$ rpki-client -vvvf rpkica.twnic.tw/rpki/SDTV/0/3E0AB786AB86C4D25A7BE864DDD140760CC02EEA.mft File: 3E0AB786AB86C4D25A7BE864DDD140760CC02EEA.mft (raw, json) Hash identifier: cdxPPxR5UdIQlqQ18SojFgBMDf9HddKjN00XcJoRA68= Subject key identifier: AE:BF:E8:EC:77:06:F2:11:40:E6:DE:65:90:23:2A:48:50:8E:23:56 Authority key identifier: 3E:0A:B7:86:AB:86:C4:D2:5A:7B:E8:64:DD:D1:40:76:0C:C0:2E:EA Certificate issuer: /CN=3E0AB786AB86C4D25A7BE864DDD140760CC02EEA Certificate serial: 6006F6B7E93D2FF6D22E58686F56CC9B1518433D Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3E0AB786AB86C4D25A7BE864DDD140760CC02EEA.cer Subject info access: rsync://rpkica.twnic.tw/rpki/SDTV/0/3E0AB786AB86C4D25A7BE864DDD140760CC02EEA.mft Manifest number: B6 Signing time: Thu 24 Sep 2026 12:04:41 +0000 Manifest this update: Thu 24 Sep 2026 11:59:41 +0000 Manifest next update: Fri 25 Sep 2026 12:49:41 +0000 Files and hashes: 1: 3130332e3130302e3136342e302f32322d3232203d3e20313331363131.roa (hash: LqxzSENA6MQT2gEkGTBGcnDvqFZoJ6iXojpLB0vT1ng=) 2: 3E0AB786AB86C4D25A7BE864DDD140760CC02EEA.crl (hash: WmhJwLDnR7nHcrAjLzGuC4IF8GEB0iFGkFHDgfF3WHY=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/SDTV/0/3E0AB786AB86C4D25A7BE864DDD140760CC02EEA.crl rsync://rpkica.twnic.tw/rpki/SDTV/0/3E0AB786AB86C4D25A7BE864DDD140760CC02EEA.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3E0AB786AB86C4D25A7BE864DDD140760CC02EEA.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 12:49:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:06:f6:b7:e9:3d:2f:f6:d2:2e:58:68:6f:56:cc:9b:15:18:43:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E0AB786AB86C4D25A7BE864DDD140760CC02EEA Validity Not Before: Sep 24 11:59:41 2026 GMT Not After : Sep 25 12:49:41 2026 GMT Subject: CN=AEBFE8EC7706F21140E6DE6590232A48508E2356 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:26:a6:cd:e5:91:52:36:bb:da:46:a4:35:ad: b3:29:cd:e8:a6:9c:08:bc:1b:9a:02:27:64:97:ba: 52:25:e3:40:f2:3c:32:63:97:6f:d7:11:79:07:b8: ff:dc:ac:de:e2:3c:13:38:44:12:72:c1:86:59:e6: 90:8c:8b:2b:22:f2:0b:cf:13:d2:12:7e:01:f6:23: 3e:94:2a:97:5f:8f:39:a1:a5:8e:76:2c:14:66:91: b0:c7:63:b1:73:c7:a2:61:74:8a:16:85:c4:eb:76: c6:12:17:eb:90:c6:1f:57:46:a8:8d:91:ec:a1:fa: 65:8c:6b:cd:80:8a:d4:2b:3f:6b:0c:43:03:b5:24: 43:5d:e7:08:0a:44:03:9f:f6:36:36:8d:4e:d8:b4: 31:96:4c:1b:30:54:73:bd:a6:7f:d8:61:54:23:a4: 66:37:bb:2f:74:10:f4:05:e1:e8:d9:27:35:3b:a1: a8:77:25:5f:62:47:0b:34:6b:8e:41:84:cb:06:e2: bc:77:c3:25:5a:62:c0:49:7d:22:2f:63:c6:a8:69: ca:e0:31:f2:db:53:ba:92:ea:dd:0b:6c:9d:ae:11: d3:7e:f4:49:14:40:66:6d:b3:c2:d9:9c:36:40:3d: f3:d3:9f:eb:cc:ad:9b:01:3a:18:b8:2f:1b:24:ad: 1b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:BF:E8:EC:77:06:F2:11:40:E6:DE:65:90:23:2A:48:50:8E:23:56 X509v3 Authority Key Identifier: keyid:3E:0A:B7:86:AB:86:C4:D2:5A:7B:E8:64:DD:D1:40:76:0C:C0:2E:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/SDTV/0/3E0AB786AB86C4D25A7BE864DDD140760CC02EEA.