$ rpki-client -vvvf rpkica.twnic.tw/rpki/SONET/0/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.mft File: 3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.mft (raw, json) Hash identifier: IubHf+E0sGlgG01vL4qNrYF0yCfW9IQpiBsI/PQ1BbI= Subject key identifier: 1C:D7:E1:2D:27:C9:28:18:F0:FA:6F:EC:6A:29:E7:9F:64:5F:A4:35 Authority key identifier: 3F:6D:33:C9:B3:9C:FC:95:0A:2D:3D:BC:78:13:1E:1A:AF:8C:C8:EF Certificate issuer: /CN=3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF Certificate serial: 5C627A95F110AABAC60B1B9BDD659DC233706E04 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.cer Subject info access: rsync://rpkica.twnic.tw/rpki/SONET/0/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.mft Manifest number: CC Signing time: Thu 24 Sep 2026 05:17:24 +0000 Manifest this update: Thu 24 Sep 2026 05:12:24 +0000 Manifest next update: Fri 25 Sep 2026 05:17:24 +0000 Files and hashes: 1: 33392e312e36342e302f32302d3234203d3e2039393232.roa (hash: juMnZBysyILQxgKPuDDStLHZSQ2rmujkQS4MrnwwJ/s=) 2: 33392e312e34362e302f32342d3234203d3e2039393232.roa (hash: onwq6khytNt8j9JeiESYQPMZkrctbzkf2UmQhqWpjYw=) 3: 36312e35362e3132382e302f31392d3234203d3e203138313832.roa (hash: Wz4YbIAlDY3Rql9HeEh2BYj6+M1ftVPyXgPvQ2mi8EE=) 4: 33392e312e34342e302f32342d3234203d3e2039393232.roa (hash: dh03y3MeArVsb+oESUBRNDxrsrn5jbUmgM4ZXBS0tXU=) 5: 33392e312e34302e302f32322d3234203d3e2039393232.roa (hash: z5CRvkmrV5KJFcdljtPbVmXZST0Ame/3ck3rEFg8aGM=) 6: 33392e312e34352e302f32342d3234203d3e2039393232.roa (hash: ryqYKYb9ZEnNDprKt9KNFJe6hMX8qggWXnAtJIFQzic=) 7: 33392e312e302e302f31362d3234203d3e203138313832.roa (hash: CffvCFfDEQybZwp62g5aXFZex+pvcH1gSZG/H/2FRO0=) 8: 323430343a38303a3a2f32382d3438203d3e203138313832.roa (hash: gD1x4xXT4Z6eEJ+bwB2oDJNQCUbNjWpPyKuQClgUoNQ=) 9: 33392e312e302e302f32302d3234203d3e2039393232.roa (hash: XsN+8OXikSiKwT554Z/8JtJMRKlDNFZ1zHxkg1sQLrI=) 10: 32372e3130352e38322e302f32342d3234203d3e203332373837.roa (hash: 1sg7Wk2e/ZdonH5PhiuzAv6jLByDCAyoVpPFtRuPk6A=) 11: 33392e312e33322e302f32312d3234203d3e2039393232.roa (hash: VNQcRXeOE/j/rdkFQwcA1LclvGgGVBSj6YxVH+Y+B5E=) 12: 3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.crl (hash: 0pLJiIaQfOqMYUhnVdBUnkWB9qjE6TX7RqhFEFImNdo=) 13: 33392e312e31362e302f32302d3234203d3e2039393232.roa (hash: o5tck8QLFY02tn9jNvUElQeuTpHy+ammIuF39TN/Cn4=) 14: 36312e36342e3132382e302f31372d3234203d3e203138313832.roa (hash: AP04YgE4U4X0DbCKpFBdjCNZlauxNQuycSDnxfq2LBo=) 15: 33392e312e34372e302f32342d3234203d3e2039393232.roa (hash: Drtv5JpDCKBUTLlwm2QdYijdfjd//4f1UxcFzmvf4Yg=) 