$ rpki-client -vvf rpkica.twnic.tw/rpki/CTII/0/96EC32418F5DB7D272132F4F615EEE14EBFCC789.mft File: 96EC32418F5DB7D272132F4F615EEE14EBFCC789.mft (raw, json) Hash identifier: 0ooaUDaxX7JVE1pthvo8R7s9PByissFnfDUgmU17haw= Subject key identifier: AD:B6:6D:79:7D:C4:69:25:8D:3F:7E:5C:3F:9A:C4:0B:1E:FE:6C:84 Authority key identifier: 96:EC:32:41:8F:5D:B7:D2:72:13:2F:4F:61:5E:EE:14:EB:FC:C7:89 Certificate issuer: /CN=96EC32418F5DB7D272132F4F615EEE14EBFCC789 Certificate serial: 0445D2D5D633A34A2AC5053D8427B197ED392325 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/96EC32418F5DB7D272132F4F615EEE14EBFCC789.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CTII/0/96EC32418F5DB7D272132F4F615EEE14EBFCC789.mft Manifest number: 30 Signing time: Fri 12 Jun 2026 21:48:11 +0000 Manifest this update: Fri 12 Jun 2026 21:43:11 +0000 Manifest next update: Sat 13 Jun 2026 22:28:11 +0000 Files and hashes: 1: 3130332e3133302e3235312e302f32342d3234203d3e20313333393438.roa (hash: GsOYmJWvRu80jQVFqMYosfTSy2X9/h0xqknASB9kz4E=) 2: 3130332e3133302e3234392e302f32342d3234203d3e20393834.roa (hash: Nd+vxwk113iKIVjwRMjJ+fIaoSaKjb89bytlnk2AR6I=) 3: 3130332e3133302e3235302e302f32342d3234203d3e20313333393438.roa (hash: t6zLUrqLxN1841JGifIZEELL55tSwuOCwFhWjmskA2M=) 4: 3130332e3133302e3234382e302f32342d3234203d3e20313333393438.roa (hash: fD/ucDIm4GlZar7mmOLi7+OafDyoA/X6tjLQrmsYp4Q=) 5: 96EC32418F5DB7D272132F4F615EEE14EBFCC789.crl (hash: A2dETTac7RvZ5vI3fGvBN8iEu9Zc10NRVEQ30j0iT50=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CTII/0/96EC32418F5DB7D272132F4F615EEE14EBFCC789.crl rsync://rpkica.twnic.tw/rpki/CTII/0/96EC32418F5DB7D272132F4F615EEE14EBFCC789.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/96EC32418F5DB7D272132F4F615EEE14EBFCC789.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 22:28:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:45:d2:d5:d6:33:a3:4a:2a:c5:05:3d:84:27:b1:97:ed:39:23:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96EC32418F5DB7D272132F4F615EEE14EBFCC789 Validity Not Before: Jun 12 21:43:11 2026 GMT Not After : Jun 13 22:28:11 2026 GMT Subject: CN=ADB66D797DC469258D3F7E5C3F9AC40B1EFE6C84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:2c:42:b7:4c:ef:dc:68:28:cb:b0:f0:f1:f1: 99:5a:d2:98:79:32:43:6a:4d:d2:0f:b3:da:ea:30: 6d:c6:82:c0:d2:b1:01:94:bd:58:41:4b:be:a0:c7: a0:64:e9:49:0c:c7:f1:41:e6:9c:12:34:d4:1b:d5: a6:00:7a:4f:eb:25:aa:be:8b:59:f7:31:71:f5:10: 10:fe:19:c1:0e:37:26:bf:42:d5:6d:0b:1a:cd:79: 76:cf:f2:ea:d7:03:fc:3e:35:29:63:15:80:83:4b: a0:b5:61:7d:65:71:50:54:b3:41:27:6b:00:6f:8c: c7:cb:7d:05:53:1c:e1:c2:5d:68:73:ca:dd:0d:13: 6c:0a:db:aa:4f:10:f1:4d:d6:51:be:27:8e:0b:2f: 5d:c0:e2:c4:e9:1e:e6:3d:26:3b:bb:7c:c1:d0:88: 2e:40:13:2c:7f:85:69:0e:7b:59:9d:75:45:28:9a: 0b:1f:e3:4b:96:dd:5a:2b:58:b0:06:dc:db:5c:cc: 5c:fa:99:97:f1:ca:42:24:68:c2:a1:61:cf:54:1f: 30:7c:19:31:ac:3a:a1:e7:ae:c1:14:6e:93:17:5a: e3:ad:e7:9c:d4:f2:b4:3b:40:fa:51:11:db:64:2f: f0:42:e7:fc:49:4f:36:81:07:21:52:a1:c9:28:b9: d0:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:B6:6D:79:7D:C4:69:25:8D:3F:7E:5C:3F:9A:C4:0B:1E:FE:6C:84 X509v3 Authority Key Identifier: keyid:96:EC:32:41:8F:5D:B7:D2:72:13:2F:4F:61:5E:EE:14:EB:FC:C7:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CTII/0/96EC32418F5DB7D272132F4F615EEE14EBFCC789.