$ rpki-client -vvf rpkica.twnic.tw/rpki/GTBC/0/9FC99B1F4812CCA2E8D1D56A069F9D18DE7D118D.mft File: 9FC99B1F4812CCA2E8D1D56A069F9D18DE7D118D.mft (raw, json) Hash identifier: b0J9+j2cGkVHdfDcrgJHQM1gTVvZpa+G88NkiV1jjNo= Subject key identifier: 0E:20:A6:EC:48:9E:18:38:0D:7A:59:24:0E:5F:B9:F0:B7:E2:AF:46 Authority key identifier: 9F:C9:9B:1F:48:12:CC:A2:E8:D1:D5:6A:06:9F:9D:18:DE:7D:11:8D Certificate issuer: /CN=9FC99B1F4812CCA2E8D1D56A069F9D18DE7D118D Certificate serial: 4FD0576A9D51ABAB633E0DEED2B992A2902623A8 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9FC99B1F4812CCA2E8D1D56A069F9D18DE7D118D.cer Subject info access: rsync://rpkica.twnic.tw/rpki/GTBC/0/9FC99B1F4812CCA2E8D1D56A069F9D18DE7D118D.mft Manifest number: 05 Signing time: Tue 12 May 2026 12:56:04 +0000 Manifest this update: Tue 12 May 2026 12:51:04 +0000 Manifest next update: Wed 13 May 2026 15:03:04 +0000 Files and hashes: 1: 36312e36352e3139322e302f32302d3234203d3e203138343133.roa (hash: 2ch2o9TLeb/MBH9YdAv7ipxLIfbYN2VZNtKXRqBGHLk=) 2: 36312e36352e3230382e302f32302d3234203d3e203138303436.roa (hash: vRIqijp979dxoSTc2NKisYL6rD337qk+R1Y6aC4riSQ=) 3: 36312e36372e302e302f32302d3234203d3e203138343133.roa (hash: 4OAaz01ws8LVf2JI1ICMosiWzPxRsaL73hiseT4WS1E=) 4: 9FC99B1F4812CCA2E8D1D56A069F9D18DE7D118D.crl (hash: 5v8avS04wZYzNn6rtL3EmI70+S2Okz5TRU3Yn/St/2U=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/GTBC/0/9FC99B1F4812CCA2E8D1D56A069F9D18DE7D118D.crl rsync://rpkica.twnic.tw/rpki/GTBC/0/9FC99B1F4812CCA2E8D1D56A069F9D18DE7D118D.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9FC99B1F4812CCA2E8D1D56A069F9D18DE7D118D.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 15:03:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:d0:57:6a:9d:51:ab:ab:63:3e:0d:ee:d2:b9:92:a2:90:26:23:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FC99B1F4812CCA2E8D1D56A069F9D18DE7D118D Validity Not Before: May 12 12:51:04 2026 GMT Not After : May 13 15:03:04 2026 GMT Subject: CN=0E20A6EC489E18380D7A59240E5FB9F0B7E2AF46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a4:ac:39:01:de:d4:90:33:4a:89:95:b2:fa: b7:31:92:19:09:fc:f3:87:32:32:f4:60:fb:78:d5: 47:3b:67:c8:e1:31:d8:ba:ec:2a:65:31:f0:29:e1: 07:70:8d:ca:3a:c3:12:bd:ee:66:51:6e:4f:48:80: 6d:77:a4:d7:79:bd:2f:ff:58:d9:85:b7:9f:cc:f0: b2:7a:96:18:d3:1d:a1:89:0e:65:85:f7:a9:98:d6: 9e:0d:5f:51:4b:6b:13:ae:7b:de:d8:fa:1d:63:e1: ee:3e:03:fb:81:dc:79:d3:20:21:81:0b:34:d5:7d: cd:d6:b6:6d:61:a7:cf:1e:5d:94:fb:47:7c:27:5d: e4:ef:8e:18:b8:a0:85:c4:c9:98:6f:fe:60:65:fb: a4:7f:cd:58:19:ab:e1:b7:11:88:57:f6:c8:da:d9: b4:94:10:58:3a:ab:d0:1a:0d:ea:4f:aa:d4:96:e5: cc:02:7b:4e:9c:09:5f:67:cf:5e:1c:85:50:8e:03: fc:c6:27:8a:62:a1:0f:0f:38:9b:44:eb:81:63:fc: 50:41:6a:2c:c1:51:cb:19:d7:13:a6:af:f2:ee:b5: 4b:8e:fa:38:29:d0:fb:b1:df:be:2d:f8:bc:b8:c0: fc:fd:e4:7f:bd:18:5b:48:9f:9b:7e:d9:96:1d:b9: 6e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:20:A6:EC:48:9E:18:38:0D:7A:59:24:0E:5F:B9:F0:B7:E2:AF:46 X509v3 Authority Key Identifier: keyid:9F:C9:9B:1F:48:12:CC:A2:E8:D1:D5:6A:06:9F:9D:18:DE:7D:11:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/GTBC/0/9FC99B1F4812CCA2E8D1D56A069F9D18DE7D118D.