$ rpki-client -vvvf rpkica.twnic.tw/rpki/CKMATES/0/3D576C4841082805B3CDBD7337F3963A8833174B.mft File: 3D576C4841082805B3CDBD7337F3963A8833174B.mft (raw, json) Hash identifier: X1pT0qiUzrW+Sk1nHZ+t+qczzjty6kMjKOwbR3y0T0Y= Subject key identifier: 32:98:46:B3:62:8B:4E:CA:E3:7E:75:A2:FE:37:7C:EA:86:B3:D5:A1 Authority key identifier: 3D:57:6C:48:41:08:28:05:B3:CD:BD:73:37:F3:96:3A:88:33:17:4B Certificate issuer: /CN=3D576C4841082805B3CDBD7337F3963A8833174B Certificate serial: 141B0E16133696BB535519B2E8F30E60737D605D Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3D576C4841082805B3CDBD7337F3963A8833174B.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CKMATES/0/3D576C4841082805B3CDBD7337F3963A8833174B.mft Manifest number: BD Signing time: Thu 24 Sep 2026 12:54:48 +0000 Manifest this update: Thu 24 Sep 2026 12:49:48 +0000 Manifest next update: Fri 25 Sep 2026 13:55:48 +0000 Files and hashes: 1: 3130332e3131392e3231342e302f32342d3234203d3e20313331363239.roa (hash: ATTGrI+LdxvHy7tZZvIf74Pi92V/OccZmHc6iAFqFXM=) 2: 3130332e3131392e3231352e302f32342d3234203d3e20313339363337.roa (hash: jPTm5d5SYsezMtn+BRkYU2/hKNSbQfuFpXU/01PcOeQ=) 3: 3130332e3131392e3231332e302f32342d3234203d3e20313331363239.roa (hash: EJjmwH6YAXPBMwmijz6eL3wQvRP4K1M4tTn06rZJrIA=) 4: 3130332e3131392e3231332e302f32342d3234203d3e203134363138.roa (hash: sldyxDcFqyW0yrBmnmv5iDOduZFppPbQvxaSJnOI1Vw=) 5: 3130332e3131392e3231342e302f32342d3234203d3e20313333333735.roa (hash: /UvybhcLKT1KK1desdUWoCsOTWNrRkdvIjVquH9d4MA=) 6: 3D576C4841082805B3CDBD7337F3963A8833174B.crl (hash: hhUjpDmLIq5bzIRYeemAHyCGevDyT1bc9bPjkbp3U04=) 7: 3130332e3131392e3231322e302f32322d3234203d3e20313331363239.roa (hash: eXsmebarUaems23bSj2ZcVD8dLS2085WCpxoaq88x4M=) 8: 3130332e3131392e3231332e302f32342d3234203d3e203136353039.roa (hash: PL2cz2Hbk/JdNHMN06li8HzqoQzLhVGaxZWqRcHi6hM=) 9: 3130332e3131392e3231342e302f32342d3234203d3e20313339363337.roa (hash: BkQPXEKbvmbpHuwtKiewh9JYhpq3BksNtpHsw33H1fI=) 10: 3130332e3131392e3231322e302f32322d3234203d3e20313333373437.roa (hash: zPQusnanznelCXG1KdOD21zkqA+VphGwDoshIYxRbJ0=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CKMATES/0/3D576C4841082805B3CDBD7337F3963A8833174B.crl rsync://rpkica.twnic.tw/rpki/CKMATES/0/3D576C4841082805B3CDBD7337F3963A8833174B.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3D576C4841082805B3CDBD7337F3963A8833174B.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 02:19:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:1b:0e:16:13:36:96:bb:53:55:19:b2:e8:f3:0e:60:73:7d:60:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D576C4841082805B3CDBD7337F3963A8833174B Validity Not Before: Sep 24 12:49:48 2026 GMT Not After : Sep 25 13:55:48 2026 GMT Subject: CN=329846B3628B4ECAE37E75A2FE377CEA86B3D5A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:fd:8d:2c:86:e6:08:22:d9:7f:76:f2:16:2f: 2d:64:3d:4a:ce:84:8f:f2:34:b7:dd:ea:97:3c:f0: 1d:5b:67:f5:9d:2b:91:1d:12:e1:6d:2e:f6:5c:96: e9:d3:f1:28:9f:89:7f:be:bd:0b:ac:bb:2f:72:d8: 4a:00:d5:6d:51:4b:ca:27:7e:26:e5:b8:1c:10:8c: 1f:01:31:cd:9c:f6:d0:b7:c4:d8:23:30:52:e7:f6: 4e:7b:7f:13:4d:06:64:2a:40:d6:4c:7f:23:93:9f: 3d:87:a6:f6:ae:65:d0:fd:97:e1:05:1e:6b:c7:ef: 72:10:10:e0:79:e2:34:fc:9d:ce:4f:3e:72:b1:25: 39:03:65:ab:38:ee:a6:73:5e:16:86:50:84:33:fe: 99:a9:4f:1d:5e:ff:c3:fe:22:bf:bd:ad:3f:dd:21: 