$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/tDIP1437ak0ckjIveUlmuFJd_dI.mft File: tDIP1437ak0ckjIveUlmuFJd_dI.mft (raw, json) Hash identifier: S99am8YmAZ+n98zbewHnU5LVdIJSjmZpJfRHnY7Wgng= Subject key identifier: 1F:A6:EC:AF:83:C3:9B:5F:FD:E3:AC:1D:AF:FC:A2:78:0F:9A:71:E9 Authority key identifier: B4:32:0F:D7:8D:FB:6A:4D:1C:92:32:2F:79:49:66:B8:52:5D:FD:D2 Certificate issuer: /CN=B4320FD78DFB6A4D1C92322F794966B8525DFDD2 Certificate serial: 5B10 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tDIP1437ak0ckjIveUlmuFJd_dI.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/tDIP1437ak0ckjIveUlmuFJd_dI.mft Manifest number: 5ACB Signing time: Thu 26 Mar 2026 10:58:30 +0000 Manifest this update: Thu 26 Mar 2026 10:58:29 +0000 Manifest next update: Sat 28 Mar 2026 10:58:29 +0000 Files and hashes: 1: A-Mpo5lGCGkiCmz2I75EzH7H4Pg.roa (hash: Xat3W8LVqfZIhGVNVDHM1dDtTgwgqAiYNdM45DXgQB8=) 2: DR2DukQY8qyY5rWH2leFHpGYhCE.roa (hash: lmDldo1DiQ9RvynogVmjoFQu2/tJB6dTCeqcCQCjMEg=) 3: Zp_zK3yrpptl8yExI7ivKZWT6yM.roa (hash: Zd3y1rYmCImc+X1REx1omkY972AZTE3lvPFRqs70r2w=) 4: cE-KGBoHDTDeIuel3Xtkm7uaLVk.roa (hash: ClROMiwNwkqKR8uZXhFrlJraar+33eQ4u1saXlpDUnQ=) 5: dl7xpka3J9MfVrzjVNhbhRkuO4s.roa (hash: CRltAB2hxU5SgHTDYMJE7teti6QORSUNLMkXG1AL/EM=) 6: qPtRE2RicqHDIIbRUceeq1G248Q.roa (hash: yIg2xc4B5GY4bxs3VGyvaguCdyC26v0DOu6EzgrdFM8=) 7: ru6lQnJqGBo31IH4LvVZaH4Fwcs.roa (hash: O5zSbWgxSDvr/PYw+u1eZVycS8QVwm6W/x93U3VHz/8=) 8: tDIP1437ak0ckjIveUlmuFJd_dI.crl (hash: MwtezDPCyWESdKfMhXu43sAuppZnZw/bxOozQLks0mc=) 9: xE4mgJV7Dl0DKrKZQnlm-Lm5TpQ.roa (hash: bp0fEUFJXcyG52ugspAPP08M7fvGLZZfr6eVOmgym6M=) 10: zezNjefkzhHpsDqT36XUHnURy6A.roa (hash: I4t6BAkQAP5xEbjKi3E04Npy81/CKcNmTeF/polgEx8=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/tDIP1437ak0ckjIveUlmuFJd_dI.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/tDIP1437ak0ckjIveUlmuFJd_dI.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/tDIP1437ak0ckjIveUlmuFJd_dI.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 03:59:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23312 (0x5b10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4320FD78DFB6A4D1C92322F794966B8525DFDD2 Validity Not Before: Mar 26 10:58:29 2026 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=1FA6ECAF83C39B5FFDE3AC1DAFFCA2780F9A71E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a2:13:73:54:80:9b:39:15:8d:ff:0d:64:6a: 90:d9:41:d9:ad:16:31:95:96:25:c1:98:68:d7:a8: b5:50:a9:f6:8a:81:4f:87:18:dc:40:89:24:8c:09: cb:ab:94:b2:e0:a6:73:1c:3a:e4:e9:bc:45:69:95: 8d:61:db:a0:64:cc:68:b2:f5:d6:29:cd:96:51:fa: 8d:f9:64:84:f8:ce:06:d5:42:79:4e:f1:50:f4:91: 9d:69:6e:68:9b:46:08:4b:fd:46:73:c8:79:31:2b: 41:7a:fd:d7:c4:b5:e3:93:b2:6a:75:0f:16:76:ef: 7e:26:51:96:60:6d:48:c3:49:5c:17:68:a6:1a:b9: f0:e3:7e:ac:c3:fd:7b:64:4d:ff:0d:f0:52:cb:fe: bc:b7:9d:73:40:ac:32:ff:4b:64:b5:db:f7:f9:21: 25:30:6e:3b:61:23:0c:1c:5b:f1:f5:f2:86:ff:84: 59:30:21:6a:11:ac:17:fb:f7:d5:1b:6c:76:94:81: d9:72:1d:b4:8a:a6:48:75:95:72:66:f1:25:41:c0: 75:82:45:8d:b6:ef:f7:07:a7:fd:e3:a6:e1:63:19: 29:d1:30:69:57:49:e3:36:07:c8:5e:ac:b0:12:3a: 64:35:fc:33:02:9f:c1:29:d7:c5:20:4e:eb:82:a2: 66:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:A6:EC:AF:83:C3:9B:5F:FD:E3:AC:1D:AF:FC:A2:78:0F:9A:71:E9 X509v3 Authority Key Identifier: keyid:B4:32:0F:D7:8D:FB:6A:4D:1C:92:32:2F:79:49:66:B8:52:5D:FD:D2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/tDIP1437ak0ckjIveUlmuFJd_dI.