$ rpki-client -vvvf rpkica.twnic.tw/rpki/DOWNWIN/0/A067A95CB7882938BA5EE0BF9E47C2E030EDF6FB.mft File: A067A95CB7882938BA5EE0BF9E47C2E030EDF6FB.mft (raw, json) Hash identifier: t+M95U9eBaGn7MYAdl6cgW8RNOP3gu0wblji35+sb0c= Subject key identifier: 36:F3:D9:4B:53:44:0C:A1:95:CB:E9:02:BD:15:18:F6:1B:79:92:CA Authority key identifier: A0:67:A9:5C:B7:88:29:38:BA:5E:E0:BF:9E:47:C2:E0:30:ED:F6:FB Certificate issuer: /CN=A067A95CB7882938BA5EE0BF9E47C2E030EDF6FB Certificate serial: 2A05B33F60889547764CA5F6C3893A4A9F9CF78A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A067A95CB7882938BA5EE0BF9E47C2E030EDF6FB.cer Subject info access: rsync://rpkica.twnic.tw/rpki/DOWNWIN/0/A067A95CB7882938BA5EE0BF9E47C2E030EDF6FB.mft Manifest number: B7 Signing time: Fri 25 Sep 2026 08:42:31 +0000 Manifest this update: Fri 25 Sep 2026 08:37:31 +0000 Manifest next update: Sat 26 Sep 2026 12:14:31 +0000 Files and hashes: 1: A067A95CB7882938BA5EE0BF9E47C2E030EDF6FB.crl (hash: lqlhJzdakzJsOV92bWjFl2oNj7WJfnDVvLdyQ1EnN8M=) 2: 3130332e3131382e3134382e302f32332d3332203d3e20313331313439.roa (hash: 37E46pfPxEq9A4RxL1D37D3fAAtA0Gnx6vMhsNaTo4A=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/DOWNWIN/0/A067A95CB7882938BA5EE0BF9E47C2E030EDF6FB.crl rsync://rpkica.twnic.tw/rpki/DOWNWIN/0/A067A95CB7882938BA5EE0BF9E47C2E030EDF6FB.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A067A95CB7882938BA5EE0BF9E47C2E030EDF6FB.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 12:14:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:05:b3:3f:60:88:95:47:76:4c:a5:f6:c3:89:3a:4a:9f:9c:f7:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A067A95CB7882938BA5EE0BF9E47C2E030EDF6FB Validity Not Before: Sep 25 08:37:31 2026 GMT Not After : Sep 26 12:14:31 2026 GMT Subject: CN=36F3D94B53440CA195CBE902BD1518F61B7992CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:79:82:68:0b:93:18:4c:f1:6e:ef:7a:d8:bf: 4b:48:1b:53:33:cf:a7:62:86:07:fd:85:91:65:56: 66:2e:0e:01:be:08:7a:3e:39:29:4b:67:73:83:a9: 46:4b:e0:2c:4b:8c:33:f6:e8:48:f0:04:8a:c2:40: aa:22:27:8d:84:d6:6c:ff:63:11:c2:6a:6a:09:d4: fe:59:08:ba:4e:9b:8a:eb:b6:1d:d2:f3:fb:3c:56: 93:c6:d0:7a:07:f5:a2:fc:ac:04:2f:eb:2f:24:fe: 3c:b5:77:a4:5f:62:15:de:06:8f:9f:24:ba:33:56: aa:f1:0e:57:f0:76:68:9a:54:db:f5:4f:b0:92:cd: e8:96:2c:c5:d3:71:60:38:6a:47:3e:a8:37:c0:78: 98:5e:bf:47:81:ac:bc:d3:38:49:89:72:f6:52:cd: 6c:42:81:6b:ff:bd:a5:89:4b:52:a9:85:ee:a3:60: 2a:68:29:95:fd:8a:57:47:44:6e:6d:de:55:14:0d: 75:fb:39:ec:44:96:73:3e:3f:07:93:3c:68:4c:fd: cd:36:ab:fe:5f:cd:3d:8d:05:37:ab:a5:52:59:65: f3:41:f0:b2:8d:7f:9d:74:54:8d:13:42:ee:60:8c: 65:11:f5:08:eb:8f:98:b4:af:62:8b:1f:2e:cc:59: ae:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:F3:D9:4B:53:44:0C:A1:95:CB:E9:02:BD:15:18:F6:1B:79:92:CA X509v3 Authority Key Identifier: keyid:A0:67:A9:5C:B7:88:29:38:BA:5E:E0:BF:9E:47:C2:E0:30:ED:F6:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/DOWNWIN/0/A067A95CB7882938BA5EE0BF9E47C2E030EDF6FB.