$ rpki-client -vvvf rpkica.twnic.tw/rpki/SONET/0/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.mft File: 3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.mft (raw, json) Hash identifier: UGn5xCbCmqw3BHPAhOlOCTaThS2hb6RpPxqDxSpFbbk= Subject key identifier: 4A:E9:BD:39:65:8B:01:08:12:51:59:AB:F1:E6:62:59:C4:60:88:06 Authority key identifier: 3F:6D:33:C9:B3:9C:FC:95:0A:2D:3D:BC:78:13:1E:1A:AF:8C:C8:EF Certificate issuer: /CN=3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF Certificate serial: 01D718E293A50AB042E44A6C9FAEA8CA31D50446 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.cer Subject info access: rsync://rpkica.twnic.tw/rpki/SONET/0/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.mft Manifest number: 0111 Signing time: Sat 14 Nov 2026 19:39:46 +0000 Manifest this update: Sat 14 Nov 2026 19:34:46 +0000 Manifest next update: Sun 15 Nov 2026 22:26:46 +0000 Files and hashes: 1: 33392e312e34302e302f32322d3234203d3e2039393232.roa (hash: z5CRvkmrV5KJFcdljtPbVmXZST0Ame/3ck3rEFg8aGM=) 2: 33392e312e34342e302f32342d3234203d3e2039393232.roa (hash: dh03y3MeArVsb+oESUBRNDxrsrn5jbUmgM4ZXBS0tXU=) 3: 36312e35362e3132382e302f31392d3234203d3e203138313832.roa (hash: Wz4YbIAlDY3Rql9HeEh2BYj6+M1ftVPyXgPvQ2mi8EE=) 4: 33392e312e302e302f32302d3234203d3e2039393232.roa (hash: XsN+8OXikSiKwT554Z/8JtJMRKlDNFZ1zHxkg1sQLrI=) 5: 33392e312e34372e302f32342d3234203d3e2039393232.roa (hash: Drtv5JpDCKBUTLlwm2QdYijdfjd//4f1UxcFzmvf4Yg=) 6: 3231392e38352e302e302f31362d3234203d3e203138313832.roa (hash: TkTwJY6tgXdxY0w+yf0JfiJDrdGZLKSEjlzpI3ieJUU=) 7: 33392e312e302e302f31362d3234203d3e203138313832.roa (hash: CffvCFfDEQybZwp62g5aXFZex+pvcH1gSZG/H/2FRO0=) 8: 33392e312e34362e302f32342d3234203d3e2039393232.roa (hash: onwq6khytNt8j9JeiESYQPMZkrctbzkf2UmQhqWpjYw=) 9: 3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.crl (hash: 7hDrdC9j0n0Th9eYp8w0naAtEvf419rnhJQDOQqDQXo=) 10: 32372e3130352e302e302f31362d3234203d3e203138313832.roa (hash: LmAW7PeQcegNvt2M9HNQbyVlYetXrEvSkZVhVCt+ooY=) 11: 33392e312e31362e302f32302d3234203d3e2039393232.roa (hash: o5tck8QLFY02tn9jNvUElQeuTpHy+ammIuF39TN/Cn4=) 12: 33392e312e39362e302f32302d3234203d3e203138343139.roa (hash: W4A9R2ruP8BpTxaCGm9udnAE3yQmyw/+pOzjhpIfz0Y=) 13: 33392e312e34352e302f32342d3234203d3e2039393232.roa (hash: ryqYKYb9ZEnNDprKt9KNFJe6hMX8qggWXnAtJIFQzic=) 14: 33392e312e33322e302f32312d3234203d3e2039393232.roa (hash: VNQcRXeOE/j/rdkFQwcA1LclvGgGVBSj6YxVH+Y+B5E=) 15: 32372e3130352e3230362e302f32342d3234203d3e203435343734.roa (hash: 