$ rpki-client -vvf rpkica.twnic.tw/rpki/NSS/0/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.mft File: 9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.mft (raw, json) Hash identifier: 3ITijFjc6j6BpvS2+FVvzRRiT/oRZUsInw5LxNegN60= Subject key identifier: 5A:F2:77:39:C8:58:5A:85:BB:A6:D5:2D:38:DA:A6:D6:C0:81:18:0B Authority key identifier: 9E:13:5A:CA:9B:3B:7E:42:3F:6A:6E:49:C9:22:E7:C9:FF:9D:04:3E Certificate issuer: /CN=9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E Certificate serial: 7ABEC65443D1248E7B9801D9B4D2F44845743FFD Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NSS/0/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.mft Manifest number: 65 Signing time: Fri 24 Jul 2026 00:47:08 +0000 Manifest this update: Fri 24 Jul 2026 00:42:08 +0000 Manifest next update: Sat 25 Jul 2026 02:49:08 +0000 Files and hashes: 1: 9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.crl (hash: qB/qoKQi3qNeZJY/pVbHUPOzASI9hz2Jm4FLVJ3LkL8=) 2: 323430333a663363303a3a2f33322d3332203d3e20313331363236.roa (hash: U+TwGMruloppvfph33ur/zLTpQNWHiQ2kQh2YCvkqAQ=) 3: 3130332e3131382e32342e302f32322d3234203d3e20313331363236.roa (hash: 7ZYOaD4BiHJMT5uylYeAq6oBkT9jOAeVwRTnZzrlVB0=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NSS/0/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.crl rsync://rpkica.twnic.tw/rpki/NSS/0/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 02:49:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:be:c6:54:43:d1:24:8e:7b:98:01:d9:b4:d2:f4:48:45:74:3f:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E Validity Not Before: Jul 24 00:42:08 2026 GMT Not After : Jul 25 02:49:08 2026 GMT Subject: CN=5AF27739C8585A85BBA6D52D38DAA6D6C081180B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:db:d7:00:8b:46:94:c9:be:ab:74:21:b1:c5: a1:53:69:ed:29:59:c4:16:25:3d:31:a9:93:50:5d: 9c:ae:83:a2:bb:9c:4b:4c:cb:18:be:45:9d:16:c3: bd:76:e4:3d:f0:e0:a1:66:6e:59:45:b4:d6:9c:fa: 15:bc:69:2e:25:1a:df:dd:dd:08:72:98:8b:85:e7: 0b:5f:cb:09:b0:d2:ad:a0:33:30:a2:17:97:14:dc: ae:03:20:c5:c4:ab:e7:36:b3:74:9e:0a:b0:c5:ce: f4:ef:fe:83:34:65:d4:a8:c9:a1:ea:72:38:c7:52: 2c:c6:eb:01:3b:0e:d0:6e:13:3f:72:19:ad:ac:44: 78:72:b5:a9:9d:6e:fd:24:c0:bd:8b:b2:41:a7:98: e9:36:f1:a9:00:a5:ee:d8:05:7d:77:26:9f:51:26: d8:61:ff:ea:fb:16:4d:2a:89:3f:64:48:0f:b8:a3: e8:c7:e2:8c:84:e6:98:18:30:fd:5a:08:64:5c:82: 6f:6c:8b:93:3e:57:ea:e7:a2:f3:fa:32:8b:3a:0c: fe:70:c6:99:62:b7:bf:38:8e:0a:ec:d3:86:8f:0e: 62:ec:70:17:3c:03:17:51:1c:11:b6:8f:41:2a:67: c4:cb:da:87:36:fd:7f:f7:bb:d7:e1:10:81:ad:55: ac:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:F2:77:39:C8:58:5A:85:BB:A6:D5:2D:38:DA:A6:D6:C0:81:18:0B X509v3 Authority Key