$ rpki-client -vvvf rpkica.twnic.tw/rpki/TANET/0/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.mft File: 6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.mft (raw, json) Hash identifier: EGzqzg7zZZ6r30KfHOZ8Qzk2A+dRVUjlxY5tSu8UJ9g= Subject key identifier: CB:5D:CB:2E:DF:1A:BB:56:A8:AD:C1:5A:00:40:73:D8:A7:E8:C6:F1 Authority key identifier: 6E:9C:32:26:68:2A:EF:A8:D6:7B:8A:C6:08:CC:CF:C8:A0:96:10:CD Certificate issuer: /CN=6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD Certificate serial: 0E0931F8945CBFC7637FDD33B4E8F8867921D52F Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TANET/0/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.mft Manifest number: 02E4 Signing time: Sat 14 Nov 2026 16:02:47 +0000 Manifest this update: Sat 14 Nov 2026 15:57:47 +0000 Manifest next update: Sun 15 Nov 2026 19:04:47 +0000 Files and hashes: 1: AS17716.roa (hash: QJfn98q9GCpZwDozPEb7vzDE8pPTD6V7DkN76r6Bpos=) 2: AS17712.roa (hash: VbYsDgut+6w19G6fBh7opEe2zCUfFJuIvPm1UL4j9g8=) 3: 6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.crl (hash: I8ENJF4N0SnrbgCK7OLKRj/PVGFjzbqf/rY/E5zqwQE=) 4: AS17711.roa (hash: HXnFQ1ogZR2j1qGYqwrCTC9+3osb0O4DBAASmnaoNYs=) 5: AS9916.roa (hash: bJ1r+tyqzjibU4qpONziU5YtkwR5ZUj1zImuxSjlO2M=) 6: AS18043.roa (hash: OceWabkHHIz4lY5kEFm9O1gY+H0mxDs8NOB+5bDRraU=) 7: AS131150.roa (hash: Lmloz8LiIV8pjh8sGmz95zyicNGp9fS97nBLBQY/HWc=) 8: AS18177.roa (hash: UhyuHxslllfMQFLnPLZd7KoZfcoNG177s8onTkcW/8M=) 9: AS18047.roa (hash: J4WakVwJWfyd/jtRhBY0Sn4bIPMH3T7PrME5BAycAxE=) 10: AS17713.roa (hash: pFGUYdrzL+OUjhFFKgHC9k6HgAQM1lZqhd8PA52A+VI=) 11: AS1659.roa (hash: j3u3V18aHfHo/NDML42g0UQSQjnXI5q9wXWoowXLBFg=) 12: AS1569.roa (hash: jY4pATt/jGgMLbu/QefPNwktyUJg9b+KBtuPdVhUmTk=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TANET/0/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.crl rsync://rpkica.twnic.tw/rpki/TANET/0/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 15:30:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:09:31:f8:94:5c:bf:c7:63:7f:dd:33:b4:e8:f8:86:79:21:d5:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD Validity Not Before: Nov 14 15:57:47 2026 GMT Not After : Nov 15 19:04:47 2026 GMT Subject: CN=CB5DCB2EDF1ABB56A8ADC15A004073D8A7E8C6F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b2:e0:e7:bd:fe:30:69:7f:b4:70:92:53:ab: 1b:ed:36:38:dd:d3:88:9f:3c:7e:bb:4a:c3:54:34: 26:39:a1:03:94:9c:d0:ae:0c:a7:9f:50:ce:e7:18: 79:66:83:61:9c:a5:e6:1d:c9:0f:07:f0:2a:11:0a: c7:fd:66:27:f6:7f:34:64:e6:52:1e:89:81:c6:42: 28:13:4a:fd:c7:20:c4:11:2b:76:ff:c7:2b:a5:e2: f7:03:41:d4:74:e7:1b:e4:98:86:e3:ca:1c:77:8d: eb:ad:f0:09:01:fe:97:5a:4a:1b:55:77:5b:9a:a6: 23:b7:1a:e0:84:e1:56:84:b3:e1:4f:66:c1:3d:71: 8a:b7:23:4e:18:fb:9c:92:77:c6:3f:a4:dd:50:be: 5c:cb:e0:ef:d8:df:8e:ed:13:6e:f4:3d:76:9f:9b: 86:00:de:1b:b7:ea:52:2e:55:f7:a3:08:fc:d6:d7: 6f:fe:1d:c5:7c:ee:c9:6b:64:26:b7:76:d3:c6:46: 84:61:8d:72:2e:52:59:13:59:10:79:8d:0d:df:ef: 