$ rpki-client -vvvf rpkica.twnic.tw/rpki/GSN/0/C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.mft File: C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.mft (raw, json) Hash identifier: 4nxI6X1CkXD2DhIQeubu+3wpkdCi0LoaSWP9aUixA4o= Subject key identifier: 57:87:37:54:C7:A0:B2:85:E7:4F:8B:18:1A:ED:4C:9F:75:0E:EF:BE Authority key identifier: C0:34:BD:9C:72:35:DC:2D:2C:C1:FD:7E:21:D4:3D:D0:6A:FD:C3:51 Certificate issuer: /CN=C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351 Certificate serial: 3D2F0947A5E96AA689B1D07844DADE0BE702CAA9 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.cer Subject info access: rsync://rpkica.twnic.tw/rpki/GSN/0/C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.mft Manifest number: C4 Signing time: Thu 24 Sep 2026 08:39:15 +0000 Manifest this update: Thu 24 Sep 2026 08:34:15 +0000 Manifest next update: Fri 25 Sep 2026 11:34:15 +0000 Files and hashes: 1: C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.crl (hash: NmC/PRc/uTZ3x+Tc9zX3zFx4QTh/mxQorE3cDYWV5ko=) 2: 36312e35372e33322e302f31392d3139203d3e2034373832.roa (hash: aqyU1VbOW0v1AFwJhVg9uuI3iSWv7CEHxJprPdp3Meo=) 3: 3132342e3139392e36342e302f31392d3139203d3e2034373832.roa (hash: WuXDtugnIouFSIQBa95DW12JV+9YmfPeEhQ2M/9bHLw=) 4: 3231302e3234312e302e302f31372d3137203d3e2034373832.roa (hash: KmWKCTE0ohasfgtfRxTrbUHfQbw/Y7nPMFINp2KhTpA=) 5: 3131372e35362e302e302f31382d3138203d3e2034373832.roa (hash: 8DMQSxYkXT39Wjc0+DxN6goaO03iNCXQLyzqirPMqAs=) 6: 3231312e37392e3132382e302f31392d3139203d3e2034373832.roa (hash: /QiJMlPs1/pxye04spLNZHzDsoGhtgiX4yfIqbEq1wY=) 7: 3136332e32392e302e302f31362d3136203d3e2034373832.roa (hash: pGK5XkceqKAh4/7agsjC+GWpznd78YLbOQwpm2jcRiA=) 8: 3232332e3230302e302e302f31362d3136203d3e2034373832.roa (hash: MA9+ajK8aX1uKUtp2sxtKQhYTLC2td1kAHyxBVTGWcc=) 9: 3132342e3139392e39362e302f32302d3230203d3e2034373832.roa (hash: 7acpyK5V9E2LR1y17/549QCIrRIx//QUMCroyuhMnD8=) 10: 3231302e36392e3233342e302f32342d3234203d3e2034373832.roa (hash: 1EDOB0BRp1H67cx5ce4EUm7AGvO1r28WnpZQ75ZC5MM=) 11: 3231312e37392e3136302e302f31392d3139203d3e2034373832.roa (hash: 1/SOl/bxT6+nXe2zhXDM2dmH5RkEj7//86PgvjmPKFQ=) 12: 36312e36372e36342e302f31392d3139203d3e2034373832.roa (hash: hP1Ce0puK87bnBkuUoZR08dKEnokYQB4baKFChuzk+E=) 13: 3131372e35362e302e302f31362d3136203d3e2034373832.roa (hash: MFCSbHbqKYuWPiPCKMVh2kx7z7XCHdm/WXFRairBaN0=) 14: 36312e35362e302e302f32302d3234203d3e203138313833.roa (hash: Z8hYEPWVHSTXdVxKiYoHCeRE+yhXuCK4vUjrYBstEPs=) 15: 323030313a343432303a3a2f33322d3332203d3e2034373832.roa (hash: gE5uEPlvoHn4YAIcNC7yJMhL4DCCYf0nlEOkebni8Us=) 16: 3231302e36392e302e302f31362d3136203d3e2034373832.roa (hash: rzzN/S5reVNYW1kngDJ9waaxaT8cnwfi4WPnhHzUC7w=) 17: 36312e36302e302e302f31372d3137203d3e2034373832.roa (hash: RxtL1JrL62KxxH9+j1ZECsfg+3xXdkmccPO6Ql29WBI=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/GSN/0/C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.crl rsync://rpkica.twnic.tw/rpki/GSN/0/C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 11:34:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:2f:09:47:a5:e9:6a:a6:89:b1:d0:78:44:da:de:0b:e7:02:ca:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351 Validity Not Before: Sep 24 08:34:15 2026 GMT Not After : Sep 25 11:34:15 2026 GMT Subject: CN=57873754C7A0B285E74F8B181AED4C9F750EEFBE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:da:9c:46:98:fd:13:8f:d5:62:ab:cf:a0:43: ad:0d:be:68:0e:3c:b2:cb:a6:6c:e8:87:93:e3:b7: 