Identifier: keyid:9E:13:5A:CA:9B:3B:7E:42:3F:6A:6E:49:C9:22:E7:C9:FF:9D:04:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NSS/0/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NSS/0/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:8c:6b:89:13:a9:2f:6f:54:7e:17:ce:4d:a3:1e:ca:6a:fe: b8:ee:2d:81:2a:13:c4:bb:64:01:9b:ab:ff:86:11:84:e6:24: 5f:96:51:f0:bb:dd:cb:28:1c:91:6f:fa:e2:10:44:79:89:cd: 93:47:c3:13:3f:7a:d3:da:fb:e5:62:94:cd:fb:99:1c:0d:10: 34:4d:3b:4e:76:6f:f3:dd:d3:93:07:ac:9d:d6:b9:35:eb:a0: f5:3c:07:da:ac:cd:d8:5c:30:a2:7b:e0:31:7d:0b:23:fb:8d: b3:2e:0c:f2:40:3e:6b:c7:db:09:de:4a:9d:63:1d:93:58:8a: f8:a5:06:5b:0d:e2:9d:c1:34:09:78:8e:9b:6c:31:0b:5b:61: e7:d8:26:64:28:2b:ab:da:54:7d:6f:88:27:a7:99:f8:61:11: 28:4a:d6:4d:59:df:49:db:26:96:19:59:2e:63:a4:66:60:a6: 68:66:9d:e2:01:c6:5f:f2:2e:a3:a9:f7:e8:7b:70:b7:03:0d: eb:d0:91:b6:95:52:44:12:24:f6:a5:d2:a9:4d:33:bf:86:b1: ac:4a:cf:1e:ce:4c:86:a1:8b:1f:d4:ac:e8:e7:71:4a:75:19: c8:6c:97:15:41:23:e3:aa:de:0b:13:ec:9a:15:3a:08:f6:b9: 4f:32:da:11 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUer7GVEPRJI57mAHZtNL0SEV0P/0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUUxMzVBQ0E5QjNCN0U0MjNGNkE2RTQ5QzkyMkU3QzlG RjlEMDQzRTAeFw0yNjA3MjQwMDQyMDhaFw0yNjA3MjUwMjQ5MDhaMDMxMTAvBgNV BAMTKDVBRjI3NzM5Qzg1ODVBODVCQkE2RDUyRDM4REFBNkQ2QzA4MTE4MEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO29cAi0aUyb6rdCGxxaFTae0p WcQWJT0xqZNQXZyug6K7nEtMyxi+RZ0Ww7125D3w4KFmbllFtNac+hW8aS4lGt/d 3QhymIuF5wtfywmw0q2gMzCiF5cU3K4DIMXEq+c2s3SeCrDFzvTv/oM0ZdSoyaHq cjjHUizG6wE7DtBuEz9yGa2sRHhytamdbv0kwL2LskGnmOk28akApe7YBX13Jp9R Jthh/+r7Fk0qiT9kSA+4o+jH4oyE5pgYMP1aCGRcgm9si5M+V+rnovP6Mos6DP5w xplit784jgrs04aPDmLscBc8AxdRHBG2j0EqZ8TL2oc2/X/3u9fhEIGtVaw/AgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUWvJ3OchYWoW7ptUtONqm1sCBGAswHwYDVR0j BBgwFoAUnhNayps7fkI/am5JySLnyf+dBD4wDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTlNTLzAv OUUxMzVBQ0E5QjNCN0U0MjNGNkE2RTQ5QzkyMkU3QzlGRjlEMDQzRS5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS85RTEzNUFDQTlCM0I3RTQyM0Y2QTZFNDlDOTIyRTdD OUZGOUQwNDNFLmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTlNTLzAvOUUxMzVBQ0E5QjNCN0U0MjNG NkE2RTQ5QzkyMkU3QzlGRjlEMDQzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAEWMa4kTqS9vVH4Xzk2j Hspq/rjuLYEqE8S7ZAGbq/+GEYTmJF+WUfC73csoHJFv+uIQRHmJzZNHwxM/etPa ++VilM37mRwNEDRNO052b/Pd05MHrJ3WuTXroPU8B9qszdhcMKJ74DF9CyP7jbMu DPJAPmvH2wneSp1jHZNYivilBlsN4p3BNAl4jptsMQtbYefYJmQoK6vaVH1viCen mfhhEShK1k1Z30nbJpYZWS5jpGZgpmhmneIBxl/yLqOp9+h7cLcDDevQkbaVUkQS JPal0qlNM7+GsaxKzx7OTIahix/UrOjncUp1GchslxVBI+Oq3gsT7JoVOgj2uU8y 2hE= -----END CERTIFICATE-----Generated at Fri Jul 24 09:26:01 2026 by rpki-client