$ rpki-client -vvvf rpkica.twnic.tw/rpki/NCIC/1/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.mft File: D5C99016D01EDDE0A4D47C3C948EE8859612C73B.mft (raw, json) Hash identifier: xOeFDqm2du8v+nnltgTB2jNldmmgEJNcEZ3JHoWvMoU= Subject key identifier: 2F:89:CC:60:26:EB:B5:FE:1A:5F:19:A1:FE:D9:1B:11:41:63:FA:4F Authority key identifier: D5:C9:90:16:D0:1E:DD:E0:A4:D4:7C:3C:94:8E:E8:85:96:12:C7:3B Certificate issuer: /CN=D5C99016D01EDDE0A4D47C3C948EE8859612C73B Certificate serial: 11A9DBFE92ECD74D9CDA04A94C5CFA4F534CCC0D Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NCIC/1/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.mft Manifest number: 0251 Signing time: Sat 14 Nov 2026 21:27:07 +0000 Manifest this update: Sat 14 Nov 2026 21:22:07 +0000 Manifest next update: Sun 15 Nov 2026 21:47:07 +0000 Files and hashes: 1: 3139322e37322e382e302f32312d3234203d3e2034373830.roa (hash: 1Hh6x51Jeg1BSF3NwDHjHunpz1y1V3E8ygnYaLHBszo=) 2: 3139322e37322e3235322e302f32342d3234203d3e2039393139.roa (hash: VBtmPKe5I226J9zWpVQAjkGTwQ8c6xfoJIAIP/bSZoI=) 3: D5C99016D01EDDE0A4D47C3C948EE8859612C73B.crl (hash: ASyWanc/xJMtIBadtvC/iWVmsqqlb7WPdSL/lm20dJU=) 4: 3139322e37322e382e302f32312d3234203d3e2039393139.roa (hash: GbQSPFutvMmuWccC6y+kxjUSwDJ1ik/mT03jQDCuwD4=) 5: 3139322e37322e3132382e302f31382d3234203d3e2034373830.roa (hash: LzN8cI51zk5jZy8rEOcECVIZmpi8vie+TUsPNlzdXuc=) 6: 3139322e37322e3234382e302f32322d3234203d3e2039393139.roa (hash: w2LmOI1eQP3xj9n4sBqRb67lBeJFTEuUVe+BjjWP/g8=) 7: 3139322e37322e3232342e302f32302d3234203d3e2039393139.roa (hash: IbJvzNWqowT9ss8SkDFFbTJBrs2hceylDNcxXN29XFI=) 8: 3139322e37322e3232342e302f32302d3234203d3e2034373830.roa (hash: JFJbmB7cfEuw1iDDZaeMc1QewQMUllS7sHbdWQbrgDc=) 9: 3133392e3137352e302e302f31362d3234203d3e2034373830.roa (hash: /ZgMlJJWHzRz3oSWNjGyPTQH1Mg84+PLKC/H5qUI7Ns=) 10: 3139322e37322e33322e302f31392d3234203d3e2034373830.roa (hash: IAJDcSfRLpjVsd3ilJuaUqAl0u4sdr8+zfKeB8N1STk=) 11: 3139322e37322e3139322e302f31392d3234203d3e2039393139.roa (hash: Ah2jakkWaX8SyRrg2TG3GrlMUxHdK/+BuuzbL3/oW74=) 12: 3139322e37322e342e302f32322d3234203d3e2034373830.roa (hash: Ba5i8ude16dQiEfcAiO+btSj/eH4uGS0xcFo7grp3x0=) 13: 3139322e37322e3235322e302f32342d3234203d3e2034373830.roa (hash: QUCYMabkjkOS3bq4pnYLsjSc27ckRrPNJ8pg8qqNByc=) 14: 3133392e3137352e302e302f31362d3234203d3e2039393139.roa (hash: 3pZVp3TNQ/sRl3TjQTLvkQ3q6JCaq0d/zamjf+77kx8=) 15: 3139322e37322e3139322e302f31392d3234203d3e2034373830.roa (hash: HDP+weW9NczVRv3tVvCtth7CO+aCW75PFkRxJDjQFGU=) 16: 3139322e37322e3234302e302f32312d3234203d3e2034373830.roa (hash: w9y6pwWmA3JFdHYwXGU59AkfbSQ5hRF5f8RxZemOXM8=) 17: 3139322e37322e36342e302f31382d3234203d3e2034373830.roa (hash: