:ce:15:05:8f:05:64:a2:1a:b5:38:ec: a0:f2:77:75:a1:ea:53:2e:33:75:15:bd:25:52:6b: a1:8e:55:cf:d6:38:aa:5a:f0:37:4d:b1:39:19:5d: 46:90:5f:5d:3a:1b:d8:c6:9e:f1:7e:00:1f:81:46: 2f:22:7c:37:93:cc:ae:7e:01:98:20:d9:46:0c:91: 63:76:1a:d0:76:df:ba:88:02:e3:06:e3:7e:76:0a: d2:81:64:e0:48:01:9f:c0:c2:3f:41:6d:40:63:94: d8:84:68:ed:7d:ce:a4:9b:76:00:01:fe:12:00:28: c2:9e:b6:53:4c:4a:28:08:5d:3d:16:3e:fb:04:1c: 9a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:D5:F2:8A:3F:55:A6:40:3D:ED:FE:F2:61:E6:69:24:A5:0C:23:18 X509v3 Authority Key Identifier: keyid:46:B3:BE:D4:06:C1:C9:60:F5:CF:AC:C0:1A:7E:E7:9C:74:1F:B3:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CCP1138480/0/46B3BED406C1C960F5CFACC01A7EE79C741FB3A3.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/46B3BED406C1C960F5CFACC01A7EE79C741FB3A3.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CCP1138480/0/46B3BED406C1C960F5CFACC01A7EE79C741FB3A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:88:53:a2:61:fe:ea:6f:3f:04:1a:a2:28:91:32:b6:14:6d: e0:df:72:5f:bf:f6:13:ad:b0:ee:e1:44:43:cc:8b:53:2b:eb: aa:f1:c0:ab:b8:ce:d0:a2:92:87:cc:85:e0:f2:ff:04:ce:b6: 9b:8c:ba:9a:35:43:0c:38:cc:2c:f1:0a:1d:06:f7:58:f4:b3: b0:b0:d1:bf:c1:79:3c:c3:3a:d9:4d:56:b6:2c:08:04:7f:06: aa:0e:94:47:82:86:53:c3:ce:4d:17:a9:83:d2:3f:4b:1b:6e: 31:4c:71:ad:ff:d2:19:a5:0f:a7:db:ef:95:fa:e7:32:a4:e9: c6:f8:d5:65:3b:51:15:9f:ba:ce:2f:ad:d4:ff:34:2f:6c:4f: 13:5f:7c:f6:ad:68:75:a7:0c:bd:3c:2c:74:45:80:25:a9:5f: 83:85:51:63:52:33:5d:68:ab:65:73:71:87:65:58:47:e4:00: 2f:63:1a:6d:4b:fd:53:45:bd:95:7d:fd:4b:7f:8f:68:ae:9a: 4a:f4:16:cc:cf:3b:3d:3f:fe:cd:28:ee:ab:2f:fb:9c:08:aa: 05:5f:06:e7:01:5f:82:4e:77:34:95:7e:0c:97:4c:4b:bd:92: ed:74:bb:df:1f:9d:8e:01:05:be:98:fc:b7:4d:64:67:da:78: ec:f5:1e:70 -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgIUHHUQi3tNziGDRw3ZdXZm25jueSswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDZCM0JFRDQwNkMxQzk2MEY1Q0ZBQ0MwMUE3RUU3OUM3 NDFGQjNBMzAeFw0yNjA5MjQwNjQzNTdaFw0yNjA5MjUwOTM5NTdaMDMxMTAvBgNV BAMTKDQxRDVGMjhBM0Y1NUE2NDAzREVERkVGMjYxRTY2OTI0QTUwQzIzMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAknVjhb1urSiUcx3vArRyiKYP gEn0MJnMlXD2NdkJjmDl2pJ7LTGg/K2YolDd9pLULwDggNPFuklzHy+7gTw5eQb1 BXifrFoJLdPYp7tdhVH8kkxHkBzK/phGZnXg+Q2ocg/t+5u5POgL6wr9KFecdQNr xs0BjnoppijOFQWPBWSiGrU47KDyd3Wh6lMuM3UVvSVSa6GOVc/WOKpa8DdNsTkZ XUaQX106G9jGnvF+AB+BRi8ifDeTzK5+AZgg2UYMkWN2GtB237qIAuMG4352CtKB ZOBIAZ/Awj9BbUBjlNiEaO19zqSbdgAB/hIAKMKetlNMSigIXT0WPvsEHJoXAgMB AAGjggH2MIIB8jAdBgNVHQ4EFgQUQdXyij9VpkA97f7yYeZpJKUMIxgwHwYDVR0j BBgwFoAURrO+1AbByWD1z6zAGn7nnHQfs6MwDgYDVR0PAQH/BAQDAgeAMGcGA1Ud HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0NQMTEz ODQ4MC8wLzQ2QjNCRUQ0MDZDMUM5NjBGNUNGQUNDMDFBN0VFNzlDNzQxRkIzQTMu Y3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBLzEvNDZCM0JFRDQwNkMxQzk2MEY1Q0ZBQ0Mw MUE3RUU3OUM3NDFGQjNBMy5jZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzAL hlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0NDUDExMzg0ODAvMC80NkIz QkVENDA2QzFDOTYwRjVDRkFDQzAxQTdFRTc5Qzc0MUZCM0EzLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA tohTomH+6m8/BBqiKJEythRt4N9yX7/2E62w7uFEQ8yLUyvrqvHAq7jO0KKSh8yF 4PL/BM62m4y6mjVDDDjMLPEKHQb3WPSzsLDRv8F5PMM62U1WtiwIBH8Gqg6UR4KG U8POTRepg9I/SxtuMUxxrf/SGaUPp9vvlfrnMqTpxvjVZTtRFZ+6zi+t1P80L2xP E1989q1odacMvTwsdEWAJalfg4VRY1IzXWirZXNxh2VYR+QAL2MabUv9U0W9lX39 S3+PaK6aSvQWzM87PT/+zSjuqy/7nAiqBV8G5wFfgk53NJV+DJdMS72S7XS73x+d jgEFvpj8t01kZ9p47PUecA== -----END CERTIFICATE-----Generated at Fri Sep 25 01:01:54 2026 by rpki-client