$ rpki-client -vvvf rpkica.twnic.tw/rpki/CTII/0/96EC32418F5DB7D272132F4F615EEE14EBFCC789.mft File: 96EC32418F5DB7D272132F4F615EEE14EBFCC789.mft (raw, json) Hash identifier: J7oLR33nHXx4HjNBWAm82/FxpdRkOmUjqm6ZnQbovfg= Subject key identifier: 5C:D6:83:5F:61:08:E9:2B:50:CE:46:49:CB:D8:31:6D:2B:4A:3B:03 Authority key identifier: 96:EC:32:41:8F:5D:B7:D2:72:13:2F:4F:61:5E:EE:14:EB:FC:C7:89 Certificate issuer: /CN=96EC32418F5DB7D272132F4F615EEE14EBFCC789 Certificate serial: 5DA2AA0FF1659F1059952A1D638EBDB5430D17FD Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/96EC32418F5DB7D272132F4F615EEE14EBFCC789.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CTII/0/96EC32418F5DB7D272132F4F615EEE14EBFCC789.mft Manifest number: 0104 Signing time: Sat 14 Nov 2026 19:24:44 +0000 Manifest this update: Sat 14 Nov 2026 19:19:44 +0000 Manifest next update: Sun 15 Nov 2026 22:29:44 +0000 Files and hashes: 1: 3130332e3133302e3235302e302f32332d3234203d3e20323033303133.roa (hash: qifQcmP7aY3KYLY0YWbHCpcdmaz7oenQE0L1tQ92F24=) 2: 96EC32418F5DB7D272132F4F615EEE14EBFCC789.crl (hash: WmeSAFf4Lxc43ZgNtRBN5YEf5JGDKTFap6Y7euMZIHI=) 3: 3130332e3133302e3234392e302f32342d3234203d3e20393834.roa (hash: Nd+vxwk113iKIVjwRMjJ+fIaoSaKjb89bytlnk2AR6I=) 4: 3130332e3133302e3234382e302f32322d3234203d3e20323033303133.roa (hash: vdwflt80XSH+f+UsiqjaPJa3CG1W829xLEufTNoKgck=) 5: 3130332e3133302e3234392e302f32342d3234203d3e20323033303133.roa (hash: pqABpk3IMEQeCPJ1YCuMzE9VdO7tiwLb3Csx2ef6igs=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CTII/0/96EC32418F5DB7D272132F4F615EEE14EBFCC789.crl rsync://rpkica.twnic.tw/rpki/CTII/0/96EC32418F5DB7D272132F4F615EEE14EBFCC789.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/96EC32418F5DB7D272132F4F615EEE14EBFCC789.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 22:29:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:a2:aa:0f:f1:65:9f:10:59:95:2a:1d:63:8e:bd:b5:43:0d:17:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96EC32418F5DB7D272132F4F615EEE14EBFCC789 Validity Not Before: Nov 14 19:19:44 2026 GMT Not After : Nov 15 22:29:44 2026 GMT Subject: CN=5CD6835F6108E92B50CE4649CBD8316D2B4A3B03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:56:e6:72:c0:b7:ac:0f:d7:39:30:bf:ee:df: 0a:ac:10:5f:e6:33:89:f6:3b:ef:d1:a2:0c:4a:a3: d5:79:e2:36:d3:95:08:5a:23:f2:20:cc:eb:e2:28: 6a:69:56:6a:06:c8:0a:80:bd:bb:c1:ac:c4:f4:9d: 91:11:58:19:75:43:7b:69:f5:1a:64:30:a5:ef:1e: 0f:0a:c4:c2:06:64:99:c4:3a:4b:99:37:29:af:35: b5:b4:30:f8:eb:17:8f:28:f9:f0:97:e0:8a:62:98: 96:ff:ed:03:5a:4e:2d:41:09:13:65:d9:37:62:21: f2:61:11:42:44:79:ad:e8:d1:11:f4:9a:eb:29:02: 61:91:58:8d:43:5a:a9:aa:10:48:21:4b:ca:8b:bd: e1:3c:36:ec:ee:8c:82:57:ce:84:a2:fe:2f:03:2a: 2f:57:b5:2d:35:e9:34:a3:cf:31:11:f3:2f:61:84: e6:14:46:7b:98:3d:cd:a7:7a:58:07:f2:51:bb:f2: 5c:46:e9:35:80:9c:0b:80:0c:25:00:2b:0a:be:7b: 73:09:e6:a1:58:a1:11:5c:35:5e:a7:96:9c:c1:f3: 1c:54:bf:62:08:2a:4f:4f:f8:70:de:69:d3:d2:7d: 91:d6:e4:2d:e1:36:ea:0e:a4:f6:06:ed:98:53:21: 49:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:D6:83:5F:61:08:E9:2B:50:CE:46:49:CB:D8:31:6D:2B:4A:3B:03 X509v3 Authority Key Identifier: keyid:96:EC:32:41:8F:5D:B7:D2:72:13:2F:4F:61:5E:EE:14:EB:FC:C7:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CTII/0/96EC32418F5DB7D272132F4F615EEE14EBFCC789.