IkE5VbWeMMJYwmOD5YW4lS/zGapdsVeaSsB5x46YyVs=) 18: 3139322e37322e3132382e302f31382d3234203d3e2039393139.roa (hash: bXHD2UHkc/GfgCH5hcaP2+voIqd8TOjXlXtoDjGW8JA=) 19: 3139322e37322e3234302e302f32312d3234203d3e2039393139.roa (hash: zyCP5RCcYrInB0mG7H3w0fJawxlNECjjYSjAg7D7d1Y=) 20: 3139322e37322e36342e302f31382d3234203d3e2039393139.roa (hash: 6ubqZ+h8/1xZM/Z1mXArWRioq7/yui3/nMg9Ngz6hKA=) 21: 3139322e37322e3234382e302f32322d3234203d3e2034373830.roa (hash: 65UG56uDtaduhHckiIsfYUMD5Llwyc25pnJQFOvZ6Bo=) 22: 3139322e37322e33322e302f31392d3234203d3e2039393139.roa (hash: IdXpC8VBeG7nz0JfgL+likpQtKVBBBXtQNRSvEXG1d0=) 23: 3139322e37322e332e302f32342d3234203d3e2034373830.roa (hash: hj2bnED2YLfhRnAL+cGxD8mEc2iquoy7i11842ivkl8=) 24: 3139322e37322e332e302f32342d3234203d3e2039393139.roa (hash: qMTF96rAy8wZ4NUEpq4S8Q/4tASEMCoJMKXrGLo6KtQ=) 25: 3139322e37322e31362e302f32302d3234203d3e2034373830.roa (hash: 9ZGrNp+VsLlXW7PeBXw8YpqEX/WVDXlTYIwuby9ILk4=) 26: 3139322e37322e342e302f32322d3234203d3e2039393139.roa (hash: Mc3y+NW93aC6lat66PDBZYR8qmh9c+fZPRpk7bBYllo=) 27: 3139322e37322e31362e302f32302d3234203d3e2039393139.roa (hash: YfF/tC6LRnh/bsWMphOM4qUtQ57nFavnsqtfTl2of/U=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NCIC/1/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.crl rsync://rpkica.twnic.tw/rpki/NCIC/1/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 21:47:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:a9:db:fe:92:ec:d7:4d:9c:da:04:a9:4c:5c:fa:4f:53:4c:cc:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5C99016D01EDDE0A4D47C3C948EE8859612C73B Validity Not Before: Nov 14 21:22:07 2026 GMT Not After : Nov 15 21:47:07 2026 GMT Subject: CN=2F89CC6026EBB5FE1A5F19A1FED91B114163FA4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:d1:1f:94:c3:8f:4f:5c:df:d9:80:75:9e:79: ce:0f:a9:6e:2c:59:a6:77:b8:73:cd:dd:15:e4:b6: 29:d6:ae:82:3b:60:10:90:8a:69:8a:41:d4:0b:8f: 1e:8d:91:a5:8d:13:81:a0:6c:c7:e0:a7:7b:64:88: 96:ad:3c:63:80:e5:2c:fc:fc:d8:69:24:0c:5f:1b: 1a:91:93:1c:91:f5:82:33:de:bf:ec:cf:2f:52:04: 6f:52:cb:63:46:5b:f1:60:da:96:0c:7c:d7:a3:39: 00:a0:75:4c:35:7d:b4:f7:be:33:19:73:bf:b3:24: fe:46:32:d0:30:58:c6:9f:74:0d:41:e8:89:13:96: fe:ca:4e:6b:b6:90:34:60:b2:3c:11:2b:84:83:86: 8a:f3:3e:b6:fd:5d:97:69:27:14:1d:99:26:b0:0c: 19:4f:06:31:1e:ee:c7:0f:e6:1e:de:73:80:e7:0d: e9:7c:06:9b:f1:a0:06:da:8d:0f:6e:b1:9f:f6:b9: c4:f2:25:24:bb:81:eb:ac:e5:dc:e9:54:e9:ee:73: 3f:50:c2:3b:c2:6c:cf:9b:2c:c8:6a:1a:ca:88:7b: 2d:1f:b1:89:81:9a:e9:f6:b8:19:0d:22:09:ac:a9: 52:87:19:82:b3:cf:36:0c:9b:14:af:e9:17:df:4d: 32:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:89:CC:60:26:EB:B5:FE:1A:5F:19:A1:FE:D9:1B:11:41:63:FA:4F X509v3 Authority Key