$ rpki-client -vvvf rpkica.twnic.tw/rpki/CTII/0/96EC32418F5DB7D272132F4F615EEE14EBFCC789.mft File: 96EC32418F5DB7D272132F4F615EEE14EBFCC789.mft (raw, json) Hash identifier: 0Oxrd9SeORftDCeZnYdAXPIUse+QEGI121h3P6E93lU= Subject key identifier: 98:D2:DE:7B:C2:52:DB:FA:9B:21:02:FB:1E:31:A4:8A:DC:D6:4D:87 Authority key identifier: 96:EC:32:41:8F:5D:B7:D2:72:13:2F:4F:61:5E:EE:14:EB:FC:C7:89 Certificate issuer: /CN=96EC32418F5DB7D272132F4F615EEE14EBFCC789 Certificate serial: 7ED5F129F87C66F4A4F293B84C6F54942C9E6491 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/96EC32418F5DB7D272132F4F615EEE14EBFCC789.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CTII/0/96EC32418F5DB7D272132F4F615EEE14EBFCC789.mft Manifest number: C0 Signing time: Thu 24 Sep 2026 09:44:22 +0000 Manifest this update: Thu 24 Sep 2026 09:39:22 +0000 Manifest next update: Fri 25 Sep 2026 12:24:22 +0000 Files and hashes: 1: 96EC32418F5DB7D272132F4F615EEE14EBFCC789.crl (hash: ytZrXpbEKD+NbmWIc+lWcRH23X6oT7NANGDrzdR7sbo=) 2: 3130332e3133302e3235302e302f32332d3234203d3e20323033303133.roa (hash: qifQcmP7aY3KYLY0YWbHCpcdmaz7oenQE0L1tQ92F24=) 3: 3130332e3133302e3234392e302f32342d3234203d3e20323033303133.roa (hash: pqABpk3IMEQeCPJ1YCuMzE9VdO7tiwLb3Csx2ef6igs=) 4: 3130332e3133302e3234382e302f32322d3234203d3e20323033303133.roa (hash: vdwflt80XSH+f+UsiqjaPJa3CG1W829xLEufTNoKgck=) 5: 3130332e3133302e3234392e302f32342d3234203d3e20393834.roa (hash: Nd+vxwk113iKIVjwRMjJ+fIaoSaKjb89bytlnk2AR6I=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CTII/0/96EC32418F5DB7D272132F4F615EEE14EBFCC789.crl rsync://rpkica.twnic.tw/rpki/CTII/0/96EC32418F5DB7D272132F4F615EEE14EBFCC789.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/96EC32418F5DB7D272132F4F615EEE14EBFCC789.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 02:19:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:d5:f1:29:f8:7c:66:f4:a4:f2:93:b8:4c:6f:54:94:2c:9e:64:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96EC32418F5DB7D272132F4F615EEE14EBFCC789 Validity Not Before: Sep 24 09:39:22 2026 GMT Not After : Sep 25 12:24:22 2026 GMT Subject: CN=98D2DE7BC252DBFA9B2102FB1E31A48ADCD64D87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a2:2f:14:07:7d:cd:cf:91:70:86:a7:fd:0d: b4:a7:32:67:ca:16:ad:a1:2f:82:be:85:ee:72:a0: 55:74:d7:e0:94:f4:13:23:6f:f1:63:65:3b:df:e8: 77:3c:76:02:90:f0:bc:03:0c:b8:36:47:cc:15:83: ce:47:30:39:9a:4d:5d:12:a4:2f:43:c5:8c:b9:21: fc:f2:89:b4:7f:09:f9:8e:32:f1:8c:9c:ef:98:d9: a6:f7:ad:0f:39:63:0a:bc:83:55:cd:c2:b0:fc:77: 5f:63:c5:5b:3d:a8:a2:ee:f7:a5:f2:2b:3a:20:ed: b0:50:31:f2:f7:a4:09:47:89:1a:f7:67:41:a9:83: be:d4:a5:38:2b:89:3e:ab:9a:9a:de:90:00:8c:c6: 3b:f0:31:0d:a4:2f:cb:ae:2d:8f:bc:2a:56:d4:b8: e2:e4:44:6c:4b:28:0f:dc:2b:12:6e:31:96:f3:63: 06:71:64:dc:c2:3b:ab:3f:46:0d:7e:2b:4b:f1:43: 49:97:03:41:0f:56:fc:a9:1c:d0:99:21:c8:e5:d3: 5f:fd:eb:23:a6:5c:cf:c7:60:e7:0b:bd:c5:d4:6a: ec:72:13:df:56:6e:3b:18:6f:39:bd:32:6e:b1:7a: 55:dd:3c:cc:af:3f:20:08:91:5a:a3:d1:3e:f7:4a: 59:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:D2:DE:7B:C2:52:DB:FA:9B:21:02:FB:1E:31:A4:8A:DC:D6:4D:87 X509v3 Authority Key Identifier: keyid:96:EC:32:41:8F:5D:B7:D2:72:13:2F:4F:61:5E:EE:14:EB:FC:C7:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CTII/0/96EC32418F5DB7D272132F4F615EEE14EBFCC789.