$ rpki-client -vvvf rpkica.twnic.tw/rpki/DONGFONG/1/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.mft File: 65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.mft (raw, json) Hash identifier: ZKJAbMXGH/5LW23JeiDxUKzPws30Wa441Xdw1OmfJsE= Subject key identifier: 4A:10:44:EB:A6:32:9E:56:F7:E0:1B:45:60:66:8F:2C:25:80:09:1A Authority key identifier: 65:E9:4C:77:89:AD:A7:E5:F5:40:FD:BE:95:82:D8:EA:7A:A4:6A:94 Certificate issuer: /CN=65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94 Certificate serial: 13B714A7281266FF605D81DCBCAB2F687E722755 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.cer Subject info access: rsync://rpkica.twnic.tw/rpki/DONGFONG/1/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 07:03:59 +0000 Manifest this update: Thu 24 Sep 2026 06:58:59 +0000 Manifest next update: Fri 25 Sep 2026 10:33:59 +0000 Files and hashes: 1: 3135392e3131372e38342e302f32342d3234203d3e203138303436.roa (hash: k6/jJKCg7k9igf9mXdOBVLZ2L1gd68NXx+o3im+bxhY=) 2: 3135392e3131372e36342e302f31392d3234203d3e203138303436.roa (hash: BnOw5LV6cVAcgowH1P0wBRFgURzOj7EomMXHxAWHT28=) 3: 65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.crl (hash: D6/Qv/tHnE8F9BPDm3yAugBmA2YYVzmkLdML+2WPNxI=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/DONGFONG/1/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.crl rsync://rpkica.twnic.tw/rpki/DONGFONG/1/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 02:24:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:b7:14:a7:28:12:66:ff:60:5d:81:dc:bc:ab:2f:68:7e:72:27:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94 Validity Not Before: Sep 24 06:58:59 2026 GMT Not After : Sep 25 10:33:59 2026 GMT Subject: CN=4A1044EBA6329E56F7E01B4560668F2C2580091A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:14:78:90:67:73:aa:84:b5:c3:55:20:79:03: 1f:4c:58:89:4e:b8:d0:bb:ba:7b:01:54:f7:37:63: 85:1e:d6:f5:68:c1:03:bc:09:3b:a9:34:a5:27:1e: 95:95:d2:f8:92:6a:e4:89:26:ef:f6:dd:51:d2:aa: ce:6d:db:34:84:22:a1:ce:4f:e3:62:36:00:2a:04: db:ee:12:58:9b:c1:0c:56:e1:ca:e3:7a:03:55:98: 49:d8:16:27:b6:14:b7:d9:89:0b:28:1f:e4:8a:a8: 6b:e7:cc:da:80:3f:00:84:19:fd:11:d2:1f:48:a1: 9b:7a:94:0b:ae:08:76:30:b8:61:20:2f:78:8a:47: 3a:03:e8:1f:fd:4f:98:b0:00:3b:6c:cc:e2:36:37: 2f:e6:e4:29:6b:26:80:fa:c2:df:12:0d:e9:81:ff: 60:33:01:fe:ff:23:f4:01:a9:6a:47:8c:bb:c8:1c: 48:cc:e2:bb:64:ca:a7:06:4b:90:62:83:81:c8:d2: bc:cb:3d:6b:66:ee:3a:4a:9b:b0:9e:2a:c7:4e:8a: 2e:08:74:33:60:af:01:db:8f:a9:10:fb:18:6b:2b: da:3d:93:df:f7:2c:31:72:4f:9d:42:b1:49:ad:5e: db:76:3a:18:49:59:ad:9f:88:c4:db:c3:ba:d8:02: 69:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:10:44:EB:A6:32:9E:56:F7:E0:1B:45:60:66:8F:2C:25:80:09:1A X509v3 