$ rpki-client -vvvf rpkica.twnic.tw/rpki/KANRAYS/1/061E60E9FDA5A25EDC961572A4CBA8C539D780AF.mft File: 061E60E9FDA5A25EDC961572A4CBA8C539D780AF.mft (raw, json) Hash identifier: BK3JhKhLfKZYXU4NhvGuuWPjk4qeUTvX28vgm5JhUIc= Subject key identifier: 70:CB:FA:6F:62:16:D1:98:AB:99:DF:0A:57:5D:77:25:7A:74:4C:41 Authority key identifier: 06:1E:60:E9:FD:A5:A2:5E:DC:96:15:72:A4:CB:A8:C5:39:D7:80:AF Certificate issuer: /CN=061E60E9FDA5A25EDC961572A4CBA8C539D780AF Certificate serial: 01D1A55C6E932420EBA637E0AADAAA5197FDF113 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/3/061E60E9FDA5A25EDC961572A4CBA8C539D780AF.cer Subject info access: rsync://rpkica.twnic.tw/rpki/KANRAYS/1/061E60E9FDA5A25EDC961572A4CBA8C539D780AF.mft Manifest number: B8 Signing time: Thu 24 Sep 2026 09:44:22 +0000 Manifest this update: Thu 24 Sep 2026 09:39:22 +0000 Manifest next update: Fri 25 Sep 2026 10:42:22 +0000 Files and hashes: 1: 3135312e3135382e32362e302f32332d3234203d3e203138303434.roa (hash: QIY0glYph3b8eEZZ9jaZ9XB3vhAySFJ+wbIUL9Lsf2o=) 2: 061E60E9FDA5A25EDC961572A4CBA8C539D780AF.crl (hash: pZ7GqgOdpQ5l7w8VIPhpop3NabGsnzBs3BqXan3VhtQ=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/KANRAYS/1/061E60E9FDA5A25EDC961572A4CBA8C539D780AF.crl rsync://rpkica.twnic.tw/rpki/KANRAYS/1/061E60E9FDA5A25EDC961572A4CBA8C539D780AF.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/3/061E60E9FDA5A25EDC961572A4CBA8C539D780AF.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 03:04:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:d1:a5:5c:6e:93:24:20:eb:a6:37:e0:aa:da:aa:51:97:fd:f1:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=061E60E9FDA5A25EDC961572A4CBA8C539D780AF Validity Not Before: Sep 24 09:39:22 2026 GMT Not After : Sep 25 10:42:22 2026 GMT Subject: CN=70CBFA6F6216D198AB99DF0A575D77257A744C41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b4:66:ca:e5:86:ff:e1:d0:ee:8c:ae:3d:56: b3:76:40:fa:e8:c8:db:1c:87:b5:a8:be:f4:d2:91: 29:57:ea:70:71:bd:1f:52:da:d6:72:2d:a9:51:05: 73:fa:e9:80:84:98:60:7a:05:5a:d1:83:de:dd:54: ba:d6:6f:07:b2:dd:2a:eb:b4:30:57:39:ba:4d:cc: 6a:ed:fe:d3:20:94:68:08:f0:6c:90:35:30:6a:78: f9:34:f8:23:71:ac:b7:3f:df:1e:0b:1a:c9:a9:fc: 04:29:e8:ab:fa:f1:e7:32:aa:53:a7:bf:4b:4c:34: b5:37:96:93:77:22:fc:7d:84:cb:b7:1f:f1:72:90: a3:88:67:c3:e2:92:5a:4d:b0:4b:11:08:0f:c8:d7: bc:c4:f1:c6:b5:76:32:38:a4:3c:fc:36:70:56:b2: b9:ea:4d:92:02:52:eb:46:2f:01:ae:b0:f0:71:3d: 28:d4:49:88:5a:a2:67:fa:64:92:8b:47:31:7a:4d: 32:1b:a7:85:f1:8e:3a:ce:62:5e:9a:22:46:b7:98: f9:67:0c:91:32:af:39:ab:4e:b8:3d:f8:c3:17:cf: c7:fa:01:15:3b:d6:2c:95:16:74:3e:0a:1b:d8:c6: 1b:30:05:9c:e7:68:5a:db:0e:55:f6:be:58:89:af: f4:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:CB:FA:6F:62:16:D1:98:AB:99:DF:0A:57:5D:77:25:7A:74:4C:41 X509v3 Authority Key Identifier: keyid:06:1E:60:E9:FD:A5:A2:5E:DC:96:15:72:A4:CB:A8:C5:39:D7:80:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/KANRAYS/1/061E60E9FDA5A25EDC961572A4CBA8C539D780AF.