$ rpki-client -vvvf rpkica.twnic.tw/rpki/CSPTEK/0/8F1212A19454D2A49786359CAC45368F821417D6.mft File: 8F1212A19454D2A49786359CAC45368F821417D6.mft (raw, json) Hash identifier: tz/JLGIjY4kcXi6aQbTh2J0IgS6G3Wd0+tpir+l+EWc= Subject key identifier: B2:CD:04:01:C6:83:95:16:A2:D2:CC:29:3F:B5:36:79:5A:E6:DA:DD Authority key identifier: 8F:12:12:A1:94:54:D2:A4:97:86:35:9C:AC:45:36:8F:82:14:17:D6 Certificate issuer: /CN=8F1212A19454D2A49786359CAC45368F821417D6 Certificate serial: 490667C9E10BA5F31CD7BD391B37CE79AB6FD7FC Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8F1212A19454D2A49786359CAC45368F821417D6.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CSPTEK/0/8F1212A19454D2A49786359CAC45368F821417D6.mft Manifest number: BB Signing time: Fri 25 Sep 2026 02:10:34 +0000 Manifest this update: Fri 25 Sep 2026 02:05:34 +0000 Manifest next update: Sat 26 Sep 2026 03:11:34 +0000 Files and hashes: 1: 323430363a643763303a3a2f33322d3438203d3e203338303038.roa (hash: uMtY/GmVL72No2RBdo9smGFIzi+iIhlXKaPRp7r/VTo=) 2: 323430363a643763303a3a2f33322d3438203d3e203338383339.roa (hash: Z694/6d2G+L3RUACrnL4ZOBmDtfn2t+JQdVIPZHPNRw=) 3: 8F1212A19454D2A49786359CAC45368F821417D6.crl (hash: 2K0ACMKkSCVpFMkp7sSJCbEPuCkpzhtT7ZQ/Jec9Ex0=) 4: 3130332e3135392e3137362e302f32332d3234203d3e203338383339.roa (hash: fgIPz4pRjg9MozWHN5C9tmdzsbKi6XEfF4wUaKsvsnA=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CSPTEK/0/8F1212A19454D2A49786359CAC45368F821417D6.crl rsync://rpkica.twnic.tw/rpki/CSPTEK/0/8F1212A19454D2A49786359CAC45368F821417D6.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8F1212A19454D2A49786359CAC45368F821417D6.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 21:19:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:06:67:c9:e1:0b:a5:f3:1c:d7:bd:39:1b:37:ce:79:ab:6f:d7:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F1212A19454D2A49786359CAC45368F821417D6 Validity Not Before: Sep 25 02:05:34 2026 GMT Not After : Sep 26 03:11:34 2026 GMT Subject: CN=B2CD0401C6839516A2D2CC293FB536795AE6DADD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:09:b2:8c:a2:2e:58:d4:e8:c7:ae:3c:da:6a: cb:eb:78:4e:f0:c1:58:73:55:9f:de:5a:2d:91:f7: bf:dc:15:f6:1a:e0:31:be:63:77:36:fc:bf:c4:ab: 8a:ec:c3:3d:d3:19:12:75:6d:28:bd:6f:f7:45:50: 5d:5a:10:8e:13:eb:8f:61:1b:df:7b:2a:e7:a1:7e: 90:54:bc:c5:7d:e7:1c:96:6e:5c:46:01:cb:eb:56: 58:11:29:7b:8a:45:6d:ee:c0:4b:39:6f:69:6b:df: 33:7a:e3:ce:a5:2a:5f:21:64:6b:17:1f:61:83:b2: cd:53:5f:17:6f:69:23:b3:b2:99:6c:94:c6:bb:a9: 28:3b:b4:9b:a2:cb:2f:eb:c3:ea:9c:7c:a3:de:b2: 3f:bc:c5:9c:eb:82:5b:3b:03:b6:b1:ad:d4:71:c5: 21:ab:fd:fa:cd:70:9a:eb:57:3c:1f:17:31:0f:02: 39:4d:8a:df:6d:44:52:1d:95:92:d2:1e:fa:7c:30: a3:2f:bf:41:38:6e:98:15:31:04:66:83:4f:d5:b2: b4:5c:7b:05:07:98:ce:3b:0d:71:2d:b6:4b:8b:0b: 98:7f:e1:9f:be:80:49:e1:2b:df:58:d9:f3:3a:07: 38:51:4c:29:0f:37:11:38:14:11:f9:d9:bd:61:df: 41:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:CD:04:01:C6:83:95:16:A2:D2:CC:29:3F:B5:36:79:5A:E6:DA:DD X509v3 Authority Key Identifier: keyid:8F:12:12:A1:94:54:D2:A4:97:86:35:9C:AC:45:36:8F:82:14:17:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CSPTEK/0/8F1212A19454D2A49786359CAC45368F821417D6.