$ rpki-client -vvvf rpkica.twnic.tw/rpki/NCCC/1/F4194E27E15A4F76E006403795143D4EFDCF022E.mft File: F4194E27E15A4F76E006403795143D4EFDCF022E.mft (raw, json) Hash identifier: nty8PJYQ1SiMoreXOCHkfQsF/vV7w8TkLIt4c3pOQ7E= Subject key identifier: 85:AB:0B:A7:35:E4:A8:53:E5:B2:DB:F7:EB:40:20:BA:CB:17:0D:CE Authority key identifier: F4:19:4E:27:E1:5A:4F:76:E0:06:40:37:95:14:3D:4E:FD:CF:02:2E Certificate issuer: /CN=F4194E27E15A4F76E006403795143D4EFDCF022E Certificate serial: 07CED1B34F304DE5343DCCEB25EA79BF4BE5CCAF Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/F4194E27E15A4F76E006403795143D4EFDCF022E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NCCC/1/F4194E27E15A4F76E006403795143D4EFDCF022E.mft Manifest number: 0101 Signing time: Sat 14 Nov 2026 11:32:09 +0000 Manifest this update: Sat 14 Nov 2026 11:27:09 +0000 Manifest next update: Sun 15 Nov 2026 12:23:09 +0000 Files and hashes: 1: 3135372e32302e3130372e302f32342d3234203d3e203139353531.roa (hash: h885eOx61p3k8wuxUDF9SUB/ZPMTr8/gQVLItFXI4rM=) 2: 3135372e32302e3130362e302f32342d3234203d3e203139353531.roa (hash: tj30Mw6SegUb4xqIoH5nsbPbEgFt7VbOqElQZObdRdk=) 3: 3135372e32302e3130362e302f32342d3234203d3e20313530373732.roa (hash: OmqcGxA2rNXj2dFvkkVaw1M6A48OHsdG1EyNXCLdbEU=) 4: F4194E27E15A4F76E006403795143D4EFDCF022E.crl (hash: fKjwy3xxp0Zf4/VuERdnKTIG4F/Yd3n3aFXiLBMGz1o=) 5: 3135372e32302e3130362e302f32332d3233203d3e2033343632.roa (hash: U1maVebHqNxJOM61IipjwHfKGQHfW803fIcL92PP6U4=) 6: 3135372e32302e3130372e302f32342d3234203d3e20313530373732.roa (hash: nTtkDIS/9RWSvXhNtKm7NzCRLQuNi0ZYeYDRWbSZUkY=) 7: 3135372e32302e3130362e302f32332d3234203d3e20313530373732.roa (hash: f9osk8atvNFbwzlzm+0pX0JbzGg2b5M3dZ9aT1SRM7Y=) 8: 3135372e32302e3130362e302f32332d3234203d3e20313938393439.roa (hash: NsVC+kyCCo5iuf92xRmrMNAeZWnd0GFdv+b5P5erIsw=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NCCC/1/F4194E27E15A4F76E006403795143D4EFDCF022E.crl rsync://rpkica.twnic.tw/rpki/NCCC/1/F4194E27E15A4F76E006403795143D4EFDCF022E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/F4194E27E15A4F76E006403795143D4EFDCF022E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 12:23:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:ce:d1:b3:4f:30:4d:e5:34:3d:cc:eb:25:ea:79:bf:4b:e5:cc:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F4194E27E15A4F76E006403795143D4EFDCF022E Validity Not Before: Nov 14 11:27:09 2026 GMT Not After : Nov 15 12:23:09 2026 GMT Subject: CN=85AB0BA735E4A853E5B2DBF7EB4020BACB170DCE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b8:02:4d:fe:f7:92:1e:dd:b5:6c:8c:f8:ed: 37:ff:da:a9:3e:1a:7a:08:fe:e5:06:5e:31:a3:03: ac:eb:ad:1a:15:1b:3a:44:70:c0:2c:39:98:f0:a6: 46:88:f0:4f:0d:f6:45:0d:6d:1e:28:87:e4:8a:c2: b2:9a:48:7e:c5:5a:75:30:70:a5:c5:78:be:2a:06: 8f:f2:62:71:68:1f:38:b0:cd:4a:4c:5d:ec:bd:58: e1:47:c8:fd:19:4a:c5:11:13:b9:1a:60:82:e3:19: 61:ac:74:ba:5e:9d:17:61:3a:ee:a4:db:0e:32:d6: da:40:b2:0b:b2:f0:95:72:89:df:c4:ca:1a:41:8c: e1:57:c5:35:6b:23:33:3e:2e:cc:35:ed:94:c8:d5: 04:25:b0:4f:43:07:da:51:73:2b:00:96:c1:95:c8: 76:aa:ee:2f:b2:91:0f:76:36:7e:21:06:91:f2:ad: 02:4c:69:ff:1b:0a:1f:48:71:d1:e2:c2:0a:fe:a9: 2e:bf:f3:ff:f5:4b:4f:79:7f:71:78:eb:13:31:43: ee:d7:fd:9b:d4:d5:c7:d5:d6:3f:da:17:61:c3:3b: 2b:6f:ca:e9:49:5a:f9:ef:6e:46:25:0a:02:5c:35: 65:ba:59:39:47:2f:eb:8a:68:75:8b:f4:c2:94:77: 90:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:AB:0B:A7:35:E4:A8:53:E5:B2:DB:F7:EB:40:20:BA:CB:17:0D:CE X509v3 Authority Key Identifier: keyid:F4:19:4E:27:E1:5A:4F:76:E0:06:40:37:95:14:3D:4E:FD:CF:02:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NCCC/1/F4194E27E15A4F76E006403795143D4EFDCF022E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/F4194E27E15A4F76E006403795143D4EFDCF022E.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NCCC/1/F4194E27E15A4F76E006403795143D4EFDCF022E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:a9:d7:8e:49:fc:1f:49:bf:de:4d:d0:1c:fe:c4:d7:ee:2f: 21:16:c5:a8:45:e7:fb:99:3b:5c:82:b8:1b:9e:c7:0f:54:a6: c9:cd:3d:0f:2a:fb:1f:91:8e:12:f3:0f:d3:a8:be:23:09:d7: 07:59:57:0b:9e:79:84:b9:05:ad:e1:31:47:d3:9f:69:78:0e: 53:8b:c9:c5:cc:53:74:f6:d8:26:01:83:d3:df:4d:aa:c7:43: c1:6b:9c:48:e9:16:a0:96:3e:7b:99:d6:20:6d:73:1e:0d:70: d3:f6:00:3a:58:61:31:c0:35:57:bd:20:4c:32:f3:c4:f0:34: e1:d4:52:11:c5:14:28:8a:45:a2:cf:c9:1f:29:c0:d3:93:c1: 18:ff:34:1b:7b:89:dd:35:90:56:c3:f3:5d:55:4e:14:7d:6f: 2e:35:aa:e6:89:9d:65:ca:e5:55:ac:49:b8:ac:50:bc:dd:96: 8c:bd:da:8b:c9:c1:3b:a1:49:cc:a0:b0:82:1c:17:68:7d:9a: 57:23:39:ef:43:61:cc:a2:94:3a:79:62:eb:8a:c0:50:71:f0: 10:1a:92:da:b8:12:ec:e8:92:7b:23:6b:a1:69:57:31:df:8d: 60:bc:4d:63:b7:76:cf:12:f1:d7:8d:eb:53:9c:52:cf:b4:76: 0e:f2:00:56 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUB87Rs08wTeU0PczrJep5v0vlzK8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjQxOTRFMjdFMTVBNEY3NkUwMDY0MDM3OTUxNDNENEVG RENGMDIyRTAeFw0yNjExMTQxMTI3MDlaFw0yNjExMTUxMjIzMDlaMDMxMTAvBgNV BAMTKDg1QUIwQkE3MzVFNEE4NTNFNUIyREJGN0VCNDAyMEJBQ0IxNzBEQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsuAJN/veSHt21bIz47Tf/2qk+ GnoI/uUGXjGjA6zrrRoVGzpEcMAsOZjwpkaI8E8N9kUNbR4oh+SKwrKaSH7FWnUw cKXFeL4qBo/yYnFoHziwzUpMXey9WOFHyP0ZSsURE7kaYILjGWGsdLpenRdhOu6k 2w4y1tpAsguy8JVyid/EyhpBjOFXxTVrIzM+Lsw17ZTI1QQlsE9DB9pRcysAlsGV yHaq7i+ykQ92Nn4hBpHyrQJMaf8bCh9IcdHiwgr+qS6/8//1S095f3F46xMxQ+7X /ZvU1cfV1j/aF2HDOytvyulJWvnvbkYlCgJcNWW6WTlHL+uKaHWL9MKUd5DvAgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQUhasLpzXkqFPlstv360AgussXDc4wHwYDVR0j BBgwFoAU9BlOJ+FaT3bgBkA3lRQ9Tv3PAi4wDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTkNDQy8x L0Y0MTk0RTI3RTE1QTRGNzZFMDA2NDAzNzk1MTQzRDRFRkRDRjAyMkUuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzAvRjQxOTRFMjdFMTVBNEY3NkUwMDY0MDM3OTUxNDNE NEVGRENGMDIyRS5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05DQ0MvMS9GNDE5NEUyN0UxNUE0Rjc2 RTAwNjQwMzc5NTE0M0Q0RUZEQ0YwMjJFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk6nXjkn8H0m/3k3Q HP7E1+4vIRbFqEXn+5k7XIK4G57HD1Smyc09Dyr7H5GOEvMP06i+IwnXB1lXC555 hLkFreExR9OfaXgOU4vJxcxTdPbYJgGD099NqsdDwWucSOkWoJY+e5nWIG1zHg1w 0/YAOlhhMcA1V70gTDLzxPA04dRSEcUUKIpFos/JHynA05PBGP80G3uJ3TWQVsPz XVVOFH1vLjWq5omdZcrlVaxJuKxQvN2WjL3ai8nBO6FJzKCwghwXaH2aVyM570Nh zKKUOnli64rAUHHwEBqS2rgS7OiSeyNroWlXMd+NYLxNY7d2zxLx143rU5xSz7R2 DvIAVg== -----END CERTIFICATE-----Generated at Sat Nov 14 22:45:31 2026 by rpki-client