$ rpki-client -vvvf rpkica.twnic.tw/rpki/PNI/1/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.mft File: 3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.mft (raw, json) Hash identifier: JEsanRkbQ9CH+ZG2ot5AK0uZHm5fa0QoYEGeedZfvwg= Subject key identifier: DF:F0:48:A2:DF:D9:00:00:AD:87:E1:DB:8C:80:AF:EE:6D:3E:2A:8F Authority key identifier: 3C:21:92:63:F2:6B:99:E2:DB:37:5C:D0:CD:FE:5E:54:B5:7B:5C:26 Certificate issuer: /CN=3C219263F26B99E2DB375CD0CDFE5E54B57B5C26 Certificate serial: 58189B9EAEA5884E96DB1E808E072E1E0ACD5330 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/2/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.cer Subject info access: rsync://rpkica.twnic.tw/rpki/PNI/1/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.mft Manifest number: CC Signing time: Thu 24 Sep 2026 00:24:57 +0000 Manifest this update: Thu 24 Sep 2026 00:19:57 +0000 Manifest next update: Fri 25 Sep 2026 00:47:57 +0000 Files and hashes: 1: 3138372e37392e3234372e302f32342d3234203d3e203134383734.roa (hash: xrdOBfPyCEULsjixsbr/Px/rQubD5zMfCzYg1CD5bIk=) 2: 3138372e37392e3234342e302f32332d3332203d3e20313331363538.roa (hash: yumD0lxBQJ+80NWqiC1APAnKFuIvqRgJ6DwlCxndQ/c=) 3: 3138372e37392e3234302e302f32312d3332203d3e20313331363432.roa (hash: 3hkv3oIEXxYKcJ6+wpyKK8B+zNNvwWzz7gTiuX5XoeM=) 4: 3138372e37392e3234322e302f32342d3332203d3e20313532363237.roa (hash: rDdKFeMf3jMoCFWR1NywslztzyvdRKt2kDtU6UZnvp8=) 5: 3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.crl (hash: FUlYqazGyNZI3ixe96BdXmrLqlRD9Iv3yABZH8UIDNo=) 6: 3138372e37392e3234332e302f32342d3332203d3e20313532363237.roa (hash: g5g71SS0hEmKR6eQgaJ7zWq0tOfD6hYFf5XTJJ5szwg=) 7: 3138372e37392e3234362e302f32332d3234203d3e203138313738.roa (hash: lvDvOodv8M6LrOgAyDJTwNdJGzoBoLeykAhTF1kRzCI=) 8: 3138372e37392e3234352e302f32342d3332203d3e20313530373638.roa (hash: Hs6nQhcgL92iGp+zVUZzGJBIRibLpPYWP2j8Qnvkw6Y=) 9: 3138372e37392e3234312e302f32342d3332203d3e203633393037.roa (hash: OBpRfi4+lv5ccoc6iNCMiesrl6Hu6/OIxdIRidZn29s=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/PNI/1/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.crl rsync://rpkica.twnic.tw/rpki/PNI/1/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/2/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 22:52:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:18:9b:9e:ae:a5:88:4e:96:db:1e:80:8e:07:2e:1e:0a:cd:53:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C219263F26B99E2DB375CD0CDFE5E54B57B5C26 Validity Not Before: Sep 24 00:19:57 2026 GMT Not After : Sep 25 00:47:57 2026 GMT Subject: CN=DFF048A2DFD90000AD87E1DB8C80AFEE6D3E2A8F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:bb:e4:02:b2:c3:2b:a4:78:48:c4:e4:af:8d: 84:9b:c3:b2:d6:96:97:77:69:fb:9e:a3:00:a1:f3: f3:d3:9a:8e:5c:2c:4e:c9:5b:4f:2b:5f:61:9e:b3: d3:85:94:51:35:e2:17:30:e5:4c:ce:88:c1:a7:ce: 0a:f0:1c:5d:28:34:22:59:ba:cf:47:b5:76:c2:00: 74:f0:6e:c3:40:7b:87:d7:97:8c:64:dd:df:c6:eb: 57:3a:de:ed:8b:b5:77:5f:00:0a:30:59:b3:b1:8d: 23:ec:3d:b8:7c:01:33:5e:8f:a6:c0:ed:58:76:73: 14:00:29:1b:90:4c:a3:ec:85:c6:01:2c:4a:21:b4: e9:52:79:a6:eb:63:41:00:17:a9:97:67:00:8c:9a: 