$ rpki-client -vvf rpkica.twnic.tw/rpki/GTBC/0/9FC99B1F4812CCA2E8D1D56A069F9D18DE7D118D.mft File: 9FC99B1F4812CCA2E8D1D56A069F9D18DE7D118D.mft (raw, json) Hash identifier: jW89j/lTJE5LHbiYQeeIqpsuzd1hhaPB2Z4FTTzAoLg= Subject key identifier: E1:31:96:E2:71:45:EB:70:23:EB:52:59:05:4E:01:D1:4F:92:94:AD Authority key identifier: 9F:C9:9B:1F:48:12:CC:A2:E8:D1:D5:6A:06:9F:9D:18:DE:7D:11:8D Certificate issuer: /CN=9FC99B1F4812CCA2E8D1D56A069F9D18DE7D118D Certificate serial: 0C83CF1163EC3D8B544B4B1283A7C4C412E49348 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9FC99B1F4812CCA2E8D1D56A069F9D18DE7D118D.cer Subject info access: rsync://rpkica.twnic.tw/rpki/GTBC/0/9FC99B1F4812CCA2E8D1D56A069F9D18DE7D118D.mft Manifest number: 67 Signing time: Fri 24 Jul 2026 02:42:20 +0000 Manifest this update: Fri 24 Jul 2026 02:37:20 +0000 Manifest next update: Sat 25 Jul 2026 06:21:20 +0000 Files and hashes: 1: 36312e36352e3139322e302f32302d3234203d3e203138343133.roa (hash: 2ch2o9TLeb/MBH9YdAv7ipxLIfbYN2VZNtKXRqBGHLk=) 2: 36312e36372e302e302f32302d3234203d3e203138343133.roa (hash: 4OAaz01ws8LVf2JI1ICMosiWzPxRsaL73hiseT4WS1E=) 3: 9FC99B1F4812CCA2E8D1D56A069F9D18DE7D118D.crl (hash: N7zuTWHrALFX0cQ1jtf36P0SH+5RGdQF8OAeTQjO0d0=) 4: 36312e36352e3230382e302f32302d3234203d3e203138303436.roa (hash: vRIqijp979dxoSTc2NKisYL6rD337qk+R1Y6aC4riSQ=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/GTBC/0/9FC99B1F4812CCA2E8D1D56A069F9D18DE7D118D.crl rsync://rpkica.twnic.tw/rpki/GTBC/0/9FC99B1F4812CCA2E8D1D56A069F9D18DE7D118D.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9FC99B1F4812CCA2E8D1D56A069F9D18DE7D118D.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 03:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:83:cf:11:63:ec:3d:8b:54:4b:4b:12:83:a7:c4:c4:12:e4:93:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FC99B1F4812CCA2E8D1D56A069F9D18DE7D118D Validity Not Before: Jul 24 02:37:20 2026 GMT Not After : Jul 25 06:21:20 2026 GMT Subject: CN=E13196E27145EB7023EB5259054E01D14F9294AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f2:ac:4c:63:61:30:84:09:e6:32:d6:eb:1b: fb:35:f8:65:ce:dc:e7:27:a2:82:a8:87:bf:32:54: eb:ae:77:31:2b:f6:f0:88:5d:83:d9:6c:b1:86:8a: f0:69:ef:65:ad:75:84:fc:be:7c:94:8d:e0:de:3b: 9f:6c:e3:04:cc:64:1d:00:72:b7:8d:c3:39:3d:60: b3:0c:d4:d5:87:e5:a5:5f:cb:69:ec:8b:27:66:17: 7f:db:f4:33:13:8e:f1:4f:8e:7d:41:e5:07:89:e0: 34:6a:76:4d:2a:58:9c:20:dc:d5:ae:32:4d:0c:00: be:b4:ec:46:18:85:d1:5a:5c:e0:a9:a5:b1:04:84: d9:4f:da:b8:ef:29:48:d4:6c:80:49:0b:54:9c:29: 16:d8:c5:67:1e:d6:9a:ad:75:15:13:5c:55:02:fc: ee:c0:32:78:ec:57:15:3d:76:83:21:0e:24:a3:3d: 8e:43:df:a2:57:41:44:18:f5:7c:e4:6b:67:c8:e7: 54:86:71:97:86:51:b3:45:ab:e3:f9:58:d0:50:b2: a3:5e:98:2f:13:8e:77:db:0f:4f:bc:1f:54:9b:36: b7:0f:4f:af:5e:70:40:ba:2a:c2:cb:1a:14:95:3e: ee:81:21:a2:38:b0:05:a3:78:79:9f:b8:c8:69:af: a5:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:31:96:E2:71:45:EB:70:23:EB:52:59:05:4E:01:D1:4F:92:94:AD X509v3 Authority Key Identifier: keyid:9F:C9:9B:1F:48:12:CC:A2:E8:D1:D5:6A:06:9F:9D:18:DE:7D:11:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/GTBC/0/9FC99B1F4812CCA2E8D1D56A069F9D18DE7D118D.