$ rpki-client -vvvf rpkica.twnic.tw/rpki/COMPAL/0/8E6678972CBE31F9E346E4E77FD8792F4B10690A.mft File: 8E6678972CBE31F9E346E4E77FD8792F4B10690A.mft (raw, json) Hash identifier: zOQkTVa55/rWgmBqZzdiq3g8QO8NhYI8oJFEmVgedVg= Subject key identifier: 66:A2:CC:20:E0:78:C3:4F:35:66:77:27:F5:A2:50:B8:2C:87:BE:2D Authority key identifier: 8E:66:78:97:2C:BE:31:F9:E3:46:E4:E7:7F:D8:79:2F:4B:10:69:0A Certificate issuer: /CN=8E6678972CBE31F9E346E4E77FD8792F4B10690A Certificate serial: 263465A9A1DAE73830086DE933F1CA980D7E7D50 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8E6678972CBE31F9E346E4E77FD8792F4B10690A.cer Subject info access: rsync://rpkica.twnic.tw/rpki/COMPAL/0/8E6678972CBE31F9E346E4E77FD8792F4B10690A.mft Manifest number: B8 Signing time: Thu 24 Sep 2026 07:39:11 +0000 Manifest this update: Thu 24 Sep 2026 07:34:11 +0000 Manifest next update: Fri 25 Sep 2026 11:04:11 +0000 Files and hashes: 1: 3130332e3132322e3231362e302f32322d3234203d3e20313331363830.roa (hash: 0fKiDXGR8En4Q6FWillviZZnizkWot5ASqnc3fP81UM=) 2: 8E6678972CBE31F9E346E4E77FD8792F4B10690A.crl (hash: CbRj39s3n9Hb/Ykmd8QQOhceO+pgcVCO/a9lhfRNWso=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/COMPAL/0/8E6678972CBE31F9E346E4E77FD8792F4B10690A.crl rsync://rpkica.twnic.tw/rpki/COMPAL/0/8E6678972CBE31F9E346E4E77FD8792F4B10690A.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8E6678972CBE31F9E346E4E77FD8792F4B10690A.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 02:19:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:34:65:a9:a1:da:e7:38:30:08:6d:e9:33:f1:ca:98:0d:7e:7d:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E6678972CBE31F9E346E4E77FD8792F4B10690A Validity Not Before: Sep 24 07:34:11 2026 GMT Not After : Sep 25 11:04:11 2026 GMT Subject: CN=66A2CC20E078C34F35667727F5A250B82C87BE2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5e:db:b5:35:f2:0d:03:fa:95:d6:de:9f:07: 4a:1f:29:06:ce:f9:29:a0:73:ac:a9:08:dd:bb:1f: 8d:92:38:09:47:ca:bd:f0:07:2b:c1:00:d0:55:c2: 50:21:24:d0:3f:7d:f0:cd:91:ba:66:98:5c:26:34: 7c:ff:c6:af:f6:54:f6:49:68:aa:74:4b:bc:3d:a0: 82:06:81:8e:a1:d8:e0:5c:2b:f0:5e:a5:9a:83:3d: 09:71:84:43:9e:14:42:bf:5b:24:bd:a6:53:60:06: e3:26:08:d4:3a:ab:1b:cf:b2:8d:a2:d8:20:77:47: a0:64:20:6e:50:b5:d1:9e:29:46:6d:de:b5:d3:94: 85:5d:03:69:95:56:c4:da:5b:fa:10:94:44:08:11: 3e:83:5d:5e:6d:6a:16:9f:ef:04:d5:2f:d4:d0:4c: fa:35:f4:93:6a:33:e2:5d:ea:e4:7b:c3:e4:2b:a3: 02:c9:f3:41:5e:9c:6e:0e:4b:81:3b:2b:41:4c:d8: f9:72:41:45:a7:39:10:48:df:50:a6:58:f8:fb:b0: 06:c8:52:15:26:b8:76:88:1a:d6:85:2c:ed:f3:a2: 34:57:a1:e7:05:05:c3:64:bd:f0:91:d9:04:e6:6d: 98:81:68:7b:14:77:19:b4:7d:0e:5a:80:b0:80:7f: a7:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:A2:CC:20:E0:78:C3:4F:35:66:77:27:F5:A2:50:B8:2C:87:BE:2D X509v3 Authority Key Identifier: keyid:8E:66:78:97:2C:BE:31:F9:E3:46:E4:E7:7F:D8:79:2F:4B:10:69:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/COMPAL/0/8E6678972CBE31F9E346E4E77FD8792F4B10690A.