$ rpki-client -vvvf rpkica.twnic.tw/rpki/DAFU/0/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.mft File: 9D0F6D536F053C3BB5233E68E0636F8A6FADA460.mft (raw, json) Hash identifier: rPqPz9xD3GoXFnzRvRFdj1JVlTsSw5z1iRwU8Aj0oZU= Subject key identifier: 9A:B1:45:3B:95:B4:25:98:03:28:3B:0D:DE:79:3B:25:61:5E:D7:AE Authority key identifier: 9D:0F:6D:53:6F:05:3C:3B:B5:23:3E:68:E0:63:6F:8A:6F:AD:A4:60 Certificate issuer: /CN=9D0F6D536F053C3BB5233E68E0636F8A6FADA460 Certificate serial: 2E3EA9CF737E181B408F95750DBF262C2145BF8E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.cer Subject info access: rsync://rpkica.twnic.tw/rpki/DAFU/0/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.mft Manifest number: FE Signing time: Sat 14 Nov 2026 08:20:55 +0000 Manifest this update: Sat 14 Nov 2026 08:15:55 +0000 Manifest next update: Sun 15 Nov 2026 09:19:55 +0000 Files and hashes: 1: 3231302e312e3233342e302f32332d3332203d3e20313331363537.roa (hash: XhpQ+C1tVRKngGZ94cXlaeW9/WXKoL5qCwvg98P9HFY=) 2: 3231302e312e3233352e302f32342d3332203d3e20313331363537.roa (hash: RLXRr3oaU8tfZv8c58D+ZW+I4V/4m7eEXGAKJ8n/Gpk=) 3: 3231302e312e3233342e302f32332d3332203d3e20313334383233.roa (hash: HWI5VQZaFjKYV+LScUBkUhCoJacVyotR7e1ayxfccA8=) 4: 3231302e312e3233342e302f32342d3332203d3e20313331363537.roa (hash: pYVK17zAbMWT4djhepdkPZ+a4SmhzlWvmNCdXixNe1Y=) 5: 9D0F6D536F053C3BB5233E68E0636F8A6FADA460.crl (hash: X/t18VCjI852tW/I/VeBhHEyE2hVqiLwwQ3MGVqHPfg=) 6: 3231302e312e3233352e302f32342d3332203d3e20313334383233.roa (hash: 1dxx2UnOoxxG5IvdlSa/CJUvxkuNs3hW+sxUCu3CP4M=) 7: 3231302e312e3233342e302f32342d3332203d3e20313334383233.roa (hash: dFGbPuZUVl9n4NEFbEpxmNgTeCxq+xPVEQs+VbBbgw8=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/DAFU/0/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.crl rsync://rpkica.twnic.tw/rpki/DAFU/0/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 09:19:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:3e:a9:cf:73:7e:18:1b:40:8f:95:75:0d:bf:26:2c:21:45:bf:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D0F6D536F053C3BB5233E68E0636F8A6FADA460 Validity Not Before: Nov 14 08:15:55 2026 GMT Not After : Nov 15 09:19:55 2026 GMT Subject: CN=9AB1453B95B4259803283B0DDE793B25615ED7AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:dd:29:0b:e6:6a:2f:ae:2e:1f:00:cd:50:24: 7e:f3:5b:a2:07:05:c3:7c:e6:46:cf:03:f7:a0:38: 83:8c:8e:92:ec:3d:8f:3a:b5:56:d5:06:60:28:3a: 97:57:ec:46:e8:1e:81:4c:70:28:cc:b1:f0:c6:75: 5e:32:b4:e3:16:f8:2f:f1:b0:65:6d:f6:9a:1c:30: 01:85:35:96:f2:72:93:b5:2f:30:55:b3:00:75:7a: bf:70:68:83:6a:68:4a:3c:51:39:21:39:e8:f1:88: 1e:87:21:ba:30:c9:8e:a8:fb:20:e8:98:42:f9:ff: 6e:07:96:95:51:d6:5d:93:5b:86:46:e0:f6:24:3c: 3f:e7:ad:03:cf:47:a7:2c:14:c7:9b:bd:90:46:26: 64:16:6e:eb:d7:b8:9c:bb:a0:d1:d3:5b:5a:c9:fb: cf:f7:d3:bd:54:26:93:65:f8:50:e3:44:f5:c3:13: d7:da:cd:82:a1:76:20:4e:93:c5:50:f1:24:58:5d: e1:de:90:e2:d0:33:14:2f:fd:12:49:cb:98:d1:b5: