$ rpki-client -vvvf rpkica.twnic.tw/rpki/NTCCATV/0/B621735E324046FFFC1DD75D4ED8815E08CD25AE.mft File: B621735E324046FFFC1DD75D4ED8815E08CD25AE.mft (raw, json) Hash identifier: fOJqeTt3qxudkG03zcY8HZ4FIAXbXDwCeUtWr31otqo= Subject key identifier: 06:48:30:C0:0F:A1:A1:B7:21:AB:85:06:0A:1D:7A:03:77:9F:FC:93 Authority key identifier: B6:21:73:5E:32:40:46:FF:FC:1D:D7:5D:4E:D8:81:5E:08:CD:25:AE Certificate issuer: /CN=B621735E324046FFFC1DD75D4ED8815E08CD25AE Certificate serial: 7FAABA2BBA4CB75792AE022F8ED54FE25F189DFE Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B621735E324046FFFC1DD75D4ED8815E08CD25AE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NTCCATV/0/B621735E324046FFFC1DD75D4ED8815E08CD25AE.mft Manifest number: 0102 Signing time: Sat 14 Nov 2026 20:04:50 +0000 Manifest this update: Sat 14 Nov 2026 19:59:50 +0000 Manifest next update: Sun 15 Nov 2026 20:26:50 +0000 Files and hashes: 1: B621735E324046FFFC1DD75D4ED8815E08CD25AE.crl (hash: HReFzwaZjSOlI5YVCg9fUqdjdOJBUv9SdjDGymhuhXo=) 2: 34332e3232372e32362e302f32332d3233203d3e203338383531.roa (hash: C2usZixthQiIE+xeQ3sCGdfoDlrvv1uF2zFJ8tVVXIc=) 3: 3130332e34362e3138382e302f32322d3232203d3e203338383531.roa (hash: IGUXagfNdDGbcIwOiNJB2WILqRSYaabubVYlRzK02WU=) 4: 34332e3232372e32352e302f32342d3234203d3e203338383531.roa (hash: AVukq4MJYvCGIAziMbV6ZV4Pe3c02PVGzfhBcKVubb8=) 5: 3130332e3133312e3137322e302f32322d3232203d3e203338383531.roa (hash: wAf5rAvxkIVF2EmVrtaklm33SqKTtuxnUU+SmUZADj8=) 6: 3130332e3133312e3137322e302f32322d3234203d3e203338383531.roa (hash: gJf9DLGPPpkcFmCRmCzChYMvtlZ7ty7+aorHZQ0RXhY=) 7: 34332e3232372e32342e302f32322d3232203d3e203338383531.roa (hash: Jc0taR/H4saYaDAoJgE+9UiKJq1S+bCLyLdRp8kMM8s=) 8: 3130332e34362e3138382e302f32332d3233203d3e203338383531.roa (hash: mG1ga13lp7MgEJvmiHGi6aFGInKwqgg1PecqbqqFlqE=) 9: 34332e3232372e32342e302f32332d3233203d3e203338383531.roa (hash: sZR2upIjgJ8ucZv/gsPF7tQAoIHfXdof9Y1BIEmdMEk=) 10: 3130332e34362e3139302e302f32332d3233203d3e203338383531.roa (hash: s3NIqrucGxxXoVh7k9P2N6l5jBGUlMpH1t4x77/+R9g=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NTCCATV/0/B621735E324046FFFC1DD75D4ED8815E08CD25AE.crl rsync://rpkica.twnic.tw/rpki/NTCCATV/0/B621735E324046FFFC1DD75D4ED8815E08CD25AE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B621735E324046FFFC1DD75D4ED8815E08CD25AE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 15:30:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:aa:ba:2b:ba:4c:b7:57:92:ae:02:2f:8e:d5:4f:e2:5f:18:9d:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B621735E324046FFFC1DD75D4ED8815E08CD25AE Validity Not Before: Nov 14 19:59:50 2026 GMT Not After : Nov 15 20:26:50 2026 GMT Subject: CN=064830C00FA1A1B721AB85060A1D7A03779FFC93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:5c:3a:df:62:d2:86:92:b8:b9:9c:08:b0:ac: 57:35:5a:43:dd:d5:e4:13:5c:88:7c:e4:71:65:b2: 0d:de:cd:89:57:27:f6:26:a6:89:7a:82:8a:61:d7: 71:13:ef:3e:72:91:88:95:dc:f6:97:be:03:0b:58: a7:ff:33:b0:4e:cf:36:18:c3:0c:cc:37:20:40:6c: dd:97:8c:cd:f7:71:91:cd:f9:e1:88:10:84:07:b9: 6d:c2:e2:3f:92:ab:38:e2:bd:c3:db:9b:5e:72:d1: 51:98:23:5d:97:ae:f4:cc:65:76:eb:ba:c8:77:fb: eb:77:8f:73:51:0a:33:7d:d3:1d:35:6e:8c:45:35: 45:a2:e3:df:22:e7:89:1b:f3:90:80:61:c1:a4:64: 2d:f4:7d:86:23:17:42:21:8c:d8:75:da:86:93:5f: 