$ rpki-client -vvvf rpkica.twnic.tw/rpki/NCCC/1/F4194E27E15A4F76E006403795143D4EFDCF022E.mft File: F4194E27E15A4F76E006403795143D4EFDCF022E.mft (raw, json) Hash identifier: HCQQc9ohJfB7OljK6Tzb5O31qXMJ25fH+nPLIw3K3Ns= Subject key identifier: C1:26:91:DA:B5:E4:2C:B9:13:7E:5F:55:BD:18:87:58:1D:85:5D:C6 Authority key identifier: F4:19:4E:27:E1:5A:4F:76:E0:06:40:37:95:14:3D:4E:FD:CF:02:2E Certificate issuer: /CN=F4194E27E15A4F76E006403795143D4EFDCF022E Certificate serial: 2992FAA8B957F850C26DBA4B88CFD91465CEA8FC Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/F4194E27E15A4F76E006403795143D4EFDCF022E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NCCC/1/F4194E27E15A4F76E006403795143D4EFDCF022E.mft Manifest number: BE Signing time: Thu 24 Sep 2026 21:04:29 +0000 Manifest this update: Thu 24 Sep 2026 20:59:29 +0000 Manifest next update: Sat 26 Sep 2026 00:32:29 +0000 Files and hashes: 1: 3135372e32302e3130362e302f32332d3234203d3e20313530373732.roa (hash: f9osk8atvNFbwzlzm+0pX0JbzGg2b5M3dZ9aT1SRM7Y=) 2: 3135372e32302e3130362e302f32332d3233203d3e2033343632.roa (hash: U1maVebHqNxJOM61IipjwHfKGQHfW803fIcL92PP6U4=) 3: 3135372e32302e3130372e302f32342d3234203d3e20313530373732.roa (hash: nTtkDIS/9RWSvXhNtKm7NzCRLQuNi0ZYeYDRWbSZUkY=) 4: 3135372e32302e3130362e302f32342d3234203d3e20313530373732.roa (hash: OmqcGxA2rNXj2dFvkkVaw1M6A48OHsdG1EyNXCLdbEU=) 5: 3135372e32302e3130362e302f32342d3234203d3e203139353531.roa (hash: tj30Mw6SegUb4xqIoH5nsbPbEgFt7VbOqElQZObdRdk=) 6: F4194E27E15A4F76E006403795143D4EFDCF022E.crl (hash: Cbo+pbPSNpNLp+VE0HGtpC29jmILJ3VZmqA48I4S3RE=) 7: 3135372e32302e3130372e302f32342d3234203d3e203139353531.roa (hash: h885eOx61p3k8wuxUDF9SUB/ZPMTr8/gQVLItFXI4rM=) 8: 3135372e32302e3130362e302f32332d3234203d3e20313938393439.roa (hash: NsVC+kyCCo5iuf92xRmrMNAeZWnd0GFdv+b5P5erIsw=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NCCC/1/F4194E27E15A4F76E006403795143D4EFDCF022E.crl rsync://rpkica.twnic.tw/rpki/NCCC/1/F4194E27E15A4F76E006403795143D4EFDCF022E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/F4194E27E15A4F76E006403795143D4EFDCF022E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 19:13:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:92:fa:a8:b9:57:f8:50:c2:6d:ba:4b:88:cf:d9:14:65:ce:a8:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F4194E27E15A4F76E006403795143D4EFDCF022E Validity Not Before: Sep 24 20:59:29 2026 GMT Not After : Sep 26 00:32:29 2026 GMT Subject: CN=C12691DAB5E42CB9137E5F55BD1887581D855DC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:bd:8f:0d:d1:48:00:32:32:27:79:0c:d3:d8: 2e:b1:c8:2c:59:c3:93:06:62:d8:8e:ad:fd:e5:ec: af:ca:2a:32:b7:d0:d5:74:59:0d:0d:3d:c4:29:6c: d0:9e:ac:de:9c:42:96:fa:29:a7:44:ba:fa:09:c8: 99:32:e4:0d:e0:97:a7:de:39:ac:9d:91:20:dc:5d: 13:a4:97:b2:1d:ab:b4:55:e9:d5:5c:68:bb:b7:ec: dc:f5:4e:a9:b3:d0:ec:63:e2:97:96:41:fb:d6:a7: b5:13:aa:bd:95:99:23:72:1c:01:f0:d6:5b:6e:ef: 40:c3:ec:42:1f:b7:11:ba:27:b4:7c:e9:e8:59:75: 56:91:08:ee:d4:26:39:1d:46:af:dc:f7:26:1b:33: 65:51:54:cf:00:db:c7:1e:52:0f:4c:95:72:73:0a: d9:9e:81:3e:db:63:59:5e:aa:e6:c1:91:75:01:db: 2f:b9:04:48:e4:b2:fd:3e:1b:04:99:3a:a4:08:06: 70:1d:13:c2:4f:2f:59:bd:c9:77:81:e8:0f:cf:6f: 