$ rpki-client -vvf rpkica.twnic.tw/rpki/NCHC/0/2C4838ED872E38E97456B74C33E4178C4E1253A2.mft File: 2C4838ED872E38E97456B74C33E4178C4E1253A2.mft (raw, json) Hash identifier: HHe20oEy9zLacw0freXBF1f9oa1kUIVbpG/U6uW6Liw= Subject key identifier: FD:A1:58:57:8C:BC:88:65:24:95:29:20:26:C6:F4:A6:0D:24:89:E4 Authority key identifier: 2C:48:38:ED:87:2E:38:E9:74:56:B7:4C:33:E4:17:8C:4E:12:53:A2 Certificate issuer: /CN=2C4838ED872E38E97456B74C33E4178C4E1253A2 Certificate serial: 4C338B7047B2957850E6906F55651FC985384BAF Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2C4838ED872E38E97456B74C33E4178C4E1253A2.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NCHC/0/2C4838ED872E38E97456B74C33E4178C4E1253A2.mft Manifest number: 06 Signing time: Tue 12 May 2026 13:31:16 +0000 Manifest this update: Tue 12 May 2026 13:26:16 +0000 Manifest next update: Wed 13 May 2026 16:26:16 +0000 Files and hashes: 1: 3130332e3136302e3232302e302f32332d3234203d3e2037353339.roa (hash: ZL47425VwNlrMCD6iFWAxMHP6JFKdNOnp/o9FUV0D0w=) 2: 3231312e37392e34382e302f32302d3234203d3e2037353339.roa (hash: zGnJyZ0D1nHAUduWv/k7+HUZrGVfV62GWYW/VYZP4Xo=) 3: 2C4838ED872E38E97456B74C33E4178C4E1253A2.crl (hash: vMJ/afFYfx56tTw3CfvW+5vnG9dkAujK1QlueZp3Y04=) 4: 323030313a6335383a3a2f33322d3634203d3e2037353339.roa (hash: tZHG0Au5Q1nz1VhZ3LSf/Lf7/6+XPnsXCo+GlAyJark=) 5: 323030313a6531303a3a2f33322d3634203d3e2037353339.roa (hash: rxuyl6k2OoUV5iBtmSctIGPqbqwV5R2ky+GQxjpTB7Y=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NCHC/0/2C4838ED872E38E97456B74C33E4178C4E1253A2.crl rsync://rpkica.twnic.tw/rpki/NCHC/0/2C4838ED872E38E97456B74C33E4178C4E1253A2.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2C4838ED872E38E97456B74C33E4178C4E1253A2.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 16:26:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:33:8b:70:47:b2:95:78:50:e6:90:6f:55:65:1f:c9:85:38:4b:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C4838ED872E38E97456B74C33E4178C4E1253A2 Validity Not Before: May 12 13:26:16 2026 GMT Not After : May 13 16:26:16 2026 GMT Subject: CN=FDA158578CBC88652495292026C6F4A60D2489E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:11:32:b0:73:dd:38:11:77:65:7a:fb:8b:cf: 02:82:7f:07:3e:3d:64:eb:ad:ca:83:77:f5:c0:4b: e5:8d:52:66:8e:84:4f:1b:c6:08:33:32:bc:03:2a: c3:df:de:37:24:67:f2:c7:65:6c:87:0d:77:ff:6e: 5b:4e:48:9b:23:71:f3:2e:98:42:1f:67:22:1d:f5: b6:97:54:bd:2c:19:73:85:a3:2f:70:95:b8:3c:e6: a9:04:3d:38:a7:80:10:52:3d:c1:1a:79:28:3d:3b: 06:7e:8b:34:de:cd:4d:7e:82:26:b5:e4:50:ed:a2: 14:f1:12:bd:34:90:8a:ac:22:be:9d:3e:93:72:bb: 9f:1b:c0:1b:dd:ee:81:1d:33:01:10:3a:e7:92:d6: 8e:88:79:89:a1:e5:22:e8:8d:1f:a1:ba:a0:62:7b: 8a:d5:b1:a8:fe:b0:b2:20:0e:db:ab:a1:00:46:96: 67:9b:4e:4d:14:f5:1f:b5:44:58:b8:ff:d7:8c:bf: 9a:d5:b0:23:97:b4:5f:aa:0c:9f:c5:8b:f4:fb:c1: d8:a3:f2:6b:3a:18:18:a0:a2:7a:8c:62:b2:ad:db: 00:41:5f:4e:dc:a6:12:97:34:68:56:13:41:00:f7: 0d:a8:0d:93:f1:c6:0a:ab:ea:fa:d9:4d:e7:c6:66: 8d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:A1:58:57:8C:BC:88:65:24:95:29:20:26:C6:F4:A6:0D:24:89:E4 X509v3 Authority Key Identifier: keyid:2C:48:38:ED:87:2E:38:E9:74:56:B7:4C:33:E4:17:8C:4E:12:53:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NCHC/0/2C4838ED872E38E97456B74C33E4178C4E1253A2.