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/061E60E9FDA5A25EDC961572A4CBA8C539D780AF.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KANRAYS/1/061E60E9FDA5A25EDC961572A4CBA8C539D780AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:d1:54:4b:6e:3c:dd:01:0a:09:0c:4e:91:89:03:0c:f6:ba: 79:64:56:b9:cb:32:ba:e0:88:ae:6a:99:92:89:90:90:f9:c7: e7:e6:a4:bb:08:d5:2b:85:3d:16:7f:59:c7:78:94:53:8d:7d: 23:b8:b0:8d:8e:23:f2:52:05:c3:a1:7c:63:a5:e3:a0:66:22: 2f:cc:6e:eb:09:fd:59:20:7c:5f:08:be:23:d0:9f:60:c3:b4: 3e:3f:f2:78:08:6f:ca:59:1a:6b:50:95:d7:43:f7:2f:7a:48: 67:67:e4:26:9b:d8:09:25:c8:77:2f:c1:eb:4a:8d:32:2c:97: 17:b6:82:e4:ab:57:30:6b:dd:d1:6d:3f:72:53:05:f7:23:e1: 39:62:51:d2:40:06:6a:62:9f:e2:c8:da:19:83:b9:25:a8:1f: c9:bb:58:38:0b:fb:b0:ea:5b:51:a7:c8:62:85:6e:ac:22:04: aa:31:b1:83:c6:bf:ab:92:e8:3e:c1:b5:06:b3:e5:c0:e1:d1: c9:ef:6b:bf:af:86:9b:92:6c:dc:26:93:19:3d:01:eb:e6:1a: 04:a1:53:9e:da:37:f6:f6:08:16:20:73:47:ef:43:a8:b7:f6: 44:30:e3:48:dc:b5:e2:57:50:f6:18:bd:a8:c4:26:aa:89:ef: c9:1c:32:e8 -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIUAdGlXG6TJCDrpjfgqtqqUZf98RMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDYxRTYwRTlGREE1QTI1RURDOTYxNTcyQTRDQkE4QzUz OUQ3ODBBRjAeFw0yNjA5MjQwOTM5MjJaFw0yNjA5MjUxMDQyMjJaMDMxMTAvBgNV BAMTKDcwQ0JGQTZGNjIxNkQxOThBQjk5REYwQTU3NUQ3NzI1N0E3NDRDNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCetGbK5Yb/4dDujK49VrN2QPro yNsch7WovvTSkSlX6nBxvR9S2tZyLalRBXP66YCEmGB6BVrRg97dVLrWbwey3Srr tDBXObpNzGrt/tMglGgI8GyQNTBqePk0+CNxrLc/3x4LGsmp/AQp6Kv68ecyqlOn v0tMNLU3lpN3Ivx9hMu3H/FykKOIZ8PiklpNsEsRCA/I17zE8ca1djI4pDz8NnBW srnqTZICUutGLwGusPBxPSjUSYhaomf6ZJKLRzF6TTIbp4XxjjrOYl6aIka3mPln DJEyrzmrTrg9+MMXz8f6ARU71iyVFnQ+ChvYxhswBZznaFrbDlX2vliJr/SDAgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQUcMv6b2IW0Zirmd8KV113JXp0TEEwHwYDVR0j BBgwFoAUBh5g6f2lol7clhVypMuoxTnXgK8wDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0FOUkFZ Uy8xLzA2MUU2MEU5RkRBNUEyNUVEQzk2MTU3MkE0Q0JBOEM1MzlENzgwQUYuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzMvMDYxRTYwRTlGREE1QTI1RURDOTYxNTcyQTRD QkE4QzUzOUQ3ODBBRi5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0tBTlJBWVMvMS8wNjFFNjBFOUZE QTVBMjVFREM5NjE1NzJBNENCQThDNTM5RDc4MEFGLm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAitFUS248 3QEKCQxOkYkDDPa6eWRWucsyuuCIrmqZkomQkPnH5+akuwjVK4U9Fn9Zx3iUU419 I7iwjY4j8lIFw6F8Y6XjoGYiL8xu6wn9WSB8Xwi+I9CfYMO0Pj/yeAhvylkaa1CV 10P3L3pIZ2fkJpvYCSXIdy/B60qNMiyXF7aC5KtXMGvd0W0/clMF9yPhOWJR0kAG amKf4sjaGYO5JagfybtYOAv7sOpbUafIYoVurCIEqjGxg8a/q5LoPsG1BrPlwOHR ye9rv6+Gm5Js3CaTGT0B6+YaBKFTnto39vYIFiBzR+9DqLf2RDDjSNy14ldQ9hi9 qMQmqonvyRwy6A== -----END CERTIFICATE-----Generated at Thu Sep 24 19:44:01 2026 by rpki-client