$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HCCG_HCEB/eLoo5i-P9kj1tXa0uDo0sBt_Ntg.mft File: eLoo5i-P9kj1tXa0uDo0sBt_Ntg.mft (raw, json) Hash identifier: AJS/YJfCqwNHsTiMkMJ+UJddRPJpQgGng6JC69suK7s= Subject key identifier: CF:71:0E:3B:E8:A1:7B:F5:D9:1E:4A:71:47:DD:12:A4:67:15:77:5B Authority key identifier: 78:BA:28:E6:2F:8F:F6:48:F5:B5:76:B4:B8:3A:34:B0:1B:7F:36:D8 Certificate issuer: /CN=78BA28E62F8FF648F5B576B4B83A34B01B7F36D8 Certificate serial: 020E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/eLoo5i-P9kj1tXa0uDo0sBt_Ntg.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HCCG_HCEB/eLoo5i-P9kj1tXa0uDo0sBt_Ntg.mft Manifest number: 020D Signing time: Fri 27 Mar 2026 08:28:09 +0000 Manifest this update: Fri 27 Mar 2026 08:28:09 +0000 Manifest next update: Fri 27 Mar 2026 14:28:09 +0000 Files and hashes: 1: GleMOXbyZ4LZrEAdT5futGqOook.roa (hash: +QXQ62kPCzjmgNTzUSxGPu0Va2XsgayAsqrPHNgs9H0=) 2: eLoo5i-P9kj1tXa0uDo0sBt_Ntg.crl (hash: zgB95YZ0df0FUtKae+EI8wWILbMkKIRAmZpSZkQnSmk=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HCCG_HCEB/eLoo5i-P9kj1tXa0uDo0sBt_Ntg.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HCCG_HCEB/eLoo5i-P9kj1tXa0uDo0sBt_Ntg.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/eLoo5i-P9kj1tXa0uDo0sBt_Ntg.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 14:28:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 526 (0x20e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78BA28E62F8FF648F5B576B4B83A34B01B7F36D8 Validity Not Before: Mar 27 08:28:09 2026 GMT Not After : Dec 4 15:30:18 2026 GMT Subject: CN=CF710E3BE8A17BF5D91E4A7147DD12A46715775B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b2:62:eb:67:f6:75:6c:85:05:ca:c5:4a:9d: 8f:88:a8:87:78:ee:f9:fe:93:61:b5:7c:45:5e:de: 4e:7d:ab:71:a8:d4:bd:bf:61:82:44:4c:47:11:82: f4:28:6b:7e:97:84:d3:5e:10:ea:90:58:23:ef:d7: 9f:8d:9e:20:3c:7f:99:88:e4:3a:27:5c:14:2e:47: 50:ee:f2:dc:1a:d1:9a:95:81:71:80:59:7d:24:15: ff:03:6f:df:ef:ae:3a:32:c7:63:3c:3c:75:ce:76: 50:52:ea:1b:8d:3e:02:3c:e6:14:da:db:6f:18:7a: dc:88:ab:2e:f1:3b:fa:56:2b:70:3c:53:89:9d:91: 44:6e:a3:18:45:18:3e:76:b1:61:b1:ac:df:f7:08: ab:3f:6f:58:71:dd:29:c1:13:d6:b5:45:56:34:c9: 2d:3a:44:80:67:2b:f3:c8:fc:f5:f6:17:dc:6c:49: f8:7c:36:e2:4a:77:ce:5f:55:a3:fe:5a:8f:73:1d: e3:7d:03:e1:f3:d9:6e:1f:dd:f4:79:23:06:a6:1d: 91:ef:c1:0b:bf:11:95:0e:d3:65:ef:91:71:97:80: 1d:c3:a5:2e:cf:c4:96:e8:43:8e:df:2f:f1:fd:55: 40:f1:b1:e7:73:91:9e:07:99:bd:27:83:8e:dc:7a: a8:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:71:0E:3B:E8:A1:7B:F5:D9:1E:4A:71:47:DD:12:A4:67:15:77:5B X509v3 Authority Key Identifier: keyid:78:BA:28:E6:2F:8F:F6:48:F5:B5:76:B4:B8:3A:34:B0:1B:7F:36:D8 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HCCG_HCEB/eLoo5i-P9kj1tXa0uDo0sBt_Ntg.