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/96EC32418F5DB7D272132F4F615EEE14EBFCC789.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CTII/0/96EC32418F5DB7D272132F4F615EEE14EBFCC789.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:65:7f:60:a0:19:a5:5b:db:e5:11:e6:12:e3:74:ab:23:54: c9:72:b8:43:94:b8:f4:25:be:c4:d0:f6:a5:22:74:b5:65:08: 8c:1b:6b:e8:0b:9f:e2:f4:0f:fb:db:94:f3:10:f0:b8:28:04: 71:d2:2b:ce:80:72:1b:6d:4b:8a:bd:d4:e8:62:e5:4f:02:f1: b7:8e:6a:a2:53:21:8b:29:45:25:6f:07:dc:20:2b:1e:c7:ef: 78:12:65:30:0a:27:9a:62:b8:b6:15:aa:e7:bb:45:1d:3e:2b: d1:19:b2:58:f0:27:92:82:b6:cf:b9:d4:c0:88:3e:86:a8:2f: 2f:b1:f3:14:93:3f:91:f2:42:d4:b3:ef:19:5f:69:e4:65:df: 5a:67:a6:a1:bc:8a:be:d2:4a:fc:64:31:13:0c:08:84:f9:01: d7:b6:35:56:24:9a:b9:a0:7e:02:b9:e4:15:19:73:5f:a8:b3: 49:28:2b:97:eb:c0:5e:93:3f:87:99:dd:65:24:3b:db:25:b1: c8:d5:26:4e:de:e3:a7:48:7d:0e:9d:d4:5c:e8:08:6a:a8:3d: 1f:5d:b6:87:8c:99:8a:4a:f4:31:9a:3d:d0:5e:b8:e0:cf:2e: da:ea:c8:ca:f8:c4:b2:a2:77:d1:ba:5a:57:75:17:d5:2c:20: e7:68:a9:ba -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUXaKqD/FlnxBZlSodY469tUMNF/0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTZFQzMyNDE4RjVEQjdEMjcyMTMyRjRGNjE1RUVFMTRF QkZDQzc4OTAeFw0yNjExMTQxOTE5NDRaFw0yNjExMTUyMjI5NDRaMDMxMTAvBgNV BAMTKDVDRDY4MzVGNjEwOEU5MkI1MENFNDY0OUNCRDgzMTZEMkI0QTNCMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjVuZywLesD9c5ML/u3wqsEF/m M4n2O+/RogxKo9V54jbTlQhaI/IgzOviKGppVmoGyAqAvbvBrMT0nZERWBl1Q3tp 9RpkMKXvHg8KxMIGZJnEOkuZNymvNbW0MPjrF48o+fCX4IpimJb/7QNaTi1BCRNl 2TdiIfJhEUJEea3o0RH0muspAmGRWI1DWqmqEEghS8qLveE8NuzujIJXzoSi/i8D Ki9XtS016TSjzzER8y9hhOYURnuYPc2nelgH8lG78lxG6TWAnAuADCUAKwq+e3MJ 5qFYoRFcNV6nlpzB8xxUv2IIKk9P+HDeadPSfZHW5C3hNuoOpPYG7ZhTIUn9AgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQUXNaDX2EI6StQzkZJy9gxbStKOwMwHwYDVR0j BBgwFoAUluwyQY9dt9JyEy9PYV7uFOv8x4kwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ1RJSS8w Lzk2RUMzMjQxOEY1REI3RDI3MjEzMkY0RjYxNUVFRTE0RUJGQ0M3ODkuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvOTZFQzMyNDE4RjVEQjdEMjcyMTMyRjRGNjE1RUVF MTRFQkZDQzc4OS5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0NUSUkvMC85NkVDMzI0MThGNURCN0Qy NzIxMzJGNEY2MTVFRUUxNEVCRkNDNzg5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATGV/YKAZpVvb5RHm EuN0qyNUyXK4Q5S49CW+xND2pSJ0tWUIjBtr6Auf4vQP+9uU8xDwuCgEcdIrzoBy G21Lir3U6GLlTwLxt45qolMhiylFJW8H3CArHsfveBJlMAonmmK4thWq57tFHT4r 0RmyWPAnkoK2z7nUwIg+hqgvL7HzFJM/kfJC1LPvGV9p5GXfWmemobyKvtJK/GQx EwwIhPkB17Y1ViSauaB+ArnkFRlzX6izSSgrl+vAXpM/h5ndZSQ72yWxyNUmTt7j p0h9Dp3UXOgIaqg9H122h4yZikr0MZo90F644M8u2urIyvjEsqJ30bpaV3UX1Swg 52ipug== -----END CERTIFICATE-----Generated at Sun Nov 15 10:14:44 2026 by rpki-client