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tDIP1437ak0ckjIveUlmuFJd_dI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/tDIP1437ak0ckjIveUlmuFJd_dI.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:b4:38:0b:d5:06:3a:fc:a4:a2:62:6e:0f:3c:fc:57:6f:41: 52:4e:cc:3a:1c:1d:22:f9:6a:f0:64:a1:27:06:da:3d:88:45: d5:a4:1f:5f:1e:e3:98:37:5e:ec:aa:0a:62:da:74:39:af:30: 1c:fe:0d:22:04:aa:24:34:04:f5:83:df:d2:9f:be:04:a4:78: 9f:96:c4:71:24:cf:fa:1a:32:04:2b:36:06:42:5c:69:d9:d0: 5a:7a:23:29:2f:7c:44:73:e6:17:87:4c:48:2d:cd:9d:84:c4: 20:3f:b0:de:22:63:11:24:d5:6a:a2:a7:d0:5c:42:cd:34:a2: 8e:22:7f:78:2d:de:af:a8:a7:b5:85:84:d7:05:3f:d5:6d:e6: 5c:78:30:87:bf:4a:c9:c7:88:2e:ba:6b:60:9e:55:cb:5f:16: d2:e8:8b:46:54:31:f0:c7:77:06:2e:21:4f:40:a8:b1:a6:1e: fe:b0:36:04:8b:bc:d2:62:5b:20:ba:a3:78:74:2f:f5:9b:98: ef:2b:6f:b3:d6:52:e4:5f:84:bf:3f:02:7d:e9:28:d6:55:ba: 97:09:ac:ec:6b:6e:c0:5b:5c:0a:e5:67:fc:32:a4:af:6d:de: 02:7c:7b:f9:ac:59:7d:0c:9f:db:46:c4:3a:54:a7:28:2f:02: 5d:76:8b:76 -----BEGIN CERTIFICATE----- MIIE7TCCA9WgAwIBAgICWxAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjQz MjBGRDc4REZCNkE0RDFDOTIzMjJGNzk0OTY2Qjg1MjVERkREMjAeFw0yNjAzMjYx MDU4MjlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDFGQTZFQ0FGODNDMzlC NUZGREUzQUMxREFGRkNBMjc4MEY5QTcxRTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJohNzVICbORWN/w1kapDZQdmtFjGVliXBmGjXqLVQqfaKgU+H GNxAiSSMCcurlLLgpnMcOuTpvEVplY1h26BkzGiy9dYpzZZR+o35ZIT4zgbVQnlO 8VD0kZ1pbmibRghL/UZzyHkxK0F6/dfEteOTsmp1DxZ2734mUZZgbUjDSVwXaKYa ufDjfqzD/XtkTf8N8FLL/ry3nXNArDL/S2S12/f5ISUwbjthIwwcW/H18ob/hFkw IWoRrBf799UbbHaUgdlyHbSKpkh1lXJm8SVBwHWCRY227/cHp/3jpuFjGSnRMGlX SeM2B8herLASOmQ1/DMCn8Ep18UgTuuComaRAgMBAAGjggIJMIICBTAdBgNVHQ4E FgQUH6bsr4PDm1/946wdr/yieA+acekwHwYDVR0jBBgwFoAUtDIP1437ak0ckjIv eUlmuFJd/dIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTlRDQ0FU Vi90RElQMTQzN2FrMGNrakl2ZVVsbXVGSmRfZEkuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL3RESVAxNDM3YWswY2tqSXZlVWxtdUZKZF9kSS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL05UQ0NBVFYvdERJUDE0MzdhazBja2pJ dmVVbG11RkpkX2RJLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsG AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEB AEC0OAvVBjr8pKJibg88/FdvQVJOzDocHSL5avBkoScG2j2IRdWkH18e45g3Xuyq CmLadDmvMBz+DSIEqiQ0BPWD39KfvgSkeJ+WxHEkz/oaMgQrNgZCXGnZ0Fp6Iykv fERz5heHTEgtzZ2ExCA/sN4iYxEk1Wqip9BcQs00oo4if3gt3q+op7WFhNcFP9Vt 5lx4MIe/SsnHiC66a2CeVctfFtLoi0ZUMfDHdwYuIU9AqLGmHv6wNgSLvNJiWyC6 o3h0L/WbmO8rb7PWUuRfhL8/An3pKNZVupcJrOxrbsBbXArlZ/wypK9t3gJ8e/ms WX0Mn9tGxDpUpygvAl12i3Y= -----END CERTIFICATE-----Generated at Fri Mar 27 00:32:46 2026 by rpki-client