$ rpki-client -vvf rpkica.twnic.tw/rpki/PNI/0/9F4621BE2CEB15DD74809D52692588598490FABF.mft File: 9F4621BE2CEB15DD74809D52692588598490FABF.mft (raw, json) Hash identifier: b3gjW659tcwaYogc/BVFxu8GAenTUI76noCibXJbDqI= Subject key identifier: 9D:C2:8C:54:D0:9A:56:03:8A:5D:43:72:B3:3F:F6:22:72:A0:47:2E Authority key identifier: 9F:46:21:BE:2C:EB:15:DD:74:80:9D:52:69:25:88:59:84:90:FA:BF Certificate issuer: /CN=9F4621BE2CEB15DD74809D52692588598490FABF Certificate serial: 71121B682AF9C98BEAA29321185FA41826505035 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9F4621BE2CEB15DD74809D52692588598490FABF.cer Subject info access: rsync://rpkica.twnic.tw/rpki/PNI/0/9F4621BE2CEB15DD74809D52692588598490FABF.mft Manifest number: 6A Signing time: Thu 23 Jul 2026 09:12:06 +0000 Manifest this update: Thu 23 Jul 2026 09:07:06 +0000 Manifest next update: Fri 24 Jul 2026 11:04:06 +0000 Files and hashes: 1: 3130332e3133372e3234362e302f32332d3332203d3e20313331363432.roa (hash: taJQRTDQ90UxXadAvWM0GS41DZC0w4SutBUxh10g3Ls=) 2: 3130332e3135372e34322e302f32332d3332203d3e20323033353438.roa (hash: nYR+Ml8lrCk7Dl21maH1wtxMxSe7KjzyLwH7FozLC7o=) 3: 9F4621BE2CEB15DD74809D52692588598490FABF.crl (hash: ahhCUy/GjtmVtAqTctHWBYRcj/LzZN4wXlm0zbUuq7I=) 4: 3231312e37362e3137362e302f32332d3332203d3e20313331363432.roa (hash: Neacdwz6usPvpnxdcJO7WdPsbmwrbKBYPAqd9PXlS3o=) 5: 323430353a636463303a3a2f33322d313234203d3e20313331363432.roa (hash: B+rZIPiEbFPdUxH0aia2ffpZrMmBBOdtjQ5TGrFZI/g=) 6: 3230322e3134382e3232322e302f32332d3332203d3e20313331363432.roa (hash: QSozWjihGPRSxS1l+02abUaaKtc4iDRAVQB/oWLei3c=) 7: 3130332e3133372e36322e302f32332d3332203d3e20313331363432.roa (hash: Om14eoHT5IhomeKnYkvjKpVL1HxviUxm8BBB1REH3/4=) 8: 3130332e3134382e37322e302f32332d3332203d3e20313331363432.roa (hash: OLaMU17HmXpsMBlzaeBhODO2N7nOliRaF32TUtfckJg=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/PNI/0/9F4621BE2CEB15DD74809D52692588598490FABF.crl rsync://rpkica.twnic.tw/rpki/PNI/0/9F4621BE2CEB15DD74809D52692588598490FABF.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9F4621BE2CEB15DD74809D52692588598490FABF.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 11:04:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:12:1b:68:2a:f9:c9:8b:ea:a2:93:21:18:5f:a4:18:26:50:50:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F4621BE2CEB15DD74809D52692588598490FABF Validity Not Before: Jul 23 09:07:06 2026 GMT Not After : Jul 24 11:04:06 2026 GMT Subject: CN=9DC28C54D09A56038A5D4372B33FF62272A0472E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:69:63:27:5e:41:cf:67:c2:ba:85:b4:4d:f9: 2c:40:59:78:28:a0:15:27:f2:d6:58:52:15:87:5c: 96:df:66:08:7c:42:4d:df:4c:16:f1:c8:15:63:74: 4f:a5:7b:2b:56:b3:2b:aa:86:db:48:40:4c:4d:0f: 90:81:05:b4:8c:e3:af:f6:19:f0:86:11:06:5e:bf: b8:b3:77:ec:e0:8c:35:80:b3:e4:4c:ee:82:85:95: c7:27:19:4b:31:ee:7b:6c:09:26:e8:0b:e0:88:03: 24:23:a1:1a:6f:d8:45:00:cb:cb:e9:41:7b:9f:ec: e0:07:eb:3a:30:e7:c8:4e:b2:60:8b:37:57:61:5d: c8:a2:f5:e9:4d:be:a1:58:5e:84:37:f6:75:31:5a: d8:ef:b5:2b:ef:28:5f:a2:45:14:0e:34:76:2c:cd: d7:0e:6b:10:25:40:05:af:87:cd:5a:14:09:30:3a: 51:2c:5d:f7:cf:6b:ae:e5:6a:f8:a5:48:38:41:3a: 