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/96EC32418F5DB7D272132F4F615EEE14EBFCC789.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CTII/0/96EC32418F5DB7D272132F4F615EEE14EBFCC789.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:0a:16:ab:8e:78:d2:79:15:a9:0a:37:97:cd:0c:4a:94:8b: f3:51:37:b1:33:7c:51:a9:43:7e:f2:f4:96:8f:39:f3:9f:a7: 69:3c:57:9f:e7:67:6d:61:91:71:3c:c0:68:11:bc:9b:6e:e6: 26:2e:99:60:c1:44:ec:1c:e0:f6:e3:7d:38:07:0d:3c:c5:30: 30:da:6f:d4:07:c0:eb:f1:6f:13:f4:7f:e3:09:7a:5f:3e:63: e6:5b:f0:51:29:65:87:90:7d:dd:23:ab:a3:15:34:c6:e2:ba: 21:3e:04:27:91:2d:83:30:6f:de:4e:1f:ab:1c:58:75:4f:02: fd:34:d3:83:8d:fc:63:cd:ab:09:ab:09:0c:df:cd:48:84:9f: 6c:58:a3:a2:d1:80:76:ca:cc:ad:77:b0:8c:00:9b:30:9d:b3: bf:da:22:2e:7e:0f:67:67:b6:b2:bb:73:4b:b7:9d:29:9e:b3: 56:92:8f:ff:05:41:f6:16:0a:da:eb:e8:e5:3f:c2:bd:7c:bb: 1d:c4:98:48:64:92:8a:6b:dc:71:ec:64:a3:51:71:0a:9c:5c: be:91:4e:48:ca:46:08:f2:0d:3c:83:6a:1d:60:d4:5c:23:87: 09:66:81:94:37:a3:67:96:79:52:21:58:f1:9a:ac:0d:94:a8: 17:43:e0:16 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUBEXS1dYzo0oqxQU9hCexl+05IyUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTZFQzMyNDE4RjVEQjdEMjcyMTMyRjRGNjE1RUVFMTRF QkZDQzc4OTAeFw0yNjA2MTIyMTQzMTFaFw0yNjA2MTMyMjI4MTFaMDMxMTAvBgNV BAMTKEFEQjY2RDc5N0RDNDY5MjU4RDNGN0U1QzNGOUFDNDBCMUVGRTZDODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfLEK3TO/caCjLsPDx8Zla0ph5 MkNqTdIPs9rqMG3GgsDSsQGUvVhBS76gx6Bk6UkMx/FB5pwSNNQb1aYAek/rJaq+ i1n3MXH1EBD+GcEONya/QtVtCxrNeXbP8urXA/w+NSljFYCDS6C1YX1lcVBUs0En awBvjMfLfQVTHOHCXWhzyt0NE2wK26pPEPFN1lG+J44LL13A4sTpHuY9Jju7fMHQ iC5AEyx/hWkOe1mddUUomgsf40uW3VorWLAG3NtczFz6mZfxykIkaMKhYc9UHzB8 GTGsOqHnrsEUbpMXWuOt55zU8rQ7QPpREdtkL/BC5/xJTzaBByFSockoudBlAgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQUrbZteX3EaSWNP35cP5rECx7+bIQwHwYDVR0j BBgwFoAUluwyQY9dt9JyEy9PYV7uFOv8x4kwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ1RJSS8w Lzk2RUMzMjQxOEY1REI3RDI3MjEzMkY0RjYxNUVFRTE0RUJGQ0M3ODkuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvOTZFQzMyNDE4RjVEQjdEMjcyMTMyRjRGNjE1RUVF MTRFQkZDQzc4OS5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0NUSUkvMC85NkVDMzI0MThGNURCN0Qy NzIxMzJGNEY2MTVFRUUxNEVCRkNDNzg5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgAoWq4540nkVqQo3 l80MSpSL81E3sTN8UalDfvL0lo8585+naTxXn+dnbWGRcTzAaBG8m27mJi6ZYMFE 7Bzg9uN9OAcNPMUwMNpv1AfA6/FvE/R/4wl6Xz5j5lvwUSllh5B93SOroxU0xuK6 IT4EJ5EtgzBv3k4fqxxYdU8C/TTTg438Y82rCasJDN/NSISfbFijotGAdsrMrXew jACbMJ2zv9oiLn4PZ2e2srtzS7edKZ6zVpKP/wVB9hYK2uvo5T/CvXy7HcSYSGSS imvccexko1FxCpxcvpFOSMpGCPINPINqHWDUXCOHCWaBlDejZ5Z5UiFY8ZqsDZSo F0PgFg== -----END CERTIFICATE-----Generated at Sat Jun 13 10:16:28 2026 by rpki-client