$ rpki-client -vvvf rpkica.twnic.tw/rpki/IDT/0/35C866BE000DEAB870C97BED72D0A7807B829E4D.mft File: 35C866BE000DEAB870C97BED72D0A7807B829E4D.mft (raw, json) Hash identifier: O1Llg/Kgbg+Ul7LNFOX7rgu8X67nqFvQN2f80WHu4Ak= Subject key identifier: 7F:A8:4C:EB:F7:87:8A:36:06:00:CD:50:75:37:EF:7F:50:F8:AD:2A Authority key identifier: 35:C8:66:BE:00:0D:EA:B8:70:C9:7B:ED:72:D0:A7:80:7B:82:9E:4D Certificate issuer: /CN=35C866BE000DEAB870C97BED72D0A7807B829E4D Certificate serial: 4AF58D74DADAAF4E0A97E065FD2720A306ACC378 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/35C866BE000DEAB870C97BED72D0A7807B829E4D.cer Subject info access: rsync://rpkica.twnic.tw/rpki/IDT/0/35C866BE000DEAB870C97BED72D0A7807B829E4D.mft Manifest number: B8 Signing time: Wed 23 Sep 2026 09:07:05 +0000 Manifest this update: Wed 23 Sep 2026 09:02:05 +0000 Manifest next update: Thu 24 Sep 2026 11:56:05 +0000 Files and hashes: 1: 3230322e3134382e3231302e302f32332d3234203d3e20313532313739.roa (hash: w66ZmETlDQxyi38rji0gzk1176tFqIfyztFJ3VNSIbg=) 2: 35C866BE000DEAB870C97BED72D0A7807B829E4D.crl (hash: tQf88D/QcYphiJVVALEYZ1g/wYOOSpdyadyfGnUWrPk=) 3: 3130332e3135322e3232302e302f32332d3234203d3e20313338393937.roa (hash: J/22PWUGVzLaEIWqIEkco35k7PiKuvioKGMBglelLtk=) 4: 323430363a326663303a3a2f33322d3332203d3e20313334383233.roa (hash: T6rxUJGmT1hptwoFyjautezkOkglfrNk05IrJlVztRE=) 5: 3232332e32362e342e302f32332d3234203d3e20313532313739.roa (hash: 1KuxfqT20KEMU13K1PoNgkxwUh6tXjO/u8vuBPBbPvM=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/IDT/0/35C866BE000DEAB870C97BED72D0A7807B829E4D.crl rsync://rpkica.twnic.tw/rpki/IDT/0/35C866BE000DEAB870C97BED72D0A7807B829E4D.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/35C866BE000DEAB870C97BED72D0A7807B829E4D.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 08:30:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:f5:8d:74:da:da:af:4e:0a:97:e0:65:fd:27:20:a3:06:ac:c3:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35C866BE000DEAB870C97BED72D0A7807B829E4D Validity Not Before: Sep 23 09:02:05 2026 GMT Not After : Sep 24 11:56:05 2026 GMT Subject: CN=7FA84CEBF7878A360600CD507537EF7F50F8AD2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:14:b0:28:15:97:69:39:32:a4:28:e0:5d:c5: d0:aa:fa:60:94:60:7f:24:9f:92:70:f6:69:0d:8e: f8:d9:77:3c:02:79:8f:c1:66:cf:ad:58:b8:ca:d3: 01:21:43:bc:5e:fb:db:c5:82:7c:3a:ac:6d:8f:6d: a1:a3:a7:01:e8:0e:34:df:71:ba:f2:f2:7c:c1:16: 5b:22:b2:07:a4:5b:b5:9e:2a:06:0f:2c:d0:51:61: c8:5f:e6:5e:c7:3e:2f:65:4c:d1:7d:8b:0d:10:c4: 8b:ec:98:c1:42:64:5e:5e:fc:9b:0d:9c:1c:72:98: 39:98:11:f6:0e:e9:00:75:35:6a:2c:07:68:dc:66: fa:9c:eb:a3:28:58:47:54:e0:c2:82:3b:49:da:0d: d0:a2:ea:a1:4b:09:83:6a:39:46:52:18:36:56:4e: b7:1a:bb:74:ee:bb:b7:96:3f:b8:6f:80:50:c0:37: d8:59:95:fd:73:11:c0:d6:b9:b5:cf:81:2e:06:de: c9:da:7d:eb:7f:26:1c:62:34:44:b6:67:12:ae:76: 71:19:92:6c:5b:12:de:87:fb:fa:3a:eb:e9:01:01: 5c:c2:62:77:6a:91:8a:d9:58:94:b6:51:6c:f2:dc: c3:f0:83:43:a8:34:2e:3c:ea:b5:9e:ca:55:75:5f: cc:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:A8:4C:EB:F7:87:8A:36:06:00:CD:50:75:37:EF:7F:50:F8:AD:2A X509v3 Authority Key Identifier: keyid:35:C8:66:BE:00:0D:EA:B8:70:C9:7B:ED:72:D0:A7:80:7B:82:9E:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/IDT/0/35C866BE000DEAB870C97BED72D0A7807B829E4D.