$ rpki-client -vvvf rpkica.twnic.tw/rpki/IDT/0/35C866BE000DEAB870C97BED72D0A7807B829E4D.mft File: 35C866BE000DEAB870C97BED72D0A7807B829E4D.mft (raw, json) Hash identifier: njMQYJcL0jYmXcJCtoWWTom7KLj8gTZPVAHMr3+TcUk= Subject key identifier: 60:7D:70:65:88:0F:C1:86:19:D6:6B:D4:EB:1C:3F:F3:E4:3F:09:0C Authority key identifier: 35:C8:66:BE:00:0D:EA:B8:70:C9:7B:ED:72:D0:A7:80:7B:82:9E:4D Certificate issuer: /CN=35C866BE000DEAB870C97BED72D0A7807B829E4D Certificate serial: 1D72D83F1CAA261D70920243CF2499238187AB22 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/35C866BE000DEAB870C97BED72D0A7807B829E4D.cer Subject info access: rsync://rpkica.twnic.tw/rpki/IDT/0/35C866BE000DEAB870C97BED72D0A7807B829E4D.mft Manifest number: FF Signing time: Sun 15 Nov 2026 10:32:56 +0000 Manifest this update: Sun 15 Nov 2026 10:27:56 +0000 Manifest next update: Mon 16 Nov 2026 14:13:56 +0000 Files and hashes: 1: 3232332e32362e342e302f32332d3234203d3e20313532313739.roa (hash: 1KuxfqT20KEMU13K1PoNgkxwUh6tXjO/u8vuBPBbPvM=) 2: 323430363a326663303a3a2f33322d3332203d3e20313334383233.roa (hash: T6rxUJGmT1hptwoFyjautezkOkglfrNk05IrJlVztRE=) 3: 3130332e3135322e3232302e302f32332d3234203d3e20313338393937.roa (hash: J/22PWUGVzLaEIWqIEkco35k7PiKuvioKGMBglelLtk=) 4: 35C866BE000DEAB870C97BED72D0A7807B829E4D.crl (hash: Cl7p472Z2fpOvAaXt6s+He9rweLCsR72CS4k4Rk/YTk=) 5: 3230322e3134382e3231302e302f32332d3234203d3e20313532313739.roa (hash: w66ZmETlDQxyi38rji0gzk1176tFqIfyztFJ3VNSIbg=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/IDT/0/35C866BE000DEAB870C97BED72D0A7807B829E4D.crl rsync://rpkica.twnic.tw/rpki/IDT/0/35C866BE000DEAB870C97BED72D0A7807B829E4D.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/35C866BE000DEAB870C97BED72D0A7807B829E4D.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 08:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:72:d8:3f:1c:aa:26:1d:70:92:02:43:cf:24:99:23:81:87:ab:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35C866BE000DEAB870C97BED72D0A7807B829E4D Validity Not Before: Nov 15 10:27:56 2026 GMT Not After : Nov 16 14:13:56 2026 GMT Subject: CN=607D7065880FC18619D66BD4EB1C3FF3E43F090C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:12:77:17:47:a0:e3:94:78:85:6c:a9:69:d9: 87:7d:a3:3f:e1:5a:24:50:81:bf:20:e7:11:61:07: da:e5:7d:8c:aa:d8:1a:c7:82:7c:75:72:61:c3:d5: 21:5b:21:89:83:12:26:a4:96:7f:03:6d:e4:4a:0c: 90:c4:03:bc:c5:45:52:2d:0b:9b:c3:4a:cc:e1:d5: c6:d3:78:2e:f3:24:1e:51:93:b0:88:4c:e3:53:73: 95:6e:7a:28:28:6d:e1:45:32:08:44:44:1d:d4:04: b6:75:8d:f1:ee:4c:5e:2d:f7:f2:d8:2c:5f:0c:29: dc:a7:99:92:e3:0f:07:cc:fb:36:be:bc:b5:c3:15: f5:d3:7b:1c:0b:9c:75:c4:f0:0a:91:b5:05:66:66: 9e:8c:55:cb:05:68:8f:7c:ca:4d:fe:2a:eb:8c:26: 83:0d:42:ff:ea:40:fc:83:1d:2f:14:ee:a9:d9:e0: cd:b7:fd:42:44:ec:11:8b:a2:0f:dc:ae:de:60:78: 6c:10:af:99:96:e8:a2:eb:b6:21:ab:ab:de:0d:0f: 93:81:1f:75:0b:e8:14:37:b2:30:74:2f:80:f7:91: 63:32:96:97:7f:9a:61:bc:04:72:66:eb:9c:5f:7e: 85:7c:38:74:b3:8c:50:fd:ad:0a:62:6c:0b:16:d8: ab:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:7D:70:65:88:0F:C1:86:19:D6:6B:D4:EB:1C:3F:F3:E4:3F:09:0C X509v3 Authority Key Identifier: keyid:35:C8:66:BE:00:0D:EA:B8:70:C9:7B:ED:72:D0:A7:80:7B:82:9E:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/IDT/0/35C866BE000DEAB870C97BED72D0A7807B829E4D.