$ rpki-client -vvvf rpkica.twnic.tw/rpki/CHUMMYTECH/1/28E1FD03C8B040A9874A90D4654322ACDFCA3407.mft File: 28E1FD03C8B040A9874A90D4654322ACDFCA3407.mft (raw, json) Hash identifier: +GHMi9c/5xkMOTbc52jS0Tlnhe/AtRVGToEnsHep2Nw= Subject key identifier: 57:8C:5B:3C:6E:89:D1:77:54:50:41:56:AA:20:63:D8:91:37:81:D8 Authority key identifier: 28:E1:FD:03:C8:B0:40:A9:87:4A:90:D4:65:43:22:AC:DF:CA:34:07 Certificate issuer: /CN=28E1FD03C8B040A9874A90D4654322ACDFCA3407 Certificate serial: 31507C06BEF264AB3B8FD91460D6B20AD8AF3BC5 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/28E1FD03C8B040A9874A90D4654322ACDFCA3407.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CHUMMYTECH/1/28E1FD03C8B040A9874A90D4654322ACDFCA3407.mft Manifest number: B8 Signing time: Wed 23 Sep 2026 13:17:55 +0000 Manifest this update: Wed 23 Sep 2026 13:12:55 +0000 Manifest next update: Thu 24 Sep 2026 15:52:55 +0000 Files and hashes: 1: 3136302e3138372e3139382e302f32332d3234203d3e20313532363135.roa (hash: I6RgBeSwuI+mSenPcIlVAxSTnNAaaE4/xzzLMyb2FH0=) 2: 28E1FD03C8B040A9874A90D4654322ACDFCA3407.crl (hash: FKHU7oyKkLo6MVzUVJtJ5DJoivN3wKYrtpblO+d5RVY=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CHUMMYTECH/1/28E1FD03C8B040A9874A90D4654322ACDFCA3407.crl rsync://rpkica.twnic.tw/rpki/CHUMMYTECH/1/28E1FD03C8B040A9874A90D4654322ACDFCA3407.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/28E1FD03C8B040A9874A90D4654322ACDFCA3407.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 15:52:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:50:7c:06:be:f2:64:ab:3b:8f:d9:14:60:d6:b2:0a:d8:af:3b:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28E1FD03C8B040A9874A90D4654322ACDFCA3407 Validity Not Before: Sep 23 13:12:55 2026 GMT Not After : Sep 24 15:52:55 2026 GMT Subject: CN=578C5B3C6E89D17754504156AA2063D8913781D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:74:02:35:32:ba:cc:a4:26:70:d2:d7:8b:11: 8d:fb:ce:fa:4c:50:a2:37:3c:32:20:a9:4f:ec:51: 9e:e8:43:54:9f:58:54:26:8c:95:bb:66:47:50:d2: 3e:54:5a:7a:07:35:d9:a9:9d:79:bc:ed:45:db:e2: 14:1d:11:c4:1e:65:78:1e:49:23:95:49:a8:73:2a: 5f:2b:3d:4e:f0:9d:5e:6f:89:90:99:d5:8a:35:6f: 7c:db:d0:e8:65:ae:87:14:cc:20:61:6a:e1:93:47: 6b:be:97:30:86:ce:36:aa:f0:60:40:3c:66:db:b8: bc:9f:d1:06:1c:5b:5b:62:cf:22:36:9a:2e:56:d6: c4:86:93:8c:0b:d4:49:9f:89:5f:53:a7:a8:26:ff: 8a:a4:02:fa:17:2c:70:02:38:00:ff:e0:a2:d8:38: a8:35:a3:b9:f9:3b:8f:c9:60:ff:4f:aa:a8:47:c8: 7e:79:a4:d9:c2:9c:ef:c4:29:e6:ae:00:90:12:41: 62:d8:64:68:cd:76:50:c8:17:68:42:f3:75:95:34: 18:b9:56:28:65:b4:6a:11:67:d2:65:1f:55:85:50: 5b:1e:9e:ac:d4:76:93:f6:9c:b1:34:76:8c:b0:0c: bf:e2:49:f0:90:ed:40:93:4c:d6:d6:f9:62:44:05: 66:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:8C:5B:3C:6E:89:D1:77:54:50:41:56:AA:20:63:D8:91:37:81:D8 X509v3 Authority Key Identifier: keyid:28:E1:FD:03:C8:B0:40:A9:87:4A:90:D4:65:43:22:AC:DF:CA:34:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CHUMMYTECH/1/28E1FD03C8B040A9874A90D4654322ACDFCA3407.