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/eLoo5i-P9kj1tXa0uDo0sBt_Ntg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HCCG_HCEB/eLoo5i-P9kj1tXa0uDo0sBt_Ntg.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:68:25:90:2a:7b:0a:ac:29:05:69:77:56:cc:1a:55:18:5e: 88:a5:f9:a0:84:43:7e:32:7c:c3:53:a3:0f:43:62:2a:00:55: 89:dd:0a:e5:65:ca:49:e4:86:d1:15:5f:e6:b6:62:ed:87:42: d6:9b:3d:0b:64:e5:60:a3:f9:c9:e8:c2:a9:00:9f:3d:8e:5e: 73:e9:4c:3c:19:e1:1a:14:af:68:8d:34:c9:26:15:49:c8:48: 35:7c:7b:1e:0e:91:c2:34:5b:fd:00:ac:f9:1f:15:a3:68:5c: 01:1c:02:5e:77:b3:8a:27:d6:98:d3:bb:12:d1:1a:51:05:b2: 3a:1d:ee:a1:7f:e7:7f:ab:fb:c2:90:28:e5:34:4a:11:e0:a2: c1:01:b5:0d:7b:b2:b0:1d:4e:ad:e0:3a:2c:fd:7b:19:f0:6f: 46:00:5d:fe:66:65:39:e7:42:cf:de:75:3b:a0:7f:c5:44:cd: 1a:f6:fa:e7:e9:20:19:a6:7f:60:81:8f:ba:1a:f4:a7:92:5f: 46:1c:88:ab:d9:d1:f6:88:d2:18:8e:86:99:2e:56:0d:7f:8c: 4f:3e:96:3e:67:e6:37:3e:d7:c3:37:51:01:02:3c:e1:5f:08: c3:a3:07:92:b6:12:69:92:30:1c:50:38:28:e5:43:8d:dd:28: 24:68:25:ec -----BEGIN CERTIFICATE----- MIIE8TCCA9mgAwIBAgICAg4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzhC QTI4RTYyRjhGRjY0OEY1QjU3NkI0QjgzQTM0QjAxQjdGMzZEODAeFw0yNjAzMjcw ODI4MDlaFw0yNjEyMDQxNTMwMThaMDMxMTAvBgNVBAMTKENGNzEwRTNCRThBMTdC RjVEOTFFNEE3MTQ3REQxMkE0NjcxNTc3NUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCZsmLrZ/Z1bIUFysVKnY+IqId47vn+k2G1fEVe3k59q3Go1L2/ YYJETEcRgvQoa36XhNNeEOqQWCPv15+NniA8f5mI5DonXBQuR1Du8twa0ZqVgXGA WX0kFf8Db9/vrjoyx2M8PHXOdlBS6huNPgI85hTa228YetyIqy7xO/pWK3A8U4md kURuoxhFGD52sWGxrN/3CKs/b1hx3SnBE9a1RVY0yS06RIBnK/PI/PX2F9xsSfh8 NuJKd85fVaP+Wo9zHeN9A+Hz2W4f3fR5IwamHZHvwQu/EZUO02XvkXGXgB3DpS7P xJboQ47fL/H9VUDxsedzkZ4Hmb0ng47ceqjFAgMBAAGjggINMIICCTAdBgNVHQ4E FgQUz3EOO+ihe/XZHkpxR90SpGcVd1swHwYDVR0jBBgwFoAUeLoo5i+P9kj1tXa0 uDo0sBt/NtgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSENDR19I Q0VCL2VMb281aS1QOWtqMXRYYTB1RG8wc0J0X050Zy5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvZUxvbzVpLVA5a2oxdFhhMHVEbzBzQnRfTnRnLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSENDR19IQ0VCL2VMb281aS1QOWtq MXRYYTB1RG8wc0J0X050Zy5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAh BggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUA A4IBAQB6aCWQKnsKrCkFaXdWzBpVGF6IpfmghEN+MnzDU6MPQ2IqAFWJ3QrlZcpJ 5IbRFV/mtmLth0LWmz0LZOVgo/nJ6MKpAJ89jl5z6Uw8GeEaFK9ojTTJJhVJyEg1 fHseDpHCNFv9AKz5HxWjaFwBHAJed7OKJ9aY07sS0RpRBbI6He6hf+d/q/vCkCjl NEoR4KLBAbUNe7KwHU6t4Dos/XsZ8G9GAF3+ZmU550LP3nU7oH/FRM0a9vrn6SAZ pn9ggY+6GvSnkl9GHIir2dH2iNIYjoaZLlYNf4xPPpY+Z+Y3PtfDN1EBAjzhXwjD oweSthJpkjAcUDgo5UON3SgkaCXs -----END CERTIFICATE-----Generated at Fri Mar 27 11:30:15 2026 by rpki-client