Identifier: keyid:D5:C9:90:16:D0:1E:DD:E0:A4:D4:7C:3C:94:8E:E8:85:96:12:C7:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NCIC/1/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NCIC/1/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:b4:e4:26:25:5c:a8:0e:ef:56:17:b7:76:10:da:13:ef:eb: 10:b1:6a:6a:0b:a6:ce:23:b6:71:49:48:14:65:e7:f6:26:ef: 4c:3a:7c:46:af:8c:82:4f:e8:3c:87:03:80:bf:e1:bb:4e:d4: 88:c1:9b:91:2c:4a:a6:94:38:e6:34:12:3b:33:2d:3c:71:ec: 17:f9:24:ef:61:d4:28:5e:e4:ab:98:a5:fb:52:f0:70:b1:ca: a0:2b:33:c3:25:15:64:8c:61:30:23:08:25:4d:34:98:65:f0: de:82:5d:d9:f6:ee:e6:f5:ca:d9:f9:4c:49:13:ff:67:95:02: 0e:4f:ef:fe:71:b4:0a:ef:5f:75:df:2e:42:2b:98:ea:2a:f6: 49:fd:36:1f:12:57:9f:c8:58:53:0a:4e:78:21:b1:ff:79:d5: b9:73:28:bd:27:38:44:da:0d:58:41:87:7b:62:e3:e3:ca:5d: 9a:1b:be:eb:23:c7:43:6b:57:e8:59:da:09:7f:06:cc:9d:62: a2:4e:a0:79:09:f4:32:cf:08:fe:39:d0:25:2e:53:ea:18:f9: cd:fa:f0:12:66:40:dd:8a:f3:a9:a7:85:1d:1e:9a:07:f1:1d: f5:57:de:0f:86:7b:ef:85:83:b5:c1:25:42:96:b7:47:ee:9b: 65:c9:1b:44 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUEanb/pLs102c2gSpTFz6T1NMzA0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDVDOTkwMTZEMDFFRERFMEE0RDQ3QzNDOTQ4RUU4ODU5 NjEyQzczQjAeFw0yNjExMTQyMTIyMDdaFw0yNjExMTUyMTQ3MDdaMDMxMTAvBgNV BAMTKDJGODlDQzYwMjZFQkI1RkUxQTVGMTlBMUZFRDkxQjExNDE2M0ZBNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJ0R+Uw49PXN/ZgHWeec4PqW4s WaZ3uHPN3RXktinWroI7YBCQimmKQdQLjx6NkaWNE4GgbMfgp3tkiJatPGOA5Sz8 /NhpJAxfGxqRkxyR9YIz3r/szy9SBG9Sy2NGW/Fg2pYMfNejOQCgdUw1fbT3vjMZ c7+zJP5GMtAwWMafdA1B6IkTlv7KTmu2kDRgsjwRK4SDhorzPrb9XZdpJxQdmSaw DBlPBjEe7scP5h7ec4DnDel8BpvxoAbajQ9usZ/2ucTyJSS7geus5dzpVOnucz9Q wjvCbM+bLMhqGsqIey0fsYmBmun2uBkNIgmsqVKHGYKzzzYMmxSv6RffTTJNAgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQUL4nMYCbrtf4aXxmh/tkbEUFj+k8wHwYDVR0j BBgwFoAU1cmQFtAe3eCk1Hw8lI7ohZYSxzswDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTkNJQy8x L0Q1Qzk5MDE2RDAxRURERTBBNEQ0N0MzQzk0OEVFODg1OTYxMkM3M0IuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzAvRDVDOTkwMTZEMDFFRERFMEE0RDQ3QzNDOTQ4RUU4 ODU5NjEyQzczQi5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05DSUMvMS9ENUM5OTAxNkQwMUVEREUw QTRENDdDM0M5NDhFRTg4NTk2MTJDNzNCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAErTkJiVcqA7vVhe3 dhDaE+/rELFqagumziO2cUlIFGXn9ibvTDp8Rq+Mgk/oPIcDgL/hu07UiMGbkSxK ppQ45jQSOzMtPHHsF/kk72HUKF7kq5il+1LwcLHKoCszwyUVZIxhMCMIJU00mGXw 3oJd2fbu5vXK2flMSRP/Z5UCDk/v/nG0Cu9fdd8uQiuY6ir2Sf02HxJXn8hYUwpO eCGx/3nVuXMovSc4RNoNWEGHe2Lj48pdmhu+6yPHQ2tX6FnaCX8GzJ1iok6geQn0 Ms8I/jnQJS5T6hj5zfrwEmZA3YrzqaeFHR6aB/Ed9VfeD4Z774WDtcElQpa3R+6b ZckbRA== -----END CERTIFICATE-----Generated at Sun Nov 15 10:23:21 2026 by rpki-client