$ rpki-client -vvvf rpkica.twnic.tw/rpki/TANET/0/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.mft File: 6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.mft (raw, json) Hash identifier: q3WTfeNgrGv/Gke0nIC33JgS0mtHQytmS2m9Wz/u/k0= Subject key identifier: F9:E5:1F:A0:C5:31:C0:54:34:FD:7B:01:52:02:5E:BD:01:A1:2A:02 Authority key identifier: 6E:9C:32:26:68:2A:EF:A8:D6:7B:8A:C6:08:CC:CF:C8:A0:96:10:CD Certificate issuer: /CN=6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD Certificate serial: 2765CD31DF91DF1B2CE1D02F3A9D9051A8E3BBBD Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TANET/0/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.mft Manifest number: 029E Signing time: Thu 24 Sep 2026 13:24:59 +0000 Manifest this update: Thu 24 Sep 2026 13:19:59 +0000 Manifest next update: Fri 25 Sep 2026 13:46:59 +0000 Files and hashes: 1: AS17711.roa (hash: HXnFQ1ogZR2j1qGYqwrCTC9+3osb0O4DBAASmnaoNYs=) 2: AS1659.roa (hash: j3u3V18aHfHo/NDML42g0UQSQjnXI5q9wXWoowXLBFg=) 3: 6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.crl (hash: RgWixz911QQqGy1eHNbzfl69w4RkNHXPFXzSg4OADII=) 4: AS17712.roa (hash: VbYsDgut+6w19G6fBh7opEe2zCUfFJuIvPm1UL4j9g8=) 5: AS17716.roa (hash: QJfn98q9GCpZwDozPEb7vzDE8pPTD6V7DkN76r6Bpos=) 6: AS18177.roa (hash: fxlV5+GVr2otH1tYq4wDBYNDHzH9J2LM+ShVYw3RZos=) 7: AS9916.roa (hash: bJ1r+tyqzjibU4qpONziU5YtkwR5ZUj1zImuxSjlO2M=) 8: AS18047.roa (hash: J4WakVwJWfyd/jtRhBY0Sn4bIPMH3T7PrME5BAycAxE=) 9: AS131150.roa (hash: Lmloz8LiIV8pjh8sGmz95zyicNGp9fS97nBLBQY/HWc=) 10: AS18043.roa (hash: OceWabkHHIz4lY5kEFm9O1gY+H0mxDs8NOB+5bDRraU=) 11: AS1569.roa (hash: jY4pATt/jGgMLbu/QefPNwktyUJg9b+KBtuPdVhUmTk=) 12: AS17713.roa (hash: pFGUYdrzL+OUjhFFKgHC9k6HgAQM1lZqhd8PA52A+VI=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TANET/0/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.crl rsync://rpkica.twnic.tw/rpki/TANET/0/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 13:46:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:65:cd:31:df:91:df:1b:2c:e1:d0:2f:3a:9d:90:51:a8:e3:bb:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD Validity Not Before: Sep 24 13:19:59 2026 GMT Not After : Sep 25 13:46:59 2026 GMT Subject: CN=F9E51FA0C531C05434FD7B0152025EBD01A12A02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:3a:aa:0e:45:d6:4b:51:c4:63:53:2b:ee:ff: 8a:91:7b:5d:f2:f3:db:5d:b6:a7:d4:6e:23:04:b8: 2f:bb:8d:88:3a:56:bc:6e:2d:6e:df:3f:d1:03:75: 04:1a:f1:bf:fe:2f:ff:bb:45:ae:e5:39:ea:c6:49: 75:a5:a7:d0:91:14:29:a9:2a:70:5a:ad:e1:c7:9a: 50:33:30:8d:8f:f4:70:3f:db:0e:9a:18:6e:77:a8: 17:6c:f3:87:42:8e:c6:bd:81:08:c0:94:30:01:80: c7:0b:c9:93:7c:49:96:32:1b:83:ad:ee:32:6c:14: df:94:2f:91:cd:ec:a8:19:74:f4:b3:9d:ad:38:d1: fc:26:92:ab:bc:ea:45:dd:61:0b:6b:53:3c:a2:af: 8d:98:20:8e:cd:87:fd:cb:41:3c:fe:37:de:15:c1: 09:f6:93:a1:7e:f0:ce:dc:ef:94:8f:a5:14:c2:f6: 39:77:38:96:9b:7a:f7:16:29:65:fb:07:d6:43:a2: b4:35:bd:65:44:c4:e2:da:59:f6:42:f5:23:5c:52: 