$ rpki-client -vvvf rpkica.twnic.tw/rpki/CHINALIFE/0/CE5A8100BA0994A2B807F5F4FB741C528EEACCDD.mft File: CE5A8100BA0994A2B807F5F4FB741C528EEACCDD.mft (raw, json) Hash identifier: BniKwgcnXsDF1pyc6NOvEMNlt2XP2wYk+Io28UHHTpc= Subject key identifier: A9:4E:C1:A7:FB:98:A3:08:66:F1:7A:05:F1:BD:B9:7C:33:2F:E1:66 Authority key identifier: CE:5A:81:00:BA:09:94:A2:B8:07:F5:F4:FB:74:1C:52:8E:EA:CC:DD Certificate issuer: /CN=CE5A8100BA0994A2B807F5F4FB741C528EEACCDD Certificate serial: 181CD0B61713782CDCC5AD253F93BA88DE415C60 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE5A8100BA0994A2B807F5F4FB741C528EEACCDD.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CHINALIFE/0/CE5A8100BA0994A2B807F5F4FB741C528EEACCDD.mft Manifest number: BA Signing time: Thu 24 Sep 2026 19:29:14 +0000 Manifest this update: Thu 24 Sep 2026 19:24:14 +0000 Manifest next update: Fri 25 Sep 2026 20:56:14 +0000 Files and hashes: 1: CE5A8100BA0994A2B807F5F4FB741C528EEACCDD.crl (hash: /IPLmL2e7YyAtIUn6HeHVBQ6OApu4Vkxo7K1gKOs1/o=) 2: 3130332e3132332e3138392e302f32342d3234203d3e2039393234.roa (hash: ehfoOrBXE/RYfQPRqQV54VXyN1X6HRTFxmEyqkWRtOI=) 3: 3130332e3132332e3139302e302f32342d3234203d3e2039393234.roa (hash: MkYfWxcvdtrJJbnLts1+66GKlU7GZ8ty9L0jiRzo53o=) 4: 3130332e3132332e3138382e302f32342d3234203d3e203138303432.roa (hash: VGG3iALCYmsIo1frTwJ57vcG6Z53Cw4xXzO8I+lKQrc=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CHINALIFE/0/CE5A8100BA0994A2B807F5F4FB741C528EEACCDD.crl rsync://rpkica.twnic.tw/rpki/CHINALIFE/0/CE5A8100BA0994A2B807F5F4FB741C528EEACCDD.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE5A8100BA0994A2B807F5F4FB741C528EEACCDD.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 20:56:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:1c:d0:b6:17:13:78:2c:dc:c5:ad:25:3f:93:ba:88:de:41:5c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE5A8100BA0994A2B807F5F4FB741C528EEACCDD Validity Not Before: Sep 24 19:24:14 2026 GMT Not After : Sep 25 20:56:14 2026 GMT Subject: CN=A94EC1A7FB98A30866F17A05F1BDB97C332FE166 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a1:31:ed:20:4d:5d:ed:d4:c4:f4:92:3f:94: b2:86:4a:eb:32:38:f5:ec:15:47:27:d5:25:69:bc: 81:3c:a0:14:56:ba:db:00:c6:de:7b:a3:cc:20:e8: d5:a1:46:b8:e1:67:9e:28:2a:6a:e8:bd:b4:3b:dd: 8e:b8:fb:d6:02:e1:8d:32:76:70:78:94:bc:c7:8e: 57:fb:ca:d8:1f:86:03:be:ab:48:ad:b7:20:6a:3e: 9a:b5:1e:10:92:e6:e9:40:fe:75:c1:21:f3:e4:6c: 27:29:53:ce:ab:83:fd:f9:35:27:91:08:98:88:32: 6e:db:4e:1f:06:c8:9d:ae:fa:96:df:d6:04:a8:14: 6a:91:56:7d:6e:77:06:9f:fc:46:3c:91:2b:72:03: ca:d5:b8:81:84:4d:bc:39:13:d7:16:f3:b3:6e:a2: ee:50:39:2c:48:6f:3c:64:b5:5b:0b:d8:6d:26:04: e0:b5:81:47:aa:c6:bd:ee:c6:21:d4:89:bc:5c:02: 35:db:cf:f0:e9:0b:e2:e7:dc:74:e9:21:10:8e:1f: d6:fe:ad:21:e2:ce:e8:17:ac:a7:a7:23:e5:ac:0d: ba:f6:07:54:c7:16:39:65:ae:f2:50:c5:94:51:cb: d7:96:30:7a:c2:70:b1:4e:3a:9e:bd:83:68:f0:6f: 5d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:4E:C1:A7:FB:98:A3:08:66:F1:7A:05:F1:BD:B9:7C:33:2F:E1:66 X509v3 Authority Key Identifier: keyid:CE:5A:81:00:BA:09:94:A2:B8:07:F5:F4:FB:74:1C:52:8E:EA:CC:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CHINALIFE/0/CE5A8100BA0994A2B807F5F4FB741C528EEACCDD.