$ rpki-client -vvvf rpkica.twnic.tw/rpki/NCREE/0/97D4884F986D543782ED0796247DD5237461E32E.mft File: 97D4884F986D543782ED0796247DD5237461E32E.mft (raw, json) Hash identifier: ibjPCUbOzByu13y/BC3+73wgMTLuuI55aqmFuJ+JXL8= Subject key identifier: 0A:DE:A3:86:2F:45:38:91:FB:E4:CF:6A:B5:63:F9:8E:46:C2:5A:EF Authority key identifier: 97:D4:88:4F:98:6D:54:37:82:ED:07:96:24:7D:D5:23:74:61:E3:2E Certificate issuer: /CN=97D4884F986D543782ED0796247DD5237461E32E Certificate serial: 6CC827C6FE1688688848868B2D12A8001E36FDFB Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/97D4884F986D543782ED0796247DD5237461E32E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NCREE/0/97D4884F986D543782ED0796247DD5237461E32E.mft Manifest number: BB Signing time: Fri 25 Sep 2026 22:09:28 +0000 Manifest this update: Fri 25 Sep 2026 22:04:28 +0000 Manifest next update: Sun 27 Sep 2026 00:58:28 +0000 Files and hashes: 1: 97D4884F986D543782ED0796247DD5237461E32E.crl (hash: +R1bHho1rcAPZQF2g0z+n4MIjdWtZ4nrQ0O9lny8lyQ=) 2: 3230322e352e31322e302f32322d3232203d3e203138313833.roa (hash: XbkYTDNrq99sllfWjZ/d99FzReEgoNHkyUkg86NPTgw=) 3: 323430303a383561303a3a2f33322d3332203d3e203138313833.roa (hash: C6OKHDxWyKxWvrSfW3hF42Kke8nwN95k72tbWDAEl2M=) 4: 3130332e3138392e3133322e302f32332d3233203d3e203138313833.roa (hash: 52gdtA1LdP2xK0dCg/MXu3Df1UL36Mp+kCidYA74Lo8=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NCREE/0/97D4884F986D543782ED0796247DD5237461E32E.crl rsync://rpkica.twnic.tw/rpki/NCREE/0/97D4884F986D543782ED0796247DD5237461E32E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/97D4884F986D543782ED0796247DD5237461E32E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 15:15:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:c8:27:c6:fe:16:88:68:88:48:86:8b:2d:12:a8:00:1e:36:fd:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97D4884F986D543782ED0796247DD5237461E32E Validity Not Before: Sep 25 22:04:28 2026 GMT Not After : Sep 27 00:58:28 2026 GMT Subject: CN=0ADEA3862F453891FBE4CF6AB563F98E46C25AEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d8:f5:59:a9:33:96:62:5a:e7:f8:3b:28:ae: d4:b8:fe:dc:7f:80:24:65:20:b8:a2:c4:60:4f:48: 97:60:cc:e8:49:78:f8:d3:c3:08:7d:c5:5d:d4:64: e6:f6:b7:20:5d:61:76:a6:87:33:4b:5c:a2:8d:cc: 27:c8:75:00:df:b9:f4:0e:01:62:3f:53:e3:d9:78: f8:41:c2:61:0b:1e:0b:b0:ba:04:9b:df:e2:72:d7: f6:2a:34:e8:44:c2:e8:e0:a2:70:2d:a9:2e:bb:b8: 4f:db:c2:c1:f9:12:b0:c1:32:65:ac:15:ff:9d:ef: 37:70:94:4b:fb:d1:25:7a:8f:63:cc:a4:63:17:5b: 37:6d:ca:11:1d:92:f6:14:2a:66:84:af:88:77:f8: 0e:92:95:27:34:06:69:b4:1e:d4:f1:73:21:39:71: 13:fd:2e:60:70:49:c5:e9:4a:5a:c9:c2:4b:5f:15: d4:ed:d8:39:0f:96:28:3e:b9:f3:1e:93:da:7c:39: 92:50:7b:e4:78:be:73:9f:3d:09:45:2e:87:fc:2d: c6:c3:c4:21:c2:c3:13:6d:e1:1b:5b:5b:5a:84:6e: a4:27:2c:9b:0a:e8:b9:51:ed:d2:93:40:29:bd:e3: b4:43:0b:47:e7:88:83:c4:89:81:e6:a4:7e:c4:b6: fd:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:DE:A3:86:2F:45:38:91:FB:E4:CF:6A:B5:63:F9:8E:46:C2:5A:EF X509v3 Authority Key Identifier: keyid:97:D4:88:4F:98:6D:54:37:82:ED:07:96:24:7D:D5:23:74:61:E3:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NCREE/0/97D4884F986D543782ED0796247DD5237461E32E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/97D4884F986D543782ED0796247DD5237461E32E.