16: 36312e36342e36342e302f31382d3234203d3e203138313832.roa (hash: ZufTl96QJSTGjjHHnlV902JYYFFNTIDFxh070LDkULs=) 17: 32372e3130352e302e302f31362d3234203d3e203138313832.roa (hash: LmAW7PeQcegNvt2M9HNQbyVlYetXrEvSkZVhVCt+ooY=) 18: 33392e312e34382e302f32302d3234203d3e2039393232.roa (hash: TTEoeJ1Nt73LCduyQM6y6wzx3+jdUSQumP9bhes2+UY=) 19: 3231392e38352e302e302f31362d3234203d3e203138313832.roa (hash: TkTwJY6tgXdxY0w+yf0JfiJDrdGZLKSEjlzpI3ieJUU=) 20: 32372e3130352e3230362e302f32342d3234203d3e203435343734.roa (hash: 9Cuads8Xj/H3SUpgMMXmElqrysGMLgLQcPn8+WPxZaA=) 21: 33392e312e39362e302f32302d3234203d3e203138343139.roa (hash: W4A9R2ruP8BpTxaCGm9udnAE3yQmyw/+pOzjhpIfz0Y=) 22: 3231392e38342e302e302f31362d3234203d3e203138313832.roa (hash: 8fiqTkiu9MOMh1suF5MiCOJuDwIsVQ34W7YS4b6Ylb8=) 23: 36312e36322e302e302f31362d3234203d3e203138313832.roa (hash: ifIFQrYUhM297jse0mQ1w+HqkUSGHCWju3weIN7aUQs=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/SONET/0/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.crl rsync://rpkica.twnic.tw/rpki/SONET/0/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 02:19:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:62:7a:95:f1:10:aa:ba:c6:0b:1b:9b:dd:65:9d:c2:33:70:6e:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF Validity Not Before: Sep 24 05:12:24 2026 GMT Not After : Sep 25 05:17:24 2026 GMT Subject: CN=1CD7E12D27C92818F0FA6FEC6A29E79F645FA435 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:38:e4:23:2b:94:71:b2:2f:d3:48:49:5e:66: 8a:96:d5:b6:bc:92:04:e6:90:e1:14:f3:bd:46:ce: ca:19:80:18:e5:0e:0d:05:13:f2:0b:fd:88:5c:1a: 47:04:bf:cc:41:40:90:37:0c:9d:46:ce:22:3e:f7: 67:3e:af:a4:4b:6f:a4:15:04:b5:15:9f:8e:88:7a: d8:41:de:8f:26:a6:cd:8a:bf:df:20:64:92:e5:20: d8:02:e0:56:1d:61:b0:1a:9c:71:d1:d0:67:23:ef: ec:17:c9:7c:55:55:d2:2f:62:45:d2:6c:ad:b7:dd: 21:c4:9f:d4:79:1f:c8:9b:7a:c7:d5:95:70:5c:c3: 89:86:a2:5b:60:2e:27:df:07:7f:bd:02:dc:a2:bc: e9:a5:8f:9d:9f:03:33:7d:77:f3:ca:0f:a8:15:56: 9b:2e:40:8d:66:16:d6:49:f3:bb:53:8e:87:63:36: 17:0a:1c:99:2f:7f:1d:b0:55:ba:88:39:d8:d9:ab: 29:47:91:70:ee:cc:5f:78:92:f8:32:b4:0b:ed:86: 7d:b2:33:f3:a6:38:83:09:3c:a8:8b:24:81:3e:97: de:25:f8:f9:e2:11:68:a9:18:73:82:7e:fa:9f:0c: c1:d6:92:b4:29:50:ba:21:c2:61:79:9c:03:08:71: 90:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:D7:E1:2D:27:C9:28:18:F0:FA:6F:EC:6A:29:E7:9F:64:5F:A4:35 X509v3 Authority Key Identifier: keyid:3F:6D:33:C9:B3:9C:FC:95:0A:2D:3D:BC:78:13:1E:1A:AF:8C:C8:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/SONET/0/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SONET/0/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:89:ec:33:8c:06:49:35:e4:d9:8d:70:b9:d9:fc:d3:f9:ed: 37:e5:60:be:be:63:cb:76:28:b3:56:3f:fe:f8:78:b1:c7:35: 55:0b:fe:72:4c:d7:18:38:3f:55:4b:79:a5:79:eb:9f:3b:98: ca:a7:62:23:39:0e:75:e9:aa:3a:f6:94:57:1f:98:99:fd:92: 75:74:38:22:d9:33:3d:d6:2e:68:f9:2e:57:b2:f9:78:bf:ed: 7e:4a:52:47:a8:23:41:d8:a9:8d:38:85:38:d3:55:34:bf:dc: ea:34:c7:21:86:77:53:3c:e1:e4:f9:14:fe:a6:55:67:26:48: 70:65:66:4e:4d:3b:4f:f8:d9:93:c3:c0:c8:31:70:ca:cf:53: d0:7b:82:26:39:ab:b9:ae:79:b6:2c:bb:62:8a:98:b8:fb:95: 56:60:6b:95:c2:bf:91:ab:92:d5:72:d9:2c:a5:13:ae:13:6a: 5f:ef:a2:6d:a5:84:a2:46:6f:9c:f0:98:3f:e2:26:4d:d9:de: 41:de:ef:62:fd:0a:fd:9c:4e:2f:7d:1a:17:b5:90:f2:19:9c: ac:c1:cc:b3:42:a5:b2:05:59:b0:33:4a:65:10:ee:5b:38:37: 86:6e:a1:16:a4:06:a2:f4:0a:f0:60:47:ad:b3:11:c3:44:1e: 2b:bc:b5:f2 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUXGJ6lfEQqrrGCxub3WWdwjNwbgQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Y2RDMzQzlCMzlDRkM5NTBBMkQzREJDNzgxMzFFMUFB RjhDQzhFRjAeFw0yNjA5MjQwNTEyMjRaFw0yNjA5MjUwNTE3MjRaMDMxMTAvBgNV BAMTKDFDRDdFMTJEMjdDOTI4MThGMEZBNkZFQzZBMjlFNzlGNjQ1RkE0MzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCOOQjK5Rxsi/TSEleZoqW1ba8 kgTmkOEU871GzsoZgBjlDg0FE/IL/YhcGkcEv8xBQJA3DJ1GziI+92c+r6RLb6QV BLUVn46IethB3o8mps2Kv98gZJLlINgC4FYdYbAanHHR0Gcj7+wXyXxVVdIvYkXS bK233SHEn9R5H8ibesfVlXBcw4mGoltgLiffB3+9AtyivOmlj52fAzN9d/PKD6gV VpsuQI1mFtZJ87tTjodjNhcKHJkvfx2wVbqIOdjZqylHkXDuzF94kvgytAvthn2y M/OmOIMJPKiLJIE+l94l+PniEWipGHOCfvqfDMHWkrQpULohwmF5nAMIcZDhAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUHNfhLSfJKBjw+m/sainnn2RfpDUwHwYDVR0j BBgwFoAUP20zybOc/JUKLT28eBMeGq+MyO8wDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU09ORVQv MC8zRjZEMzNDOUIzOUNGQzk1MEEyRDNEQkM3ODEzMUUxQUFGOENDOEVGLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzNGNkQzM0M5QjM5Q0ZDOTUwQTJEM0RCQzc4MTMx RTFBQUY4Q0M4RUYuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9TT05FVC8wLzNGNkQzM0M5QjM5Q0ZD OTUwQTJEM0RCQzc4MTMxRTFBQUY4Q0M4RUYubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAviewzjAZJNeTZ jXC52fzT+e035WC+vmPLdiizVj/++HixxzVVC/5yTNcYOD9VS3mleeufO5jKp2Ij OQ516ao69pRXH5iZ/ZJ1dDgi2TM91i5o+S5Xsvl4v+1+SlJHqCNB2KmNOIU401U0 v9zqNMchhndTPOHk+RT+plVnJkhwZWZOTTtP+NmTw8DIMXDKz1PQe4ImOau5rnm2 LLtiipi4+5VWYGuVwr+Rq5LVctkspROuE2pf76JtpYSiRm+c8Jg/4iZN2d5B3u9i /Qr9nE4vfRoXtZDyGZyswcyzQqWyBVmwM0plEO5bODeGbqEWpAai9ArwYEetsxHD RB4rvLXy -----END CERTIFICATE-----Generated at Thu Sep 24 17:34:52 2026 by rpki-client