$ rpki-client -vvvf rpkica.twnic.tw/rpki/OPENRICH/0/61F2C234A51074E0978404BDC79AA79130040B00.mft File: 61F2C234A51074E0978404BDC79AA79130040B00.mft (raw, json) Hash identifier: 1YW+9OP/WxlD7Nj9OnMUd3MDKJBQgBnPqdsT4wPe3qw= Subject key identifier: C2:B9:F6:5C:E8:EB:11:E5:01:B7:6E:92:2C:E3:52:5D:E9:B4:BC:1A Authority key identifier: 61:F2:C2:34:A5:10:74:E0:97:84:04:BD:C7:9A:A7:91:30:04:0B:00 Certificate issuer: /CN=61F2C234A51074E0978404BDC79AA79130040B00 Certificate serial: 7021950DE2C39248F94E9E6715FE681CC3735D3A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/61F2C234A51074E0978404BDC79AA79130040B00.cer Subject info access: rsync://rpkica.twnic.tw/rpki/OPENRICH/0/61F2C234A51074E0978404BDC79AA79130040B00.mft Manifest number: BC Signing time: Fri 25 Sep 2026 11:52:56 +0000 Manifest this update: Fri 25 Sep 2026 11:47:56 +0000 Manifest next update: Sat 26 Sep 2026 14:32:56 +0000 Files and hashes: 1: 3130332e3134372e3133302e302f32332d3234203d3e20313331363734.roa (hash: hPsd6S2D9hMin8P77QyQ2OhAm+/bYf9j5m2G2tBdGrg=) 2: 3130332e3134372e3133302e302f32332d3234203d3e20313331363737.roa (hash: VGWA54tpU9ZSYiEjleM6DRC35GLg1lZvqOaYCzFR4yI=) 3: 61F2C234A51074E0978404BDC79AA79130040B00.crl (hash: CcpiaByGJ+5DhFKgYtSLWcfKwS4ZIZntZBpI4N+yXyM=) 4: 323430353a623863303a3a2f33322d3634203d3e20313331363737.roa (hash: AnPDeDj6hR2bEdYvy6SAFA3A/pHmArnFaxzCcI0NAKA=) 5: 323430353a623863303a3a2f33322d3634203d3e20313331363734.roa (hash: zPchVf+BzdWdK6jtiyFuKEMvAaWvPZafeIufyi+NDAU=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/OPENRICH/0/61F2C234A51074E0978404BDC79AA79130040B00.crl rsync://rpkica.twnic.tw/rpki/OPENRICH/0/61F2C234A51074E0978404BDC79AA79130040B00.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/61F2C234A51074E0978404BDC79AA79130040B00.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 14:32:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:21:95:0d:e2:c3:92:48:f9:4e:9e:67:15:fe:68:1c:c3:73:5d:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61F2C234A51074E0978404BDC79AA79130040B00 Validity Not Before: Sep 25 11:47:56 2026 GMT Not After : Sep 26 14:32:56 2026 GMT Subject: CN=C2B9F65CE8EB11E501B76E922CE3525DE9B4BC1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:57:9f:a7:c9:70:ea:c8:65:b1:73:e9:77:9a: 37:9b:85:93:61:06:2d:5b:91:42:cd:ed:b4:e7:d7: 51:9c:48:85:2d:81:ac:d1:e9:e6:0d:97:93:7b:98: 8d:05:f1:a9:c4:b0:39:96:a0:83:6e:cf:76:b7:7c: f5:52:1a:ad:3c:0a:a9:bc:61:2a:21:7b:cc:fc:89: 16:b7:d6:b4:3a:22:81:ef:8d:52:f1:42:9a:24:f8: b1:17:52:73:ea:9c:c3:f3:38:e4:dd:6e:ae:98:0b: 46:e6:8c:e2:b8:59:49:3f:f1:5d:a9:2b:e4:45:4b: c1:3b:51:a8:dc:d2:50:e1:f7:2b:22:1e:fe:06:b2: 12:72:5c:39:9b:3f:66:5b:97:d3:e7:d5:ee:24:09: d1:40:ed:a5:b8:7e:66:a5:f8:10:db:60:54:6d:68: 0d:cb:53:3f:61:ed:7a:43:8a:4f:8b:fe:81:c1:3a: 5e:4a:b3:7d:a8:81:09:51:00:d3:b9:20:40:1c:85: a1:b3:e4:42:3c:ab:77:f4:73:77:69:0c:56:5d:89: af:08:ac:15:82:58:5e:c4:85:c8:c4:70:a6:65:3a: 13:88:72:ed:d3:ad:2d:ec:ef:69:02:59:06:26:c1: 1d:b7:43:49:3d:c8:01:ca:ac:d5:48:e4:34:65:05: 14:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:B9:F6:5C:E8:EB:11:E5:01:B7:6E:92:2C:E3:52:5D:E9:B4:BC:1A X509v3 Authority Key Identifier: keyid:61:F2:C2:34:A5:10:74:E0:97:84:04:BD:C7:9A:A7:91:30:04:0B:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/OPENRICH/0/61F2C234A51074E0978404BDC79AA79130040B00.