$ rpki-client -vvvf rpkica.twnic.tw/rpki/NCREE/0/97D4884F986D543782ED0796247DD5237461E32E.mft File: 97D4884F986D543782ED0796247DD5237461E32E.mft (raw, json) Hash identifier: HkZY2usL8arOORdz7uX4WWDQV18310r9fbZql6mDvqI= Subject key identifier: 50:4B:4F:52:CB:46:05:1D:26:6B:C1:40:FB:78:D6:6F:29:25:16:40 Authority key identifier: 97:D4:88:4F:98:6D:54:37:82:ED:07:96:24:7D:D5:23:74:61:E3:2E Certificate issuer: /CN=97D4884F986D543782ED0796247DD5237461E32E Certificate serial: 0FA4480D0DA2EA7BB0356233B13F4865C7D730B6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/97D4884F986D543782ED0796247DD5237461E32E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NCREE/0/97D4884F986D543782ED0796247DD5237461E32E.mft Manifest number: BA Signing time: Fri 25 Sep 2026 02:30:40 +0000 Manifest this update: Fri 25 Sep 2026 02:25:40 +0000 Manifest next update: Sat 26 Sep 2026 06:08:40 +0000 Files and hashes: 1: 3130332e3138392e3133322e302f32332d3233203d3e203138313833.roa (hash: 52gdtA1LdP2xK0dCg/MXu3Df1UL36Mp+kCidYA74Lo8=) 2: 97D4884F986D543782ED0796247DD5237461E32E.crl (hash: 0kkLz1IFY8yrm9Rbu7CGd5P0DmLayMrHqU1f4/jULTY=) 3: 323430303a383561303a3a2f33322d3332203d3e203138313833.roa (hash: C6OKHDxWyKxWvrSfW3hF42Kke8nwN95k72tbWDAEl2M=) 4: 3230322e352e31322e302f32322d3232203d3e203138313833.roa (hash: XbkYTDNrq99sllfWjZ/d99FzReEgoNHkyUkg86NPTgw=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NCREE/0/97D4884F986D543782ED0796247DD5237461E32E.crl rsync://rpkica.twnic.tw/rpki/NCREE/0/97D4884F986D543782ED0796247DD5237461E32E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/97D4884F986D543782ED0796247DD5237461E32E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 06:08:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:a4:48:0d:0d:a2:ea:7b:b0:35:62:33:b1:3f:48:65:c7:d7:30:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97D4884F986D543782ED0796247DD5237461E32E Validity Not Before: Sep 25 02:25:40 2026 GMT Not After : Sep 26 06:08:40 2026 GMT Subject: CN=504B4F52CB46051D266BC140FB78D66F29251640 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ab:8f:33:78:b0:1c:30:3b:ea:de:6f:06:b2: 23:91:a9:30:f6:a0:a1:04:de:f7:19:86:dc:48:ec: 7c:a2:39:41:ce:03:a5:0d:ad:47:8b:50:ca:b3:07: 0f:67:cb:31:0b:4d:30:bc:bf:57:34:3a:15:31:3c: 19:ca:5a:4d:cc:24:f1:87:f0:4a:0a:aa:36:ba:4f: c3:aa:24:24:90:42:cc:1e:45:69:70:ed:08:d1:00: ea:14:7e:1a:12:9d:12:c2:db:b0:4b:a4:a9:92:92: 1a:b5:a8:ca:37:5c:ef:02:c3:ee:19:03:da:f8:15: 81:39:0a:40:68:9d:0a:f8:11:6b:0a:90:92:49:de: 94:5f:59:11:4e:20:3c:f7:3e:8f:53:a9:fd:26:b3: 4e:c4:34:74:6d:99:76:ef:c7:15:05:04:9c:25:18: cd:64:4d:f7:36:b7:1e:75:ee:b1:ab:e5:a0:36:e6: 7c:41:7d:5a:aa:a0:bb:81:2f:29:25:f3:67:e4:27: 20:58:4e:cf:c6:07:2e:2d:9d:43:84:6d:cc:80:8e: 7c:ce:86:5f:85:5a:91:78:17:98:54:5c:70:8b:4d: 02:3e:db:9c:56:bb:8f:45:41:17:f0:46:f9:cd:87: b6:60:81:4c:94:22:ec:15:e1:9c:35:b7:63:9a:2d: 0e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:4B:4F:52:CB:46:05:1D:26:6B:C1:40:FB:78:D6:6F:29:25:16:40 X509v3 Authority Key Identifier: keyid:97:D4:88:4F:98:6D:54:37:82:ED:07:96:24:7D:D5:23:74:61:E3:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NCREE/0/97D4884F986D543782ED0796247DD5237461E32E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/97D4884F986D543782ED0796247DD5237461E32E.