$ rpki-client -vvvf rpkica.twnic.tw/rpki/NOT_TFN_CO/1/6CFAA0AD4AE8EE0B42091909FA44C7FF31B7465B.mft File: 6CFAA0AD4AE8EE0B42091909FA44C7FF31B7465B.mft (raw, json) Hash identifier: T7UsFRC7Hs0jR+T26T4PJNBneXp3dGk22a95c8uoGlM= Subject key identifier: 39:50:84:AF:DA:DC:6D:BA:13:95:7F:47:AB:E7:58:B1:03:51:20:56 Authority key identifier: 6C:FA:A0:AD:4A:E8:EE:0B:42:09:19:09:FA:44:C7:FF:31:B7:46:5B Certificate issuer: /CN=6CFAA0AD4AE8EE0B42091909FA44C7FF31B7465B Certificate serial: 5FD46D844A4B1C80A18ED2BD103C2C7DD3250486 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/6CFAA0AD4AE8EE0B42091909FA44C7FF31B7465B.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NOT_TFN_CO/1/6CFAA0AD4AE8EE0B42091909FA44C7FF31B7465B.mft Manifest number: FB Signing time: Sat 14 Nov 2026 18:49:02 +0000 Manifest this update: Sat 14 Nov 2026 18:44:02 +0000 Manifest next update: Sun 15 Nov 2026 20:51:02 +0000 Files and hashes: 1: 3136302e3138372e3130302e302f32332d3234203d3e20313532313739.roa (hash: 2CcgEMkqiT9SKKomSlBmDsKGF4RvxfhpXN/K83M0KAs=) 2: 3136302e3138372e3130302e302f32332d3234203d3e20313532363138.roa (hash: ReCvGN0RaLIF0GT345qHVTZeOV9Xxm1dcLiUZvQe6oQ=) 3: 6CFAA0AD4AE8EE0B42091909FA44C7FF31B7465B.crl (hash: lpU2BWbztxPHvmJV3bEw0jjPVqM7Jpit+gZjPDeVzkA=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NOT_TFN_CO/1/6CFAA0AD4AE8EE0B42091909FA44C7FF31B7465B.crl rsync://rpkica.twnic.tw/rpki/NOT_TFN_CO/1/6CFAA0AD4AE8EE0B42091909FA44C7FF31B7465B.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/6CFAA0AD4AE8EE0B42091909FA44C7FF31B7465B.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 15:35:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:d4:6d:84:4a:4b:1c:80:a1:8e:d2:bd:10:3c:2c:7d:d3:25:04:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6CFAA0AD4AE8EE0B42091909FA44C7FF31B7465B Validity Not Before: Nov 14 18:44:02 2026 GMT Not After : Nov 15 20:51:02 2026 GMT Subject: CN=395084AFDADC6DBA13957F47ABE758B103512056 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:95:eb:2c:8f:28:ca:2b:4f:70:2a:7e:a4:c6: 14:58:d9:12:28:f9:a3:51:25:53:ba:79:04:f9:09: ea:3f:ca:4f:10:2b:ce:d4:1b:17:04:5f:d6:36:3b: 3c:25:1f:b5:7c:bb:34:25:92:ca:3c:94:a3:8a:c1: ec:28:6f:56:de:2f:c3:73:97:8a:a9:ee:1b:05:c8: 19:2e:37:22:c9:e2:5b:3e:35:41:37:c9:c9:99:64: 4f:00:d8:76:03:df:22:63:3d:70:b3:07:f5:d4:4f: d4:36:da:a7:31:7e:cd:63:ee:ca:7a:c0:f6:48:3c: 67:7c:20:32:9e:91:0a:d5:52:53:07:39:f1:64:64: 28:cc:8b:05:91:9e:a5:e0:48:63:9e:47:34:b4:d1: 51:9d:b7:e1:ba:d1:d9:75:e0:2f:a9:3e:fc:52:a4: a9:f3:21:77:50:d2:27:a9:bd:3e:0b:2a:e0:e7:0c: 4d:f5:f8:9a:6a:ba:c4:bb:47:06:a9:df:fb:cb:f3: 49:22:e2:42:3e:8f:69:e8:2a:27:ec:66:11:e9:a4: 5a:9a:02:aa:c7:b6:3d:f9:7f:d2:2d:46:46:52:e3: d5:33:7c:45:a9:ff:6f:74:30:ba:86:c2:7a:86:05: 4c:c8:25:22:00:97:32:ed:36:61:41:a4:2f:48:e0: ab:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:50:84:AF:DA:DC:6D:BA:13:95:7F:47:AB:E7:58:B1:03:51:20:56 X509v3 Authority Key Identifier: keyid:6C:FA:A0:AD:4A:E8:EE:0B:42:09:19:09:FA:44:C7:FF:31:B7:46:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NOT_TFN_CO/1/6CFAA0AD4AE8EE0B42091909FA44C7FF31B7465B.