$ rpki-client -vvvf rpkica.twnic.tw/rpki/ZUSO/1/9CDE503CCE370A39E157F8519ACF1A47727CC1C3.mft File: 9CDE503CCE370A39E157F8519ACF1A47727CC1C3.mft (raw, json) Hash identifier: KSv4gsFcC2UZI3wdsOOB74TRn1qOe0sxIWFWzINvD+Y= Subject key identifier: 1E:38:15:F5:66:A5:C3:E8:CD:6B:D3:3F:3F:7C:17:96:69:94:83:B2 Authority key identifier: 9C:DE:50:3C:CE:37:0A:39:E1:57:F8:51:9A:CF:1A:47:72:7C:C1:C3 Certificate issuer: /CN=9CDE503CCE370A39E157F8519ACF1A47727CC1C3 Certificate serial: 59EA2EEF69C11AC69894AEB8BE0C33AB1FB9411D Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/9CDE503CCE370A39E157F8519ACF1A47727CC1C3.cer Subject info access: rsync://rpkica.twnic.tw/rpki/ZUSO/1/9CDE503CCE370A39E157F8519ACF1A47727CC1C3.mft Manifest number: BB Signing time: Thu 24 Sep 2026 14:20:04 +0000 Manifest this update: Thu 24 Sep 2026 14:15:04 +0000 Manifest next update: Fri 25 Sep 2026 14:59:04 +0000 Files and hashes: 1: 3133382e3235322e31322e302f32342d3234203d3e203633393030.roa (hash: M8obdGIsjRO1zF80aPiV/zHcUxXnNPdWJ9IvgOv18N0=) 2: 3133382e3235322e31332e302f32342d3234203d3e20313331363338.roa (hash: ZxFVwcoOUjiuOptQUvoMY0HJlqBq+tEMKJCTrxaADFk=) 3: 9CDE503CCE370A39E157F8519ACF1A47727CC1C3.crl (hash: E9dx80mNpaK/RwKUuWJpXX1zSFB0ZGcLp5bEuOizOP4=) 4: 3133382e3235322e31322e302f32332d3234203d3e203633393030.roa (hash: T1G4LI5dLLgbVaIvhEyF4d3yTLg74BSvJymMPoiXRRs=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/ZUSO/1/9CDE503CCE370A39E157F8519ACF1A47727CC1C3.crl rsync://rpkica.twnic.tw/rpki/ZUSO/1/9CDE503CCE370A39E157F8519ACF1A47727CC1C3.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/9CDE503CCE370A39E157F8519ACF1A47727CC1C3.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 02:24:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:ea:2e:ef:69:c1:1a:c6:98:94:ae:b8:be:0c:33:ab:1f:b9:41:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CDE503CCE370A39E157F8519ACF1A47727CC1C3 Validity Not Before: Sep 24 14:15:04 2026 GMT Not After : Sep 25 14:59:04 2026 GMT Subject: CN=1E3815F566A5C3E8CD6BD33F3F7C1796699483B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b0:ac:af:66:41:5f:cf:ab:09:67:d4:37:0f: 46:92:9b:d0:54:c3:dd:90:d5:d6:af:de:5f:3c:33: 4c:63:bc:1a:3f:5a:1f:b8:de:dd:41:8f:58:ec:cf: 4e:f1:39:30:6c:2b:72:10:ec:3f:0c:26:54:1d:1e: f6:ba:85:88:17:5f:cc:fe:ca:43:c0:ca:70:80:02: f3:3f:36:c6:29:bd:34:23:68:66:5b:41:38:03:26: 1c:71:cc:9a:2d:3e:e7:3c:dc:e5:3d:34:6c:8f:fb: ac:d1:d7:3f:28:12:ce:84:7c:20:9a:4e:75:86:98: 90:22:11:0a:2c:76:05:6f:3a:e2:8c:70:0b:96:bb: ba:e3:80:2d:d4:c4:23:a1:cd:8e:37:e8:60:fc:c4: dc:9a:9d:d6:c4:06:17:d8:4e:c0:07:07:5b:36:5c: 1d:1a:1d:23:6e:17:97:fd:a7:a8:ba:c9:b5:51:4f: 38:06:12:1c:25:31:06:99:b6:81:77:14:ad:cd:15: 97:1f:80:06:45:e4:0f:04:89:bc:23:70:91:f6:79: fd:64:2a:ad:72:1f:83:4a:6a:50:59:57:e0:d9:37: a1:c9:2e:90:d5:37:f7:da:8d:cc:71:56:a2:94:a3: 85:8c:6a:bb:13:5f:72:c5:57:f3:6d:cd:36:fd:d7: 8b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:38:15:F5:66:A5:C3:E8:CD:6B:D3:3F:3F:7C:17:96:69:94:83:B2 X509v3 Authority Key Identifier: keyid:9C:DE:50:3C:CE:37:0A:39:E1:57:F8:51:9A:CF:1A:47:72:7C:C1:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/ZUSO/1/9CDE503CCE370A39E157F8519ACF1A47727CC1C3.