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/35C866BE000DEAB870C97BED72D0A7807B829E4D.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/IDT/0/35C866BE000DEAB870C97BED72D0A7807B829E4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:75:cb:4d:0e:bf:19:b9:3f:01:34:63:0f:c4:8f:58:a8:5a: 1f:aa:ad:36:e2:73:06:00:4d:9c:e1:52:35:db:65:78:62:b4: 77:ef:5e:07:b3:7f:36:16:ab:ea:e0:6b:78:7d:64:96:2f:e3: 7d:f0:87:53:1a:13:a0:d6:28:63:00:f7:33:0d:cd:bf:f5:18: c5:6c:1b:a3:d3:60:76:75:5d:16:a8:e1:26:9e:75:da:3f:3a: 88:16:9b:69:91:08:85:31:d2:1b:62:5c:05:74:19:ea:9e:c0: 3f:43:8e:6c:70:c1:90:ee:09:04:68:33:bb:b8:46:49:c8:66: e0:44:f3:5f:5e:1e:25:4c:08:e6:1c:57:f8:a0:7f:64:8b:a7: e1:8c:61:35:65:4c:0f:4f:47:2f:c9:14:91:39:b8:d8:3a:99: b3:1c:78:53:2f:e3:b0:25:a7:39:22:b7:4a:85:34:5f:56:50: 32:25:4f:2b:2c:75:df:4c:0c:e8:7d:04:d0:8a:4a:ba:a7:2a: ee:88:07:b8:52:cc:b9:e1:d2:82:49:f2:dd:c2:2a:2f:bf:43: 38:25:51:32:fa:f0:46:4a:14:9d:80:c7:c6:e5:13:6b:d7:6c: 68:ed:74:69:87:cc:1b:1f:f3:65:18:76:88:c6:75:2b:76:94: 46:e0:b2:be -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUHXLYPxyqJh1wkgJDzySZI4GHqyIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVDODY2QkUwMDBERUFCODcwQzk3QkVENzJEMEE3ODA3 QjgyOUU0RDAeFw0yNjExMTUxMDI3NTZaFw0yNjExMTYxNDEzNTZaMDMxMTAvBgNV BAMTKDYwN0Q3MDY1ODgwRkMxODYxOUQ2NkJENEVCMUMzRkYzRTQzRjA5MEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsEncXR6DjlHiFbKlp2Yd9oz/h WiRQgb8g5xFhB9rlfYyq2BrHgnx1cmHD1SFbIYmDEiakln8DbeRKDJDEA7zFRVIt C5vDSszh1cbTeC7zJB5Rk7CITONTc5VueigobeFFMghERB3UBLZ1jfHuTF4t9/LY LF8MKdynmZLjDwfM+za+vLXDFfXTexwLnHXE8AqRtQVmZp6MVcsFaI98yk3+KuuM JoMNQv/qQPyDHS8U7qnZ4M23/UJE7BGLog/crt5geGwQr5mW6KLrtiGrq94ND5OB H3UL6BQ3sjB0L4D3kWMylpd/mmG8BHJm65xffoV8OHSzjFD9rQpibAsW2KtNAgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUYH1wZYgPwYYZ1mvU6xw/8+Q/CQwwHwYDVR0j BBgwFoAUNchmvgAN6rhwyXvtctCngHuCnk0wDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSURULzAv MzVDODY2QkUwMDBERUFCODcwQzk3QkVENzJEMEE3ODA3QjgyOUU0RC5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS8zNUM4NjZCRTAwMERFQUI4NzBDOTdCRUQ3MkQwQTc4 MDdCODI5RTRELmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSURULzAvMzVDODY2QkUwMDBERUFCODcw Qzk3QkVENzJEMEE3ODA3QjgyOUU0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAH91y00Ovxm5PwE0Yw/E j1ioWh+qrTbicwYATZzhUjXbZXhitHfvXgezfzYWq+rga3h9ZJYv433wh1MaE6DW KGMA9zMNzb/1GMVsG6PTYHZ1XRao4Saeddo/OogWm2mRCIUx0htiXAV0GeqewD9D jmxwwZDuCQRoM7u4RknIZuBE819eHiVMCOYcV/igf2SLp+GMYTVlTA9PRy/JFJE5 uNg6mbMceFMv47Alpzkit0qFNF9WUDIlTyssdd9MDOh9BNCKSrqnKu6IB7hSzLnh 0oJJ8t3CKi+/QzglUTL68EZKFJ2Ax8blE2vXbGjtdGmHzBsf82UYdojGdSt2lEbg sr4= -----END CERTIFICATE-----Generated at Sun Nov 15 20:40:53 2026 by rpki-client