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/35C866BE000DEAB870C97BED72D0A7807B829E4D.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/IDT/0/35C866BE000DEAB870C97BED72D0A7807B829E4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:2f:94:0c:1e:7d:e1:2b:6f:ff:7a:21:f9:9c:70:cd:20:4a: 11:ad:08:ee:61:1a:1a:be:1e:ac:f5:91:5f:72:75:db:34:c5: 73:ff:65:52:0f:6b:ae:2e:d8:ff:5b:93:d9:c1:6e:0a:20:72: f6:23:4f:77:42:41:df:b7:7a:52:5d:5a:b1:43:22:9e:7b:13: 4f:58:49:d6:a8:ff:90:25:f1:d2:6f:d1:e2:58:e0:b2:3d:21: 8a:0d:db:5c:1e:de:b7:33:ae:d1:73:a9:53:f4:99:83:6f:3a: c0:36:76:47:58:f5:ef:75:2a:58:43:50:6e:58:ac:1e:40:fc: 1e:33:62:fc:5e:12:68:84:7b:ce:c4:b3:65:b9:c4:c1:01:bb: 35:84:c0:fa:5d:4b:e7:c3:a0:a7:a0:f3:98:e3:a8:f7:0f:63: de:03:5a:10:26:c0:d9:85:90:a0:57:e5:67:02:c9:f6:64:0c: d1:43:0c:90:7e:08:e8:e6:87:de:8d:26:eb:74:a6:81:d8:22: 49:44:63:86:fe:ab:e8:3b:2b:0f:87:46:90:22:a8:3e:f5:be: aa:d7:4a:45:8d:11:d2:66:22:0b:28:c8:be:5b:5d:cd:a7:bb: cb:9f:ee:06:a6:f7:b1:94:c1:39:d5:f2:a7:9d:e0:4a:0f:70: 6f:f7:96:b2 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUSvWNdNrar04Kl+Bl/Scgowasw3gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVDODY2QkUwMDBERUFCODcwQzk3QkVENzJEMEE3ODA3 QjgyOUU0RDAeFw0yNjA5MjMwOTAyMDVaFw0yNjA5MjQxMTU2MDVaMDMxMTAvBgNV BAMTKDdGQTg0Q0VCRjc4NzhBMzYwNjAwQ0Q1MDc1MzdFRjdGNTBGOEFEMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbFLAoFZdpOTKkKOBdxdCq+mCU YH8kn5Jw9mkNjvjZdzwCeY/BZs+tWLjK0wEhQ7xe+9vFgnw6rG2PbaGjpwHoDjTf cbry8nzBFlsisgekW7WeKgYPLNBRYchf5l7HPi9lTNF9iw0QxIvsmMFCZF5e/JsN nBxymDmYEfYO6QB1NWosB2jcZvqc66MoWEdU4MKCO0naDdCi6qFLCYNqOUZSGDZW Trcau3Tuu7eWP7hvgFDAN9hZlf1zEcDWubXPgS4G3snafet/JhxiNES2ZxKudnEZ kmxbEt6H+/o66+kBAVzCYndqkYrZWJS2UWzy3MPwg0OoNC486rWeylV1X8w/AgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUf6hM6/eHijYGAM1QdTfvf1D4rSowHwYDVR0j BBgwFoAUNchmvgAN6rhwyXvtctCngHuCnk0wDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSURULzAv MzVDODY2QkUwMDBERUFCODcwQzk3QkVENzJEMEE3ODA3QjgyOUU0RC5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS8zNUM4NjZCRTAwMERFQUI4NzBDOTdCRUQ3MkQwQTc4 MDdCODI5RTRELmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSURULzAvMzVDODY2QkUwMDBERUFCODcw Qzk3QkVENzJEMEE3ODA3QjgyOUU0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAB0vlAwefeErb/96Ifmc cM0gShGtCO5hGhq+Hqz1kV9ydds0xXP/ZVIPa64u2P9bk9nBbgogcvYjT3dCQd+3 elJdWrFDIp57E09YSdao/5Al8dJv0eJY4LI9IYoN21we3rczrtFzqVP0mYNvOsA2 dkdY9e91KlhDUG5YrB5A/B4zYvxeEmiEe87Es2W5xMEBuzWEwPpdS+fDoKeg85jj qPcPY94DWhAmwNmFkKBX5WcCyfZkDNFDDJB+COjmh96NJut0poHYIklEY4b+q+g7 Kw+HRpAiqD71vqrXSkWNEdJmIgsoyL5bXc2nu8uf7gam97GUwTnV8qed4EoPcG/3 lrI= -----END CERTIFICATE-----Generated at Thu Sep 24 00:06:49 2026 by rpki-client