$ rpki-client -vvvf rpkica.twnic.tw/rpki/CHINATRUST/0/8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D.mft File: 8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D.mft (raw, json) Hash identifier: Pqnr4c6dps5sOaVW3j8eVAWt4sEAkhRMfoQpMVRJMlw= Subject key identifier: B8:EE:EE:B9:0D:4A:AD:AA:BE:32:5F:BD:C4:46:B5:A6:56:08:14:47 Authority key identifier: 80:99:DF:C0:CF:C8:3C:5D:DF:D9:0C:A5:EA:31:4C:C9:A8:67:7F:2D Certificate issuer: /CN=8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D Certificate serial: 0BA7736F6F6D664452C32E0FCD3AE10783F155CA Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CHINATRUST/0/8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D.mft Manifest number: BA Signing time: Thu 24 Sep 2026 14:10:03 +0000 Manifest this update: Thu 24 Sep 2026 14:05:03 +0000 Manifest next update: Fri 25 Sep 2026 14:14:03 +0000 Files and hashes: 1: 3130332e3132362e3136342e302f32322d3234203d3e20313331313433.roa (hash: GE6WCLDpaYk350arhm6T0hTObeMU3HA8Pi8MilsnVwk=) 2: 3137352e3138342e3234302e302f32312d3234203d3e20313331313433.roa (hash: 0QQUBFrsQpXXTYt4aIh8/MbRTgI4V9RhZAxoH9bVt18=) 3: 323430353a333330303a3a2f33322d3936203d3e20313331313433.roa (hash: ZKiaer8NjI3ngd1EbZw69ZFOR2ZlmwyGwjPK8gzDQck=) 4: 8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D.crl (hash: N+V6gCYcaop2KJvt4dxZTsqZ53o0hVOuR2PsWdzbplQ=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CHINATRUST/0/8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D.crl rsync://rpkica.twnic.tw/rpki/CHINATRUST/0/8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 14:14:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:a7:73:6f:6f:6d:66:44:52:c3:2e:0f:cd:3a:e1:07:83:f1:55:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D Validity Not Before: Sep 24 14:05:03 2026 GMT Not After : Sep 25 14:14:03 2026 GMT Subject: CN=B8EEEEB90D4AADAABE325FBDC446B5A656081447 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:58:f0:d4:64:6a:10:b0:84:3a:92:c6:dc:20: 84:1f:b3:08:35:e2:a7:24:c2:01:72:96:06:c4:56: 5e:e5:32:f3:9d:c0:0f:48:be:66:f8:d3:2d:b7:42: a1:39:1f:50:9f:3b:29:4e:1a:a7:79:cb:0e:df:39: 8b:4b:ef:f1:56:ec:09:73:09:e8:f3:dd:49:07:60: 1a:ba:7f:c6:10:0f:02:a2:13:b6:a8:f1:d3:a9:1a: 69:cc:14:46:97:e2:3b:c5:5f:a2:f3:66:1c:ff:a2: d2:53:21:09:7a:a5:a1:15:39:5f:d4:98:c7:24:de: 55:7c:ad:02:02:e6:9f:1c:64:38:c6:6a:5a:98:17: bb:73:ac:8c:f1:57:92:29:93:66:13:82:3a:7c:68: 67:91:2a:19:2e:aa:0c:ed:26:6e:41:5c:78:93:b0: 35:5a:1b:7c:ae:75:90:a3:02:b4:61:08:2a:2f:e6: b6:ab:ec:96:95:57:dc:6e:8f:81:56:c7:83:78:5b: ce:eb:97:8d:ec:96:0d:e0:b7:43:2c:47:fd:cf:f0: 06:e4:10:54:9d:3c:e3:2d:6c:78:e1:48:13:47:54: 0a:f3:3b:f6:a9:ca:32:67:ed:58:09:67:68:dc:97: 0a:01:13:d4:e9:c3:ee:14:d0:6e:1e:61:53:5f:17: 74:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:EE:EE:B9:0D:4A:AD:AA:BE:32:5F:BD:C4:46:B5:A6:56:08:14:47 