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8E6678972CBE31F9E346E4E77FD8792F4B10690A.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/COMPAL/0/8E6678972CBE31F9E346E4E77FD8792F4B10690A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:4c:d0:a9:3b:fe:df:09:ad:ca:2e:6e:72:20:5f:03:53:de: c7:67:1b:53:f6:82:71:43:08:9e:3e:20:07:09:e9:6c:f8:02: 6b:a0:c7:40:2d:20:30:98:2f:87:84:70:45:4e:7b:53:9f:80: 52:71:89:cc:e8:35:9d:94:45:c2:42:59:6f:1c:fd:69:b6:25: c7:f7:1a:b3:31:ef:cd:6f:35:4d:1a:b2:57:4a:16:c0:d3:2e: be:6d:e7:56:8b:cb:ce:01:30:cd:d8:3b:5c:2d:de:fd:03:e0: df:91:d1:bb:e7:9e:8c:02:9a:4c:e5:ad:97:1b:33:96:70:99: 38:f0:79:fa:05:93:c3:ca:d5:0f:c0:50:01:8b:95:25:f3:ae: 7b:85:2b:72:79:27:e7:03:29:95:71:07:da:93:99:bc:6d:91: 97:65:2b:ae:b3:34:4d:1d:73:d1:11:13:26:0d:7c:f0:49:dd: 76:9e:ed:70:85:a2:c9:d5:87:38:a1:3c:85:82:f2:fb:4f:32: fc:47:be:17:57:dd:c0:0e:2e:59:b7:3f:f7:bb:c1:0b:56:27: 7f:01:e7:fb:9d:a6:17:f9:43:eb:79:ad:8c:44:b8:f3:1a:d0: 50:0a:32:c5:7f:fe:e3:25:65:f0:62:ae:7d:e9:3a:81:9d:ff: 27:56:25:d3 -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUJjRlqaHa5zgwCG3pM/HKmA1+fVAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEU2Njc4OTcyQ0JFMzFGOUUzNDZFNEU3N0ZEODc5MkY0 QjEwNjkwQTAeFw0yNjA5MjQwNzM0MTFaFw0yNjA5MjUxMTA0MTFaMDMxMTAvBgNV BAMTKDY2QTJDQzIwRTA3OEMzNEYzNTY2NzcyN0Y1QTI1MEI4MkM4N0JFMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGXtu1NfINA/qV1t6fB0ofKQbO +Smgc6ypCN27H42SOAlHyr3wByvBANBVwlAhJNA/ffDNkbpmmFwmNHz/xq/2VPZJ aKp0S7w9oIIGgY6h2OBcK/BepZqDPQlxhEOeFEK/WyS9plNgBuMmCNQ6qxvPso2i 2CB3R6BkIG5QtdGeKUZt3rXTlIVdA2mVVsTaW/oQlEQIET6DXV5tahaf7wTVL9TQ TPo19JNqM+Jd6uR7w+QrowLJ80FenG4OS4E7K0FM2PlyQUWnORBI31CmWPj7sAbI UhUmuHaIGtaFLO3zojRXoecFBcNkvfCR2QTmbZiBaHsUdxm0fQ5agLCAf6fNAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQUZqLMIOB4w081Zncn9aJQuCyHvi0wHwYDVR0j BBgwFoAUjmZ4lyy+MfnjRuTnf9h5L0sQaQowDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ09NUEFM LzAvOEU2Njc4OTcyQ0JFMzFGOUUzNDZFNEU3N0ZEODc5MkY0QjEwNjkwQS5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMS84RTY2Nzg5NzJDQkUzMUY5RTM0NkU0RTc3RkQ4 NzkyRjRCMTA2OTBBLmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ09NUEFMLzAvOEU2Njc4OTcyQ0JF MzFGOUUzNDZFNEU3N0ZEODc5MkY0QjEwNjkwQS5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBABZM0Kk7/t8J rcoubnIgXwNT3sdnG1P2gnFDCJ4+IAcJ6Wz4Amugx0AtIDCYL4eEcEVOe1OfgFJx iczoNZ2URcJCWW8c/Wm2Jcf3GrMx781vNU0asldKFsDTLr5t51aLy84BMM3YO1wt 3v0D4N+R0bvnnowCmkzlrZcbM5ZwmTjwefoFk8PK1Q/AUAGLlSXzrnuFK3J5J+cD KZVxB9qTmbxtkZdlK66zNE0dc9EREyYNfPBJ3Xae7XCFosnVhzihPIWC8vtPMvxH vhdX3cAOLlm3P/e7wQtWJ38B5/udphf5Q+t5rYxEuPMa0FAKMsV//uMlZfBirn3p OoGd/ydWJdM= -----END CERTIFICATE-----Generated at Thu Sep 24 17:02:24 2026 by rpki-client