da:36:d0:9b:68:2f:9d:aa:86:64:5e:8f:de:e1:23: ed:8f:ff:72:2b:2c:94:eb:ca:ae:23:7b:2a:16:b8: ab:55:15:55:aa:5c:73:08:28:87:b8:04:6d:69:15: c2:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:B1:45:3B:95:B4:25:98:03:28:3B:0D:DE:79:3B:25:61:5E:D7:AE X509v3 Authority Key Identifier: keyid:9D:0F:6D:53:6F:05:3C:3B:B5:23:3E:68:E0:63:6F:8A:6F:AD:A4:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/DAFU/0/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DAFU/0/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:c5:c2:fb:2e:0b:fa:cb:7c:e4:50:eb:53:0d:46:60:2d:6c: e1:39:e1:eb:d6:f5:42:f9:ba:62:da:a4:ce:52:01:23:65:6c: 7c:18:29:b2:8b:8f:d7:16:41:63:d2:e1:8d:ca:fb:28:60:3d: 54:c5:06:8d:80:04:72:fc:cc:de:7d:29:70:6c:78:e1:a9:fa: aa:0c:ae:5c:6e:c3:41:4e:0f:6d:e5:76:9f:bc:a2:81:56:2f: 8c:4e:1e:5b:d9:13:d5:74:4b:7a:9f:5c:c0:4d:af:63:3f:59: 6a:c7:6c:a6:71:25:c6:33:7c:ee:45:9a:3e:f2:3f:59:9a:04: 27:e4:8c:d7:b3:0b:ad:99:9a:94:9c:08:8d:d2:15:27:87:9a: 51:95:1e:26:ad:a9:b2:d7:82:f0:53:47:e0:37:b6:02:a0:b5: 52:fb:59:4d:9e:8c:f1:f4:70:54:71:ac:d1:dd:e8:98:b6:20: 88:81:24:74:44:22:b9:e4:1e:4b:eb:1e:b6:33:c9:57:f4:67: 2f:8b:f3:ce:4d:8b:a9:da:42:33:b0:7a:75:ef:72:6f:5b:ef: 6f:85:dd:f4:19:11:70:d4:68:65:c5:9b:93:85:1e:b2:41:78: ce:2d:61:68:57:40:b4:24:7d:ab:9a:23:05:29:30:0b:f2:c3: a5:3e:de:34 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIULj6pz3N+GBtAj5V1Db8mLCFFv44wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQwRjZENTM2RjA1M0MzQkI1MjMzRTY4RTA2MzZGOEE2 RkFEQTQ2MDAeFw0yNjExMTQwODE1NTVaFw0yNjExMTUwOTE5NTVaMDMxMTAvBgNV BAMTKDlBQjE0NTNCOTVCNDI1OTgwMzI4M0IwRERFNzkzQjI1NjE1RUQ3QUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCN3SkL5movri4fAM1QJH7zW6IH BcN85kbPA/egOIOMjpLsPY86tVbVBmAoOpdX7EboHoFMcCjMsfDGdV4ytOMW+C/x sGVt9pocMAGFNZbycpO1LzBVswB1er9waINqaEo8UTkhOejxiB6HIbowyY6o+yDo mEL5/24HlpVR1l2TW4ZG4PYkPD/nrQPPR6csFMebvZBGJmQWbuvXuJy7oNHTW1rJ +8/3071UJpNl+FDjRPXDE9fazYKhdiBOk8VQ8SRYXeHekOLQMxQv/RJJy5jRtdo2 0JtoL52qhmRej97hI+2P/3IrLJTryq4jeyoWuKtVFVWqXHMIKIe4BG1pFcIXAgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQUmrFFO5W0JZgDKDsN3nk7JWFe164wHwYDVR0j BBgwFoAUnQ9tU28FPDu1Iz5o4GNvim+tpGAwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvREFGVS8w LzlEMEY2RDUzNkYwNTNDM0JCNTIzM0U2OEUwNjM2RjhBNkZBREE0NjAuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvOUQwRjZENTM2RjA1M0MzQkI1MjMzRTY4RTA2MzZG OEE2RkFEQTQ2MC5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0RBRlUvMC85RDBGNkQ1MzZGMDUzQzNC QjUyMzNFNjhFMDYzNkY4QTZGQURBNDYwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASsXC+y4L+st85FDr Uw1GYC1s4Tnh69b1Qvm6YtqkzlIBI2VsfBgpsouP1xZBY9Lhjcr7KGA9VMUGjYAE cvzM3n0pcGx44an6qgyuXG7DQU4PbeV2n7yigVYvjE4eW9kT1XRLep9cwE2vYz9Z asdspnElxjN87kWaPvI/WZoEJ+SM17MLrZmalJwIjdIVJ4eaUZUeJq2psteC8FNH 4De2AqC1UvtZTZ6M8fRwVHGs0d3omLYgiIEkdEQiueQeS+setjPJV/RnL4vzzk2L qdpCM7B6de9yb1vvb4Xd9BkRcNRoZcWbk4UeskF4zi1haFdAtCR9q5ojBSkwC/LD pT7eNA== -----END CERTIFICATE-----Generated at Sun Nov 15 01:03:30 2026 by rpki-client