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8F1212A19454D2A49786359CAC45368F821417D6.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CSPTEK/0/8F1212A19454D2A49786359CAC45368F821417D6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:29:62:cd:36:2c:9b:1b:2c:91:b6:4b:b1:e0:30:c7:3c:c6: ba:5d:3e:78:5d:55:5e:25:10:01:47:6c:ee:e4:b3:1b:fe:2d: 3a:0b:24:ab:ac:cb:80:69:d6:03:c5:e0:91:8f:2b:5d:17:f1: c1:79:26:68:d3:8a:82:1f:06:2e:d9:a6:94:c1:07:c2:2f:2a: f4:01:d8:7b:6f:8f:e4:72:3c:1e:36:3d:4b:0a:da:33:2e:7e: 7b:74:82:85:46:e0:1d:68:69:04:b9:42:ad:40:9b:ba:7c:cb: 71:2f:35:70:f9:2f:ad:ab:4e:40:f8:17:c5:2e:84:10:0d:58: a5:d9:09:d7:0e:aa:5c:f6:7d:a0:ef:68:c6:0a:a9:96:0f:5e: 17:36:67:2b:3f:55:ac:d1:e5:69:a6:c6:c5:5b:b9:bc:b4:bc: 0d:3b:1e:1f:cc:8a:5b:70:ea:9e:8b:9e:f5:e4:82:09:08:28: fc:29:2b:27:ed:ed:2c:fb:bf:78:72:61:e5:22:e5:8a:da:b9: d9:8b:f1:e7:5a:81:de:38:56:66:b7:b2:54:4a:a5:7f:d1:10: fc:95:0b:ec:ea:d3:b3:f8:be:40:3a:78:61:0f:29:84:cb:05: 4a:99:e6:9e:2b:18:fc:76:00:be:1e:5c:fa:9c:64:4b:e5:5a: 3d:8f:d2:8b -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUSQZnyeELpfMc1705GzfOeatv1/wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEYxMjEyQTE5NDU0RDJBNDk3ODYzNTlDQUM0NTM2OEY4 MjE0MTdENjAeFw0yNjA5MjUwMjA1MzRaFw0yNjA5MjYwMzExMzRaMDMxMTAvBgNV BAMTKEIyQ0QwNDAxQzY4Mzk1MTZBMkQyQ0MyOTNGQjUzNjc5NUFFNkRBREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFCbKMoi5Y1OjHrjzaasvreE7w wVhzVZ/eWi2R97/cFfYa4DG+Y3c2/L/Eq4rswz3TGRJ1bSi9b/dFUF1aEI4T649h G997KuehfpBUvMV95xyWblxGAcvrVlgRKXuKRW3uwEs5b2lr3zN6486lKl8hZGsX H2GDss1TXxdvaSOzsplslMa7qSg7tJuiyy/rw+qcfKPesj+8xZzrgls7A7axrdRx xSGr/frNcJrrVzwfFzEPAjlNit9tRFIdlZLSHvp8MKMvv0E4bpgVMQRmg0/VsrRc ewUHmM47DXEttkuLC5h/4Z++gEnhK99Y2fM6BzhRTCkPNxE4FBH52b1h30HlAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQUss0EAcaDlRai0swpP7U2eVrm2t0wHwYDVR0j BBgwFoAUjxISoZRU0qSXhjWcrEU2j4IUF9YwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ1NQVEVL LzAvOEYxMjEyQTE5NDU0RDJBNDk3ODYzNTlDQUM0NTM2OEY4MjE0MTdENi5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMS84RjEyMTJBMTk0NTREMkE0OTc4NjM1OUNBQzQ1 MzY4RjgyMTQxN0Q2LmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ1NQVEVLLzAvOEYxMjEyQTE5NDU0 RDJBNDk3ODYzNTlDQUM0NTM2OEY4MjE0MTdENi5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBADkpYs02LJsb LJG2S7HgMMc8xrpdPnhdVV4lEAFHbO7ksxv+LToLJKusy4Bp1gPF4JGPK10X8cF5 JmjTioIfBi7ZppTBB8IvKvQB2Htvj+RyPB42PUsK2jMufnt0goVG4B1oaQS5Qq1A m7p8y3EvNXD5L62rTkD4F8UuhBANWKXZCdcOqlz2faDvaMYKqZYPXhc2Zys/VazR 5WmmxsVbuby0vA07Hh/Miltw6p6LnvXkggkIKPwpKyft7Sz7v3hyYeUi5YraudmL 8edagd44Vma3slRKpX/REPyVC+zq07P4vkA6eGEPKYTLBUqZ5p4rGPx2AL4eXPqc ZEvlWj2P0os= -----END CERTIFICATE-----Generated at Fri Sep 25 10:59:09 2026 by rpki-client