$ rpki-client -vvvf rpkica.twnic.tw/rpki/FPG/0/A0D42927AB9ABEBE41482F06D20E1FCEBC4EC623.mft File: A0D42927AB9ABEBE41482F06D20E1FCEBC4EC623.mft (raw, json) Hash identifier: HXXiGSQdQSwlBGOnCkITIVg4QAlFYqii0EEkOzMNeZE= Subject key identifier: 15:F4:C8:5D:F9:C6:77:D4:C6:4E:2C:A6:A2:91:04:5D:3D:FE:D0:F4 Authority key identifier: A0:D4:29:27:AB:9A:BE:BE:41:48:2F:06:D2:0E:1F:CE:BC:4E:C6:23 Certificate issuer: /CN=A0D42927AB9ABEBE41482F06D20E1FCEBC4EC623 Certificate serial: 2406EE0BE7BDDD575B302ABA2F62C91E6C7B89BE Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A0D42927AB9ABEBE41482F06D20E1FCEBC4EC623.cer Subject info access: rsync://rpkica.twnic.tw/rpki/FPG/0/A0D42927AB9ABEBE41482F06D20E1FCEBC4EC623.mft Manifest number: B6 Signing time: Thu 24 Sep 2026 13:40:01 +0000 Manifest this update: Thu 24 Sep 2026 13:35:01 +0000 Manifest next update: Fri 25 Sep 2026 17:01:01 +0000 Files and hashes: 1: A0D42927AB9ABEBE41482F06D20E1FCEBC4EC623.crl (hash: nZzdbl3lEinKHoXo9uUamHTcZdtmyAVdwgUbF7b49VY=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/FPG/0/A0D42927AB9ABEBE41482F06D20E1FCEBC4EC623.crl rsync://rpkica.twnic.tw/rpki/FPG/0/A0D42927AB9ABEBE41482F06D20E1FCEBC4EC623.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A0D42927AB9ABEBE41482F06D20E1FCEBC4EC623.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 17:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:06:ee:0b:e7:bd:dd:57:5b:30:2a:ba:2f:62:c9:1e:6c:7b:89:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0D42927AB9ABEBE41482F06D20E1FCEBC4EC623 Validity Not Before: Sep 24 13:35:01 2026 GMT Not After : Sep 25 17:01:01 2026 GMT Subject: CN=15F4C85DF9C677D4C64E2CA6A291045D3DFED0F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:45:c1:f7:85:c8:77:77:34:18:69:90:0d:40: 2d:de:f5:34:52:81:f2:4b:ce:cc:1f:51:44:43:bf: 90:ff:d9:e8:ac:23:ab:d2:35:36:b1:e8:f8:ad:b4: 72:05:bf:98:4c:8c:a2:d0:f1:64:85:95:5c:bc:2c: c2:10:a0:d2:f7:9f:d2:04:0d:2c:71:22:2b:c1:6a: 37:09:df:dc:cf:d6:75:3e:f3:28:b7:c1:2b:57:6e: 0e:a2:6a:cd:f0:e9:77:b8:0c:eb:49:cf:ec:49:89: a2:11:9e:38:94:62:f7:76:ad:24:2b:3d:af:03:80: 97:2f:e5:6d:f6:1b:de:85:d0:0a:03:9b:65:db:58: fe:82:e8:fa:d8:13:fa:2c:da:2c:2f:8f:48:ab:e5: 32:8f:05:a4:f5:b5:0c:8c:78:f8:4f:25:aa:55:4b: 2e:7a:e9:84:6a:42:62:9e:bd:c6:ee:59:e4:4a:5f: 33:45:00:c8:18:33:8e:9f:c4:90:35:6b:76:5e:f2: 8b:6e:39:5d:47:c2:dd:44:04:87:6b:d0:7d:19:47: cd:4f:6b:e6:60:96:9f:b3:97:3d:5c:e4:d5:58:56: 56:63:d8:60:8d:7d:26:37:1b:07:70:78:7f:ac:ce: d9:e1:a5:1f:9f:7e:86:88:d1:79:64:a6:26:32:4e: f4:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:F4:C8:5D:F9:C6:77:D4:C6:4E:2C:A6:A2:91:04:5D:3D:FE:D0:F4 X509v3 Authority Key Identifier: keyid:A0:D4:29:27:AB:9A:BE:BE:41:48:2F:06:D2:0E:1F:CE:BC:4E:C6:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/FPG/0/A0D42927AB9ABEBE41482F06D20E1FCEBC4EC623.