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NCREE/0/97D4884F986D543782ED0796247DD5237461E32E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:6d:fe:26:8e:98:04:99:46:b0:f9:04:f1:e9:f4:f4:15:e6: 6d:db:1a:60:f6:da:0d:2b:53:2e:ab:b9:c2:60:3e:74:30:c8: 38:d9:a7:5f:f9:ba:af:ae:96:ac:ba:1d:2e:e3:68:bf:0d:b7: 39:df:1c:5d:08:4c:a8:99:9f:dc:e7:d9:01:5e:c3:bb:6a:8f: d7:49:5a:7d:b0:5a:52:46:82:d8:d0:68:e4:36:40:8a:0c:f9: 44:9b:c4:19:8c:8d:f6:5a:37:db:50:40:0b:e4:88:e5:77:00: ad:cd:01:bb:e1:9f:f0:d2:2b:5a:de:23:cc:a2:29:7e:f2:9d: b8:e4:0d:42:66:cb:a4:17:43:70:88:66:75:84:91:98:73:64: 2d:2e:83:05:fe:68:ef:05:6d:b8:50:d6:fe:03:b9:82:04:6f: be:78:8c:75:8e:e3:eb:bc:e8:76:41:d0:9f:b2:9f:c3:cb:d2: 71:9e:cf:43:62:3c:2c:b7:a4:31:8e:b1:f4:af:5e:6d:ac:6d: 5f:23:4e:77:27:f4:6c:42:51:b0:a9:0d:d0:91:3f:32:30:c0: f8:6e:67:34:c4:3b:9b:c4:5c:78:46:9f:d4:6c:e9:32:1e:ed: be:4a:10:7e:fd:a8:22:bb:f7:7d:2d:1d:e0:a7:b0:f4:04:b5: c8:37:98:e7 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUD6RIDQ2i6nuwNWIzsT9IZcfXMLYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTdENDg4NEY5ODZENTQzNzgyRUQwNzk2MjQ3REQ1MjM3 NDYxRTMyRTAeFw0yNjA5MjUwMjI1NDBaFw0yNjA5MjYwNjA4NDBaMDMxMTAvBgNV BAMTKDUwNEI0RjUyQ0I0NjA1MUQyNjZCQzE0MEZCNzhENjZGMjkyNTE2NDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcq48zeLAcMDvq3m8GsiORqTD2 oKEE3vcZhtxI7HyiOUHOA6UNrUeLUMqzBw9nyzELTTC8v1c0OhUxPBnKWk3MJPGH 8EoKqja6T8OqJCSQQsweRWlw7QjRAOoUfhoSnRLC27BLpKmSkhq1qMo3XO8Cw+4Z A9r4FYE5CkBonQr4EWsKkJJJ3pRfWRFOIDz3Po9Tqf0ms07ENHRtmXbvxxUFBJwl GM1kTfc2tx517rGr5aA25nxBfVqqoLuBLykl82fkJyBYTs/GBy4tnUOEbcyAjnzO hl+FWpF4F5hUXHCLTQI+25xWu49FQRfwRvnNh7ZggUyUIuwV4Zw1t2OaLQ4TAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUUEtPUstGBR0ma8FA+3jWbyklFkAwHwYDVR0j BBgwFoAUl9SIT5htVDeC7QeWJH3VI3Rh4y4wDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTkNSRUUv MC85N0Q0ODg0Rjk4NkQ1NDM3ODJFRDA3OTYyNDdERDUyMzc0NjFFMzJFLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzk3RDQ4ODRGOTg2RDU0Mzc4MkVEMDc5NjI0N0RE NTIzNzQ2MUUzMkUuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9OQ1JFRS8wLzk3RDQ4ODRGOTg2RDU0 Mzc4MkVEMDc5NjI0N0RENTIzNzQ2MUUzMkUubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCCbf4mjpgEmUaw +QTx6fT0FeZt2xpg9toNK1Muq7nCYD50MMg42adf+bqvrpasuh0u42i/Dbc53xxd CEyomZ/c59kBXsO7ao/XSVp9sFpSRoLY0GjkNkCKDPlEm8QZjI32WjfbUEAL5Ijl dwCtzQG74Z/w0ita3iPMoil+8p245A1CZsukF0NwiGZ1hJGYc2QtLoMF/mjvBW24 UNb+A7mCBG++eIx1juPrvOh2QdCfsp/Dy9Jxns9DYjwst6QxjrH0r15trG1fI053 J/RsQlGwqQ3QkT8yMMD4bmc0xDubxFx4Rp/UbOkyHu2+ShB+/agiu/d9LR3gp7D0 BLXIN5jn -----END CERTIFICATE-----Generated at Fri Sep 25 22:08:53 2026 by rpki-client