$ rpki-client -vvvf rpkica.twnic.tw/rpki/NARL/0/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.mft File: 9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.mft (raw, json) Hash identifier: QIRj4WhBoca+3GUV19WfGHPLusle9XFuzkTWBIkk5tU= Subject key identifier: 55:19:04:04:EC:5D:AD:E4:EB:02:11:38:92:21:E7:72:C5:41:4C:0D Authority key identifier: 9D:85:BB:8D:93:00:6D:35:86:E2:8D:0D:66:12:CA:FA:CC:8E:A6:C1 Certificate issuer: /CN=9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1 Certificate serial: 528561BA0CD3399E764DC5B95EA71CD70B5818CB Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NARL/0/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 00:44:59 +0000 Manifest this update: Thu 24 Sep 2026 00:39:59 +0000 Manifest next update: Fri 25 Sep 2026 03:33:59 +0000 Files and hashes: 1: 3230332e3134352e3230382e302f32302d3234203d3e2037353339.roa (hash: TkgRJDcSEgq7NjOc3j8nZRABpENJrXFx+4WnsRFtzh4=) 2: 323030313a6531303a356330313a3a2f34382d3438203d3e203138343134.roa (hash: 4pWru8F46B69pO9HUzxMVehxyDkhe3ADb762Yq2SiNM=) 3: 3130332e3132342e37322e302f32322d3234203d3e2037353339.roa (hash: /oWUtrivyYYR3xINxuZfk4J46KekrLAODBaoBbnjf6g=) 4: 3231312e37332e36342e302f31392d3234203d3e2037353339.roa (hash: 2F7wVvWL/EB7PGkj0VVEyWuWlBMkBD3Mrsqa9Y9SivA=) 5: 3231312e37332e38362e302f32342d3234203d3e203138343134.roa (hash: RcN4dOIBTFqY1G5jI8viPt6e6PNTMt4L6CpBX1XlPOU=) 6: 9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.crl (hash: 2SDBrpBZCT51QtjOAQwo9frQE8zf+rGNw2GJGIYTY90=) 7: 3231312e37392e34382e302f32302d3234203d3e2037353339.roa (hash: I5PmO4GML9TmcQR3Fe6NQsOfRlP4bey95QSbpiOHW9g=) 8: 3230332e3134352e3139322e302f32312d3234203d3e203138343236.roa (hash: gNPPk70chubQg8rvqCFhjNMJr/GwTZPy8GKS/JxLGtk=) 9: 323030313a343530303a313030303a3a2f34302d3634203d3e2037353339.roa (hash: aCon7ihkrSQu1jOrSasXY8xC7tkNYvzzB6OK08dUqns=) 10: 323030313a343530303a3a2f33322d3634203d3e203138313833.roa (hash: PMzGY0PfcdsGzBMtdtqJG5vua06dScgAEtiVBZ8oJwQ=) 11: 3130332e3136302e3232302e302f32332d3234203d3e2037353339.roa (hash: C3OJeu7QwWAZKqQNtD3rtSGZubdl01iTngU6YcVIGgI=) 12: 323030313a6335383a3a2f33322d3634203d3e2037353339.roa (hash: KHGZSCyTjAFf8gkceCez8q0dI7RMF2GjBnOSsXKo2tY=) 13: 323030313a6531303a3a2f33322d3634203d3e2037353339.roa (hash: YSlCSDgV7ONwXR8qLUKp0gub/ohO6L6glqkIRmUnSSI=) 14: 3230332e3134352e3230302e302f32312d3234203d3e2037353339.roa (hash: jxkAJdAcKZ8RSCBcISH4Y4rq8GCUJiutzooENkFUhIc=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NARL/0/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.crl rsync://rpkica.twnic.tw/rpki/NARL/0/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 02:19:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:85:61:ba:0c:d3:39:9e:76:4d:c5:b9:5e:a7:1c:d7:0b:58:18:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1 Validity Not Before: Sep 24 00:39:59 2026 GMT Not After : Sep 25 03:33:59 2026 GMT Subject: CN=55190404EC5DADE4EB0211389221E772C5414C0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f4:f8:9d:cd:6b:c4:d4:f2:3f:76:38:08:87: a9:45:c3:20:97:9f:d0:5c:ff:d3:43:e4:11:ae:3d: 90:c2:cb:d7:2b:4b:9d:a2:c8:45:ed:47:2b:75:d8: cf:23:4d:b1:79:9b:35:c2:21:ab:33:f1:0c:47:b8: 94:dd:ff:f0:b5:1c:32:3e:43:3e:d0:27:56:c0:73: 5f:98:5b:10:2e:65:00:7e:6f:06:e6:38:58:7b:9d: e1:df:84:7d:a3:f1:75:03:64:7b:5c:2d:35:1b:71: 