$ rpki-client -vvvf rpkica.twnic.tw/rpki/NCCC/1/F4194E27E15A4F76E006403795143D4EFDCF022E.mft File: F4194E27E15A4F76E006403795143D4EFDCF022E.mft (raw, json) Hash identifier: IcpZGRztQD9A6zqTX9JnUav9wfY5HXECGcy9jeqjpsg= Subject key identifier: 0C:62:8D:B0:82:06:37:43:F5:52:82:00:12:76:77:7A:41:73:DE:B9 Authority key identifier: F4:19:4E:27:E1:5A:4F:76:E0:06:40:37:95:14:3D:4E:FD:CF:02:2E Certificate issuer: /CN=F4194E27E15A4F76E006403795143D4EFDCF022E Certificate serial: 4CCC0A14AB6FAC0E619C23AE087263AC7DEF047E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/F4194E27E15A4F76E006403795143D4EFDCF022E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NCCC/1/F4194E27E15A4F76E006403795143D4EFDCF022E.mft Manifest number: BC Signing time: Wed 23 Sep 2026 11:32:42 +0000 Manifest this update: Wed 23 Sep 2026 11:27:42 +0000 Manifest next update: Thu 24 Sep 2026 12:08:42 +0000 Files and hashes: 1: F4194E27E15A4F76E006403795143D4EFDCF022E.crl (hash: 3PQ0pOoXKqjrZ1XsXPp9Xvimye36dT1GprYD7I9iWXA=) 2: 3135372e32302e3130362e302f32332d3234203d3e20313530373732.roa (hash: f9osk8atvNFbwzlzm+0pX0JbzGg2b5M3dZ9aT1SRM7Y=) 3: 3135372e32302e3130362e302f32342d3234203d3e203139353531.roa (hash: tj30Mw6SegUb4xqIoH5nsbPbEgFt7VbOqElQZObdRdk=) 4: 3135372e32302e3130372e302f32342d3234203d3e20313530373732.roa (hash: nTtkDIS/9RWSvXhNtKm7NzCRLQuNi0ZYeYDRWbSZUkY=) 5: 3135372e32302e3130372e302f32342d3234203d3e203139353531.roa (hash: h885eOx61p3k8wuxUDF9SUB/ZPMTr8/gQVLItFXI4rM=) 6: 3135372e32302e3130362e302f32332d3233203d3e2033343632.roa (hash: U1maVebHqNxJOM61IipjwHfKGQHfW803fIcL92PP6U4=) 7: 3135372e32302e3130362e302f32332d3234203d3e20313938393439.roa (hash: NsVC+kyCCo5iuf92xRmrMNAeZWnd0GFdv+b5P5erIsw=) 8: 3135372e32302e3130362e302f32342d3234203d3e20313530373732.roa (hash: OmqcGxA2rNXj2dFvkkVaw1M6A48OHsdG1EyNXCLdbEU=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NCCC/1/F4194E27E15A4F76E006403795143D4EFDCF022E.crl rsync://rpkica.twnic.tw/rpki/NCCC/1/F4194E27E15A4F76E006403795143D4EFDCF022E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/F4194E27E15A4F76E006403795143D4EFDCF022E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 08:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:cc:0a:14:ab:6f:ac:0e:61:9c:23:ae:08:72:63:ac:7d:ef:04:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F4194E27E15A4F76E006403795143D4EFDCF022E Validity Not Before: Sep 23 11:27:42 2026 GMT Not After : Sep 24 12:08:42 2026 GMT Subject: CN=0C628DB082063743F55282001276777A4173DEB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b9:8d:c5:97:15:75:7c:23:67:44:76:67:bc: 2f:96:29:41:90:c0:ec:eb:29:e4:3a:13:8f:be:2a: c0:f0:05:b8:ff:ba:28:e4:70:27:3d:2f:3e:52:81: a2:98:36:92:f9:11:d2:bd:c8:77:bb:38:85:12:1b: c0:9b:95:06:1c:a6:53:f1:68:f9:94:70:6c:4d:15: 4e:89:8f:19:c2:14:d1:3c:36:f8:f5:cf:f1:85:87: 16:5a:54:83:2d:61:55:19:be:a2:97:f4:4b:11:24: e5:fb:bb:81:3c:76:75:f3:46:38:b4:d6:e0:fa:15: ab:3a:c0:fe:9d:03:65:df:f1:1e:a1:76:a8:8a:b1: 72:b3:69:75:e3:80:47:c2:ab:73:49:1d:70:17:ec: 68:88:33:00:3c:ff:b3:ec:8a:67:7f:9f:16:84:d1: 93:ce:d2:eb:1e:5a:e6:d4:16:a8:42:a7:59:2d:67: 58:4a:55:af:32:1e:3a:2c:8f:f4:37:78:21:a6:8d: 9e:d6:1b:da:48:31:12:76:b4:37:59:90:ae:69:00: 