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A067A95CB7882938BA5EE0BF9E47C2E030EDF6FB.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DOWNWIN/0/A067A95CB7882938BA5EE0BF9E47C2E030EDF6FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:d8:f2:b6:fa:20:ef:1b:8c:2d:33:e5:89:57:0c:19:0b:48: 19:0f:79:b5:59:50:d5:fc:2a:41:92:59:d9:50:fb:46:51:fa: e5:12:42:64:d6:4d:6e:e1:6a:af:a4:4b:00:64:2c:ac:d2:fa: 5d:48:f6:b1:99:89:e4:c6:f8:91:dc:aa:ab:2f:22:42:52:8a: ef:fb:59:86:32:be:34:b8:50:7c:42:8a:83:ac:9b:10:0d:f4: a7:37:c2:32:c4:18:6d:5e:07:8f:79:23:cb:24:3f:04:72:e7: ff:a4:dd:6a:fe:c3:31:d3:61:e2:65:28:86:a3:25:ae:67:50: 7f:3a:0e:20:fb:33:5b:79:01:a5:8c:97:09:1b:b8:34:14:0e: 55:0a:40:78:d8:82:bb:90:4c:fb:ab:43:62:eb:7a:c3:64:49: 99:34:8a:33:ea:7e:c2:4a:a9:61:71:c4:bc:82:5c:7e:35:2f: 6d:1d:c2:f7:e6:7f:9d:ab:d3:ef:75:7d:62:94:0d:de:c1:04: 37:65:f4:3b:e5:37:1e:d7:80:84:bc:e0:56:d9:fc:05:ff:65: f3:0e:ec:cb:8c:12:4c:ce:df:29:6e:ef:77:d7:87:ab:e7:76: d4:94:3c:0f:8a:7a:f6:53:10:93:cc:2c:55:be:f3:ec:66:54: 4b:90:b8:6c -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIUKgWzP2CIlUd2TKX2w4k6Sp+c94owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTA2N0E5NUNCNzg4MjkzOEJBNUVFMEJGOUU0N0MyRTAz MEVERjZGQjAeFw0yNjA5MjUwODM3MzFaFw0yNjA5MjYxMjE0MzFaMDMxMTAvBgNV BAMTKDM2RjNEOTRCNTM0NDBDQTE5NUNCRTkwMkJEMTUxOEY2MUI3OTkyQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLeYJoC5MYTPFu73rYv0tIG1Mz z6dihgf9hZFlVmYuDgG+CHo+OSlLZ3ODqUZL4CxLjDP26EjwBIrCQKoiJ42E1mz/ YxHCamoJ1P5ZCLpOm4rrth3S8/s8VpPG0HoH9aL8rAQv6y8k/jy1d6RfYhXeBo+f JLozVqrxDlfwdmiaVNv1T7CSzeiWLMXTcWA4akc+qDfAeJhev0eBrLzTOEmJcvZS zWxCgWv/vaWJS1Kphe6jYCpoKZX9ildHRG5t3lUUDXX7OexElnM+PweTPGhM/c02 q/5fzT2NBTerpVJZZfNB8LKNf510VI0TQu5gjGUR9Qjrj5i0r2KLHy7MWa6DAgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQUNvPZS1NEDKGVy+kCvRUY9ht5ksowHwYDVR0j BBgwFoAUoGepXLeIKTi6XuC/nkfC4DDt9vswDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRE9XTldJ Ti8wL0EwNjdBOTVDQjc4ODI5MzhCQTVFRTBCRjlFNDdDMkUwMzBFREY2RkIuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvQTA2N0E5NUNCNzg4MjkzOEJBNUVFMEJGOUU0 N0MyRTAzMEVERjZGQi5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0RPV05XSU4vMC9BMDY3QTk1Q0I3 ODgyOTM4QkE1RUUwQkY5RTQ3QzJFMDMwRURGNkZCLm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEtjytvog 7xuMLTPliVcMGQtIGQ95tVlQ1fwqQZJZ2VD7RlH65RJCZNZNbuFqr6RLAGQsrNL6 XUj2sZmJ5Mb4kdyqqy8iQlKK7/tZhjK+NLhQfEKKg6ybEA30pzfCMsQYbV4Hj3kj yyQ/BHLn/6Tdav7DMdNh4mUohqMlrmdQfzoOIPszW3kBpYyXCRu4NBQOVQpAeNiC u5BM+6tDYut6w2RJmTSKM+p+wkqpYXHEvIJcfjUvbR3C9+Z/navT73V9YpQN3sEE N2X0O+U3HteAhLzgVtn8Bf9l8w7sy4wSTM7fKW7vd9eHq+d21JQ8D4p69lMQk8ws Vb7z7GZUS5C4bA== -----END CERTIFICATE-----Generated at Fri Sep 25 19:32:36 2026 by rpki-client