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/9CDE503CCE370A39E157F8519ACF1A47727CC1C3.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ZUSO/1/9CDE503CCE370A39E157F8519ACF1A47727CC1C3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:55:56:19:16:57:13:b4:9b:21:64:ac:d7:90:d1:a6:95:b7: 14:70:6a:f1:78:ce:ab:f5:3d:05:22:b9:ec:e3:8f:2e:8e:6c: 79:db:5d:9c:da:c0:39:95:d4:a7:c6:79:d5:55:4f:63:51:03: db:97:c9:bd:21:27:46:c0:f9:78:cf:93:72:c1:a7:ea:bb:a9: be:f5:96:ca:50:a2:f4:22:cd:f0:b5:67:ca:94:10:aa:15:53: 8a:5c:06:86:b0:80:d7:d8:88:0b:d2:22:5b:23:4d:a4:6e:c3: b9:7a:c7:72:97:0a:96:7f:ac:e3:e9:fd:3c:52:0e:41:fb:ca: 9f:ad:ba:b9:ca:bd:79:f7:86:fb:2a:b9:51:7c:81:da:33:7a: 0e:20:65:5e:10:87:38:93:a6:e4:b2:e9:05:72:0b:ce:38:dc: 3e:d8:a7:c1:90:54:c6:05:e5:2a:97:b3:d8:74:2c:bf:c6:43: 77:74:73:8f:91:34:37:78:6d:a1:e9:39:4c:69:56:49:61:a1: 0d:1a:72:6c:45:bf:47:53:a1:c6:d4:50:62:48:2a:e3:df:af: b3:94:4d:e6:cf:e2:c3:db:1b:99:0a:cc:a8:30:07:23:db:e4: 11:df:20:ed:71:4d:26:87:99:5a:69:44:fb:7c:cd:18:9b:3a: 2e:1b:e2:0e -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUWeou72nBGsaYlK64vgwzqx+5QR0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNERTUwM0NDRTM3MEEzOUUxNTdGODUxOUFDRjFBNDc3 MjdDQzFDMzAeFw0yNjA5MjQxNDE1MDRaFw0yNjA5MjUxNDU5MDRaMDMxMTAvBgNV BAMTKDFFMzgxNUY1NjZBNUMzRThDRDZCRDMzRjNGN0MxNzk2Njk5NDgzQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKsKyvZkFfz6sJZ9Q3D0aSm9BU w92Q1dav3l88M0xjvBo/Wh+43t1Bj1jsz07xOTBsK3IQ7D8MJlQdHva6hYgXX8z+ ykPAynCAAvM/NsYpvTQjaGZbQTgDJhxxzJotPuc83OU9NGyP+6zR1z8oEs6EfCCa TnWGmJAiEQosdgVvOuKMcAuWu7rjgC3UxCOhzY436GD8xNyandbEBhfYTsAHB1s2 XB0aHSNuF5f9p6i6ybVRTzgGEhwlMQaZtoF3FK3NFZcfgAZF5A8EibwjcJH2ef1k Kq1yH4NKalBZV+DZN6HJLpDVN/fajcxxVqKUo4WMarsTX3LFV/NtzTb914u9AgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQUHjgV9Walw+jNa9M/P3wXlmmUg7IwHwYDVR0j BBgwFoAUnN5QPM43CjnhV/hRms8aR3J8wcMwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvWlVTTy8x LzlDREU1MDNDQ0UzNzBBMzlFMTU3Rjg1MTlBQ0YxQTQ3NzI3Q0MxQzMuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzAvOUNERTUwM0NDRTM3MEEzOUUxNTdGODUxOUFDRjFB NDc3MjdDQzFDMy5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1pVU08vMS85Q0RFNTAzQ0NFMzcwQTM5 RTE1N0Y4NTE5QUNGMUE0NzcyN0NDMUMzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY1VWGRZXE7SbIWSs 15DRppW3FHBq8XjOq/U9BSK57OOPLo5sedtdnNrAOZXUp8Z51VVPY1ED25fJvSEn RsD5eM+TcsGn6rupvvWWylCi9CLN8LVnypQQqhVTilwGhrCA19iIC9IiWyNNpG7D uXrHcpcKln+s4+n9PFIOQfvKn626ucq9efeG+yq5UXyB2jN6DiBlXhCHOJOm5LLp BXILzjjcPtinwZBUxgXlKpez2HQsv8ZDd3Rzj5E0N3htoek5TGlWSWGhDRpybEW/ R1OhxtRQYkgq49+vs5RN5s/iw9sbmQrMqDAHI9vkEd8g7XFNJoeZWmlE+3zNGJs6 LhviDg== -----END CERTIFICATE-----Generated at Thu Sep 24 17:33:45 2026 by rpki-client