94:90:a3:f4:53:bb:ca:c2:b0:44:59:37:bd:ed:12: b4:2a:e2:d9:1a:9a:fb:08:79:6b:f1:1e:19:35:cd: f5:e6:64:c4:d1:6e:9e:c9:e1:94:e3:be:c8:52:e1: 1f:54:8e:06:25:ba:a2:11:ec:8a:39:d4:89:88:bc: 5a:20:54:9b:74:ae:f1:5a:d7:e2:fa:34:a7:be:69: 6a:b0:73:ce:77:61:c2:ff:d1:31:ca:97:27:aa:49: e9:66:d9:73:ad:b3:61:eb:2b:45:1a:e6:4e:be:99: 48:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:F0:48:A2:DF:D9:00:00:AD:87:E1:DB:8C:80:AF:EE:6D:3E:2A:8F X509v3 Authority Key Identifier: keyid:3C:21:92:63:F2:6B:99:E2:DB:37:5C:D0:CD:FE:5E:54:B5:7B:5C:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/PNI/1/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PNI/1/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:54:9c:ed:28:80:cd:3d:76:aa:78:78:58:c0:01:73:f2:f7: 6c:b5:80:dc:da:8e:c9:79:b8:45:3a:cb:48:a8:3d:d7:f4:b6: b2:74:0a:19:1b:c9:e6:a9:d2:48:92:72:45:72:d0:7b:87:f1: 6e:49:ac:bb:ec:4d:f3:e3:71:f5:bf:7e:82:7b:c2:02:78:99: fa:20:17:ec:9b:8e:90:4c:2b:be:f7:12:50:61:65:78:95:f5: de:aa:db:bb:ce:38:c9:e5:29:69:3d:2a:44:b8:f2:68:6b:24: 54:2f:49:17:a2:b1:63:ef:b0:5f:78:b1:cb:c3:c7:58:c2:b0: 55:d0:37:6e:da:7c:eb:b4:11:d5:70:55:c1:bb:d7:92:ec:32: 41:fc:f1:9c:02:06:72:14:df:62:60:a9:2d:7b:73:f5:a6:64: b4:c0:22:31:df:73:3c:43:56:4c:d8:b2:a8:d5:de:ee:28:71: ad:33:82:9a:9d:a5:89:33:b1:0f:dc:3d:39:17:b1:e6:af:43: 54:ce:ee:83:7e:e0:58:ae:bd:b1:c9:e1:a7:73:93:1a:db:08: 63:60:63:04:14:45:a0:cb:cd:22:e0:4d:06:b9:28:35:18:6f: 76:6e:42:1f:fb:ad:0d:88:e0:23:df:d6:21:bb:e4:46:ef:d9: 98:6c:d7:5a -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUWBibnq6liE6W2x6AjgcuHgrNUzAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MyMTkyNjNGMjZCOTlFMkRCMzc1Q0QwQ0RGRTVFNTRC NTdCNUMyNjAeFw0yNjA5MjQwMDE5NTdaFw0yNjA5MjUwMDQ3NTdaMDMxMTAvBgNV BAMTKERGRjA0OEEyREZEOTAwMDBBRDg3RTFEQjhDODBBRkVFNkQzRTJBOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqu+QCssMrpHhIxOSvjYSbw7LW lpd3afueowCh8/PTmo5cLE7JW08rX2Ges9OFlFE14hcw5UzOiMGnzgrwHF0oNCJZ us9HtXbCAHTwbsNAe4fXl4xk3d/G61c63u2LtXdfAAowWbOxjSPsPbh8ATNej6bA 7Vh2cxQAKRuQTKPshcYBLEohtOlSeabrY0EAF6mXZwCMmpSQo/RTu8rCsERZN73t ErQq4tkamvsIeWvxHhk1zfXmZMTRbp7J4ZTjvshS4R9UjgYluqIR7Io51ImIvFog VJt0rvFa1+L6NKe+aWqwc853YcL/0THKlyeqSelm2XOts2HrK0Ua5k6+mUj7AgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQU3/BIot/ZAACth+HbjICv7m0+Ko8wHwYDVR0j BBgwFoAUPCGSY/JrmeLbN1zQzf5eVLV7XCYwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvUE5JLzEv M0MyMTkyNjNGMjZCOTlFMkRCMzc1Q0QwQ0RGRTVFNTRCNTdCNUMyNi5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMi8zQzIxOTI2M0YyNkI5OUUyREIzNzVDRDBDREZFNUU1 NEI1N0I1QzI2LmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvUE5JLzEvM0MyMTkyNjNGMjZCOTlFMkRC Mzc1Q0QwQ0RGRTVFNTRCNTdCNUMyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAK9UnO0ogM09dqp4eFjA AXPy92y1gNzajsl5uEU6y0ioPdf0trJ0Chkbyeap0kiSckVy0HuH8W5JrLvsTfPj cfW/foJ7wgJ4mfogF+ybjpBMK773ElBhZXiV9d6q27vOOMnlKWk9KkS48mhrJFQv SReisWPvsF94scvDx1jCsFXQN27afOu0EdVwVcG715LsMkH88ZwCBnIU32JgqS17 c/WmZLTAIjHfczxDVkzYsqjV3u4oca0zgpqdpYkzsQ/cPTkXseavQ1TO7oN+4Fiu vbHJ4adzkxrbCGNgYwQURaDLzSLgTQa5KDUYb3ZuQh/7rQ2I4CPf1iG75Ebv2Zhs 11o= -----END CERTIFICATE-----Generated at Thu Sep 24 03:43:28 2026 by rpki-client