$ rpki-client -vvvf rpkica.twnic.tw/rpki/DAFU/0/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.mft File: 9D0F6D536F053C3BB5233E68E0636F8A6FADA460.mft (raw, json) Hash identifier: tEHYqJN6e2/M/zPTemKnSZEQ9agLgbj+FzielVy6mrE= Subject key identifier: D6:4E:16:DE:2A:89:41:39:BE:7C:7B:8B:A2:25:3E:70:D0:90:69:4A Authority key identifier: 9D:0F:6D:53:6F:05:3C:3B:B5:23:3E:68:E0:63:6F:8A:6F:AD:A4:60 Certificate issuer: /CN=9D0F6D536F053C3BB5233E68E0636F8A6FADA460 Certificate serial: 21A8090B060E4C86FE8A23D43EDF2E626869739D Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.cer Subject info access: rsync://rpkica.twnic.tw/rpki/DAFU/0/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.mft Manifest number: B9 Signing time: Wed 23 Sep 2026 07:01:53 +0000 Manifest this update: Wed 23 Sep 2026 06:56:53 +0000 Manifest next update: Thu 24 Sep 2026 09:32:53 +0000 Files and hashes: 1: 3231302e312e3233342e302f32332d3332203d3e20313334383233.roa (hash: HWI5VQZaFjKYV+LScUBkUhCoJacVyotR7e1ayxfccA8=) 2: 3231302e312e3233342e302f32332d3332203d3e20313331363537.roa (hash: XhpQ+C1tVRKngGZ94cXlaeW9/WXKoL5qCwvg98P9HFY=) 3: 9D0F6D536F053C3BB5233E68E0636F8A6FADA460.crl (hash: nd3f+KYbxnfYAAWEQzO/A+Pa3yOIWZeEZyzbG+XTWUg=) 4: 3231302e312e3233342e302f32342d3332203d3e20313334383233.roa (hash: dFGbPuZUVl9n4NEFbEpxmNgTeCxq+xPVEQs+VbBbgw8=) 5: 3231302e312e3233352e302f32342d3332203d3e20313331363537.roa (hash: RLXRr3oaU8tfZv8c58D+ZW+I4V/4m7eEXGAKJ8n/Gpk=) 6: 3231302e312e3233342e302f32342d3332203d3e20313331363537.roa (hash: pYVK17zAbMWT4djhepdkPZ+a4SmhzlWvmNCdXixNe1Y=) 7: 3231302e312e3233352e302f32342d3332203d3e20313334383233.roa (hash: 1dxx2UnOoxxG5IvdlSa/CJUvxkuNs3hW+sxUCu3CP4M=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/DAFU/0/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.crl rsync://rpkica.twnic.tw/rpki/DAFU/0/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 09:32:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:a8:09:0b:06:0e:4c:86:fe:8a:23:d4:3e:df:2e:62:68:69:73:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D0F6D536F053C3BB5233E68E0636F8A6FADA460 Validity Not Before: Sep 23 06:56:53 2026 GMT Not After : Sep 24 09:32:53 2026 GMT Subject: CN=D64E16DE2A894139BE7C7B8BA2253E70D090694A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:95:55:ce:2f:6f:8c:97:fe:6f:7c:ec:cd:4e: 15:1e:8a:e4:93:c0:af:2e:81:c8:83:8c:db:a1:dd: 7a:88:6b:f1:a2:85:1f:61:f0:26:d0:94:80:e7:2f: d4:98:19:cf:a6:ab:95:a6:bc:c7:eb:f7:13:c8:47: 77:8e:10:10:1e:80:57:76:41:96:bc:36:d1:b9:5c: d4:a4:23:03:5e:af:f6:77:01:67:0a:9d:53:be:b6: 8b:ec:78:50:06:1b:69:2c:34:7d:6d:c0:e4:94:8c: 93:8f:4f:e5:5f:47:df:f2:0a:dc:ce:13:47:85:4d: f0:f8:99:3c:25:79:d7:5a:d6:76:c4:65:f9:4c:c7: fb:a6:cb:9a:09:fe:9d:89:de:fb:2e:ec:76:6e:ae: 5c:79:ca:13:97:87:c4:59:ec:59:a6:13:fd:b6:d9: 4e:40:aa:b0:3a:17:81:47:79:5b:3e:8e:1d:5a:a0: 4a:de:b7:78:eb:b2:4a:c0:ef:4d:ed:0c:f7:6d:bc: 26:dd:3d:2a:45:4e:20:51:77:7d:dc:98:0c:b4:27: