$ rpki-client -vvvf rpkica.twnic.tw/rpki/DOWTEK/0/4DC8A0E80696AD1A2419ACE881334BE812506228.mft File: 4DC8A0E80696AD1A2419ACE881334BE812506228.mft (raw, json) Hash identifier: bviTHMBXMNRl8kctIyLPwm9FNwOJCBhWuXHqIRWb/Xk= Subject key identifier: A2:12:50:55:6F:1D:55:D7:8A:3A:0B:FE:35:4D:3C:95:9F:6D:CD:9C Authority key identifier: 4D:C8:A0:E8:06:96:AD:1A:24:19:AC:E8:81:33:4B:E8:12:50:62:28 Certificate issuer: /CN=4DC8A0E80696AD1A2419ACE881334BE812506228 Certificate serial: 50D707CCCC1560A1F473AD30F3664B573BA54D26 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/4DC8A0E80696AD1A2419ACE881334BE812506228.cer Subject info access: rsync://rpkica.twnic.tw/rpki/DOWTEK/0/4DC8A0E80696AD1A2419ACE881334BE812506228.mft Manifest number: F0 Signing time: Sun 15 Nov 2026 03:49:44 +0000 Manifest this update: Sun 15 Nov 2026 03:44:44 +0000 Manifest next update: Mon 16 Nov 2026 03:57:44 +0000 Files and hashes: 1: 3136322e342e3233372e302f32342d3234203d3e20323034383434.roa (hash: zY07qsBW6jQWwXSeyJT/a/KdjcX7kqx0lKHP7Wz8JC8=) 2: 3136322e342e3233362e302f32342d3234203d3e20323136313338.roa (hash: t0sxX/J7DHyA7+RMNuIhT3/1j3L5qbFI7k7wb/onnz8=) 3: 3136322e342e3233362e302f32332d3233203d3e20313331363330.roa (hash: W1CiJP1fcJGIBc6vJyxp+aVBKQhzLI93m00Pia4UGPk=) 4: 3136322e342e3233362e302f32342d3234203d3e20323032373336.roa (hash: rqIFLfCYjTacr84/afinxLOCwaaiUV1aCFWFsa89OVU=) 5: 4DC8A0E80696AD1A2419ACE881334BE812506228.crl (hash: WQaO+mmk3BLZECO+DmU8ck0ez9JCqYv4b1uXMxUTcQE=) 6: 3136322e342e3233372e302f32342d3234203d3e20323136343332.roa (hash: XlAgg0iH/qhn/41L/oFVvuvgpv9LVS3KL4NDhTFX9EY=) 7: 3136322e342e3233362e302f32342d3234203d3e20313937353337.roa (hash: rkewqH+q2MmefgvP9xLiHPbeb7043RwX6NEiRy6AeiQ=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/DOWTEK/0/4DC8A0E80696AD1A2419ACE881334BE812506228.crl rsync://rpkica.twnic.tw/rpki/DOWTEK/0/4DC8A0E80696AD1A2419ACE881334BE812506228.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/4DC8A0E80696AD1A2419ACE881334BE812506228.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 15:35:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:d7:07:cc:cc:15:60:a1:f4:73:ad:30:f3:66:4b:57:3b:a5:4d:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DC8A0E80696AD1A2419ACE881334BE812506228 Validity Not Before: Nov 15 03:44:44 2026 GMT Not After : Nov 16 03:57:44 2026 GMT Subject: CN=A21250556F1D55D78A3A0BFE354D3C959F6DCD9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:2a:64:48:b2:97:df:be:21:49:d9:9f:48:89: 6d:93:5a:ad:f9:d7:0c:22:cf:9a:e4:b2:d8:86:0c: 24:15:88:22:8f:b0:5a:4f:49:e7:96:2d:ca:24:3f: 7b:8d:ec:18:c2:ab:ca:20:44:b6:59:a9:dd:01:e3: 6c:97:b8:9a:bb:64:ee:28:a4:25:99:ff:9a:f5:fe: ee:28:ed:80:1c:a7:e4:d8:c2:32:93:30:b4:d9:ba: 72:19:ce:aa:c5:0c:ed:1a:cd:2d:63:5a:2c:f9:f1: d2:02:fd:8c:fb:38:a6:fb:13:7d:8b:17:6a:ad:f9: 43:b9:75:b2:a0:25:5c:55:75:9d:42:32:60:13:f9: ed:19:f9:89:e4:5a:53:dd:fd:11:bf:36:a2:4e:c0: 9f:af:a9:c0:f2:b2:6e:d0:7b:a0:1f:b9:36:de:a4: e0:90:d8:5a:7e:84:e3:f7:8b:ed:58:f1:c9:c2:7d: 16:11:f9:9e:9a:b6:22:4f:52:ec:4d:84:63:5a:32: 43:f2:81:f1:a5:4d:35:8f:95:ab:75:93:d7:28:30: 7a:f2:0d:e0:bc:f6:bc:c7:4e:6c:be:d9:e8:b9:a6: 73:37:77:0b:77:8a:ce:a2:22:cc:7e:fe:9e:fc:3f: e9:77:07:20:73:31:8b:c1:7e:25:84:55:de:30:3c: 14:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:12:50:55:6F:1D:55:D7:8A:3A:0B:FE:35:4D:3C:95:9F:6D:CD:9C X509v3 Authority Key Identifier: keyid:4D:C8:A0:E8:06:96:AD:1A:24:19:AC:E8:81:33:4B:E8:12:50:62:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/DOWTEK/0/4DC8A0E80696AD1A2419ACE881334BE812506228.