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9FC99B1F4812CCA2E8D1D56A069F9D18DE7D118D.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/GTBC/0/9FC99B1F4812CCA2E8D1D56A069F9D18DE7D118D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:1b:1a:3a:20:b2:31:9c:7b:55:06:60:f0:15:39:1a:bb:22: 07:a6:cd:c2:50:c3:62:9e:0f:ca:a2:72:6a:39:03:bf:cf:26: 60:bf:1d:7a:d1:12:c3:62:5b:1f:63:7a:11:ef:c6:d5:ab:e5: ba:49:4a:8f:00:74:05:d3:00:05:89:0c:b8:05:63:f0:c7:f1: bc:e2:fe:d7:4a:aa:42:22:1d:a1:b5:14:ae:7d:04:31:09:ee: d9:0a:26:f1:f4:5a:ae:29:a8:f9:56:d6:75:7f:f0:b9:89:a9: 4c:fa:1d:33:7e:ed:65:22:37:fd:bd:17:70:ef:40:53:e9:89: 62:43:ac:8b:a8:9b:a0:3b:f9:44:07:bc:71:22:a9:19:f8:d6: bc:e8:5b:44:fc:25:dc:fc:1e:30:c4:3b:e0:85:91:b9:d0:4d: 98:2d:95:50:f5:10:89:48:ed:39:b3:c5:1f:32:25:28:6b:a3: bc:79:c0:31:37:8c:af:ad:02:00:6c:35:d1:8f:13:37:15:32: e1:25:dd:4c:ec:64:ef:79:0c:87:57:17:7d:13:28:bc:bb:47: 18:31:75:86:22:15:ff:6c:b9:3d:78:17:c7:1f:ca:1b:4d:e3: 37:9d:06:e6:93:70:5b:63:2e:58:70:1e:a6:13:37:b4:57:c7: fa:03:fb:18 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUDIPPEWPsPYtUS0sSg6fExBLkk0gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZDOTlCMUY0ODEyQ0NBMkU4RDFENTZBMDY5RjlEMThE RTdEMTE4RDAeFw0yNjA3MjQwMjM3MjBaFw0yNjA3MjUwNjIxMjBaMDMxMTAvBgNV BAMTKEUxMzE5NkUyNzE0NUVCNzAyM0VCNTI1OTA1NEUwMUQxNEY5Mjk0QUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY8qxMY2EwhAnmMtbrG/s1+GXO 3OcnooKoh78yVOuudzEr9vCIXYPZbLGGivBp72WtdYT8vnyUjeDeO59s4wTMZB0A creNwzk9YLMM1NWH5aVfy2nsiydmF3/b9DMTjvFPjn1B5QeJ4DRqdk0qWJwg3NWu Mk0MAL607EYYhdFaXOCppbEEhNlP2rjvKUjUbIBJC1ScKRbYxWce1pqtdRUTXFUC /O7AMnjsVxU9doMhDiSjPY5D36JXQUQY9Xzka2fI51SGcZeGUbNFq+P5WNBQsqNe mC8TjnfbD0+8H1SbNrcPT69ecEC6KsLLGhSVPu6BIaI4sAWjeHmfuMhpr6V1AgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQU4TGW4nFF63Aj61JZBU4B0U+SlK0wHwYDVR0j BBgwFoAUn8mbH0gSzKLo0dVqBp+dGN59EY0wDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvR1RCQy8w LzlGQzk5QjFGNDgxMkNDQTJFOEQxRDU2QTA2OUY5RDE4REU3RDExOEQuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvOUZDOTlCMUY0ODEyQ0NBMkU4RDFENTZBMDY5RjlE MThERTdEMTE4RC5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0dUQkMvMC85RkM5OUIxRjQ4MTJDQ0Ey RThEMUQ1NkEwNjlGOUQxOERFN0QxMThELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfBsaOiCyMZx7VQZg 8BU5GrsiB6bNwlDDYp4PyqJyajkDv88mYL8detESw2JbH2N6Ee/G1avluklKjwB0 BdMABYkMuAVj8MfxvOL+10qqQiIdobUUrn0EMQnu2Qom8fRarimo+VbWdX/wuYmp TPodM37tZSI3/b0XcO9AU+mJYkOsi6iboDv5RAe8cSKpGfjWvOhbRPwl3PweMMQ7 4IWRudBNmC2VUPUQiUjtObPFHzIlKGujvHnAMTeMr60CAGw10Y8TNxUy4SXdTOxk 73kMh1cXfRMovLtHGDF1hiIV/2y5PXgXxx/KG03jN50G5pNwW2MuWHAephM3tFfH +gP7GA== -----END CERTIFICATE-----Generated at Fri Jul 24 05:43:41 2026 by rpki-client