$ rpki-client -vvvf rpkica.twnic.tw/rpki/COLIN/0/3135985A244571EE521F17A73A1F0D6341A35ED5.mft File: 3135985A244571EE521F17A73A1F0D6341A35ED5.mft (raw, json) Hash identifier: VMWMV8JN4SSfDMQf+dHXFBTQOlkV1587NSEO/RfCa+Q= Subject key identifier: AF:B4:0C:3C:34:F7:6D:C2:1A:15:5D:EA:4B:8B:B1:A1:C1:49:94:D0 Authority key identifier: 31:35:98:5A:24:45:71:EE:52:1F:17:A7:3A:1F:0D:63:41:A3:5E:D5 Certificate issuer: /CN=3135985A244571EE521F17A73A1F0D6341A35ED5 Certificate serial: 095508744947876A950C049B39B50054C0FD10EA Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3135985A244571EE521F17A73A1F0D6341A35ED5.cer Subject info access: rsync://rpkica.twnic.tw/rpki/COLIN/0/3135985A244571EE521F17A73A1F0D6341A35ED5.mft Manifest number: B6 Signing time: Thu 24 Sep 2026 14:40:23 +0000 Manifest this update: Thu 24 Sep 2026 14:35:23 +0000 Manifest next update: Fri 25 Sep 2026 17:47:23 +0000 Files and hashes: 1: 3135985A244571EE521F17A73A1F0D6341A35ED5.crl (hash: go3bQGD7NYO1ho5fkJkpOVaiwaIrbSrzskuVYY26BTg=) 2: 3130332e362e3132342e302f32332d3332203d3e20313530373638.roa (hash: 6vguh3CJd68lcmEK8FAHm7dq7zEm2fYFwl9UdWFuOJk=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/COLIN/0/3135985A244571EE521F17A73A1F0D6341A35ED5.crl rsync://rpkica.twnic.tw/rpki/COLIN/0/3135985A244571EE521F17A73A1F0D6341A35ED5.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3135985A244571EE521F17A73A1F0D6341A35ED5.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 17:47:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:55:08:74:49:47:87:6a:95:0c:04:9b:39:b5:00:54:c0:fd:10:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3135985A244571EE521F17A73A1F0D6341A35ED5 Validity Not Before: Sep 24 14:35:23 2026 GMT Not After : Sep 25 17:47:23 2026 GMT Subject: CN=AFB40C3C34F76DC21A155DEA4B8BB1A1C14994D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8b:df:7f:83:32:cc:d9:fb:6e:8c:73:50:59: 67:84:be:87:9c:ea:85:39:63:46:4d:61:7b:ee:3f: 75:00:28:ed:a7:f9:95:ad:9c:dc:31:9f:03:6a:f6: e3:e4:43:89:95:64:ea:60:99:aa:93:e6:48:a3:29: 7e:4a:d7:e6:3e:ee:14:be:f6:da:6f:6c:6c:ca:eb: eb:0f:40:6b:1c:6e:9e:e6:b2:06:14:72:64:52:cd: 43:27:e3:0a:13:33:a8:96:48:bb:df:3c:2e:f5:49: b1:f9:4c:47:d6:8f:bc:26:1a:58:db:72:a0:55:95: 7b:24:b3:09:91:de:b0:2f:70:ec:29:8a:b2:1e:83: da:29:40:fd:d7:34:d1:6d:95:2d:bb:3f:3c:f0:5e: ef:18:b3:b4:12:ed:43:36:c6:3c:88:c1:55:fc:9c: d6:dc:9d:72:6e:a6:fb:73:90:dc:f8:33:7d:93:c1: 49:4d:25:f9:80:34:d1:0a:af:95:81:77:e9:18:90: 3b:6c:8d:9e:2f:53:21:d7:07:f7:0a:10:69:89:d3: fc:87:35:d5:21:91:63:c1:3f:d9:7d:45:16:14:dc: ed:3c:15:0a:1f:8e:5f:88:65:e1:e7:6f:3c:e0:a0: 7e:da:cf:81:ea:48:00:99:33:6c:82:28:7f:01:18: b5:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:B4:0C:3C:34:F7:6D:C2:1A:15:5D:EA:4B:8B:B1:A1:C1:49:94:D0 X509v3 Authority Key Identifier: keyid:31:35:98:5A:24:45:71:EE:52:1F:17:A7:3A:1F:0D:63:41:A3:5E:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/COLIN/0/3135985A244571EE521F17A73A1F0D6341A35ED5.