$ rpki-client -vvvf rpkica.twnic.tw/rpki/NETGUARD/0/A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.mft File: A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.mft (raw, json) Hash identifier: jEWCreOzE6cYhwdgNfpVxFMnskn5eMeLkFpcuzXqMlw= Subject key identifier: 38:51:C7:6D:78:79:B9:28:BC:44:23:C4:D5:77:EA:A4:A4:FF:31:2C Authority key identifier: A7:9F:FF:D9:8D:67:B1:DC:F7:64:D6:C6:0D:9D:8F:77:B1:8C:80:F8 Certificate issuer: /CN=A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8 Certificate serial: 622E6F1F47610FEA4443B6CEB833B9ADEF603548 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NETGUARD/0/A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.mft Manifest number: B8 Signing time: Thu 24 Sep 2026 03:56:22 +0000 Manifest this update: Thu 24 Sep 2026 03:51:22 +0000 Manifest next update: Fri 25 Sep 2026 06:17:22 +0000 Files and hashes: 1: A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.crl (hash: VO1Emwq55omrvg1apBZ4LEybO51ekdDg9i8pFhcY/jA=) 2: 3130332e3136302e3232342e302f32332d3234203d3e20313331363539.roa (hash: 7S4FcOba0oK0ThFobE5ZoA1Yfm0vEJ1gjov31dZGXJY=) 3: 3130332e3136302e3232342e302f32332d3234203d3e20313331363532.roa (hash: 47voBXTyiYiW0GNSqQXzjv9mGc6KAROEr3k+QrljAQs=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NETGUARD/0/A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.crl rsync://rpkica.twnic.tw/rpki/NETGUARD/0/A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 02:19:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:2e:6f:1f:47:61:0f:ea:44:43:b6:ce:b8:33:b9:ad:ef:60:35:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8 Validity Not Before: Sep 24 03:51:22 2026 GMT Not After : Sep 25 06:17:22 2026 GMT Subject: CN=3851C76D7879B928BC4423C4D577EAA4A4FF312C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:b9:0c:e8:df:c9:cd:e3:78:22:9e:5b:72:bb: 4a:a2:42:c5:1c:59:9c:01:25:ad:9a:24:91:cc:cc: 81:6b:92:00:0c:15:65:90:c7:32:93:15:95:0b:75: 9b:38:76:21:ac:62:8c:e7:6e:86:4c:c8:45:7c:e4: 76:a9:1a:68:e7:b1:47:6d:36:6b:9a:d1:57:9a:ff: 4a:c6:fb:75:09:ce:b2:0e:45:13:ef:d5:5f:10:83: ec:59:e3:89:02:4a:fc:40:7b:b5:17:55:19:66:17: ef:58:be:d7:79:1e:13:cd:b4:38:4f:09:4b:ac:1e: ec:a9:62:8a:83:29:f9:d3:45:25:b9:aa:f8:b1:cd: bc:b9:00:31:e8:ee:09:c0:96:a4:c2:2c:8d:1b:23: fb:28:3a:0c:69:15:73:c9:1c:c7:8d:78:7c:f6:d5: 03:0a:dd:83:76:d9:db:4c:4c:ac:e9:79:2e:44:fd: 65:23:f5:a8:ee:29:8c:ce:9e:64:57:c4:2b:41:79: ce:e4:3e:04:1f:23:22:be:77:15:a5:c0:a5:43:25: 5f:3e:5c:f6:ad:61:23:82:c4:5d:e3:ed:a7:77:07: 05:1f:ef:4a:42:61:e9:31:ac:82:64:c0:e9:07:71: cf:1a:fb:57:b6:4e:7b:23:9d:76:26:b7:b3:2d:4a: ea:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:51:C7:6D:78:79:B9:28:BC:44:23:C4:D5:77:EA:A4:A4:FF:31:2C X509v3 