35:90:28:48:3e:20:ce:7d:72:9e:95:86:1b:1c:21: 9d:67:c2:23:f2:3b:69:eb:c8:fe:b5:b0:cf:82:39: 2d:58:70:c5:bb:85:e8:01:78:dc:02:cc:fb:ae:99: 4e:c3:0c:a4:df:51:6f:1c:d2:97:d9:40:05:e9:2d: e4:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:C2:8C:54:D0:9A:56:03:8A:5D:43:72:B3:3F:F6:22:72:A0:47:2E X509v3 Authority Key Identifier: keyid:9F:46:21:BE:2C:EB:15:DD:74:80:9D:52:69:25:88:59:84:90:FA:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/PNI/0/9F4621BE2CEB15DD74809D52692588598490FABF.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9F4621BE2CEB15DD74809D52692588598490FABF.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PNI/0/9F4621BE2CEB15DD74809D52692588598490FABF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d2:b5:0a:e9:79:b9:34:22:67:2c:f7:67:c9:5d:99:e5:e1:80: 1c:3d:c2:7d:97:1a:7f:40:e9:34:bf:e4:78:7a:70:b4:5d:06: 28:48:6d:0e:49:86:22:d3:fb:58:f4:5c:e5:05:2b:59:09:d6: c5:27:0c:9e:8b:0b:c9:8f:ac:e2:70:e0:85:ad:d6:d2:bb:2a: 34:fa:48:40:ca:be:35:1e:3e:6a:d9:d6:f8:84:33:52:36:3c: 5d:de:6a:d1:32:72:19:ee:a0:e0:2c:ff:34:f7:38:3c:08:5b: d5:b0:ff:11:7a:ad:e6:4e:cc:55:af:d4:74:3a:05:16:09:18: 1e:a8:49:3f:73:52:33:52:f3:a1:90:1d:96:ec:89:95:a1:56: 0c:a3:d4:56:b0:25:6a:f9:c2:c3:f5:49:d3:cb:20:1b:f4:a4: e1:d2:9c:7f:63:ce:08:bd:4e:a5:5e:c3:e5:cd:32:4b:de:bd: 17:a1:57:c8:5d:fd:58:31:f7:9a:66:2d:57:ac:3e:f5:2d:a0: bb:95:66:0e:24:7f:e5:89:01:dd:cb:9b:37:10:fc:38:ac:af: 02:8b:92:83:29:e6:07:00:76:53:af:d5:c5:85:7a:df:03:09: 67:97:26:c8:76:4e:5f:8a:85:00:c9:5d:06:29:cc:88:9f:e5: dc:eb:0f:fe -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUcRIbaCr5yYvqopMhGF+kGCZQUDUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY0NjIxQkUyQ0VCMTVERDc0ODA5RDUyNjkyNTg4NTk4 NDkwRkFCRjAeFw0yNjA3MjMwOTA3MDZaFw0yNjA3MjQxMTA0MDZaMDMxMTAvBgNV BAMTKDlEQzI4QzU0RDA5QTU2MDM4QTVENDM3MkIzM0ZGNjIyNzJBMDQ3MkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9aWMnXkHPZ8K6hbRN+SxAWXgo oBUn8tZYUhWHXJbfZgh8Qk3fTBbxyBVjdE+leytWsyuqhttIQExND5CBBbSM46/2 GfCGEQZev7izd+zgjDWAs+RM7oKFlccnGUsx7ntsCSboC+CIAyQjoRpv2EUAy8vp QXuf7OAH6zow58hOsmCLN1dhXcii9elNvqFYXoQ39nUxWtjvtSvvKF+iRRQONHYs zdcOaxAlQAWvh81aFAkwOlEsXffPa67lavilSDhBOjWQKEg+IM59cp6VhhscIZ1n wiPyO2nryP61sM+COS1YcMW7hegBeNwCzPuumU7DDKTfUW8c0pfZQAXpLeQDAgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUncKMVNCaVgOKXUNysz/2InKgRy4wHwYDVR0j BBgwFoAUn0YhvizrFd10gJ1SaSWIWYSQ+r8wDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvUE5JLzAv OUY0NjIxQkUyQ0VCMTVERDc0ODA5RDUyNjkyNTg4NTk4NDkwRkFCRi5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS85RjQ2MjFCRTJDRUIxNURENzQ4MDlENTI2OTI1ODg1 OTg0OTBGQUJGLmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvUE5JLzAvOUY0NjIxQkUyQ0VCMTVERDc0 ODA5RDUyNjkyNTg4NTk4NDkwRkFCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBANK1Cul5uTQiZyz3Z8ld meXhgBw9wn2XGn9A6TS/5Hh6cLRdBihIbQ5JhiLT+1j0XOUFK1kJ1sUnDJ6LC8mP rOJw4IWt1tK7KjT6SEDKvjUePmrZ1viEM1I2PF3eatEychnuoOAs/zT3ODwIW9Ww /xF6reZOzFWv1HQ6BRYJGB6oST9zUjNS86GQHZbsiZWhVgyj1FawJWr5wsP1SdPL IBv0pOHSnH9jzgi9TqVew+XNMkvevRehV8hd/Vgx95pmLVesPvUtoLuVZg4kf+WJ Ad3LmzcQ/DisrwKLkoMp5gcAdlOv1cWFet8DCWeXJsh2Tl+KhQDJXQYpzIif5dzr D/4= -----END CERTIFICATE-----Generated at Fri Jul 24 02:41:51 2026 by rpki-client