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3E0AB786AB86C4D25A7BE864DDD140760CC02EEA.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SDTV/0/3E0AB786AB86C4D25A7BE864DDD140760CC02EEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:67:7e:fb:22:af:b3:6a:07:d6:0f:d7:00:06:f2:85:be:7d: f3:e9:f8:72:15:a0:61:d1:31:c6:13:f7:ba:2f:dc:1f:29:41: 98:b7:0b:14:8c:4a:d1:81:5b:a2:5a:6d:41:48:97:ba:f4:83: c1:cf:59:fd:a1:5e:0b:d8:0a:44:02:71:1d:31:39:06:6f:2f: c5:72:6d:d9:fd:31:96:05:0d:94:21:56:c4:04:78:ef:f3:1e: ca:85:b8:0c:62:e4:12:fc:a9:db:a5:6a:08:7b:dc:8e:73:7e: a8:65:66:fe:86:0d:1f:84:47:cd:7c:78:d1:ec:df:b3:0f:7d: 99:6b:0b:4c:c0:09:4a:ce:5f:54:24:10:ce:15:a9:a3:5e:61: 0e:41:74:4f:ce:38:8a:2e:15:ab:c9:ec:10:46:56:d1:07:3f: 05:2e:ea:d2:4e:62:38:18:a4:07:2a:f0:00:9d:08:03:83:8d: e0:3f:c3:86:9c:a5:ab:da:3e:10:9c:83:16:e2:28:cd:42:e2: bd:9a:80:60:a6:e7:cc:da:f2:b6:86:8d:2d:5b:e5:cf:67:58: 9f:9b:1c:6d:8b:b3:d6:c0:07:4f:41:c4:8e:6d:db:6d:55:bd: 93:bb:6e:eb:8a:09:50:01:a2:27:c0:b3:59:7e:92:41:29:1b: ab:33:3c:d6 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUYAb2t+k9L/bSLlhob1bMmxUYQz0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0UwQUI3ODZBQjg2QzREMjVBN0JFODY0REREMTQwNzYw Q0MwMkVFQTAeFw0yNjA5MjQxMTU5NDFaFw0yNjA5MjUxMjQ5NDFaMDMxMTAvBgNV BAMTKEFFQkZFOEVDNzcwNkYyMTE0MEU2REU2NTkwMjMyQTQ4NTA4RTIzNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsJqbN5ZFSNrvaRqQ1rbMpzeim nAi8G5oCJ2SXulIl40DyPDJjl2/XEXkHuP/crN7iPBM4RBJywYZZ5pCMiysi8gvP E9ISfgH2Iz6UKpdfjzmhpY52LBRmkbDHY7Fzx6JhdIoWhcTrdsYSF+uQxh9XRqiN keyh+mWMa82AitQrP2sMQwO1JENd5wgKRAOf9jY2jU7YtDGWTBswVHO9pn/YYVQj pGY3uy90EPQF4ejZJzU7oah3JV9iRws0a45BhMsG4rx3wyVaYsBJfSIvY8aoacrg MfLbU7qS6t0LbJ2uEdN+9EkUQGZts8LZnDZAPfPTn+vMrZsBOhi4LxskrRu7AgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQUrr/o7HcG8hFA5t5lkCMqSFCOI1YwHwYDVR0j BBgwFoAUPgq3hquGxNJae+hk3dFAdgzALuowDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0RUVi8w LzNFMEFCNzg2QUI4NkM0RDI1QTdCRTg2NERERDE0MDc2MENDMDJFRUEuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvM0UwQUI3ODZBQjg2QzREMjVBN0JFODY0REREMTQw NzYwQ0MwMkVFQS5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1NEVFYvMC8zRTBBQjc4NkFCODZDNEQy NUE3QkU4NjREREQxNDA3NjBDQzAyRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE2d++yKvs2oH1g/X AAbyhb598+n4chWgYdExxhP3ui/cHylBmLcLFIxK0YFbolptQUiXuvSDwc9Z/aFe C9gKRAJxHTE5Bm8vxXJt2f0xlgUNlCFWxAR47/MeyoW4DGLkEvyp26VqCHvcjnN+ qGVm/oYNH4RHzXx40ezfsw99mWsLTMAJSs5fVCQQzhWpo15hDkF0T844ii4Vq8ns EEZW0Qc/BS7q0k5iOBikByrwAJ0IA4ON4D/Dhpylq9o+EJyDFuIozULivZqAYKbn zNrytoaNLVvlz2dYn5scbYuz1sAHT0HEjm3bbVW9k7tu64oJUAGiJ8CzWX6SQSkb qzM81g== -----END CERTIFICATE-----Generated at Thu Sep 24 21:22:25 2026 by rpki-client