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9FC99B1F4812CCA2E8D1D56A069F9D18DE7D118D.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/GTBC/0/9FC99B1F4812CCA2E8D1D56A069F9D18DE7D118D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:96:ab:4b:84:dd:75:e3:9e:08:b2:38:e2:30:31:5a:3c:00: 40:38:f7:c1:18:f2:57:30:19:c7:f7:ab:d9:58:2f:c9:62:bd: d2:b4:75:8b:dd:58:9c:a3:a0:00:95:89:cd:33:cf:5f:10:45: 0c:b6:b9:80:63:d9:91:4d:78:b6:f3:f8:fe:2a:92:a4:c4:af: f5:c8:fb:08:8a:dc:41:d2:a2:01:19:dc:36:88:08:f2:87:7d: 3c:2c:bb:3d:8b:23:8a:8d:a4:f7:e6:f7:7d:96:60:7f:a4:81: 51:26:98:13:6e:fd:1d:bc:37:7a:9c:6a:22:7b:44:3c:4f:37: cf:9d:44:e2:65:d8:74:9c:ba:f4:2c:0a:bc:b0:c1:0d:e2:19: 46:84:4f:f1:bd:79:77:96:8a:3c:15:18:2f:de:a5:3a:78:f2: f1:01:e6:43:a8:17:a0:f6:88:0e:9c:15:88:97:4f:39:7b:8a: 0d:c5:6c:06:4d:bb:76:d6:b1:95:62:c9:6a:82:27:0e:c6:ed: fb:20:44:d0:5e:e8:ab:14:0e:d5:40:69:a2:01:e7:4c:8b:55: 66:e4:db:3c:70:c9:15:26:0b:0f:f9:af:bd:34:e4:18:b5:1b: 9b:4e:8f:d3:b9:75:dc:4c:da:22:3f:98:7f:74:60:19:4b:e0: 0f:19:20:2b -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUT9BXap1Rq6tjPg3u0rmSopAmI6gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZDOTlCMUY0ODEyQ0NBMkU4RDFENTZBMDY5RjlEMThE RTdEMTE4RDAeFw0yNjA1MTIxMjUxMDRaFw0yNjA1MTMxNTAzMDRaMDMxMTAvBgNV BAMTKDBFMjBBNkVDNDg5RTE4MzgwRDdBNTkyNDBFNUZCOUYwQjdFMkFGNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCipKw5Ad7UkDNKiZWy+rcxkhkJ /POHMjL0YPt41Uc7Z8jhMdi67CplMfAp4Qdwjco6wxK97mZRbk9IgG13pNd5vS// WNmFt5/M8LJ6lhjTHaGJDmWF96mY1p4NX1FLaxOue97Y+h1j4e4+A/uB3HnTICGB CzTVfc3Wtm1hp88eXZT7R3wnXeTvjhi4oIXEyZhv/mBl+6R/zVgZq+G3EYhX9sja 2bSUEFg6q9AaDepPqtSW5cwCe06cCV9nz14chVCOA/zGJ4pioQ8POJtE64Fj/FBB aizBUcsZ1xOmr/LutUuO+jgp0Pux374t+Ly4wPz95H+9GFtIn5t+2ZYduW5lAgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQUDiCm7EieGDgNelkkDl+58Lfir0YwHwYDVR0j BBgwFoAUn8mbH0gSzKLo0dVqBp+dGN59EY0wDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvR1RCQy8w LzlGQzk5QjFGNDgxMkNDQTJFOEQxRDU2QTA2OUY5RDE4REU3RDExOEQuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvOUZDOTlCMUY0ODEyQ0NBMkU4RDFENTZBMDY5RjlE MThERTdEMTE4RC5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0dUQkMvMC85RkM5OUIxRjQ4MTJDQ0Ey RThEMUQ1NkEwNjlGOUQxOERFN0QxMThELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO5arS4TddeOeCLI4 4jAxWjwAQDj3wRjyVzAZx/er2VgvyWK90rR1i91YnKOgAJWJzTPPXxBFDLa5gGPZ kU14tvP4/iqSpMSv9cj7CIrcQdKiARncNogI8od9PCy7PYsjio2k9+b3fZZgf6SB USaYE279Hbw3epxqIntEPE83z51E4mXYdJy69CwKvLDBDeIZRoRP8b15d5aKPBUY L96lOnjy8QHmQ6gXoPaIDpwViJdPOXuKDcVsBk27dtaxlWLJaoInDsbt+yBE0F7o qxQO1UBpogHnTItVZuTbPHDJFSYLD/mvvTTkGLUbm06P07l13EzaIj+Yf3RgGUvg DxkgKw== -----END CERTIFICATE-----Generated at Wed May 13 03:56:45 2026 by rpki-client