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/96EC32418F5DB7D272132F4F615EEE14EBFCC789.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CTII/0/96EC32418F5DB7D272132F4F615EEE14EBFCC789.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:87:4d:76:b1:0b:cd:da:73:e4:75:9a:d0:f5:7e:d4:b5:e6: ff:2e:db:46:a4:0d:da:9b:ff:57:db:39:50:0f:bc:c3:e6:10: 61:2a:67:27:b9:aa:17:22:07:8f:11:51:cf:3b:b8:93:40:38: 00:dc:02:a3:b0:64:d4:3c:56:a6:c1:78:f0:9b:37:c2:0d:be: b5:76:32:f8:87:c3:7c:0e:8c:41:be:f1:99:e1:04:1e:52:af: e6:e2:99:38:f3:95:f4:dd:a4:09:40:e5:31:a9:05:b9:99:b9: 21:f0:ec:86:78:61:86:4b:cd:50:0d:24:38:79:54:24:38:e5: ea:d6:1d:b6:94:f6:ab:94:2e:f5:64:74:a2:39:8a:8c:d0:c1: 1e:8e:e8:9c:1c:19:81:64:40:cb:b3:be:15:69:4e:c6:16:b7: 14:45:b8:b9:ca:b7:78:92:ae:fc:b9:e2:32:30:fa:c4:d7:e7: fc:74:6d:97:bb:7f:46:f7:76:0d:0e:2c:98:f9:61:91:51:55: ff:34:31:1b:85:4a:8d:db:c3:ce:5c:8b:47:d1:49:6b:9f:31: c9:f2:d3:2b:e4:91:31:05:41:d5:ea:9d:b9:0b:72:2b:4f:46: 78:a6:a8:6f:da:d3:aa:e6:de:61:66:b3:76:9f:d4:63:b2:b2: 0b:4d:3a:58 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUftXxKfh8ZvSk8pO4TG9UlCyeZJEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTZFQzMyNDE4RjVEQjdEMjcyMTMyRjRGNjE1RUVFMTRF QkZDQzc4OTAeFw0yNjA5MjQwOTM5MjJaFw0yNjA5MjUxMjI0MjJaMDMxMTAvBgNV BAMTKDk4RDJERTdCQzI1MkRCRkE5QjIxMDJGQjFFMzFBNDhBRENENjREODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYoi8UB33Nz5Fwhqf9DbSnMmfK Fq2hL4K+he5yoFV01+CU9BMjb/FjZTvf6Hc8dgKQ8LwDDLg2R8wVg85HMDmaTV0S pC9DxYy5IfzyibR/CfmOMvGMnO+Y2ab3rQ85Ywq8g1XNwrD8d19jxVs9qKLu96Xy Kzog7bBQMfL3pAlHiRr3Z0Gpg77UpTgriT6rmprekACMxjvwMQ2kL8uuLY+8KlbU uOLkRGxLKA/cKxJuMZbzYwZxZNzCO6s/Rg1+K0vxQ0mXA0EPVvypHNCZIcjl01/9 6yOmXM/HYOcLvcXUauxyE99WbjsYbzm9Mm6xelXdPMyvPyAIkVqj0T73SlktAgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQUmNLee8JS2/qbIQL7HjGkitzWTYcwHwYDVR0j BBgwFoAUluwyQY9dt9JyEy9PYV7uFOv8x4kwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ1RJSS8w Lzk2RUMzMjQxOEY1REI3RDI3MjEzMkY0RjYxNUVFRTE0RUJGQ0M3ODkuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvOTZFQzMyNDE4RjVEQjdEMjcyMTMyRjRGNjE1RUVF MTRFQkZDQzc4OS5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0NUSUkvMC85NkVDMzI0MThGNURCN0Qy NzIxMzJGNEY2MTVFRUUxNEVCRkNDNzg5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQIdNdrELzdpz5HWa 0PV+1LXm/y7bRqQN2pv/V9s5UA+8w+YQYSpnJ7mqFyIHjxFRzzu4k0A4ANwCo7Bk 1DxWpsF48Js3wg2+tXYy+IfDfA6MQb7xmeEEHlKv5uKZOPOV9N2kCUDlMakFuZm5 IfDshnhhhkvNUA0kOHlUJDjl6tYdtpT2q5Qu9WR0ojmKjNDBHo7onBwZgWRAy7O+ FWlOxha3FEW4ucq3eJKu/LniMjD6xNfn/HRtl7t/Rvd2DQ4smPlhkVFV/zQxG4VK jdvDzlyLR9FJa58xyfLTK+SRMQVB1eqduQtyK09GeKaob9rTqubeYWazdp/UY7Ky C006WA== -----END CERTIFICATE-----Generated at Thu Sep 24 17:02:10 2026 by rpki-client