Authority Key Identifier: keyid:A7:9F:FF:D9:8D:67:B1:DC:F7:64:D6:C6:0D:9D:8F:77:B1:8C:80:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NETGUARD/0/A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NETGUARD/0/A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:9a:35:3b:37:80:85:ed:4c:48:6b:db:ec:d6:38:33:ce:a0: c4:e9:ff:09:16:7e:f2:6b:c3:ec:dc:9b:3a:95:9e:cf:17:06: 86:41:b9:ff:01:17:b9:0e:e6:1b:5d:b9:41:cd:b9:55:a5:d7: 08:cf:75:67:81:1a:2f:73:c1:fb:d3:4d:25:fe:3e:a4:1b:9b: d8:18:df:8b:c4:60:aa:74:68:70:c1:8e:da:e1:70:05:50:8d: c5:28:e4:48:7e:8f:45:94:89:96:2e:85:19:94:e0:8e:e9:ee: 8f:6f:52:30:39:a7:5f:cd:92:40:2f:3f:0d:f1:74:3a:b5:9d: ba:bb:fa:b8:52:3e:75:bc:46:93:3d:18:ce:2a:b9:9f:c6:34: 34:f7:bc:d7:0f:70:4c:dd:bd:75:bb:b1:a9:72:30:66:3f:2a: 04:28:a5:e3:99:46:b5:39:39:e7:e0:09:c1:ef:78:d4:ca:6e: 04:71:52:1f:d1:06:a9:04:b8:2b:98:77:fd:79:32:69:a6:cd: 63:5d:77:f9:14:51:df:18:fc:ea:c9:3c:86:e9:2d:bf:5e:12: 9e:26:d3:b7:d3:8c:8e:d0:89:b5:f9:9b:ab:42:c0:0a:db:7d: 73:8a:38:c7:03:50:98:e8:12:31:60:5c:5d:42:30:6f:b3:82: 09:9a:b2:b5 -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUYi5vH0dhD+pEQ7bOuDO5re9gNUgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTc5RkZGRDk4RDY3QjFEQ0Y3NjRENkM2MEQ5RDhGNzdC MThDODBGODAeFw0yNjA5MjQwMzUxMjJaFw0yNjA5MjUwNjE3MjJaMDMxMTAvBgNV BAMTKDM4NTFDNzZENzg3OUI5MjhCQzQ0MjNDNEQ1NzdFQUE0QTRGRjMxMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD6uQzo38nN43ginltyu0qiQsUc WZwBJa2aJJHMzIFrkgAMFWWQxzKTFZULdZs4diGsYoznboZMyEV85HapGmjnsUdt Nmua0Vea/0rG+3UJzrIORRPv1V8Qg+xZ44kCSvxAe7UXVRlmF+9Yvtd5HhPNtDhP CUusHuypYoqDKfnTRSW5qvixzby5ADHo7gnAlqTCLI0bI/soOgxpFXPJHMeNeHz2 1QMK3YN22dtMTKzpeS5E/WUj9ajuKYzOnmRXxCtBec7kPgQfIyK+dxWlwKVDJV8+ XPatYSOCxF3j7ad3BwUf70pCYekxrIJkwOkHcc8a+1e2TnsjnXYmt7MtSuoHAgMB AAGjggHyMIIB7jAdBgNVHQ4EFgQUOFHHbXh5uSi8RCPE1XfqpKT/MSwwHwYDVR0j BBgwFoAUp5//2Y1nsdz3ZNbGDZ2Pd7GMgPgwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTkVUR1VB UkQvMC9BNzlGRkZEOThENjdCMURDRjc2NEQ2QzYwRDlEOEY3N0IxOEM4MEY4LmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8xL0E3OUZGRkQ5OEQ2N0IxRENGNzY0RDZDNjBE OUQ4Rjc3QjE4QzgwRjguY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9ORVRHVUFSRC8wL0E3OUZGRkQ5 OEQ2N0IxRENGNzY0RDZDNjBEOUQ4Rjc3QjE4QzgwRjgubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBKmjU7 N4CF7UxIa9vs1jgzzqDE6f8JFn7ya8Ps3Js6lZ7PFwaGQbn/ARe5DuYbXblBzblV pdcIz3VngRovc8H7000l/j6kG5vYGN+LxGCqdGhwwY7a4XAFUI3FKORIfo9FlImW LoUZlOCO6e6Pb1IwOadfzZJALz8N8XQ6tZ26u/q4Uj51vEaTPRjOKrmfxjQ097zX D3BM3b11u7GpcjBmPyoEKKXjmUa1OTnn4AnB73jUym4EcVIf0QapBLgrmHf9eTJp ps1jXXf5FFHfGPzqyTyG6S2/XhKeJtO304yO0Im1+ZurQsAK231zijjHA1CY6BIx YFxdQjBvs4IJmrK1 -----END CERTIFICATE-----Generated at Thu Sep 24 17:51:27 2026 by rpki-client