$ rpki-client -vvvf rpkica.twnic.tw/rpki/TWNDC/0/DB30CE9B7F8573BFA8C811B88BC979C9B537831A.mft File: DB30CE9B7F8573BFA8C811B88BC979C9B537831A.mft (raw, json) Hash identifier: ATW6RIrCDSd9jlw+PtXjL6r4JB+vGUyyIMtQMbEcxS4= Subject key identifier: 0F:DC:A7:D3:FE:B1:28:18:3C:5F:E9:A2:B8:B0:0D:AE:BA:E9:72:AF Authority key identifier: DB:30:CE:9B:7F:85:73:BF:A8:C8:11:B8:8B:C9:79:C9:B5:37:83:1A Certificate issuer: /CN=DB30CE9B7F8573BFA8C811B88BC979C9B537831A Certificate serial: 232A8E31C94641785B3C558EF85BD2C9E30A5495 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DB30CE9B7F8573BFA8C811B88BC979C9B537831A.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNDC/0/DB30CE9B7F8573BFA8C811B88BC979C9B537831A.mft Manifest number: B4 Signing time: Thu 24 Sep 2026 09:44:22 +0000 Manifest this update: Thu 24 Sep 2026 09:39:22 +0000 Manifest next update: Fri 25 Sep 2026 10:36:22 +0000 Files and hashes: 1: DB30CE9B7F8573BFA8C811B88BC979C9B537831A.crl (hash: ++hKMBhekRpYLvbtOyDhBkC6MHWDhO7TVeEs7U4/GhI=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNDC/0/DB30CE9B7F8573BFA8C811B88BC979C9B537831A.crl rsync://rpkica.twnic.tw/rpki/TWNDC/0/DB30CE9B7F8573BFA8C811B88BC979C9B537831A.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DB30CE9B7F8573BFA8C811B88BC979C9B537831A.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 02:19:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:2a:8e:31:c9:46:41:78:5b:3c:55:8e:f8:5b:d2:c9:e3:0a:54:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB30CE9B7F8573BFA8C811B88BC979C9B537831A Validity Not Before: Sep 24 09:39:22 2026 GMT Not After : Sep 25 10:36:22 2026 GMT Subject: CN=0FDCA7D3FEB128183C5FE9A2B8B00DAEBAE972AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c1:08:01:1b:b6:ca:37:71:d3:41:76:d6:77: 28:51:b9:5d:03:cd:8e:49:d5:2a:8e:b4:22:69:d7: 97:14:85:21:ba:87:ac:bb:a2:3a:2a:d2:63:0e:d3: fd:a4:85:8c:d3:bd:ce:05:2b:9c:2e:a5:a7:0b:fa: 6d:84:d9:e9:0a:51:e7:e5:82:81:b9:f6:96:01:94: cd:b7:6b:8e:8a:9e:98:40:81:2a:eb:87:cf:16:46: 01:4b:ef:b6:82:32:8e:36:6b:6f:b4:5d:34:20:9b: 3c:8f:6c:d3:09:fd:67:2b:48:40:71:15:01:2a:0f: cb:e5:1a:4b:a6:03:f8:11:a5:22:aa:6f:1d:7e:d2: 21:68:b5:2d:20:4a:07:d4:60:55:b2:97:0f:5c:eb: f2:b9:ae:99:ce:21:ed:b0:8e:9e:09:0e:55:a6:6a: 50:47:b4:ae:ea:da:07:9d:1c:58:88:0f:ce:e6:27: 93:59:8d:26:3f:b7:dc:7e:7c:a6:41:33:89:c1:81: 74:ac:ff:9a:5a:16:73:89:aa:ef:81:d1:b4:b2:97: 0c:6a:c5:7a:a9:5f:be:55:33:24:c2:58:9c:e9:a5: 58:8c:34:c4:06:34:44:08:c1:2c:2a:49:33:e3:bf: c0:e5:70:e4:87:2b:72:43:3a:56:78:95:bb:cb:2b: 77:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:DC:A7:D3:FE:B1:28:18:3C:5F:E9:A2:B8:B0:0D:AE:BA:E9:72:AF X509v3 Authority Key Identifier: keyid:DB:30:CE:9B:7F:85:73:BF:A8:C8:11:B8:8B:C9:79:C9:B5:37:83:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNDC/0/DB30CE9B7F8573BFA8C811B88BC979C9B537831A.