61:70:f1:29:48:a8:ba:84:11:12:69:9c:ce:67:23: 4d:3b:8f:83:d3:9a:39:23:f9:07:73:6b:26:ca:fb: 16:4a:2f:8b:a1:e7:23:f3:5c:b8:8d:ec:bd:aa:d6: 87:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:5D:CB:2E:DF:1A:BB:56:A8:AD:C1:5A:00:40:73:D8:A7:E8:C6:F1 X509v3 Authority Key Identifier: keyid:6E:9C:32:26:68:2A:EF:A8:D6:7B:8A:C6:08:CC:CF:C8:A0:96:10:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TANET/0/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TANET/0/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:4c:54:d6:74:50:fc:80:f4:7f:e9:7d:be:4e:0e:fa:e0:3d: 79:68:a0:83:66:45:af:e1:78:78:ac:04:4e:cf:4c:79:fa:f6: e0:cd:27:73:32:48:cc:55:66:9a:98:0e:6e:46:33:78:b4:ea: 02:07:88:b7:af:5f:0c:f1:75:d0:bb:03:8b:05:dc:4d:79:77: 67:cc:4a:1b:48:71:95:2c:d9:4d:1f:8f:78:5c:7d:a5:46:2e: ba:72:0e:b7:1f:ce:c4:f0:fe:e8:0b:ef:f3:8d:72:e3:69:50: 52:30:cb:76:2a:5b:77:a1:58:03:e8:99:d1:84:ce:13:09:5a: 7e:b8:d0:bf:23:b8:b3:42:48:61:2f:dc:82:e1:6b:fd:01:7d: c4:c6:6e:13:df:6a:8a:a3:10:aa:b8:0a:72:ee:27:5e:c2:1d: b8:6d:9c:dd:45:41:7f:1f:f9:41:d8:b4:15:d0:ac:7e:3d:0a: c6:79:d9:60:d2:28:05:73:3a:b9:08:4d:c6:34:03:91:38:56: 8f:ca:8b:54:26:79:ce:57:ae:85:35:71:57:7b:6f:fe:7d:7e: 9f:d4:c4:77:b3:4e:17:0c:4a:73:c2:15:7e:96:15:a9:aa:20: 26:22:80:5a:2a:b8:67:e1:bc:61:48:cf:f2:31:f5:0a:f2:e0: 35:b7:17:03 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUDgkx+JRcv8djf90ztOj4hnkh1S8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkU5QzMyMjY2ODJBRUZBOEQ2N0I4QUM2MDhDQ0NGQzhB MDk2MTBDRDAeFw0yNjExMTQxNTU3NDdaFw0yNjExMTUxOTA0NDdaMDMxMTAvBgNV BAMTKENCNURDQjJFREYxQUJCNTZBOEFEQzE1QTAwNDA3M0Q4QTdFOEM2RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXsuDnvf4waX+0cJJTqxvtNjjd 04ifPH67SsNUNCY5oQOUnNCuDKefUM7nGHlmg2GcpeYdyQ8H8CoRCsf9Zif2fzRk 5lIeiYHGQigTSv3HIMQRK3b/xyul4vcDQdR05xvkmIbjyhx3jeut8AkB/pdaShtV d1uapiO3GuCE4VaEs+FPZsE9cYq3I04Y+5ySd8Y/pN1QvlzL4O/Y347tE270PXaf m4YA3hu36lIuVfejCPzW12/+HcV87slrZCa3dtPGRoRhjXIuUlkTWRB5jQ3f72Fw 8SlIqLqEERJpnM5nI007j4PTmjkj+QdzaybK+xZKL4uh5yPzXLiN7L2q1of/AgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUy13LLt8au1aorcFaAEBz2KfoxvEwHwYDVR0j BBgwFoAUbpwyJmgq76jWe4rGCMzPyKCWEM0wDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVEFORVQv MC82RTlDMzIyNjY4MkFFRkE4RDY3QjhBQzYwOENDQ0ZDOEEwOTYxMENELmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzZFOUMzMjI2NjgyQUVGQThENjdCOEFDNjA4Q0ND RkM4QTA5NjEwQ0QuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UQU5FVC8wLzZFOUMzMjI2NjgyQUVG QThENjdCOEFDNjA4Q0NDRkM4QTA5NjEwQ0QubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA6TFTWdFD8gPR/ 6X2+Tg764D15aKCDZkWv4Xh4rAROz0x5+vbgzSdzMkjMVWaamA5uRjN4tOoCB4i3 r18M8XXQuwOLBdxNeXdnzEobSHGVLNlNH494XH2lRi66cg63H87E8P7oC+/zjXLj aVBSMMt2Klt3oVgD6JnRhM4TCVp+uNC/I7izQkhhL9yC4Wv9AX3Exm4T32qKoxCq uApy7idewh24bZzdRUF/H/lB2LQV0Kx+PQrGedlg0igFczq5CE3GNAOROFaPyotU JnnOV66FNXFXe2/+fX6f1MR3s04XDEpzwhV+lhWpqiAmIoBaKrhn4bxhSM/yMfUK 8uA1txcD -----END CERTIFICATE-----Generated at Sun Nov 15 08:28:50 2026 by rpki-client