5c:85:06:87:0d:5e:ba:00:9e:a7:20:45:37:61:bf: fc:71:d1:ca:5f:04:9b:23:5a:94:ff:b1:08:6e:f0: eb:08:20:50:51:4c:6e:9b:dc:b5:b0:66:70:81:51: 3b:e6:2b:92:b4:27:d7:b4:b2:ae:2f:29:26:7f:3c: b4:5b:5a:87:0c:27:43:ee:a5:84:94:fb:d3:ab:63: 2b:ab:72:c4:c4:2b:40:cc:fe:00:f6:22:d6:70:f3: 80:34:3d:77:b8:9b:9b:73:28:76:ad:8d:6a:8a:91: 8a:8c:fb:5e:20:cc:7b:5c:73:7b:74:80:21:a0:67: a3:d0:97:8c:f4:69:bd:41:b0:40:fc:df:bc:65:e1: b1:8e:6b:ef:bf:df:e1:2d:8b:9c:f2:98:cd:f1:b8: 95:ef:d2:40:26:d1:5d:34:0c:43:59:e5:da:68:04: 97:47:50:9c:69:1f:5a:30:16:4d:6b:0b:83:2e:fb: 2a:37:bb:e9:41:3c:15:4c:62:43:da:0a:de:c6:01: 4d:71:9d:84:40:8c:48:23:28:67:46:b5:d7:8c:13: 91:17:c0:c4:9f:ec:34:10:ab:ab:e5:be:8e:ac:5b: 6d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:87:37:54:C7:A0:B2:85:E7:4F:8B:18:1A:ED:4C:9F:75:0E:EF:BE X509v3 Authority Key Identifier: keyid:C0:34:BD:9C:72:35:DC:2D:2C:C1:FD:7E:21:D4:3D:D0:6A:FD:C3:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/GSN/0/C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/GSN/0/C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:61:b3:67:a3:52:97:28:49:29:fd:55:00:37:64:84:5d:73: 85:52:f8:58:af:7f:5d:b4:05:32:09:49:f0:73:39:8a:eb:a7: b1:0e:41:a3:da:5a:44:9d:12:65:fd:df:c2:f5:53:d9:32:77: 1c:f9:86:12:34:6a:52:0f:61:49:1b:b2:e3:e7:7a:44:22:c6: 59:09:af:62:30:aa:27:ff:f3:b2:56:c5:58:2c:37:78:39:e3: fb:e9:6a:09:8c:82:16:86:e4:43:fd:de:24:ad:fe:d9:a9:ef: e8:28:05:46:5e:c6:8f:d9:9f:32:ec:a1:ff:ce:68:10:7b:db: 24:1e:a2:29:c4:a7:64:78:76:fa:3e:ac:60:23:0b:b4:23:22: 69:1d:58:71:6e:d0:18:7e:06:de:19:6f:2e:6a:3b:d2:ff:5f: d3:a0:49:ff:0c:7c:5a:ec:b3:4d:09:d5:77:f5:65:87:bf:86: e1:97:4f:4f:f7:dd:4e:41:ce:5a:38:6f:94:9a:6e:14:d3:48: c8:33:a7:82:9b:d8:49:d9:8f:d3:1a:0f:51:ef:1e:2c:43:ea: af:46:cf:87:d9:f5:b3:1d:2b:9c:f2:5d:40:a5:69:39:d0:2f: 0c:53:68:57:cc:e0:1b:c4:96:9f:62:2a:4d:c6:72:0a:06:67: 20:fa:7e:46 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUPS8JR6XpaqaJsdB4RNreC+cCyqkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzAzNEJEOUM3MjM1REMyRDJDQzFGRDdFMjFENDNERDA2 QUZEQzM1MTAeFw0yNjA5MjQwODM0MTVaFw0yNjA5MjUxMTM0MTVaMDMxMTAvBgNV BAMTKDU3ODczNzU0QzdBMEIyODVFNzRGOEIxODFBRUQ0QzlGNzUwRUVGQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC12pxGmP0Tj9Viq8+gQ60NvmgO PLLLpmzoh5Pjt1yFBocNXroAnqcgRTdhv/xx0cpfBJsjWpT/sQhu8OsIIFBRTG6b 3LWwZnCBUTvmK5K0J9e0sq4vKSZ/PLRbWocMJ0PupYSU+9OrYyurcsTEK0DM/gD2 ItZw84A0PXe4m5tzKHatjWqKkYqM+14gzHtcc3t0gCGgZ6PQl4z0ab1BsED837xl 4bGOa++/3+Eti5zymM3xuJXv0kAm0V00DENZ5dpoBJdHUJxpH1owFk1rC4Mu+yo3 u+lBPBVMYkPaCt7GAU1xnYRAjEgjKGdGtdeME5EXwMSf7DQQq6vlvo6sW22lAgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUV4c3VMegsoXnT4sYGu1Mn3UO774wHwYDVR0j BBgwFoAUwDS9nHI13C0swf1+IdQ90Gr9w1EwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvR1NOLzAv QzAzNEJEOUM3MjM1REMyRDJDQzFGRDdFMjFENDNERDA2QUZEQzM1MS5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS9DMDM0QkQ5QzcyMzVEQzJEMkNDMUZEN0UyMUQ0M0RE MDZBRkRDMzUxLmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvR1NOLzAvQzAzNEJEOUM3MjM1REMyRDJD QzFGRDdFMjFENDNERDA2QUZEQzM1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAIFhs2ejUpcoSSn9VQA3 ZIRdc4VS+Fivf120BTIJSfBzOYrrp7EOQaPaWkSdEmX938L1U9kydxz5hhI0alIP YUkbsuPnekQixlkJr2Iwqif/87JWxVgsN3g54/vpagmMghaG5EP93iSt/tmp7+go BUZexo/ZnzLsof/OaBB72yQeoinEp2R4dvo+rGAjC7QjImkdWHFu0Bh+Bt4Zby5q O9L/X9OgSf8MfFrss00J1Xf1ZYe/huGXT0/33U5Bzlo4b5SabhTTSMgzp4Kb2EnZ j9MaD1HvHixD6q9Gz4fZ9bMdK5zyXUClaTnQLwxTaFfM4BvElp9iKk3GcgoGZyD6 fkY= -----END CERTIFICATE-----Generated at Fri Sep 25 03:59:34 2026 by rpki-client