6d:0e:95:42:5c:29:82:e8:80:fc:69:90:79:a9:e3: b6:d7:1e:e5:d9:63:83:b3:bb:3b:4c:36:bf:43:1f: eb:f8:79:6b:fe:db:18:06:ec:2a:0f:20:1b:78:44: 2c:7f:57:06:76:cf:d6:d4:0d:ab:e2:17:4f:34:61: d0:55:0f:bb:31:cc:32:9f:ae:23:74:d9:56:26:5b: b5:ab:2b:d4:77:b8:7e:cb:ca:92:3d:98:d8:da:06: b3:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:48:30:C0:0F:A1:A1:B7:21:AB:85:06:0A:1D:7A:03:77:9F:FC:93 X509v3 Authority Key Identifier: keyid:B6:21:73:5E:32:40:46:FF:FC:1D:D7:5D:4E:D8:81:5E:08:CD:25:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NTCCATV/0/B621735E324046FFFC1DD75D4ED8815E08CD25AE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B621735E324046FFFC1DD75D4ED8815E08CD25AE.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NTCCATV/0/B621735E324046FFFC1DD75D4ED8815E08CD25AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:bf:5e:b7:68:65:20:4f:de:56:73:fd:10:f6:14:ce:ff:69: 0a:96:20:47:6c:a7:84:65:ec:46:2e:10:98:c8:24:84:b0:da: 86:d4:2d:7e:a8:7e:73:38:69:69:69:ac:54:65:62:b0:9b:b3: 1b:71:c5:68:20:0d:77:02:09:43:ba:f7:59:7b:33:89:31:8d: 8a:8b:88:f5:1e:d9:ad:f7:4c:42:a0:41:be:b4:c8:ce:f7:51: 63:1f:76:23:2f:b5:b9:8f:eb:04:3e:9d:19:75:58:a3:6d:a1: 1d:bd:f1:7c:50:24:f3:48:16:c3:ed:8d:65:ca:d7:4e:46:47: 20:f8:e9:ef:50:44:70:38:cc:45:52:86:53:c5:4c:97:5c:e8: 9b:fb:ec:62:ef:10:90:0e:39:b6:89:0c:9c:f5:4a:6e:d5:84: 60:61:17:4f:2d:a0:40:8d:d4:93:66:79:12:70:d6:26:22:44: 50:78:93:b2:3d:9d:40:41:83:d5:aa:f2:1a:c1:fa:0f:8a:47: d1:fd:80:6a:d1:40:16:9b:b1:f1:c4:df:e2:bc:4b:11:ea:0f: 0e:8f:8a:bc:32:9d:50:ce:d1:8e:08:d6:39:97:c0:2a:0d:d4: 6c:ff:89:c4:1c:65:94:23:22:29:88:5d:06:3c:fc:99:cc:67: b5:61:ac:b7 -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIUf6q6K7pMt1eSrgIvjtVP4l8Ynf4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjYyMTczNUUzMjQwNDZGRkZDMURENzVENEVEODgxNUUw OENEMjVBRTAeFw0yNjExMTQxOTU5NTBaFw0yNjExMTUyMDI2NTBaMDMxMTAvBgNV BAMTKDA2NDgzMEMwMEZBMUExQjcyMUFCODUwNjBBMUQ3QTAzNzc5RkZDOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClXDrfYtKGkri5nAiwrFc1WkPd 1eQTXIh85HFlsg3ezYlXJ/Ympol6goph13ET7z5ykYiV3PaXvgMLWKf/M7BOzzYY wwzMNyBAbN2XjM33cZHN+eGIEIQHuW3C4j+SqzjivcPbm15y0VGYI12XrvTMZXbr ush3++t3j3NRCjN90x01boxFNUWi498i54kb85CAYcGkZC30fYYjF0IhjNh12oaT X20OlUJcKYLogPxpkHmp47bXHuXZY4OzuztMNr9DH+v4eWv+2xgG7CoPIBt4RCx/ VwZ2z9bUDaviF080YdBVD7sxzDKfriN02VYmW7WrK9R3uH7LypI9mNjaBrNJAgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQUBkgwwA+hobchq4UGCh16A3ef/JMwHwYDVR0j BBgwFoAUtiFzXjJARv/8HdddTtiBXgjNJa4wDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTlRDQ0FU Vi8wL0I2MjE3MzVFMzI0MDQ2RkZGQzFERDc1RDRFRDg4MTVFMDhDRDI1QUUuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvQjYyMTczNUUzMjQwNDZGRkZDMURENzVENEVE ODgxNUUwOENEMjVBRS5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05UQ0NBVFYvMC9CNjIxNzM1RTMy NDA0NkZGRkMxREQ3NUQ0RUQ4ODE1RTA4Q0QyNUFFLm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQr9et2hl IE/eVnP9EPYUzv9pCpYgR2ynhGXsRi4QmMgkhLDahtQtfqh+czhpaWmsVGVisJuz G3HFaCANdwIJQ7r3WXsziTGNiouI9R7ZrfdMQqBBvrTIzvdRYx92Iy+1uY/rBD6d GXVYo22hHb3xfFAk80gWw+2NZcrXTkZHIPjp71BEcDjMRVKGU8VMl1zom/vsYu8Q kA45tokMnPVKbtWEYGEXTy2gQI3Uk2Z5EnDWJiJEUHiTsj2dQEGD1aryGsH6D4pH 0f2AatFAFpux8cTf4rxLEeoPDo+KvDKdUM7RjgjWOZfAKg3UbP+JxBxllCMiKYhd Bjz8mcxntWGstw== -----END CERTIFICATE-----Generated at Sun Nov 15 00:56:24 2026 by rpki-client