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/4DC8A0E80696AD1A2419ACE881334BE812506228.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DOWTEK/0/4DC8A0E80696AD1A2419ACE881334BE812506228.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:84:49:18:25:e6:2d:13:6f:60:8d:60:c2:93:db:4f:74:61: 02:3d:7b:79:cf:87:96:c5:54:2e:e4:17:9f:76:e0:19:b5:31: 3b:72:f0:30:d2:57:c1:38:54:e9:62:0a:e8:5f:59:b4:c7:30: 79:22:b8:2c:47:f3:06:97:a7:4b:90:76:1a:5d:f9:b5:a4:21: 0c:b8:6e:cb:9f:42:7a:22:06:39:bf:72:3d:06:d3:b2:26:42: 39:0e:9c:52:9e:d1:2a:f4:00:63:ad:f0:84:fb:d3:56:cd:17: 3a:48:ed:b7:db:10:ec:b6:3f:37:88:be:f8:b7:3f:89:4d:8a: 9d:35:2e:73:5d:7d:69:aa:df:40:98:e5:ae:24:80:47:2e:d9: 6a:a8:ec:9b:b6:12:b7:a9:e4:f5:41:4d:25:01:ff:c3:18:3d: bd:0d:71:6d:7b:2d:4a:72:6e:1c:81:36:d3:4b:3d:c7:8c:54: 1b:fe:47:ed:98:6d:08:9f:fa:b7:96:22:15:dd:e3:5c:94:39: fb:56:56:8b:52:06:bb:d1:f3:bc:06:1c:41:17:74:5f:53:dd: ce:df:9e:85:e4:09:1b:19:22:3c:ca:a3:b8:a5:26:cd:ed:ec: 9b:28:7b:1f:7b:98:93:05:d7:0f:57:5a:8c:ee:b6:05:2f:6f: cf:2f:2a:6d -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUUNcHzMwVYKH0c60w82ZLVzulTSYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERDOEEwRTgwNjk2QUQxQTI0MTlBQ0U4ODEzMzRCRTgx MjUwNjIyODAeFw0yNjExMTUwMzQ0NDRaFw0yNjExMTYwMzU3NDRaMDMxMTAvBgNV BAMTKEEyMTI1MDU1NkYxRDU1RDc4QTNBMEJGRTM1NEQzQzk1OUY2RENEOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUKmRIspffviFJ2Z9IiW2TWq35 1wwiz5rkstiGDCQViCKPsFpPSeeWLcokP3uN7BjCq8ogRLZZqd0B42yXuJq7ZO4o pCWZ/5r1/u4o7YAcp+TYwjKTMLTZunIZzqrFDO0azS1jWiz58dIC/Yz7OKb7E32L F2qt+UO5dbKgJVxVdZ1CMmAT+e0Z+YnkWlPd/RG/NqJOwJ+vqcDysm7Qe6AfuTbe pOCQ2Fp+hOP3i+1Y8cnCfRYR+Z6atiJPUuxNhGNaMkPygfGlTTWPlat1k9coMHry DeC89rzHTmy+2ei5pnM3dwt3is6iIsx+/p78P+l3ByBzMYvBfiWEVd4wPBRVAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQUohJQVW8dVdeKOgv+NU08lZ9tzZwwHwYDVR0j BBgwFoAUTcig6AaWrRokGazogTNL6BJQYigwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRE9XVEVL LzAvNERDOEEwRTgwNjk2QUQxQTI0MTlBQ0U4ODEzMzRCRTgxMjUwNjIyOC5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMC80REM4QTBFODA2OTZBRDFBMjQxOUFDRTg4MTMz NEJFODEyNTA2MjI4LmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRE9XVEVLLzAvNERDOEEwRTgwNjk2 QUQxQTI0MTlBQ0U4ODEzMzRCRTgxMjUwNjIyOC5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAFuESRgl5i0T b2CNYMKT2090YQI9e3nPh5bFVC7kF5924Bm1MTty8DDSV8E4VOliCuhfWbTHMHki uCxH8waXp0uQdhpd+bWkIQy4bsufQnoiBjm/cj0G07ImQjkOnFKe0Sr0AGOt8IT7 01bNFzpI7bfbEOy2PzeIvvi3P4lNip01LnNdfWmq30CY5a4kgEcu2Wqo7Ju2Erep 5PVBTSUB/8MYPb0NcW17LUpybhyBNtNLPceMVBv+R+2YbQif+reWIhXd41yUOftW VotSBrvR87wGHEEXdF9T3c7fnoXkCRsZIjzKo7ilJs3t7Jsoex97mJMF1w9XWozu tgUvb88vKm0= -----END CERTIFICATE-----Generated at Sun Nov 15 08:41:57 2026 by rpki-client