06:ed:1e:ef:d9:8a:2f:25:f0:e2:00:bc:14:d6:90: 6b:ce:f9:9e:f9:39:b5:85:36:47:6e:b6:e7:55:1b: 25:dc:56:65:75:a8:15:46:1a:f8:77:98:1d:66:68: 1a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:E5:1F:A0:C5:31:C0:54:34:FD:7B:01:52:02:5E:BD:01:A1:2A:02 X509v3 Authority Key Identifier: keyid:6E:9C:32:26:68:2A:EF:A8:D6:7B:8A:C6:08:CC:CF:C8:A0:96:10:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TANET/0/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TANET/0/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:38:bf:fd:7d:b8:cb:52:a4:dc:fe:85:b3:d4:dd:8c:d1:6b: 6d:e8:e6:be:97:d3:a6:18:7e:36:2d:fb:82:45:bc:c6:18:fe: 9f:9d:f7:7e:de:f8:f2:1f:ca:c4:85:7c:1b:ac:45:ff:2c:04: e8:b1:e4:7d:12:bb:90:c4:2d:e0:f5:01:a8:7b:c7:f8:88:5c: dc:f3:dd:34:86:75:09:a1:e3:e6:5e:2e:69:31:2b:c2:f5:44: 43:8f:cb:04:fe:ed:87:d0:ee:79:d8:8c:ff:d5:cc:7c:df:2f: 66:c7:5e:cf:4f:fd:86:7d:24:ce:a0:91:56:54:31:94:c0:a3: a5:dd:32:67:e6:d6:0e:66:dc:26:fd:a2:1d:db:64:92:67:42: 4d:54:da:b3:65:ca:9c:a8:5a:5e:0f:3d:e9:7b:d4:77:68:07: 79:89:6b:3d:e3:33:02:3f:42:7d:58:c0:8d:d9:fe:7a:62:7b: ed:52:89:14:67:a6:b4:4a:f4:df:75:0a:cd:c0:06:95:08:26: 92:7d:7e:28:e1:04:12:f1:2c:bc:24:e1:66:ad:fa:3f:9d:2f: e3:ee:bf:70:85:8d:09:a2:6b:2b:1d:f2:b2:5d:11:ae:9b:35: b5:7f:42:cb:58:b1:ab:69:85:d2:6b:26:71:bb:34:c8:b9:94: 4f:2b:de:28 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUJ2XNMd+R3xss4dAvOp2QUajju70wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkU5QzMyMjY2ODJBRUZBOEQ2N0I4QUM2MDhDQ0NGQzhB MDk2MTBDRDAeFw0yNjA5MjQxMzE5NTlaFw0yNjA5MjUxMzQ2NTlaMDMxMTAvBgNV BAMTKEY5RTUxRkEwQzUzMUMwNTQzNEZEN0IwMTUyMDI1RUJEMDFBMTJBMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfOqoORdZLUcRjUyvu/4qRe13y 89tdtqfUbiMEuC+7jYg6VrxuLW7fP9EDdQQa8b/+L/+7Ra7lOerGSXWlp9CRFCmp KnBareHHmlAzMI2P9HA/2w6aGG53qBds84dCjsa9gQjAlDABgMcLyZN8SZYyG4Ot 7jJsFN+UL5HN7KgZdPSzna040fwmkqu86kXdYQtrUzyir42YII7Nh/3LQTz+N94V wQn2k6F+8M7c75SPpRTC9jl3OJabevcWKWX7B9ZDorQ1vWVExOLaWfZC9SNcUgbt Hu/Zii8l8OIAvBTWkGvO+Z75ObWFNkdutudVGyXcVmV1qBVGGvh3mB1maBoBAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQU+eUfoMUxwFQ0/XsBUgJevQGhKgIwHwYDVR0j BBgwFoAUbpwyJmgq76jWe4rGCMzPyKCWEM0wDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVEFORVQv MC82RTlDMzIyNjY4MkFFRkE4RDY3QjhBQzYwOENDQ0ZDOEEwOTYxMENELmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzZFOUMzMjI2NjgyQUVGQThENjdCOEFDNjA4Q0ND RkM4QTA5NjEwQ0QuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UQU5FVC8wLzZFOUMzMjI2NjgyQUVG QThENjdCOEFDNjA4Q0NDRkM4QTA5NjEwQ0QubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC8OL/9fbjLUqTc /oWz1N2M0Wtt6Oa+l9OmGH42LfuCRbzGGP6fnfd+3vjyH8rEhXwbrEX/LAToseR9 EruQxC3g9QGoe8f4iFzc8900hnUJoePmXi5pMSvC9URDj8sE/u2H0O552Iz/1cx8 3y9mx17PT/2GfSTOoJFWVDGUwKOl3TJn5tYOZtwm/aId22SSZ0JNVNqzZcqcqFpe Dz3pe9R3aAd5iWs94zMCP0J9WMCN2f56YnvtUokUZ6a0SvTfdQrNwAaVCCaSfX4o 4QQS8Sy8JOFmrfo/nS/j7r9whY0JomsrHfKyXRGumzW1f0LLWLGraYXSayZxuzTI uZRPK94o -----END CERTIFICATE-----Generated at Fri Sep 25 04:02:42 2026 by rpki-client