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2C4838ED872E38E97456B74C33E4178C4E1253A2.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NCHC/0/2C4838ED872E38E97456B74C33E4178C4E1253A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:9a:9b:ef:4d:dd:f0:5b:70:f5:64:24:bc:75:4e:42:6e:cf: 61:35:9c:21:78:47:76:26:86:cb:1f:19:0b:86:ba:40:7d:d7: c9:15:53:88:a2:38:54:9d:2c:6a:21:50:4d:6d:cc:91:5f:6f: 58:1d:ff:5a:d4:19:2b:61:48:d9:a8:3b:23:ff:72:17:ca:69: 2c:12:94:c4:9a:f6:7e:31:e0:95:88:d3:5c:a4:88:96:6c:b4: 56:3d:38:f9:e4:ba:19:68:48:2b:e0:1a:17:e4:5c:e9:8e:a1: fd:41:5b:c5:8f:f3:05:20:52:e3:d9:88:2f:59:5e:eb:14:2f: 82:ae:a0:29:10:2d:9c:61:cb:92:2b:23:81:71:51:1f:f8:3e: 86:3d:03:90:4e:61:16:f5:da:b2:78:a7:d9:6d:9e:33:b6:29: 54:d5:84:22:f8:4e:9b:09:a1:7d:ba:91:f5:9e:c1:2d:1a:d9: bd:98:e7:fd:4e:02:2f:96:40:9f:fb:8f:25:27:52:94:b9:05: f3:eb:e1:bf:fe:a1:6a:5b:17:b6:04:8a:36:a4:28:cb:41:57: b6:52:4d:87:ad:98:19:d9:3c:8c:48:3a:64:26:07:ea:9d:c8: d6:fa:ad:aa:3a:b5:e1:cc:11:f7:a8:22:68:ad:16:0c:07:aa: 71:fe:ed:67 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUTDOLcEeylXhQ5pBvVWUfyYU4S68wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkM0ODM4RUQ4NzJFMzhFOTc0NTZCNzRDMzNFNDE3OEM0 RTEyNTNBMjAeFw0yNjA1MTIxMzI2MTZaFw0yNjA1MTMxNjI2MTZaMDMxMTAvBgNV BAMTKEZEQTE1ODU3OENCQzg4NjUyNDk1MjkyMDI2QzZGNEE2MEQyNDg5RTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRETKwc904EXdlevuLzwKCfwc+ PWTrrcqDd/XAS+WNUmaOhE8bxggzMrwDKsPf3jckZ/LHZWyHDXf/bltOSJsjcfMu mEIfZyId9baXVL0sGXOFoy9wlbg85qkEPTingBBSPcEaeSg9OwZ+izTezU1+gia1 5FDtohTxEr00kIqsIr6dPpNyu58bwBvd7oEdMwEQOueS1o6IeYmh5SLojR+huqBi e4rVsaj+sLIgDturoQBGlmebTk0U9R+1RFi4/9eMv5rVsCOXtF+qDJ/Fi/T7wdij 8ms6GBigonqMYrKt2wBBX07cphKXNGhWE0EA9w2oDZPxxgqr6vrZTefGZo0BAgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQU/aFYV4y8iGUklSkgJsb0pg0kieQwHwYDVR0j BBgwFoAULEg47YcuOOl0VrdMM+QXjE4SU6IwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTkNIQy8w LzJDNDgzOEVEODcyRTM4RTk3NDU2Qjc0QzMzRTQxNzhDNEUxMjUzQTIuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvMkM0ODM4RUQ4NzJFMzhFOTc0NTZCNzRDMzNFNDE3 OEM0RTEyNTNBMi5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05DSEMvMC8yQzQ4MzhFRDg3MkUzOEU5 NzQ1NkI3NEMzM0U0MTc4QzRFMTI1M0EyLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlZqb703d8Ftw9WQk vHVOQm7PYTWcIXhHdiaGyx8ZC4a6QH3XyRVTiKI4VJ0saiFQTW3MkV9vWB3/WtQZ K2FI2ag7I/9yF8ppLBKUxJr2fjHglYjTXKSIlmy0Vj04+eS6GWhIK+AaF+Rc6Y6h /UFbxY/zBSBS49mIL1le6xQvgq6gKRAtnGHLkisjgXFRH/g+hj0DkE5hFvXasnin 2W2eM7YpVNWEIvhOmwmhfbqR9Z7BLRrZvZjn/U4CL5ZAn/uPJSdSlLkF8+vhv/6h alsXtgSKNqQoy0FXtlJNh62YGdk8jEg6ZCYH6p3I1vqtqjq14cwR96giaK0WDAeq cf7tZw== -----END CERTIFICATE-----Generated at Wed May 13 04:17:20 2026 by rpki-client