16:d2:b2:2a:a5:07:f9:96:b4:b3:f4:46:f0:dd:15: 73:11:cc:13:0c:b5:01:12:d9:cb:4d:18:10:4a:5c: 70:be:b0:c8:4d:18:01:e1:06:c2:6a:3b:7a:d2:23: 22:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:62:8D:B0:82:06:37:43:F5:52:82:00:12:76:77:7A:41:73:DE:B9 X509v3 Authority Key Identifier: keyid:F4:19:4E:27:E1:5A:4F:76:E0:06:40:37:95:14:3D:4E:FD:CF:02:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NCCC/1/F4194E27E15A4F76E006403795143D4EFDCF022E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/F4194E27E15A4F76E006403795143D4EFDCF022E.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NCCC/1/F4194E27E15A4F76E006403795143D4EFDCF022E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:d3:ed:62:18:e8:a5:cc:76:f6:98:ac:7a:0c:87:8b:fc:a2: b1:ce:f1:e3:44:63:21:77:74:98:b2:79:94:c2:7f:7d:b3:29: 84:63:33:3d:dd:87:ea:86:85:ce:b4:5f:94:a5:f3:3f:8a:23: 08:49:0e:ed:72:ea:f2:3b:ac:cb:8a:bd:26:6b:5f:6b:f4:17: e3:31:c2:2c:2c:1f:8b:9e:a3:f1:7b:36:ab:0c:55:e9:87:1b: 56:dd:a1:10:24:08:dd:c9:51:18:58:bc:d6:e1:df:d2:d2:d8: 7d:7f:d7:7a:98:9e:05:81:8b:e6:3b:72:1a:36:0e:f1:ed:b2: c9:dd:19:1b:76:3a:bc:72:74:38:6b:02:ef:1f:51:7e:d2:e1: 41:cb:39:6f:e2:a1:e5:a5:43:57:e5:1d:65:1d:db:a5:23:42: 2b:57:2b:a3:d8:cd:e7:5b:58:bc:45:18:9f:f8:1f:26:8c:b2: 8c:1e:1e:6c:0e:d7:8b:fb:c7:99:66:b0:8e:6b:e0:90:f7:31: 91:9d:df:7b:bd:6c:13:b8:d4:30:98:b3:60:be:2e:8f:49:80: 22:42:b0:60:5e:b2:c1:9e:92:6e:ef:53:4d:a0:68:7c:3e:de: e6:8f:4b:30:81:55:bc:97:ff:d2:33:0a:00:16:e4:36:2f:20: 15:33:18:6b -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUTMwKFKtvrA5hnCOuCHJjrH3vBH4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjQxOTRFMjdFMTVBNEY3NkUwMDY0MDM3OTUxNDNENEVG RENGMDIyRTAeFw0yNjA5MjMxMTI3NDJaFw0yNjA5MjQxMjA4NDJaMDMxMTAvBgNV BAMTKDBDNjI4REIwODIwNjM3NDNGNTUyODIwMDEyNzY3NzdBNDE3M0RFQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvuY3FlxV1fCNnRHZnvC+WKUGQ wOzrKeQ6E4++KsDwBbj/uijkcCc9Lz5SgaKYNpL5EdK9yHe7OIUSG8CblQYcplPx aPmUcGxNFU6JjxnCFNE8Nvj1z/GFhxZaVIMtYVUZvqKX9EsRJOX7u4E8dnXzRji0 1uD6Fas6wP6dA2Xf8R6hdqiKsXKzaXXjgEfCq3NJHXAX7GiIMwA8/7Psimd/nxaE 0ZPO0useWubUFqhCp1ktZ1hKVa8yHjosj/Q3eCGmjZ7WG9pIMRJ2tDdZkK5pABbS siqlB/mWtLP0RvDdFXMRzBMMtQES2ctNGBBKXHC+sMhNGAHhBsJqO3rSIyLbAgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQUDGKNsIIGN0P1UoIAEnZ3ekFz3rkwHwYDVR0j BBgwFoAU9BlOJ+FaT3bgBkA3lRQ9Tv3PAi4wDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTkNDQy8x L0Y0MTk0RTI3RTE1QTRGNzZFMDA2NDAzNzk1MTQzRDRFRkRDRjAyMkUuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzAvRjQxOTRFMjdFMTVBNEY3NkUwMDY0MDM3OTUxNDNE NEVGRENGMDIyRS5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05DQ0MvMS9GNDE5NEUyN0UxNUE0Rjc2 RTAwNjQwMzc5NTE0M0Q0RUZEQ0YwMjJFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoNPtYhjopcx29pis egyHi/yisc7x40RjIXd0mLJ5lMJ/fbMphGMzPd2H6oaFzrRflKXzP4ojCEkO7XLq 8jusy4q9Jmtfa/QX4zHCLCwfi56j8Xs2qwxV6YcbVt2hECQI3clRGFi81uHf0tLY fX/XepieBYGL5jtyGjYO8e2yyd0ZG3Y6vHJ0OGsC7x9RftLhQcs5b+Kh5aVDV+Ud ZR3bpSNCK1cro9jN51tYvEUYn/gfJoyyjB4ebA7Xi/vHmWawjmvgkPcxkZ3fe71s E7jUMJizYL4uj0mAIkKwYF6ywZ6Sbu9TTaBofD7e5o9LMIFVvJf/0jMKABbkNi8g FTMYaw== -----END CERTIFICATE-----Generated at Wed Sep 23 20:16:53 2026 by rpki-client