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/6CFAA0AD4AE8EE0B42091909FA44C7FF31B7465B.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NOT_TFN_CO/1/6CFAA0AD4AE8EE0B42091909FA44C7FF31B7465B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:72:3c:a8:b4:06:ab:c6:d9:b7:95:9e:21:f5:45:8e:f0:82: b7:63:5c:2d:04:d2:a6:fd:fd:ae:9b:2b:61:26:29:38:53:e8: 55:6e:89:be:28:4c:8f:26:89:59:03:8f:35:e6:65:76:80:da: 12:ba:94:08:ad:5b:7b:43:1d:5c:78:9f:64:cb:b2:9b:33:b8: 6a:ca:6a:99:10:4e:86:4b:b0:ee:6b:35:e1:b6:35:5d:63:b5: 3d:3e:af:f6:e0:76:3a:f6:ed:98:df:6f:61:77:d9:97:23:e1: e2:25:40:33:9f:ad:18:62:0c:0f:8e:10:88:29:30:ee:9b:f7: 42:fd:b8:f1:0c:b4:81:7d:26:dd:98:c9:46:ec:e8:39:dd:73: 5f:0f:48:7e:b9:14:b8:89:6a:3f:80:fb:87:76:07:0f:e7:91: 07:44:60:90:ce:a6:ac:36:d6:8d:c0:48:c7:5a:8c:aa:6c:d2: d9:53:dd:07:7b:1b:f8:a0:df:4c:38:7c:7c:d7:e6:ad:53:5d: 6e:5b:a9:60:82:04:8d:11:df:79:0f:cb:b2:1f:1f:43:98:f4: 2c:d8:e0:da:5f:fc:40:ed:d0:86:a3:58:d0:8d:a6:6c:48:38: c3:66:72:20:48:76:12:b8:bf:4d:5e:a8:c1:0d:af:38:70:ce: f4:0c:12:59 -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgIUX9RthEpLHIChjtK9EDwsfdMlBIYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkNGQUEwQUQ0QUU4RUUwQjQyMDkxOTA5RkE0NEM3RkYz MUI3NDY1QjAeFw0yNjExMTQxODQ0MDJaFw0yNjExMTUyMDUxMDJaMDMxMTAvBgNV BAMTKDM5NTA4NEFGREFEQzZEQkExMzk1N0Y0N0FCRTc1OEIxMDM1MTIwNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvlessjyjKK09wKn6kxhRY2RIo +aNRJVO6eQT5Ceo/yk8QK87UGxcEX9Y2OzwlH7V8uzQlkso8lKOKwewob1beL8Nz l4qp7hsFyBkuNyLJ4ls+NUE3ycmZZE8A2HYD3yJjPXCzB/XUT9Q22qcxfs1j7sp6 wPZIPGd8IDKekQrVUlMHOfFkZCjMiwWRnqXgSGOeRzS00VGdt+G60dl14C+pPvxS pKnzIXdQ0iepvT4LKuDnDE31+JpqusS7Rwap3/vL80ki4kI+j2noKifsZhHppFqa AqrHtj35f9ItRkZS49UzfEWp/290MLqGwnqGBUzIJSIAlzLtNmFBpC9I4KsfAgMB AAGjggH2MIIB8jAdBgNVHQ4EFgQUOVCEr9rcbboTlX9Hq+dYsQNRIFYwHwYDVR0j BBgwFoAUbPqgrUro7gtCCRkJ+kTH/zG3RlswDgYDVR0PAQH/BAQDAgeAMGcGA1Ud HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTk9UX1RG Tl9DTy8xLzZDRkFBMEFENEFFOEVFMEI0MjA5MTkwOUZBNDRDN0ZGMzFCNzQ2NUIu Y3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBLzAvNkNGQUEwQUQ0QUU4RUUwQjQyMDkxOTA5 RkE0NEM3RkYzMUI3NDY1Qi5jZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzAL hlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05PVF9URk5fQ08vMS82Q0ZB QTBBRDRBRThFRTBCNDIwOTE5MDlGQTQ0QzdGRjMxQjc0NjVCLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA OHI8qLQGq8bZt5WeIfVFjvCCt2NcLQTSpv39rpsrYSYpOFPoVW6JvihMjyaJWQOP NeZldoDaErqUCK1be0MdXHifZMuymzO4aspqmRBOhkuw7ms14bY1XWO1PT6v9uB2 OvbtmN9vYXfZlyPh4iVAM5+tGGIMD44QiCkw7pv3Qv248Qy0gX0m3ZjJRuzoOd1z Xw9IfrkUuIlqP4D7h3YHD+eRB0RgkM6mrDbWjcBIx1qMqmzS2VPdB3sb+KDfTDh8 fNfmrVNdblupYIIEjRHfeQ/Lsh8fQ5j0LNjg2l/8QO3QhqNY0I2mbEg4w2ZyIEh2 Eri/TV6owQ2vOHDO9AwSWQ== -----END CERTIFICATE-----Generated at Sun Nov 15 09:53:46 2026 by rpki-client