$ rpki-client -vvvf rpkica.twnic.tw/rpki/CPSYS/0/4CB3ABB1B4A024A701223CD715911D996706E3AA.mft File: 4CB3ABB1B4A024A701223CD715911D996706E3AA.mft (raw, json) Hash identifier: X638C9LtupiedZALywB/SzwNtcrDQJ0ykYNwf804smU= Subject key identifier: 9D:C6:93:F2:D2:47:A5:91:CC:EB:D5:65:19:36:A7:37:7E:93:22:78 Authority key identifier: 4C:B3:AB:B1:B4:A0:24:A7:01:22:3C:D7:15:91:1D:99:67:06:E3:AA Certificate issuer: /CN=4CB3ABB1B4A024A701223CD715911D996706E3AA Certificate serial: 407711D3C66065206DEFB5E63BCED6932C05A110 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4CB3ABB1B4A024A701223CD715911D996706E3AA.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CPSYS/0/4CB3ABB1B4A024A701223CD715911D996706E3AA.mft Manifest number: B6 Signing time: Wed 23 Sep 2026 08:02:00 +0000 Manifest this update: Wed 23 Sep 2026 07:57:00 +0000 Manifest next update: Thu 24 Sep 2026 08:06:00 +0000 Files and hashes: 1: 3130332e31342e3137302e302f32332d3234203d3e203338303432.roa (hash: 5mtwz/x5xstPzEWwV0mjjdNtyAKuFHozbJj1pgp59P4=) 2: 4CB3ABB1B4A024A701223CD715911D996706E3AA.crl (hash: w/ea90r5doh7de/BpahT7MMdBQ2CAdjzDfahd3PFTg8=) 3: 3130332e31342e3137302e302f32332d3234203d3e20313334383233.roa (hash: GNYnz7E4zPrfGEpitBkpgKcXAY1dNLMFN8QmTypJQrA=) 4: 323430303a623061303a3a2f33322d3332203d3e203633393038.roa (hash: zreCdGN4BpY2/KXE7Xi0nbMj8CRAQTw3exmLLk8qka8=) 5: 3130332e31342e3137302e302f32332d3234203d3e20313532313739.roa (hash: 0yV6274hzedLbyBXIX24PIgFkE/qG4nC2HGR5DvDDRk=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CPSYS/0/4CB3ABB1B4A024A701223CD715911D996706E3AA.crl rsync://rpkica.twnic.tw/rpki/CPSYS/0/4CB3ABB1B4A024A701223CD715911D996706E3AA.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4CB3ABB1B4A024A701223CD715911D996706E3AA.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 08:06:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:77:11:d3:c6:60:65:20:6d:ef:b5:e6:3b:ce:d6:93:2c:05:a1:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4CB3ABB1B4A024A701223CD715911D996706E3AA Validity Not Before: Sep 23 07:57:00 2026 GMT Not After : Sep 24 08:06:00 2026 GMT Subject: CN=9DC693F2D247A591CCEBD5651936A7377E932278 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:ea:b0:d4:af:52:3a:e0:6c:ad:86:72:e4:ab: 2b:63:61:30:12:8a:fc:8b:0f:3a:34:97:74:a7:2f: db:df:69:f6:af:fc:11:45:ea:76:54:ff:9c:86:b4: 63:42:e9:32:7f:49:1c:70:98:20:cf:0d:3e:a4:80: 0a:26:c6:48:95:3c:40:f5:83:95:95:8e:78:ca:90: fe:92:c2:64:c2:42:1a:bf:9c:21:c3:20:44:8f:b7: f5:af:7d:2a:21:c1:8d:b8:fc:41:89:5d:d8:11:0b: c5:df:fa:e3:37:61:3d:39:85:12:23:1e:aa:0c:60: 74:1a:39:01:bd:5a:b7:05:d4:a8:ec:56:e1:1b:66: db:49:a2:11:32:4a:96:36:68:2c:1b:04:e1:da:8c: 54:b9:7a:35:36:ce:1b:de:7a:f8:27:60:be:94:cd: f6:c6:90:86:e3:57:c6:1d:40:71:c0:60:18:78:5b: 04:13:7a:f9:81:bd:92:7f:75:9f:28:48:c7:4e:85: 01:9d:22:ae:2c:fe:08:c1:ad:f2:ef:77:4f:9b:ff: 53:eb:0e:8f:d1:57:d4:87:8e:f7:6e:29:5a:d7:23: ac:46:bb:68:9c:12:99:90:1c:18:98:67:4f:08:66: 05:e2:9f:47:3d:ef:7b:6b:53:bf:2a:f3:62:01:3e: b9:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:C6:93:F2:D2:47:A5:91:CC:EB:D5:65:19:36:A7:37:7E:93:22:78 X509v3 Authority Key Identifier: keyid:4C:B3:AB:B1:B4:A0:24:A7:01:22:3C:D7:15:91:1D:99:67:06:E3:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CPSYS/0/4CB3ABB1B4A024A701223CD715911D996706E3AA.