25:45:e4:c5:c0:4b:f7:62:69:6e:a3:8a:b4:35:8e: 2b:9f:50:93:49:82:fe:8f:7b:3e:f6:63:ec:25:c7: 7e:40:ae:95:58:17:0e:4c:8f:7c:16:0f:73:3e:99: f5:13:73:a5:3d:0f:93:e2:9d:6a:6b:a7:2e:2f:6f: b7:d0:61:c6:8c:91:ca:28:e0:fb:9c:ef:e9:f2:dc: 44:d4:55:f8:42:b1:04:11:5c:0c:0c:9e:14:69:8c: 0a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:98:46:B3:62:8B:4E:CA:E3:7E:75:A2:FE:37:7C:EA:86:B3:D5:A1 X509v3 Authority Key Identifier: keyid:3D:57:6C:48:41:08:28:05:B3:CD:BD:73:37:F3:96:3A:88:33:17:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CKMATES/0/3D576C4841082805B3CDBD7337F3963A8833174B.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3D576C4841082805B3CDBD7337F3963A8833174B.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CKMATES/0/3D576C4841082805B3CDBD7337F3963A8833174B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:7b:7a:9c:ca:c2:bf:0b:f7:07:1c:18:18:9b:17:96:f5:b3: dd:72:5a:71:56:87:87:65:c8:77:19:0b:04:0f:68:d4:26:48: 51:b5:84:47:48:36:b8:d8:f6:dc:94:9a:d8:d7:cd:30:12:d5: f7:de:f8:1d:b4:52:e3:7f:42:6c:7a:69:06:5e:f9:c7:16:d7: 76:64:5c:ab:a0:e1:ef:3a:32:4e:d5:7b:e6:62:5d:66:8d:f9: 8c:f9:27:ec:87:4f:d4:5d:1b:fd:8b:0f:ab:65:aa:af:ef:a3: f5:2b:93:3d:cf:cc:15:97:96:2e:c6:52:e3:dc:7e:0c:c4:63: 05:d9:ea:cb:c7:af:20:52:13:e5:15:c8:66:6b:29:ef:77:f6: 71:5f:0d:22:42:f0:54:f8:28:97:b7:14:fd:c6:bc:34:fb:e4: 72:a6:3a:ca:b4:e0:09:ce:79:6c:09:63:0b:9f:28:0f:31:9c: d7:51:59:fd:03:4f:b8:b9:a8:b8:47:98:1b:12:8c:20:d5:c3: 9f:e1:ba:98:f1:e9:1d:17:50:97:62:f8:da:48:57:85:d7:06: a2:5f:ef:cb:8f:ba:29:73:37:ea:83:90:41:7a:5f:98:ac:09: 72:03:20:fb:7d:5a:85:7a:ad:bd:93:f1:7f:86:a7:61:f2:8f: 23:06:83:de -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIUFBsOFhM2lrtTVRmy6PMOYHN9YF0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q1NzZDNDg0MTA4MjgwNUIzQ0RCRDczMzdGMzk2M0E4 ODMzMTc0QjAeFw0yNjA5MjQxMjQ5NDhaFw0yNjA5MjUxMzU1NDhaMDMxMTAvBgNV BAMTKDMyOTg0NkIzNjI4QjRFQ0FFMzdFNzVBMkZFMzc3Q0VBODZCM0Q1QTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx/Y0shuYIItl/dvIWLy1kPUrO hI/yNLfd6pc88B1bZ/WdK5EdEuFtLvZclunT8SifiX++vQusuy9y2EoA1W1RS8on fibluBwQjB8BMc2c9tC3xNgjMFLn9k57fxNNBmQqQNZMfyOTnz2HpvauZdD9l+EF HmvH73IQEOB54jT8nc5PPnKxJTkDZas47qZzXhaGUIQz/pmpTx1e/8P+Ir+9rT/d ISVF5MXAS/diaW6jirQ1jiufUJNJgv6Pez72Y+wlx35ArpVYFw5Mj3wWD3M+mfUT c6U9D5PinWprpy4vb7fQYcaMkcoo4Puc7+ny3ETUVfhCsQQRXAwMnhRpjArfAgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQUMphGs2KLTsrjfnWi/jd86oaz1aEwHwYDVR0j BBgwFoAUPVdsSEEIKAWzzb1zN/OWOogzF0swDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0tNQVRF Uy8wLzNENTc2QzQ4NDEwODI4MDVCM0NEQkQ3MzM3RjM5NjNBODgzMzE3NEIuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvM0Q1NzZDNDg0MTA4MjgwNUIzQ0RCRDczMzdG Mzk2M0E4ODMzMTc0Qi5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0NLTUFURVMvMC8zRDU3NkM0ODQx MDgyODA1QjNDREJENzMzN0YzOTYzQTg4MzMxNzRCLm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEHt6nMrC vwv3BxwYGJsXlvWz3XJacVaHh2XIdxkLBA9o1CZIUbWER0g2uNj23JSa2NfNMBLV 9974HbRS439CbHppBl75xxbXdmRcq6Dh7zoyTtV75mJdZo35jPkn7IdP1F0b/YsP q2Wqr++j9SuTPc/MFZeWLsZS49x+DMRjBdnqy8evIFIT5RXIZmsp73f2cV8NIkLw VPgol7cU/ca8NPvkcqY6yrTgCc55bAljC58oDzGc11FZ/QNPuLmouEeYGxKMINXD n+G6mPHpHRdQl2L42khXhdcGol/vy4+6KXM36oOQQXpfmKwJcgMg+31ahXqtvZPx f4anYfKPIwaD3g== -----END CERTIFICATE-----Generated at Thu Sep 24 17:33:47 2026 by rpki-client