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A0D42927AB9ABEBE41482F06D20E1FCEBC4EC623.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/FPG/0/A0D42927AB9ABEBE41482F06D20E1FCEBC4EC623.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:14:09:83:1a:b9:48:cf:bb:f7:6f:ad:95:fe:05:f5:c2:e1: 61:73:45:f0:7d:23:37:80:63:59:7e:c8:7f:05:ed:d8:54:e1: 19:1b:7f:ff:2e:84:18:82:69:1c:1c:94:fc:37:6e:22:e0:7d: 46:37:7b:e1:34:a6:85:47:3e:70:56:7a:c9:9b:20:d0:a2:9e: 3b:e9:60:0a:80:ad:de:b4:71:ae:ee:69:ce:d8:88:45:5c:b3: 86:41:33:e5:99:41:63:9b:b4:96:0f:6b:06:39:43:ea:80:c0: 1f:05:c9:a6:f5:be:53:32:d1:9e:46:8b:83:f8:2c:46:54:97: 5f:39:41:47:55:27:97:39:4d:9b:03:41:eb:83:0f:62:0d:46: 60:f8:34:d0:48:2f:41:f1:fb:40:ce:11:5f:65:91:08:17:d9: 89:6f:52:fe:db:63:4c:51:b4:7b:07:57:11:2b:b3:74:bc:fb: b8:68:f7:00:89:06:a9:e8:2d:6e:1a:c7:a6:12:e7:b4:e7:97: 13:71:6a:01:4c:ac:87:0a:b6:96:78:ec:69:dc:5c:7e:5f:be: 89:76:2f:c3:c1:11:1e:33:55:9b:13:ae:c7:62:57:ee:b0:d7: 52:ab:15:cc:13:e7:30:23:62:0a:db:e2:f9:29:0a:18:07:4d: f3:25:e1:3c -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUJAbuC+e93VdbMCq6L2LJHmx7ib4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTBENDI5MjdBQjlBQkVCRTQxNDgyRjA2RDIwRTFGQ0VC QzRFQzYyMzAeFw0yNjA5MjQxMzM1MDFaFw0yNjA5MjUxNzAxMDFaMDMxMTAvBgNV BAMTKDE1RjRDODVERjlDNjc3RDRDNjRFMkNBNkEyOTEwNDVEM0RGRUQwRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmRcH3hch3dzQYaZANQC3e9TRS gfJLzswfUURDv5D/2eisI6vSNTax6PittHIFv5hMjKLQ8WSFlVy8LMIQoNL3n9IE DSxxIivBajcJ39zP1nU+8yi3wStXbg6ias3w6Xe4DOtJz+xJiaIRnjiUYvd2rSQr Pa8DgJcv5W32G96F0AoDm2XbWP6C6PrYE/os2iwvj0ir5TKPBaT1tQyMePhPJapV Sy566YRqQmKevcbuWeRKXzNFAMgYM46fxJA1a3Ze8otuOV1Hwt1EBIdr0H0ZR81P a+Zglp+zlz1c5NVYVlZj2GCNfSY3GwdweH+sztnhpR+ffoaI0XlkpiYyTvTvAgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUFfTIXfnGd9TGTiymopEEXT3+0PQwHwYDVR0j BBgwFoAUoNQpJ6uavr5BSC8G0g4fzrxOxiMwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRlBHLzAv QTBENDI5MjdBQjlBQkVCRTQxNDgyRjA2RDIwRTFGQ0VCQzRFQzYyMy5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS9BMEQ0MjkyN0FCOUFCRUJFNDE0ODJGMDZEMjBFMUZD RUJDNEVDNjIzLmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRlBHLzAvQTBENDI5MjdBQjlBQkVCRTQx NDgyRjA2RDIwRTFGQ0VCQzRFQzYyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBACAUCYMauUjPu/dvrZX+ BfXC4WFzRfB9IzeAY1l+yH8F7dhU4Rkbf/8uhBiCaRwclPw3biLgfUY3e+E0poVH PnBWesmbINCinjvpYAqArd60ca7uac7YiEVcs4ZBM+WZQWObtJYPawY5Q+qAwB8F yab1vlMy0Z5Gi4P4LEZUl185QUdVJ5c5TZsDQeuDD2INRmD4NNBIL0Hx+0DOEV9l kQgX2YlvUv7bY0xRtHsHVxErs3S8+7ho9wCJBqnoLW4ax6YS57TnlxNxagFMrIcK tpZ47GncXH5fvol2L8PBER4zVZsTrsdiV+6w11KrFcwT5zAjYgrb4vkpChgHTfMl 4Tw= -----END CERTIFICATE-----Generated at Fri Sep 25 02:26:02 2026 by rpki-client