d1:ee:e5:c0:43:4f:51:10:24:37:f4:33:11:d6:4f: 5b:fe:82:f4:18:bd:79:7b:bc:50:29:24:cd:23:a2: ca:ea:f8:83:27:c8:6b:b4:25:b0:98:4d:1d:21:e9: 5f:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:4E:16:DE:2A:89:41:39:BE:7C:7B:8B:A2:25:3E:70:D0:90:69:4A X509v3 Authority Key Identifier: keyid:9D:0F:6D:53:6F:05:3C:3B:B5:23:3E:68:E0:63:6F:8A:6F:AD:A4:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/DAFU/0/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DAFU/0/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:96:47:80:1b:65:f2:87:29:4c:9f:e4:2d:0c:c0:6b:ca:0a: 55:be:62:a3:1f:7a:c7:49:0a:fc:db:82:58:52:d5:20:bf:5d: a7:38:da:5a:22:73:29:fe:e1:5a:2e:71:c8:0a:e6:1d:56:e5: 92:48:2b:20:94:42:68:27:f0:5e:4a:95:40:7d:22:8a:f0:32: a5:0f:b3:1f:66:09:de:e9:d2:d8:40:15:70:d2:9a:2a:8f:17: c8:69:cd:51:83:b3:50:60:34:8e:b7:4f:c1:13:d4:5d:80:c1: fe:b1:ae:b8:5c:3c:67:e3:7a:19:77:d7:f4:cd:3f:d2:69:e4: 65:fb:c3:6c:15:28:87:ea:a1:aa:57:07:be:02:09:6c:25:16: a1:4d:c5:b0:16:ba:f5:2e:9b:d2:bb:9b:c3:3b:84:a6:8e:57: bd:74:99:18:4e:25:c3:ff:91:6d:f4:5b:00:bb:ec:39:d7:40: 82:df:21:67:21:c6:4d:b7:67:4d:5b:eb:92:4e:21:51:4d:ab: 26:0c:f1:92:6d:ee:3a:e7:e7:63:53:5b:d2:b9:16:88:b5:e2: 76:3b:98:ed:9f:bc:07:c3:cd:b3:10:84:07:c9:1c:4d:57:00: 8a:28:aa:bb:4c:0a:64:6f:ef:7c:fc:b0:2a:6f:ee:5b:17:3a: 16:aa:a0:fc -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUIagJCwYOTIb+iiPUPt8uYmhpc50wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQwRjZENTM2RjA1M0MzQkI1MjMzRTY4RTA2MzZGOEE2 RkFEQTQ2MDAeFw0yNjA5MjMwNjU2NTNaFw0yNjA5MjQwOTMyNTNaMDMxMTAvBgNV BAMTKEQ2NEUxNkRFMkE4OTQxMzlCRTdDN0I4QkEyMjUzRTcwRDA5MDY5NEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVlVXOL2+Ml/5vfOzNThUeiuST wK8ugciDjNuh3XqIa/GihR9h8CbQlIDnL9SYGc+mq5WmvMfr9xPIR3eOEBAegFd2 QZa8NtG5XNSkIwNer/Z3AWcKnVO+tovseFAGG2ksNH1twOSUjJOPT+VfR9/yCtzO E0eFTfD4mTwledda1nbEZflMx/umy5oJ/p2J3vsu7HZurlx5yhOXh8RZ7FmmE/22 2U5AqrA6F4FHeVs+jh1aoEret3jrskrA703tDPdtvCbdPSpFTiBRd33cmAy0J9Hu 5cBDT1EQJDf0MxHWT1v+gvQYvXl7vFApJM0josrq+IMnyGu0JbCYTR0h6V9FAgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQU1k4W3iqJQTm+fHuLoiU+cNCQaUowHwYDVR0j BBgwFoAUnQ9tU28FPDu1Iz5o4GNvim+tpGAwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvREFGVS8w LzlEMEY2RDUzNkYwNTNDM0JCNTIzM0U2OEUwNjM2RjhBNkZBREE0NjAuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvOUQwRjZENTM2RjA1M0MzQkI1MjMzRTY4RTA2MzZG OEE2RkFEQTQ2MC5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0RBRlUvMC85RDBGNkQ1MzZGMDUzQzNC QjUyMzNFNjhFMDYzNkY4QTZGQURBNDYwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGJZHgBtl8ocpTJ/k LQzAa8oKVb5iox96x0kK/NuCWFLVIL9dpzjaWiJzKf7hWi5xyArmHVblkkgrIJRC aCfwXkqVQH0iivAypQ+zH2YJ3unS2EAVcNKaKo8XyGnNUYOzUGA0jrdPwRPUXYDB /rGuuFw8Z+N6GXfX9M0/0mnkZfvDbBUoh+qhqlcHvgIJbCUWoU3FsBa69S6b0rub wzuEpo5XvXSZGE4lw/+RbfRbALvsOddAgt8hZyHGTbdnTVvrkk4hUU2rJgzxkm3u OufnY1Nb0rkWiLXidjuY7Z+8B8PNsxCEB8kcTVcAiiiqu0wKZG/vfPywKm/uWxc6 Fqqg/A== -----END CERTIFICATE-----Generated at Thu Sep 24 02:31:20 2026 by rpki-client