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/28E1FD03C8B040A9874A90D4654322ACDFCA3407.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHUMMYTECH/1/28E1FD03C8B040A9874A90D4654322ACDFCA3407.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:d6:3d:20:a1:c7:a1:fa:46:9b:3e:bf:77:5d:71:17:7f:c8: b3:9b:87:97:fa:9a:2d:d0:5c:0e:42:67:e7:be:85:6a:30:55: a0:d2:89:08:b0:07:f5:f8:1e:72:6a:71:e9:b7:e3:b0:06:4a: 47:e2:9d:9f:b6:56:d5:63:51:aa:83:66:d3:5f:25:ae:48:d5: 51:8e:5e:cd:17:da:df:74:f4:ea:1d:bb:b1:25:cf:ed:73:b0: 6e:07:aa:83:f6:5b:90:4f:4b:ec:de:ba:2d:3e:12:31:1b:ac: 34:d3:74:da:56:d5:76:a4:86:8b:1f:bd:be:c6:0d:8c:6a:63: bf:e5:d7:56:d5:c9:74:10:6a:88:c7:cc:0c:bd:9c:47:8b:2a: fc:dc:84:20:92:f8:67:3e:c5:6c:b2:3a:89:84:28:3a:f2:4b: 2c:b0:a8:d6:45:19:d8:20:f3:72:0e:19:36:0d:50:5c:8b:7b: d2:86:e3:27:59:73:a2:83:29:6b:9b:61:0e:18:15:3a:a6:22: 5c:57:85:87:aa:1b:4a:a2:a6:51:79:3e:a7:05:7e:aa:93:ba: 5a:c0:00:5a:69:49:ec:fa:de:9b:ab:53:c0:15:ef:a4:59:09: 31:8e:e3:36:66:f0:eb:91:89:79:5b:81:dd:89:b6:a8:b2:80: ce:38:45:06 -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgIUMVB8Br7yZKs7j9kUYNayCtivO8UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhFMUZEMDNDOEIwNDBBOTg3NEE5MEQ0NjU0MzIyQUNE RkNBMzQwNzAeFw0yNjA5MjMxMzEyNTVaFw0yNjA5MjQxNTUyNTVaMDMxMTAvBgNV BAMTKDU3OEM1QjNDNkU4OUQxNzc1NDUwNDE1NkFBMjA2M0Q4OTEzNzgxRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRdAI1MrrMpCZw0teLEY37zvpM UKI3PDIgqU/sUZ7oQ1SfWFQmjJW7ZkdQ0j5UWnoHNdmpnXm87UXb4hQdEcQeZXge SSOVSahzKl8rPU7wnV5viZCZ1Yo1b3zb0OhlrocUzCBhauGTR2u+lzCGzjaq8GBA PGbbuLyf0QYcW1tizyI2mi5W1sSGk4wL1EmfiV9Tp6gm/4qkAvoXLHACOAD/4KLY OKg1o7n5O4/JYP9PqqhHyH55pNnCnO/EKeauAJASQWLYZGjNdlDIF2hC83WVNBi5 VihltGoRZ9JlH1WFUFsenqzUdpP2nLE0doywDL/iSfCQ7UCTTNbW+WJEBWaZAgMB AAGjggH2MIIB8jAdBgNVHQ4EFgQUV4xbPG6J0XdUUEFWqiBj2JE3gdgwHwYDVR0j BBgwFoAUKOH9A8iwQKmHSpDUZUMirN/KNAcwDgYDVR0PAQH/BAQDAgeAMGcGA1Ud HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0hVTU1Z VEVDSC8xLzI4RTFGRDAzQzhCMDQwQTk4NzRBOTBENDY1NDMyMkFDREZDQTM0MDcu Y3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBLzAvMjhFMUZEMDNDOEIwNDBBOTg3NEE5MEQ0 NjU0MzIyQUNERkNBMzQwNy5jZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzAL hlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0NIVU1NWVRFQ0gvMS8yOEUx RkQwM0M4QjA0MEE5ODc0QTkwRDQ2NTQzMjJBQ0RGQ0EzNDA3Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA N9Y9IKHHofpGmz6/d11xF3/Is5uHl/qaLdBcDkJn576FajBVoNKJCLAH9fgecmpx 6bfjsAZKR+Kdn7ZW1WNRqoNm018lrkjVUY5ezRfa33T06h27sSXP7XOwbgeqg/Zb kE9L7N66LT4SMRusNNN02lbVdqSGix+9vsYNjGpjv+XXVtXJdBBqiMfMDL2cR4sq /NyEIJL4Zz7FbLI6iYQoOvJLLLCo1kUZ2CDzcg4ZNg1QXIt70objJ1lzooMpa5th DhgVOqYiXFeFh6obSqKmUXk+pwV+qpO6WsAAWmlJ7Prem6tTwBXvpFkJMY7jNmbw 65GJeVuB3Ym2qLKAzjhFBg== -----END CERTIFICATE-----Generated at Thu Sep 24 10:02:29 2026 by rpki-client