66:37:3d:7c:56:c2:29:34:03:d4:c0:a7:35:ad:71: 26:0c:64:a7:40:a8:9a:7a:77:57:69:b2:cb:e1:a6: 9c:a7:14:38:13:83:06:7e:7d:e3:cf:b4:b0:ed:a3: 01:40:e7:71:c7:d0:10:a1:00:49:dc:80:77:c3:a0: c1:d7:4b:2a:f4:d6:97:58:b0:7a:76:da:50:c1:d8: 56:ea:52:22:99:be:29:d8:ed:37:7a:74:fb:af:db: c2:80:aa:a2:17:95:b9:ba:43:52:cc:64:b7:c9:27: 3d:ef:40:a8:8e:7a:46:d7:52:d1:90:82:e8:e3:d9: 5b:ea:47:7f:1d:c1:d8:a4:a4:68:3e:d3:98:b0:a9: 8a:dc:fc:87:08:64:7e:22:45:7d:46:77:66:70:56: a1:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:19:04:04:EC:5D:AD:E4:EB:02:11:38:92:21:E7:72:C5:41:4C:0D X509v3 Authority Key Identifier: keyid:9D:85:BB:8D:93:00:6D:35:86:E2:8D:0D:66:12:CA:FA:CC:8E:A6:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NARL/0/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NARL/0/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:04:d0:e2:d7:76:f0:a7:c5:a7:37:c2:26:4d:21:9b:db:5e: fa:e9:d8:40:21:4d:1e:9d:bb:65:b4:00:34:41:8e:f2:5e:c9: e2:ee:0e:ed:49:a4:8f:22:67:97:f2:74:c6:25:3e:3e:54:78: 66:fe:c5:39:b9:28:c0:a8:d2:40:24:12:24:63:08:4b:b8:1d: ed:7f:04:d3:f4:c3:b4:27:d3:32:a8:15:52:fc:f7:47:78:6a: a0:f0:75:f9:e2:92:0c:19:b2:27:83:22:8d:6c:bd:e6:ea:1e: bb:9a:c2:7b:db:15:53:86:3a:b9:db:4b:1e:24:b4:c7:aa:1d: a4:34:15:2f:ca:21:57:9b:e6:5a:40:f6:7b:30:07:82:ef:25: ca:bc:bc:e7:7c:f2:ab:82:88:a6:fa:c5:14:46:60:0e:89:df: 6e:62:e3:90:0f:9c:2f:81:7d:1c:7d:47:8c:b8:62:a8:3a:86: a5:cc:71:81:84:95:1a:15:77:13:77:1a:42:56:53:b0:22:af: fc:d4:92:34:7a:9f:dd:ef:67:fc:fd:bc:aa:5d:da:12:e2:88: 99:d1:4a:5b:3f:3e:80:11:46:8b:cd:35:46:28:b2:28:54:81: 1b:ff:b0:ad:a3:a4:03:be:7d:94:2d:38:31:2e:d6:dc:f8:20: dd:63:bf:6a -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUUoVhugzTOZ52TcW5Xqcc1wtYGMswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQ4NUJCOEQ5MzAwNkQzNTg2RTI4RDBENjYxMkNBRkFD QzhFQTZDMTAeFw0yNjA5MjQwMDM5NTlaFw0yNjA5MjUwMzMzNTlaMDMxMTAvBgNV BAMTKDU1MTkwNDA0RUM1REFERTRFQjAyMTEzODkyMjFFNzcyQzU0MTRDMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo9PidzWvE1PI/djgIh6lFwyCX n9Bc/9ND5BGuPZDCy9crS52iyEXtRyt12M8jTbF5mzXCIasz8QxHuJTd//C1HDI+ Qz7QJ1bAc1+YWxAuZQB+bwbmOFh7neHfhH2j8XUDZHtcLTUbcWY3PXxWwik0A9TA pzWtcSYMZKdAqJp6d1dpssvhppynFDgTgwZ+fePPtLDtowFA53HH0BChAEncgHfD oMHXSyr01pdYsHp22lDB2FbqUiKZvinY7Td6dPuv28KAqqIXlbm6Q1LMZLfJJz3v QKiOekbXUtGQgujj2VvqR38dwdikpGg+05iwqYrc/IcIZH4iRX1Gd2ZwVqExAgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQUVRkEBOxdreTrAhE4kiHncsVBTA0wHwYDVR0j BBgwFoAUnYW7jZMAbTWG4o0NZhLK+syOpsEwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTkFSTC8w LzlEODVCQjhEOTMwMDZEMzU4NkUyOEQwRDY2MTJDQUZBQ0M4RUE2QzEuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvOUQ4NUJCOEQ5MzAwNkQzNTg2RTI4RDBENjYxMkNB RkFDQzhFQTZDMS5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05BUkwvMC85RDg1QkI4RDkzMDA2RDM1 ODZFMjhEMEQ2NjEyQ0FGQUNDOEVBNkMxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyATQ4td28KfFpzfC Jk0hm9te+unYQCFNHp27ZbQANEGO8l7J4u4O7UmkjyJnl/J0xiU+PlR4Zv7FObko wKjSQCQSJGMIS7gd7X8E0/TDtCfTMqgVUvz3R3hqoPB1+eKSDBmyJ4MijWy95uoe u5rCe9sVU4Y6udtLHiS0x6odpDQVL8ohV5vmWkD2ezAHgu8lyry853zyq4KIpvrF FEZgDonfbmLjkA+cL4F9HH1HjLhiqDqGpcxxgYSVGhV3E3caQlZTsCKv/NSSNHqf 3e9n/P28ql3aEuKImdFKWz8+gBFGi801RiiyKFSBG/+wraOkA759lC04MS7W3Pgg 3WO/ag== -----END CERTIFICATE-----Generated at Thu Sep 24 10:23:35 2026 by rpki-client