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DB30CE9B7F8573BFA8C811B88BC979C9B537831A.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNDC/0/DB30CE9B7F8573BFA8C811B88BC979C9B537831A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dd:89:c4:db:b7:e4:a3:f5:8a:b5:50:12:59:45:ae:54:97:b7: 40:bd:85:11:79:5e:d0:fa:44:ff:13:9c:12:1b:e8:29:3f:3b: 81:97:86:ba:05:9c:4d:e5:5c:7e:2a:b0:b9:0f:90:f2:e9:77: c6:22:99:9e:20:97:26:23:29:ff:aa:6f:db:48:6c:80:1e:31: 41:e4:65:bc:8d:58:20:8d:c3:99:db:66:7e:15:0c:16:47:b1: df:27:ef:e8:d2:71:ab:5b:89:e1:fd:d6:fa:c5:5a:ce:e2:3b: 6b:b1:97:c3:a8:6b:af:d3:56:cd:29:b7:bd:5f:64:f4:e7:50: b9:42:87:d6:12:b7:97:89:dd:5a:56:ce:59:80:21:4b:98:8c: ac:9b:d7:0b:d4:33:af:41:2a:d7:26:54:d4:d0:a5:eb:5c:22: fd:b6:72:54:9a:06:1f:76:47:44:4c:ee:a5:95:e2:b0:2b:0d: 72:1d:cb:df:c8:e2:f5:9c:59:1d:a4:c5:c8:91:78:b9:37:73: 72:ea:6e:9a:b2:0b:dc:fd:d6:86:d1:7f:a3:16:9b:37:2b:cf: 5c:64:84:a2:0a:34:9f:5d:82:95:49:47:de:5c:3b:4f:26:99: 3e:43:92:ff:ae:85:d8:b8:79:3f:e2:b9:26:03:0c:83:40:da: 82:2a:da:45 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUIyqOMclGQXhbPFWO+FvSyeMKVJUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREIzMENFOUI3Rjg1NzNCRkE4QzgxMUI4OEJDOTc5QzlC NTM3ODMxQTAeFw0yNjA5MjQwOTM5MjJaFw0yNjA5MjUxMDM2MjJaMDMxMTAvBgNV BAMTKDBGRENBN0QzRkVCMTI4MTgzQzVGRTlBMkI4QjAwREFFQkFFOTcyQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8wQgBG7bKN3HTQXbWdyhRuV0D zY5J1SqOtCJp15cUhSG6h6y7ojoq0mMO0/2khYzTvc4FK5wupacL+m2E2ekKUefl goG59pYBlM23a46KnphAgSrrh88WRgFL77aCMo42a2+0XTQgmzyPbNMJ/WcrSEBx FQEqD8vlGkumA/gRpSKqbx1+0iFotS0gSgfUYFWylw9c6/K5rpnOIe2wjp4JDlWm alBHtK7q2gedHFiID87mJ5NZjSY/t9x+fKZBM4nBgXSs/5paFnOJqu+B0bSylwxq xXqpX75VMyTCWJzppViMNMQGNEQIwSwqSTPjv8DlcOSHK3JDOlZ4lbvLK3eHAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUD9yn0/6xKBg8X+miuLANrrrpcq8wHwYDVR0j BBgwFoAU2zDOm3+Fc7+oyBG4i8l5ybU3gxowDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOREMv MC9EQjMwQ0U5QjdGODU3M0JGQThDODExQjg4QkM5NzlDOUI1Mzc4MzFBLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xL0RCMzBDRTlCN0Y4NTczQkZBOEM4MTFCODhCQzk3 OUM5QjUzNzgzMUEuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05EQy8wL0RCMzBDRTlCN0Y4NTcz QkZBOEM4MTFCODhCQzk3OUM5QjUzNzgzMUEubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDdicTbt+Sj9Yq1 UBJZRa5Ul7dAvYUReV7Q+kT/E5wSG+gpPzuBl4a6BZxN5Vx+KrC5D5Dy6XfGIpme IJcmIyn/qm/bSGyAHjFB5GW8jVggjcOZ22Z+FQwWR7HfJ+/o0nGrW4nh/db6xVrO 4jtrsZfDqGuv01bNKbe9X2T051C5QofWEreXid1aVs5ZgCFLmIysm9cL1DOvQSrX JlTU0KXrXCL9tnJUmgYfdkdETO6lleKwKw1yHcvfyOL1nFkdpMXIkXi5N3Ny6m6a sgvc/daG0X+jFps3K89cZISiCjSfXYKVSUfeXDtPJpk+Q5L/roXYuHk/4rkmAwyD QNqCKtpF -----END CERTIFICATE-----Generated at Thu Sep 24 17:51:31 2026 by rpki-client