$ rpki-client -vvvf rpkica.twnic.tw/rpki/SDCL-TW/0/CE11BDD44F66776624C4D9BE145C499FD144FEAE.mft File: CE11BDD44F66776624C4D9BE145C499FD144FEAE.mft (raw, json) Hash identifier: yJBwBGEELM2lWcP8oQaVAZuSQ5C5v5B/dKsIq9+tlQk= Subject key identifier: 81:09:69:D9:92:BF:56:90:B2:66:2D:02:0A:BC:1E:30:0E:2E:C8:79 Authority key identifier: CE:11:BD:D4:4F:66:77:66:24:C4:D9:BE:14:5C:49:9F:D1:44:FE:AE Certificate issuer: /CN=CE11BDD44F66776624C4D9BE145C499FD144FEAE Certificate serial: 2C6812A6FF75485597F54ED438AF68B6A657D0BE Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE11BDD44F66776624C4D9BE145C499FD144FEAE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/CE11BDD44F66776624C4D9BE145C499FD144FEAE.mft Manifest number: D4 Signing time: Wed 23 Sep 2026 19:52:33 +0000 Manifest this update: Wed 23 Sep 2026 19:47:33 +0000 Manifest next update: Thu 24 Sep 2026 23:11:33 +0000 Files and hashes: 1: 3132332e3235332e3134302e302f32332d3234203d3e20313334383233.roa (hash: CrTNs0AH90r7cZBlpSeAIE3vwnetXg/AusPTD3RqShg=) 2: 3130332e3230382e3139362e302f32332d3234203d3e20313334383233.roa (hash: IfSDDsILyDRxAjm+/0ybBUR0UiUpBoakPK/0JXTDCfg=) 3: CE11BDD44F66776624C4D9BE145C499FD144FEAE.crl (hash: nGBtmwwgrMLvqtGb7XfACF/sBvF/BIzgzWpZL9Ja9Do=) 4: 3130332e3132332e3133322e302f32322d3234203d3e20313334383233.roa (hash: TWQAxE4TuK638NNKsOzZRvFCTF3qf+yBP5Tq3YLqYEs=) 5: 3130332e3133372e32322e302f32332d3234203d3e20313331313531.roa (hash: g4jmTDzhH5yCftN+Hf4jeZwkiWF2fHHHW5/2kNZmhdo=) 6: 3230322e3135332e342e302f32332d3234203d3e203338303432.roa (hash: VcodHH9y1x00L8sP0YZKCLZqgzyOTw8vizvrWxB7jj0=) 7: 3230322e3135332e342e302f32332d3234203d3e20313334383233.roa (hash: NsOmt7pVltLDLNJkJQMI9iOFOR3amJKV3SLzyoPvcPU=) 8: 323430323a373165303a3130303a3a2f34382d3438203d3e20323034363737.roa (hash: vsm9UGN6tHY0aNAGBXgIpoDTNmnsxdu9OsGwN4Md6uM=) 9: 323430323a373165303a3a2f34302d3438203d3e20313331363738.roa (hash: mTqEC6aiPcWHZSlk2Er8l9ki9WnEV+dwuhfO3oWs108=) 10: 3130332e3132332e3133342e302f32332d3234203d3e203338303432.roa (hash: M2N3duptFA+bV1Le2KfMm0NhGumIDIKQ5uH8Mkm1Ayk=) 11: 3230322e3134382e3232302e302f32332d3234203d3e203338303432.roa (hash: Qf23TJE1nXjdkeX0xoNGfVGqhO6JSGDcdHqoaJWF4Yw=) 12: 3231312e37362e3138362e302f32332d3234203d3e203338303432.roa (hash: 3Ay4JL1xheIDlwalZgSaaVSELk/2rTlAgpIQb9jIwnE=) 13: 3132332e3235332e3134302e302f32332d3234203d3e20313331313531.roa (hash: E7oUOAQPwU/1YwrLhJW8yVt6QPbfk9BRh7TbtE2H6S8=) 14: 3130332e3234362e3231382e302f32332d3234203d3e20313331313531.roa (hash: uFajU2b2waTlSxMDI+/JBL3cx222mORnPfMwxN2souI=) 15: 323430323a373165303a3a2f33322d3438203d3e20313334383233.roa (hash: Ezk288EMxD5xtLGFhHQ06ty+ECxin6l3nT7k5oesNiA=) 16: 3130332e3230382e3139362e302f32342d3234203d3e20313331313531.roa (hash: h+x2L34XmnxLWmEu1m747gZYQB4caW32b27vqV/vxXE=) 17: 3231312e37362e3138362e302f32332d3234203d3e20313334383233.roa (hash: frrJ9Ax263gLZQyLPtTtkUx1W9FWOWmh3CFY/OBqnQA=) 18: 3130332e3133372e32322e302f32332d3234203d3e20313334383233.roa (hash: aDavL8rxqoo8KxGhzDJFgULMoFY3AbxQ+AV5uzJ9ekY=) 19: 3130332e3234362e3231382e302f32332d3234203d3e20313334383233.roa (hash: OzJYK1jOl/dVvskD0N+jBQ6FAS7v+8gWPkXtAjUfvn0=) 20: 3230322e3134382e3232302e302f32332d3234203d3e20313334383233.roa (hash: jOramKZ+p8IwNeLLsXerl9TVbe7RADM835SAcBWesfU=) 21: 3130332e3132332e3133322e302f32322d3234203d3e20313331313531.roa (hash: H4J8aYtZ2lQXywkXl0ThjqAPLa0AaGzOIFqfGA0h3G0=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/CE11BDD44F66776624C4D9BE145C499FD144FEAE.crl rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/CE11BDD44F66776624C4D9BE145C499FD144FEAE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE11BDD44F66776624C4D9BE145C499FD144FEAE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:11:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:68:12:a6:ff:75:48:55:97:f5:4e:d4:38:af:68:b6:a6:57:d0:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE11BDD44F66776624C4D9BE145C499FD144FEAE Validity Not Before: Sep 23 19:47:33 2026 GMT Not After : Sep 24 23:11:33 2026 GMT Subject: CN=810969D992BF5690B2662D020ABC1E300E2EC879 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ae:4d:66:7b:0f:95:df:90:0d:76:e6:bc:87: 11:85:a1:9d:55:26:ea:12:4d:02:28:cd:39:4b:13: 9c:33:a2:4e:78:18:af:f3:7d:c9:b7:b8:3d:b0:12: 8d:3f:19:39:7a:77:9a:cf:43:cb:39:3a:ab:91:03: ad:c5:32:e4:c7:b2:c2:90:d5:eb:2d:67:33:28:39: d7:2b:c6:71:f1:59:0a:51:ed:42:b4:d5:4e:bb:be: 36:7c:79:40:fe:83:4d:9f:e0:df:e0:5a:5a:6d:b2: f7:10:fb:da:08:d6:a2:f9:c1:0a:38:74:9d:c6:25: 90:c9:49:66:67:b9:eb:82:4c:32:b1:51:c1:6c:2c: 34:73:5d:66:0f:3e:36:5e:53:65:b8:fc:5c:d2:fa: 70:22:9f:51:fa:b1:b8:2a:01:33:41:07:24:4e:26: b6:d4:d0:be:40:55:d1:71:bb:cd:7a:38:2b:58:7d: eb:fa:55:b0:37:e9:1f:26:63:53:da:68:bb:f7:8a: 3c:6c:e9:71:81:7c:90:90:ba:8a:4e:e4:8a:5e:57: 90:9e:fb:d2:f3:d6:e0:9d:32:ea:39:e9:78:c4:ed: ba:54:0f:fd:86:65:04:ee:aa:39:14:0e:74:35:8a: e3:38:6c:6f:37:05:0a:27:7c:af:63:a1:65:42:56: c6:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:09:69:D9:92:BF:56:90:B2:66:2D:02:0A:BC:1E:30:0E:2E:C8:79 X509v3 Authority Key Identifier: keyid:CE:11:BD:D4:4F:66:77:66:24:C4:D9:BE:14:5C:49:9F:D1:44:FE:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/CE11BDD44F66776624C4D9BE145C499FD144FEAE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE11BDD44F66776624C4D9BE145C499FD144FEAE.