9Cuads8Xj/H3SUpgMMXmElqrysGMLgLQcPn8+WPxZaA=) 16: 36312e36342e3132382e302f31372d3234203d3e203138313832.roa (hash: AP04YgE4U4X0DbCKpFBdjCNZlauxNQuycSDnxfq2LBo=) 17: 3231392e38342e302e302f31362d3234203d3e203138313832.roa (hash: 8fiqTkiu9MOMh1suF5MiCOJuDwIsVQ34W7YS4b6Ylb8=) 18: 33392e312e36342e302f32302d3234203d3e2039393232.roa (hash: juMnZBysyILQxgKPuDDStLHZSQ2rmujkQS4MrnwwJ/s=) 19: 36312e36342e36342e302f31382d3234203d3e203138313832.roa (hash: ZufTl96QJSTGjjHHnlV902JYYFFNTIDFxh070LDkULs=) 20: 32372e3130352e38322e302f32342d3234203d3e203332373837.roa (hash: 1sg7Wk2e/ZdonH5PhiuzAv6jLByDCAyoVpPFtRuPk6A=) 21: 33392e312e34382e302f32302d3234203d3e2039393232.roa (hash: TTEoeJ1Nt73LCduyQM6y6wzx3+jdUSQumP9bhes2+UY=) 22: 323430343a38303a3a2f32382d3438203d3e203138313832.roa (hash: gD1x4xXT4Z6eEJ+bwB2oDJNQCUbNjWpPyKuQClgUoNQ=) 23: 36312e36322e302e302f31362d3234203d3e203138313832.roa (hash: ifIFQrYUhM297jse0mQ1w+HqkUSGHCWju3weIN7aUQs=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/SONET/0/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.crl rsync://rpkica.twnic.tw/rpki/SONET/0/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 15:30:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:d7:18:e2:93:a5:0a:b0:42:e4:4a:6c:9f:ae:a8:ca:31:d5:04:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF Validity Not Before: Nov 14 19:34:46 2026 GMT Not After : Nov 15 22:26:46 2026 GMT Subject: CN=4AE9BD39658B0108125159ABF1E66259C4608806 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:2b:a3:cc:6e:0e:a1:ea:ee:c7:a8:0a:39:71: d1:43:d1:38:26:e7:65:0e:d3:42:a6:2c:98:95:76: 33:4d:d9:e3:4d:3e:fb:d3:4d:3f:61:2c:45:b7:ea: c8:6f:2b:d1:f6:8c:69:32:0e:ae:a6:6e:d6:3e:98: 99:e9:68:7f:7f:57:95:4a:42:68:fb:6c:cc:aa:58: cf:2c:dc:03:df:1c:b9:03:6b:ae:0b:6c:d2:c9:76: 19:11:ab:5e:6b:d4:bc:d9:72:ae:7a:90:94:95:ca: b4:4e:02:97:8d:56:22:49:f3:48:c8:c1:77:5e:ce: b0:5c:59:16:a9:d5:d7:9c:8e:eb:0f:c6:16:bc:64: 09:63:01:60:98:e9:ed:0f:f2:25:57:02:cb:65:4c: 5e:df:fd:a9:8a:9b:02:5c:56:50:2d:c1:69:1b:f5: 43:68:69:b1:8f:35:0e:66:c8:46:1b:50:7a:19:1e: b2:a3:84:c3:67:c5:6d:67:e9:66:6e:81:cf:2d:11: b2:75:62:50:13:19:ff:3c:4e:62:d5:9e:86:b1:47: 4f:6c:56:2b:55:25:3c:66:1e:8a:02:28:39:2b:ae: 5d:1c:75:fa:85:37:72:e5:95:7c:3f:38:cc:f8:92: 05:0b:a9:9b:09:60:65:7d:88:64:18:b3:9c:a8:50: 73:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:E9:BD:39:65:8B:01:08:12:51:59:AB:F1:E6:62:59:C4:60:88:06 X509v3 Authority Key Identifier: keyid:3F:6D:33:C9:B3:9C:FC:95:0A:2D:3D:BC:78:13:1E:1A:AF:8C:C8:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/SONET/0/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SONET/0/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:9f:53:fc:a3:f4:6b:a5:bd:ce:a7:76:d1:7c:44:25:ef:5a: 5b:c4:e5:44:05:a9:52:21:c1:12:c8:55:a2:64:53:12:92:7a: 79:0e:70:dd:78:3d:f5:0e:31:96:5b:82:bc:e8:e1:da:29:7d: 98:1c:79:5a:93:5d:78:17:bd:2d:8c:90:9d:fb:04:1b:0d:1d: ce:f4:c3:e6:65:69:96:5c:03:0d:ea:8b:40:e3:13:bd:9e:6d: 64:8a:9d:ef:34:40:4c:ee:1f:83:17:82:cb:38:40:30:84:2d: 67:e0:b4:1b:5a:8d:d0:f7:a9:89:5d:7d:2e:7a:69:ed:ed:d7: 74:89:66:dc:d4:02:cb:12:65:23:8d:15:15:22:1a:42:e9:de: ba:8c:b9:4f:3d:16:b6:48:a7:c9:f8:50:26:bf:0f:78:11:54: 2a:24:5e:78:15:7a:ca:b2:70:89:0a:54:e9:e4:60:7f:01:f4: ee:8c:80:49:56:93:9e:67:0c:d2:ff:c4:1b:d9:d4:1a:b8:79: e9:2c:0a:e6:65:a1:02:21:20:6b:e5:4d:e3:d8:04:75:66:32: db:4d:4c:86:06:ba:ef:a7:0e:e7:7e:55:87:99:69:eb:e2:3c: 27:5c:09:fc:3f:c7:de:ef:54:53:7f:6a:ab:36:2a:92:67:17: c5:4a:2c:ba -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUAdcY4pOlCrBC5Epsn66oyjHVBEYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Y2RDMzQzlCMzlDRkM5NTBBMkQzREJDNzgxMzFFMUFB RjhDQzhFRjAeFw0yNjExMTQxOTM0NDZaFw0yNjExMTUyMjI2NDZaMDMxMTAvBgNV BAMTKDRBRTlCRDM5NjU4QjAxMDgxMjUxNTlBQkYxRTY2MjU5QzQ2MDg4MDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCEK6PMbg6h6u7HqAo5cdFD0Tgm 52UO00KmLJiVdjNN2eNNPvvTTT9hLEW36shvK9H2jGkyDq6mbtY+mJnpaH9/V5VK Qmj7bMyqWM8s3APfHLkDa64LbNLJdhkRq15r1LzZcq56kJSVyrROApeNViJJ80jI wXdezrBcWRap1decjusPxha8ZAljAWCY6e0P8iVXAstlTF7f/amKmwJcVlAtwWkb 9UNoabGPNQ5myEYbUHoZHrKjhMNnxW1n6WZugc8tEbJ1YlATGf88TmLVnoaxR09s VitVJTxmHooCKDkrrl0cdfqFN3LllXw/OMz4kgULqZsJYGV9iGQYs5yoUHPTAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUSum9OWWLAQgSUVmr8eZiWcRgiAYwHwYDVR0j BBgwFoAUP20zybOc/JUKLT28eBMeGq+MyO8wDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU09ORVQv MC8zRjZEMzNDOUIzOUNGQzk1MEEyRDNEQkM3ODEzMUUxQUFGOENDOEVGLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzNGNkQzM0M5QjM5Q0ZDOTUwQTJEM0RCQzc4MTMx RTFBQUY4Q0M4RUYuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9TT05FVC8wLzNGNkQzM0M5QjM5Q0ZD OTUwQTJEM0RCQzc4MTMxRTFBQUY4Q0M4RUYubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAXn1P8o/Rrpb3O p3bRfEQl71pbxOVEBalSIcESyFWiZFMSknp5DnDdeD31DjGWW4K86OHaKX2YHHla k114F70tjJCd+wQbDR3O9MPmZWmWXAMN6otA4xO9nm1kip3vNEBM7h+DF4LLOEAw hC1n4LQbWo3Q96mJXX0uemnt7dd0iWbc1ALLEmUjjRUVIhpC6d66jLlPPRa2SKfJ +FAmvw94EVQqJF54FXrKsnCJClTp5GB/AfTujIBJVpOeZwzS/8Qb2dQauHnpLArm ZaECISBr5U3j2AR1ZjLbTUyGBrrvpw7nflWHmWnr4jwnXAn8P8fe71RTf2qrNiqS ZxfFSiy6 -----END CERTIFICATE-----Generated at Sun Nov 15 01:27:24 2026 by rpki-client