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/61F2C234A51074E0978404BDC79AA79130040B00.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/OPENRICH/0/61F2C234A51074E0978404BDC79AA79130040B00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:d8:90:ea:96:57:69:de:08:8f:2e:a8:31:54:10:d8:72:89: 98:f0:25:69:05:b4:86:a7:f9:25:8a:db:61:3b:a9:f6:c7:aa: ef:6e:a4:39:aa:0e:32:36:4b:c3:58:7e:6e:89:a1:e5:26:8d: 4a:18:4b:d4:20:ba:33:59:9e:21:3b:a7:0e:80:79:2c:73:78: a3:bf:f6:b7:80:c5:c5:02:d5:33:d7:42:14:94:1f:3a:e5:f0: 2f:19:15:fb:ab:c3:73:d8:e2:98:a5:93:6e:52:47:d3:a5:59: 17:c6:24:80:21:d3:e7:dd:21:af:3f:01:b8:63:ae:a0:bb:db: c6:53:14:9d:db:b8:40:de:a5:89:2b:45:cf:1d:93:c6:05:94: cc:6f:79:50:16:99:a2:c3:b0:3c:59:dc:c9:26:01:f9:f6:f4: 5e:54:55:c0:93:a2:e5:58:08:90:59:48:84:d0:fd:49:d5:c5: 2a:51:ea:b3:09:42:e2:f4:77:f7:a1:4e:b0:8e:11:9d:dd:95: c8:99:24:80:e4:ec:95:ce:00:8a:8f:fe:c1:e5:b4:b9:e2:64: cd:0d:96:16:d8:70:7d:10:dd:2b:89:c5:b8:c3:67:c2:da:30: 6d:33:b1:57:6e:b4:43:42:f4:5e:b5:69:38:38:4c:b9:f6:cd: b7:a0:f7:17 -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUcCGVDeLDkkj5Tp5nFf5oHMNzXTowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjFGMkMyMzRBNTEwNzRFMDk3ODQwNEJEQzc5QUE3OTEz MDA0MEIwMDAeFw0yNjA5MjUxMTQ3NTZaFw0yNjA5MjYxNDMyNTZaMDMxMTAvBgNV BAMTKEMyQjlGNjVDRThFQjExRTUwMUI3NkU5MjJDRTM1MjVERTlCNEJDMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChV5+nyXDqyGWxc+l3mjebhZNh Bi1bkULN7bTn11GcSIUtgazR6eYNl5N7mI0F8anEsDmWoINuz3a3fPVSGq08Cqm8 YSohe8z8iRa31rQ6IoHvjVLxQpok+LEXUnPqnMPzOOTdbq6YC0bmjOK4WUk/8V2p K+RFS8E7Uajc0lDh9ysiHv4GshJyXDmbP2Zbl9Pn1e4kCdFA7aW4fmal+BDbYFRt aA3LUz9h7XpDik+L/oHBOl5Ks32ogQlRANO5IEAchaGz5EI8q3f0c3dpDFZdia8I rBWCWF7EhcjEcKZlOhOIcu3TrS3s72kCWQYmwR23Q0k9yAHKrNVI5DRlBRTJAgMB AAGjggHyMIIB7jAdBgNVHQ4EFgQUwrn2XOjrEeUBt26SLONSXem0vBowHwYDVR0j BBgwFoAUYfLCNKUQdOCXhAS9x5qnkTAECwAwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvT1BFTlJJ Q0gvMC82MUYyQzIzNEE1MTA3NEUwOTc4NDA0QkRDNzlBQTc5MTMwMDQwQjAwLmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8xLzYxRjJDMjM0QTUxMDc0RTA5Nzg0MDRCREM3 OUFBNzkxMzAwNDBCMDAuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9PUEVOUklDSC8wLzYxRjJDMjM0 QTUxMDc0RTA5Nzg0MDRCREM3OUFBNzkxMzAwNDBCMDAubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAz2JDq lldp3giPLqgxVBDYcomY8CVpBbSGp/klitthO6n2x6rvbqQ5qg4yNkvDWH5uiaHl Jo1KGEvUILozWZ4hO6cOgHksc3ijv/a3gMXFAtUz10IUlB865fAvGRX7q8Nz2OKY pZNuUkfTpVkXxiSAIdPn3SGvPwG4Y66gu9vGUxSd27hA3qWJK0XPHZPGBZTMb3lQ Fpmiw7A8WdzJJgH59vReVFXAk6LlWAiQWUiE0P1J1cUqUeqzCULi9Hf3oU6wjhGd 3ZXImSSA5OyVzgCKj/7B5bS54mTNDZYW2HB9EN0ricW4w2fC2jBtM7FXbrRDQvRe tWk4OEy59s23oPcX -----END CERTIFICATE-----Generated at Fri Sep 25 20:05:41 2026 by rpki-client