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4CB3ABB1B4A024A701223CD715911D996706E3AA.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CPSYS/0/4CB3ABB1B4A024A701223CD715911D996706E3AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:d8:7d:48:3c:bb:31:37:d8:21:d0:41:5a:df:ca:38:f5:5a: 34:89:fe:15:3b:73:25:7a:29:6f:85:b8:c6:9f:75:62:de:7d: 3b:a4:f1:1c:1b:83:0d:6c:96:d9:01:4d:ee:21:cd:8f:e2:a7: 29:bf:ed:ec:6e:90:16:a2:e1:87:bd:f4:d8:c9:75:17:20:81: a5:5d:c0:e2:53:75:29:47:71:e8:96:b8:79:fb:1a:6a:65:62: 2e:a5:f2:dd:46:8b:0f:8c:5b:aa:6e:3d:96:65:e9:77:c5:e5: 06:30:ab:8f:7b:4b:c2:20:4a:67:a6:dd:de:f3:ee:fb:94:5b: 8e:0e:f8:6e:78:46:d1:ca:27:dc:4b:01:e3:c3:7a:e4:dd:33: 6a:ae:96:37:ed:7c:b1:f7:7b:af:1c:2a:c4:fe:61:a1:39:d9: 04:d6:dd:e3:d7:a3:ad:52:b4:16:30:49:64:ae:f1:e8:00:c4: f1:f8:62:07:a6:d5:d1:ae:b0:de:bc:10:0c:75:55:dd:76:d6: 72:4e:da:23:0e:87:c9:29:4f:32:93:05:88:09:0d:93:4b:34: 62:12:b4:fc:0b:04:51:38:73:9a:c8:fb:21:50:ef:6c:3f:46: 5e:db:9c:32:68:c8:b9:16:9d:45:b4:1b:4e:8f:bf:81:22:cf: ed:ad:67:72 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUQHcR08ZgZSBt77XmO87WkywFoRAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNENCM0FCQjFCNEEwMjRBNzAxMjIzQ0Q3MTU5MTFEOTk2 NzA2RTNBQTAeFw0yNjA5MjMwNzU3MDBaFw0yNjA5MjQwODA2MDBaMDMxMTAvBgNV BAMTKDlEQzY5M0YyRDI0N0E1OTFDQ0VCRDU2NTE5MzZBNzM3N0U5MzIyNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl6rDUr1I64GythnLkqytjYTAS ivyLDzo0l3SnL9vfafav/BFF6nZU/5yGtGNC6TJ/SRxwmCDPDT6kgAomxkiVPED1 g5WVjnjKkP6SwmTCQhq/nCHDIESPt/WvfSohwY24/EGJXdgRC8Xf+uM3YT05hRIj HqoMYHQaOQG9WrcF1KjsVuEbZttJohEySpY2aCwbBOHajFS5ejU2zhveevgnYL6U zfbGkIbjV8YdQHHAYBh4WwQTevmBvZJ/dZ8oSMdOhQGdIq4s/gjBrfLvd0+b/1Pr Do/RV9SHjvduKVrXI6xGu2icEpmQHBiYZ08IZgXin0c973trU78q82IBPrkfAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUncaT8tJHpZHM69VlGTanN36TIngwHwYDVR0j BBgwFoAUTLOrsbSgJKcBIjzXFZEdmWcG46owDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ1BTWVMv MC80Q0IzQUJCMUI0QTAyNEE3MDEyMjNDRDcxNTkxMUQ5OTY3MDZFM0FBLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzRDQjNBQkIxQjRBMDI0QTcwMTIyM0NENzE1OTEx RDk5NjcwNkUzQUEuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9DUFNZUy8wLzRDQjNBQkIxQjRBMDI0 QTcwMTIyM0NENzE1OTExRDk5NjcwNkUzQUEubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBo2H1IPLsxN9gh 0EFa38o49Vo0if4VO3MleilvhbjGn3Vi3n07pPEcG4MNbJbZAU3uIc2P4qcpv+3s bpAWouGHvfTYyXUXIIGlXcDiU3UpR3Holrh5+xpqZWIupfLdRosPjFuqbj2WZel3 xeUGMKuPe0vCIEpnpt3e8+77lFuODvhueEbRyifcSwHjw3rk3TNqrpY37Xyx93uv HCrE/mGhOdkE1t3j16OtUrQWMElkrvHoAMTx+GIHptXRrrDevBAMdVXddtZyTtoj DofJKU8ykwWICQ2TSzRiErT8CwRROHOayPshUO9sP0Ze25wyaMi5Fp1FtBtOj7+B Is/trWdy -----END CERTIFICATE-----Generated at Wed Sep 23 22:19:17 2026 by rpki-client