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3135985A244571EE521F17A73A1F0D6341A35ED5.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/COLIN/0/3135985A244571EE521F17A73A1F0D6341A35ED5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:09:2f:9a:4f:be:8e:cc:aa:89:ba:53:9d:8f:2f:77:72:65: b7:4f:40:45:76:6a:c1:6e:a7:b0:2a:b8:13:4d:81:67:cf:39: b7:ee:5a:a3:26:0b:56:cc:b3:97:27:76:ec:99:dd:7e:8c:3a: 84:e5:ca:a1:dc:00:a7:6b:b6:22:b3:85:d9:95:32:a7:44:27: 49:84:18:63:1c:8d:d0:8e:a9:95:83:f0:08:5b:0f:d5:1f:c7: b9:33:56:16:1a:23:bd:c4:cf:8f:75:98:55:8b:04:8a:30:f9: 2a:f5:23:d6:bf:7c:3b:ea:bf:8f:09:86:b1:d1:3d:b3:a6:77: 5e:15:63:65:c2:6c:7c:2f:28:02:da:4c:ae:87:59:ff:68:a8: 5b:c9:6a:c2:58:31:74:66:ba:84:73:94:e9:84:e3:8d:45:63: c3:4f:10:ce:28:a8:cb:0e:03:db:84:c6:80:bf:e1:44:fd:1c: b6:97:67:02:6a:0d:ac:0a:97:2d:f0:97:d2:1d:dd:cb:a4:48: 44:2d:87:08:f9:ab:dd:a4:45:eb:e2:ad:ac:dd:8f:68:ba:b0: f3:89:54:1b:90:41:c5:0f:3c:b9:fa:91:df:e1:d1:05:b2:e0: 4c:fa:7b:40:2b:37:de:90:13:7b:74:ab:6a:53:d1:d8:34:11: de:08:12:cb -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUCVUIdElHh2qVDASbObUAVMD9EOowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzEzNTk4NUEyNDQ1NzFFRTUyMUYxN0E3M0ExRjBENjM0 MUEzNUVENTAeFw0yNjA5MjQxNDM1MjNaFw0yNjA5MjUxNzQ3MjNaMDMxMTAvBgNV BAMTKEFGQjQwQzNDMzRGNzZEQzIxQTE1NURFQTRCOEJCMUExQzE0OTk0RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzi99/gzLM2ftujHNQWWeEvoec 6oU5Y0ZNYXvuP3UAKO2n+ZWtnNwxnwNq9uPkQ4mVZOpgmaqT5kijKX5K1+Y+7hS+ 9tpvbGzK6+sPQGscbp7msgYUcmRSzUMn4woTM6iWSLvfPC71SbH5TEfWj7wmGljb cqBVlXskswmR3rAvcOwpirIeg9opQP3XNNFtlS27PzzwXu8Ys7QS7UM2xjyIwVX8 nNbcnXJupvtzkNz4M32TwUlNJfmANNEKr5WBd+kYkDtsjZ4vUyHXB/cKEGmJ0/yH NdUhkWPBP9l9RRYU3O08FQofjl+IZeHnbzzgoH7az4HqSACZM2yCKH8BGLUVAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUr7QMPDT3bcIaFV3qS4uxocFJlNAwHwYDVR0j BBgwFoAUMTWYWiRFce5SHxenOh8NY0GjXtUwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ09MSU4v MC8zMTM1OTg1QTI0NDU3MUVFNTIxRjE3QTczQTFGMEQ2MzQxQTM1RUQ1LmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzMxMzU5ODVBMjQ0NTcxRUU1MjFGMTdBNzNBMUYw RDYzNDFBMzVFRDUuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9DT0xJTi8wLzMxMzU5ODVBMjQ0NTcx RUU1MjFGMTdBNzNBMUYwRDYzNDFBMzVFRDUubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDNCS+aT76OzKqJ ulOdjy93cmW3T0BFdmrBbqewKrgTTYFnzzm37lqjJgtWzLOXJ3bsmd1+jDqE5cqh 3ACna7Yis4XZlTKnRCdJhBhjHI3QjqmVg/AIWw/VH8e5M1YWGiO9xM+PdZhViwSK MPkq9SPWv3w76r+PCYax0T2zpndeFWNlwmx8LygC2kyuh1n/aKhbyWrCWDF0ZrqE c5TphOONRWPDTxDOKKjLDgPbhMaAv+FE/Ry2l2cCag2sCpct8JfSHd3LpEhELYcI +avdpEXr4q2s3Y9ourDziVQbkEHFDzy5+pHf4dEFsuBM+ntAKzfekBN7dKtqU9HY NBHeCBLL -----END CERTIFICATE-----Generated at Fri Sep 25 09:44:13 2026 by rpki-client