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/CE11BDD44F66776624C4D9BE145C499FD144FEAE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:a7:56:f3:18:21:4e:3a:bc:c2:a5:62:73:4c:00:d1:d2:b5: de:cf:2e:62:02:eb:7c:bd:59:c0:78:2d:01:a8:92:19:b2:f3: e0:e3:26:b0:b2:20:74:86:81:0a:eb:ee:27:30:1b:19:93:79: cf:d3:70:cd:35:20:81:39:f0:c1:02:1a:6b:e8:94:ce:b1:cf: ee:e3:b6:f1:b1:e7:f0:4b:0b:9b:79:08:45:7e:01:76:9b:25: ed:3b:61:12:02:9c:07:8b:71:12:66:cc:dc:4f:17:86:3e:c8: ed:90:f7:75:ee:0c:06:60:71:45:e9:72:b7:24:51:f7:7d:7a: 44:4c:46:fe:98:ff:96:7c:f6:8b:f6:45:88:ad:16:ba:1a:7a: ff:22:90:e2:de:19:cf:8c:52:3f:b2:9a:0f:7e:fb:3c:48:77: f3:95:80:1c:cb:65:91:2f:c5:b2:27:99:6f:63:42:3f:ac:ce: 51:27:75:b1:f9:c0:ca:f7:7e:81:c5:3c:f5:58:c7:94:fc:fb: 5b:2d:86:dd:11:93:03:94:76:f5:90:e8:a4:06:e9:e2:55:e8: e5:89:8d:90:e3:7f:fb:87:f6:8a:56:5e:99:db:58:3c:4c:4f: a6:30:c1:06:5a:e8:7e:1b:27:ac:65:31:f2:6a:b5:ab:f1:d0: 48:7d:bd:90 -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIULGgSpv91SFWX9U7UOK9otqZX0L4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0UxMUJERDQ0RjY2Nzc2NjI0QzREOUJFMTQ1QzQ5OUZE MTQ0RkVBRTAeFw0yNjA5MjMxOTQ3MzNaFw0yNjA5MjQyMzExMzNaMDMxMTAvBgNV BAMTKDgxMDk2OUQ5OTJCRjU2OTBCMjY2MkQwMjBBQkMxRTMwMEUyRUM4NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTrk1mew+V35ANdua8hxGFoZ1V JuoSTQIozTlLE5wzok54GK/zfcm3uD2wEo0/GTl6d5rPQ8s5OquRA63FMuTHssKQ 1estZzMoOdcrxnHxWQpR7UK01U67vjZ8eUD+g02f4N/gWlptsvcQ+9oI1qL5wQo4 dJ3GJZDJSWZnueuCTDKxUcFsLDRzXWYPPjZeU2W4/FzS+nAin1H6sbgqATNBByRO JrbU0L5AVdFxu816OCtYfev6VbA36R8mY1PaaLv3ijxs6XGBfJCQuopO5IpeV5Ce +9Lz1uCdMuo56XjE7bpUD/2GZQTuqjkUDnQ1iuM4bG83BQonfK9joWVCVsb9AgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQUgQlp2ZK/VpCyZi0CCrweMA4uyHkwHwYDVR0j BBgwFoAUzhG91E9md2YkxNm+FFxJn9FE/q4wDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0RDTC1U Vy8wL0NFMTFCREQ0NEY2Njc3NjYyNEM0RDlCRTE0NUM0OTlGRDE0NEZFQUUuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvQ0UxMUJERDQ0RjY2Nzc2NjI0QzREOUJFMTQ1 QzQ5OUZEMTQ0RkVBRS5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1NEQ0wtVFcvMC9DRTExQkRENDRG NjY3NzY2MjRDNEQ5QkUxNDVDNDk5RkQxNDRGRUFFLm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKadW8xgh Tjq8wqVic0wA0dK13s8uYgLrfL1ZwHgtAaiSGbLz4OMmsLIgdIaBCuvuJzAbGZN5 z9NwzTUggTnwwQIaa+iUzrHP7uO28bHn8EsLm3kIRX4Bdpsl7TthEgKcB4txEmbM 3E8Xhj7I7ZD3de4MBmBxRelytyRR9316RExG/pj/lnz2i/ZFiK0Wuhp6/yKQ4t4Z z4xSP7KaD377PEh385WAHMtlkS/FsieZb2NCP6zOUSd1sfnAyvd+gcU89VjHlPz7 Wy2G3RGTA5R29ZDopAbp4lXo5YmNkON/+4f2ilZemdtYPExPpjDBBlrofhsnrGUx 8mq1q/HQSH29kA== -----END CERTIFICATE-----Generated at Thu Sep 24 04:21:24 2026 by rpki-client