Authority Key Identifier: keyid:65:E9:4C:77:89:AD:A7:E5:F5:40:FD:BE:95:82:D8:EA:7A:A4:6A:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/DONGFONG/1/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DONGFONG/1/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:8f:3f:24:e8:69:af:df:1a:88:6f:46:6a:9f:77:0a:c6:e5: 78:17:78:e4:9a:b6:7c:8e:4c:eb:33:17:f4:f7:47:7e:42:84: db:3a:72:2c:0f:bd:39:06:4d:0e:ec:50:8e:41:f6:1e:8f:13: 34:0a:d1:44:6d:4e:ce:fb:de:01:f7:80:58:ea:9a:77:86:38: 9f:cc:5a:5f:7a:28:92:94:75:20:cc:59:8c:b4:ea:e6:a7:a5: 44:07:5f:f6:01:43:55:3f:93:55:53:3c:7c:cd:f9:ff:ae:26: f6:42:a7:e8:39:84:26:e9:be:c9:17:49:4d:61:31:a4:e6:0b: 84:2c:11:c5:d7:d0:95:27:0b:de:18:84:63:ee:ea:1d:35:d0: ac:60:74:db:07:2b:70:ef:bd:a5:67:bf:2f:bf:83:e7:d8:b9: ce:41:9d:e2:b9:8a:79:f0:a1:b6:91:69:b4:6d:90:ef:2a:9b: 69:66:ea:04:be:e6:4b:b5:2f:9a:4c:73:a4:9f:c4:27:e1:61: ec:67:70:37:55:e0:4e:eb:1f:e5:ac:c4:b3:1f:b4:2d:f6:59: 3b:a3:e6:5b:6c:10:5c:5f:90:9d:05:cf:0a:64:ea:68:6f:a8: c2:15:21:e7:20:ab:37:be:3c:87:b2:6f:84:ca:20:60:e5:79: f7:7e:35:f2 -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUE7cUpygSZv9gXYHcvKsvaH5yJ1UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjVFOTRDNzc4OUFEQTdFNUY1NDBGREJFOTU4MkQ4RUE3 QUE0NkE5NDAeFw0yNjA5MjQwNjU4NTlaFw0yNjA5MjUxMDMzNTlaMDMxMTAvBgNV BAMTKDRBMTA0NEVCQTYzMjlFNTZGN0UwMUI0NTYwNjY4RjJDMjU4MDA5MUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnFHiQZ3OqhLXDVSB5Ax9MWIlO uNC7unsBVPc3Y4Ue1vVowQO8CTupNKUnHpWV0viSauSJJu/23VHSqs5t2zSEIqHO T+NiNgAqBNvuElibwQxW4crjegNVmEnYFie2FLfZiQsoH+SKqGvnzNqAPwCEGf0R 0h9IoZt6lAuuCHYwuGEgL3iKRzoD6B/9T5iwADtszOI2Ny/m5ClrJoD6wt8SDemB /2AzAf7/I/QBqWpHjLvIHEjM4rtkyqcGS5Big4HI0rzLPWtm7jpKm7CeKsdOii4I dDNgrwHbj6kQ+xhrK9o9k9/3LDFyT51CsUmtXtt2OhhJWa2fiMTbw7rYAmmtAgMB AAGjggHyMIIB7jAdBgNVHQ4EFgQUShBE66Yynlb34BtFYGaPLCWACRowHwYDVR0j BBgwFoAUZelMd4mtp+X1QP2+lYLY6nqkapQwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRE9OR0ZP TkcvMS82NUU5NEM3Nzg5QURBN0U1RjU0MEZEQkU5NTgyRDhFQTdBQTQ2QTk0LmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8wLzY1RTk0Qzc3ODlBREE3RTVGNTQwRkRCRTk1 ODJEOEVBN0FBNDZBOTQuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9ET05HRk9ORy8xLzY1RTk0Qzc3 ODlBREE3RTVGNTQwRkRCRTk1ODJEOEVBN0FBNDZBOTQubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCmjz8k 6Gmv3xqIb0Zqn3cKxuV4F3jkmrZ8jkzrMxf090d+QoTbOnIsD705Bk0O7FCOQfYe jxM0CtFEbU7O+94B94BY6pp3hjifzFpfeiiSlHUgzFmMtOrmp6VEB1/2AUNVP5NV Uzx8zfn/rib2QqfoOYQm6b7JF0lNYTGk5guELBHF19CVJwveGIRj7uodNdCsYHTb Bytw772lZ78vv4Pn2LnOQZ3iuYp58KG2kWm0bZDvKptpZuoEvuZLtS+aTHOkn8Qn 4WHsZ3A3VeBO6x/lrMSzH7Qt9lk7o+ZbbBBcX5CdBc8KZOpob6jCFSHnIKs3vjyH sm+EyiBg5Xn3fjXy -----END CERTIFICATE-----Generated at Thu Sep 24 17:35:04 2026 by rpki-client