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE5A8100BA0994A2B807F5F4FB741C528EEACCDD.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHINALIFE/0/CE5A8100BA0994A2B807F5F4FB741C528EEACCDD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:fa:03:f0:37:6b:08:45:b4:3f:03:e7:2b:08:f1:85:1d:22: a8:8b:f9:33:e3:4b:d6:83:10:21:50:7a:d8:66:65:09:3b:08: 60:87:9e:d9:7e:05:7c:4f:b2:64:b8:d2:60:ef:86:c3:57:3c: c4:78:46:ea:3a:15:3f:85:8a:cd:eb:3a:71:1e:94:d8:a4:cb: 70:aa:73:5f:b9:e0:93:d8:64:19:a5:2c:27:1a:41:06:3c:92: 54:97:a8:cf:8c:a0:eb:fc:cd:e7:f7:49:d6:c4:57:10:a3:6a: 14:2a:22:43:87:c3:14:7b:88:2a:4c:ad:95:7c:83:42:fb:4b: 7d:d5:23:43:df:e6:4a:fe:c1:c5:5a:1b:3e:e6:78:a3:67:ea: 0b:8e:8d:23:f5:52:4b:ec:39:16:7c:30:db:1d:43:17:fa:61: f2:67:3a:63:92:95:3a:b2:e7:9b:22:20:3a:f3:cc:13:a1:9c: 7b:e2:48:c8:2d:a8:9f:6e:44:2a:a3:83:8a:23:af:8d:2e:89: 90:8f:b4:4d:31:96:4a:9e:ae:dd:09:0c:6e:d2:ff:3f:d1:0a: b3:28:6c:a2:63:fe:12:4a:b7:7f:8b:15:f1:2c:62:d3:54:f5: a9:d3:b4:c4:7e:56:6f:5d:6f:1c:8a:59:91:a6:b1:f9:d8:90: 10:52:a5:a9 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUGBzQthcTeCzcxa0lP5O6iN5BXGAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0U1QTgxMDBCQTA5OTRBMkI4MDdGNUY0RkI3NDFDNTI4 RUVBQ0NERDAeFw0yNjA5MjQxOTI0MTRaFw0yNjA5MjUyMDU2MTRaMDMxMTAvBgNV BAMTKEE5NEVDMUE3RkI5OEEzMDg2NkYxN0EwNUYxQkRCOTdDMzMyRkUxNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8oTHtIE1d7dTE9JI/lLKGSusy OPXsFUcn1SVpvIE8oBRWutsAxt57o8wg6NWhRrjhZ54oKmrovbQ73Y64+9YC4Y0y dnB4lLzHjlf7ytgfhgO+q0ittyBqPpq1HhCS5ulA/nXBIfPkbCcpU86rg/35NSeR CJiIMm7bTh8GyJ2u+pbf1gSoFGqRVn1udwaf/EY8kStyA8rVuIGETbw5E9cW87Nu ou5QOSxIbzxktVsL2G0mBOC1gUeqxr3uxiHUibxcAjXbz/DpC+Ln3HTpIRCOH9b+ rSHizugXrKenI+WsDbr2B1THFjllrvJQxZRRy9eWMHrCcLFOOp69g2jwb10ZAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUqU7Bp/uYowhm8XoF8b25fDMv4WYwHwYDVR0j BBgwFoAUzlqBALoJlKK4B/X0+3QcUo7qzN0wDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0hJTkFM SUZFLzAvQ0U1QTgxMDBCQTA5OTRBMkI4MDdGNUY0RkI3NDFDNTI4RUVBQ0NERC5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMS9DRTVBODEwMEJBMDk5NEEyQjgwN0Y1RjRG Qjc0MUM1MjhFRUFDQ0RELmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0hJTkFMSUZFLzAvQ0U1QTgx MDBCQTA5OTRBMkI4MDdGNUY0RkI3NDFDNTI4RUVBQ0NERC5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBADj6 A/A3awhFtD8D5ysI8YUdIqiL+TPjS9aDECFQethmZQk7CGCHntl+BXxPsmS40mDv hsNXPMR4Ruo6FT+Fis3rOnEelNiky3Cqc1+54JPYZBmlLCcaQQY8klSXqM+MoOv8 zef3SdbEVxCjahQqIkOHwxR7iCpMrZV8g0L7S33VI0Pf5kr+wcVaGz7meKNn6guO jSP1UkvsORZ8MNsdQxf6YfJnOmOSlTqy55siIDrzzBOhnHviSMgtqJ9uRCqjg4oj r40uiZCPtE0xlkqert0JDG7S/z/RCrMobKJj/hJKt3+LFfEsYtNU9anTtMR+Vm9d bxyKWZGmsfnYkBBSpak= -----END CERTIFICATE-----Generated at Fri Sep 25 14:44:55 2026 by rpki-client