24:fa:fe:1a:94:cf:e9:99:1a:4a:ff:3e:4d:c3:9e: 22:c5:fe:ad:65:8a:f5:9d:db:b1:62:68:9e:3e:b3: d5:90:5e:72:7e:0d:77:4f:4e:96:96:61:30:e8:d4: 41:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:26:91:DA:B5:E4:2C:B9:13:7E:5F:55:BD:18:87:58:1D:85:5D:C6 X509v3 Authority Key Identifier: keyid:F4:19:4E:27:E1:5A:4F:76:E0:06:40:37:95:14:3D:4E:FD:CF:02:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NCCC/1/F4194E27E15A4F76E006403795143D4EFDCF022E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/F4194E27E15A4F76E006403795143D4EFDCF022E.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NCCC/1/F4194E27E15A4F76E006403795143D4EFDCF022E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:01:a9:e2:77:0f:79:06:f0:79:d7:25:f9:30:56:2d:4d:2e: e6:32:a4:85:de:d3:df:ff:4b:9b:eb:14:f5:8b:30:9f:4a:cc: 33:3a:e1:bd:71:17:a3:39:ac:43:88:e0:ea:c5:08:1e:53:2d: 0e:51:39:1f:3a:42:05:89:8e:93:c5:4b:e1:d8:09:5b:29:9d: 49:73:00:01:1a:6b:55:76:c9:97:13:c2:61:37:0f:03:5c:04: 1b:2e:7f:cf:f5:94:ea:d0:3a:c5:4d:d1:9c:1c:e3:bc:7c:f4: 15:0e:bb:be:5b:c5:fd:a2:f4:5b:86:21:d3:d0:47:ba:27:a8: 5c:6d:88:e6:2f:b1:42:78:2a:27:7e:76:70:f7:95:a6:e2:59: 9b:90:13:3c:90:4d:90:1b:7e:a1:9d:2d:9d:74:1c:5e:dc:6f: 01:8b:45:54:58:a0:81:74:69:c0:c8:57:a7:dd:18:d6:42:b5: 65:08:22:11:d2:9d:52:bc:6a:a6:da:18:aa:d0:96:e6:6a:e6: 46:a5:70:70:0e:02:ac:d5:da:50:5a:1d:f8:32:40:fd:7b:5c: 43:ab:22:aa:ec:13:e5:de:d1:31:6c:39:78:1d:4f:c2:c2:f3: 42:11:b3:a5:5a:9b:6c:11:6b:dd:75:4a:51:27:8a:24:2e:06: 9a:57:cf:ba -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUKZL6qLlX+FDCbbpLiM/ZFGXOqPwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjQxOTRFMjdFMTVBNEY3NkUwMDY0MDM3OTUxNDNENEVG RENGMDIyRTAeFw0yNjA5MjQyMDU5MjlaFw0yNjA5MjYwMDMyMjlaMDMxMTAvBgNV BAMTKEMxMjY5MURBQjVFNDJDQjkxMzdFNUY1NUJEMTg4NzU4MUQ4NTVEQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrvY8N0UgAMjIneQzT2C6xyCxZ w5MGYtiOrf3l7K/KKjK30NV0WQ0NPcQpbNCerN6cQpb6KadEuvoJyJky5A3gl6fe OaydkSDcXROkl7Idq7RV6dVcaLu37Nz1Tqmz0Oxj4peWQfvWp7UTqr2VmSNyHAHw 1ltu70DD7EIftxG6J7R86ehZdVaRCO7UJjkdRq/c9yYbM2VRVM8A28ceUg9MlXJz CtmegT7bY1lequbBkXUB2y+5BEjksv0+GwSZOqQIBnAdE8JPL1m9yXeB6A/PbyT6 /hqUz+mZGkr/Pk3DniLF/q1livWd27FiaJ4+s9WQXnJ+DXdPTpaWYTDo1EGRAgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQUwSaR2rXkLLkTfl9VvRiHWB2FXcYwHwYDVR0j BBgwFoAU9BlOJ+FaT3bgBkA3lRQ9Tv3PAi4wDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTkNDQy8x L0Y0MTk0RTI3RTE1QTRGNzZFMDA2NDAzNzk1MTQzRDRFRkRDRjAyMkUuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzAvRjQxOTRFMjdFMTVBNEY3NkUwMDY0MDM3OTUxNDNE NEVGRENGMDIyRS5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05DQ0MvMS9GNDE5NEUyN0UxNUE0Rjc2 RTAwNjQwMzc5NTE0M0Q0RUZEQ0YwMjJFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFAGp4ncPeQbwedcl +TBWLU0u5jKkhd7T3/9Lm+sU9Yswn0rMMzrhvXEXozmsQ4jg6sUIHlMtDlE5HzpC BYmOk8VL4dgJWymdSXMAARprVXbJlxPCYTcPA1wEGy5/z/WU6tA6xU3RnBzjvHz0 FQ67vlvF/aL0W4Yh09BHuieoXG2I5i+xQngqJ352cPeVpuJZm5ATPJBNkBt+oZ0t nXQcXtxvAYtFVFiggXRpwMhXp90Y1kK1ZQgiEdKdUrxqptoYqtCW5mrmRqVwcA4C rNXaUFod+DJA/XtcQ6siquwT5d7RMWw5eB1PwsLzQhGzpVqbbBFr3XVKUSeKJC4G mlfPug== -----END CERTIFICATE-----Generated at Fri Sep 25 02:33:11 2026 by rpki-client