X509v3 Authority Key Identifier: keyid:80:99:DF:C0:CF:C8:3C:5D:DF:D9:0C:A5:EA:31:4C:C9:A8:67:7F:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CHINATRUST/0/8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHINATRUST/0/8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:81:4d:80:5e:cc:93:d1:3d:89:dc:76:50:2a:93:b7:88:ce: 7c:5f:f7:67:fd:26:66:59:f4:1f:1a:09:00:49:bf:7e:a2:08: 0e:37:90:a5:fd:ce:84:21:49:9e:94:46:97:61:8a:f3:4f:bd: f4:e1:9a:ff:42:18:e8:52:5f:05:5d:e9:a7:18:e4:47:e4:ac: fc:c5:9f:69:d8:fb:f4:19:43:7e:92:67:1d:7a:89:f1:f8:3c: 22:ed:24:59:0f:f9:19:2e:4b:cf:81:b3:3f:62:56:b2:53:1f: 2c:f9:21:2b:ca:fa:0f:0e:ba:a7:fa:bb:e7:68:a1:2b:cb:a1: 41:a2:48:84:b3:a4:43:39:57:87:ed:04:e6:7f:9d:4e:ba:88: 0e:be:2a:11:84:fc:5b:c1:e4:4c:2f:a4:00:5b:92:1e:c2:f0: b7:a2:e1:38:f2:1c:30:dd:6b:9f:5b:d5:06:d6:c3:c6:62:b9: e4:26:0e:9e:6a:4b:32:8a:03:05:4a:59:0c:d6:67:85:00:2d: 84:75:5d:cb:9e:98:a5:95:ef:aa:15:50:d9:34:55:63:f4:24: 21:9f:0c:4b:80:88:aa:93:73:2f:94:af:43:9d:de:7c:8b:d7: 3b:a5:46:09:93:22:24:e4:32:a6:47:dd:ce:0f:fb:a2:df:4b: c5:9c:02:39 -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgIUC6dzb29tZkRSwy4PzTrhB4PxVcowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODA5OURGQzBDRkM4M0M1RERGRDkwQ0E1RUEzMTRDQzlB ODY3N0YyRDAeFw0yNjA5MjQxNDA1MDNaFw0yNjA5MjUxNDE0MDNaMDMxMTAvBgNV BAMTKEI4RUVFRUI5MEQ0QUFEQUFCRTMyNUZCREM0NDZCNUE2NTYwODE0NDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+WPDUZGoQsIQ6ksbcIIQfswg1 4qckwgFylgbEVl7lMvOdwA9Ivmb40y23QqE5H1CfOylOGqd5yw7fOYtL7/FW7Alz Cejz3UkHYBq6f8YQDwKiE7ao8dOpGmnMFEaX4jvFX6LzZhz/otJTIQl6paEVOV/U mMck3lV8rQIC5p8cZDjGalqYF7tzrIzxV5Ipk2YTgjp8aGeRKhkuqgztJm5BXHiT sDVaG3yudZCjArRhCCov5rar7JaVV9xuj4FWx4N4W87rl43slg3gt0MsR/3P8Abk EFSdPOMtbHjhSBNHVArzO/apyjJn7VgJZ2jclwoBE9Tpw+4U0G4eYVNfF3TpAgMB AAGjggH2MIIB8jAdBgNVHQ4EFgQUuO7uuQ1Kraq+Ml+9xEa1plYIFEcwHwYDVR0j BBgwFoAUgJnfwM/IPF3f2Qyl6jFMyahnfy0wDgYDVR0PAQH/BAQDAgeAMGcGA1Ud HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0hJTkFU UlVTVC8wLzgwOTlERkMwQ0ZDODNDNURERkQ5MENBNUVBMzE0Q0M5QTg2NzdGMkQu Y3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBLzEvODA5OURGQzBDRkM4M0M1RERGRDkwQ0E1 RUEzMTRDQzlBODY3N0YyRC5jZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzAL hlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0NISU5BVFJVU1QvMC84MDk5 REZDMENGQzgzQzVEREZEOTBDQTVFQTMxNENDOUE4Njc3RjJELm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA a4FNgF7Mk9E9idx2UCqTt4jOfF/3Z/0mZln0HxoJAEm/fqIIDjeQpf3OhCFJnpRG l2GK80+99OGa/0IY6FJfBV3ppxjkR+Ss/MWfadj79BlDfpJnHXqJ8fg8Iu0kWQ/5 GS5Lz4GzP2JWslMfLPkhK8r6Dw66p/q752ihK8uhQaJIhLOkQzlXh+0E5n+dTrqI Dr4qEYT8W8HkTC+kAFuSHsLwt6LhOPIcMN1rn1vVBtbDxmK55CYOnmpLMooDBUpZ DNZnhQAthHVdy56YpZXvqhVQ2TRVY/QkIZ8MS4CIqpNzL5SvQ53efIvXO6VGCZMi JOQypkfdzg/7ot9LxZwCOQ== -----END CERTIFICATE-----Generated at Fri Sep 25 01:48:09 2026 by rpki-client