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NCREE/0/97D4884F986D543782ED0796247DD5237461E32E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:9e:3e:26:7e:19:62:d3:81:32:18:33:8c:cb:42:c0:90:0d: 64:7d:a4:0a:7b:b5:07:9c:91:0b:17:a5:79:35:ed:bb:98:44: ae:ea:24:06:d3:80:d7:7f:8a:cf:b4:e1:6e:2f:63:81:3f:70: 66:19:66:f5:df:b9:ac:be:ff:8f:29:ed:85:f8:6b:01:6b:d1: fb:a1:9d:84:a4:ce:6d:0d:df:5c:be:d9:11:ef:c7:bd:02:02: 73:e5:31:f1:9b:33:ee:46:b6:1d:d8:ca:19:83:1c:e1:cc:e7: a6:99:70:8e:3b:2c:47:e9:dc:1c:b6:de:6a:c6:55:f5:8e:3c: 0c:44:91:ee:9a:f7:09:c1:c4:db:96:2f:7e:6d:55:1c:5f:65: 4d:71:62:08:12:75:97:88:02:36:0a:fa:77:d0:e4:97:59:8d: 39:f2:f8:52:fd:31:f6:0a:ac:b8:0f:fb:e9:3a:96:97:87:3a: 72:f6:1a:ba:a2:7f:4d:4b:48:4c:1b:16:7e:ec:36:68:cb:0b: eb:0b:2c:3b:88:af:d3:a7:11:a5:6b:27:79:6a:2b:98:d3:b7: 53:90:54:73:d6:9f:7a:1f:71:ac:b9:34:70:7d:d8:75:f0:58: 88:15:76:ea:e6:09:17:d9:fa:7b:26:d5:42:b1:02:c5:c5:d0: 24:9d:09:c3 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUbMgnxv4WiGiISIaLLRKoAB42/fswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTdENDg4NEY5ODZENTQzNzgyRUQwNzk2MjQ3REQ1MjM3 NDYxRTMyRTAeFw0yNjA5MjUyMjA0MjhaFw0yNjA5MjcwMDU4MjhaMDMxMTAvBgNV BAMTKDBBREVBMzg2MkY0NTM4OTFGQkU0Q0Y2QUI1NjNGOThFNDZDMjVBRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG2PVZqTOWYlrn+DsortS4/tx/ gCRlILiixGBPSJdgzOhJePjTwwh9xV3UZOb2tyBdYXamhzNLXKKNzCfIdQDfufQO AWI/U+PZePhBwmELHguwugSb3+Jy1/YqNOhEwujgonAtqS67uE/bwsH5ErDBMmWs Ff+d7zdwlEv70SV6j2PMpGMXWzdtyhEdkvYUKmaEr4h3+A6SlSc0Bmm0HtTxcyE5 cRP9LmBwScXpSlrJwktfFdTt2DkPlig+ufMek9p8OZJQe+R4vnOfPQlFLof8LcbD xCHCwxNt4RtbW1qEbqQnLJsK6LlR7dKTQCm947RDC0fniIPEiYHmpH7Etv0fAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUCt6jhi9FOJH75M9qtWP5jkbCWu8wHwYDVR0j BBgwFoAUl9SIT5htVDeC7QeWJH3VI3Rh4y4wDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTkNSRUUv MC85N0Q0ODg0Rjk4NkQ1NDM3ODJFRDA3OTYyNDdERDUyMzc0NjFFMzJFLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzk3RDQ4ODRGOTg2RDU0Mzc4MkVEMDc5NjI0N0RE NTIzNzQ2MUUzMkUuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9OQ1JFRS8wLzk3RDQ4ODRGOTg2RDU0 Mzc4MkVEMDc5NjI0N0RENTIzNzQ2MUUzMkUubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAKnj4mfhli04Ey GDOMy0LAkA1kfaQKe7UHnJELF6V5Ne27mESu6iQG04DXf4rPtOFuL2OBP3BmGWb1 37msvv+PKe2F+GsBa9H7oZ2EpM5tDd9cvtkR78e9AgJz5THxmzPuRrYd2MoZgxzh zOemmXCOOyxH6dwctt5qxlX1jjwMRJHumvcJwcTbli9+bVUcX2VNcWIIEnWXiAI2 Cvp30OSXWY058vhS/TH2Cqy4D/vpOpaXhzpy9hq6on9NS0hMGxZ+7DZoywvrCyw7 iK/TpxGlayd5aiuY07dTkFRz1p96H3GsuTRwfdh18FiIFXbq5gkX2fp7JtVCsQLF xdAknQnD -----END CERTIFICATE-----Generated at Sat Sep 26 02:08:55 2026 by rpki-client