$ rpki-client -vvf rpkica.twnic.tw/rpki/CTII/0/96EC32418F5DB7D272132F4F615EEE14EBFCC789.mft File: 96EC32418F5DB7D272132F4F615EEE14EBFCC789.mft (raw, json) Hash identifier: wqmcNAm37JgrGoOlPNNZZnf+lieBZS6AKRf1PCxBFaI= Subject key identifier: F0:5B:63:76:CC:66:90:89:DC:D1:A3:F5:D6:0D:B8:E3:62:F0:EC:87 Authority key identifier: 96:EC:32:41:8F:5D:B7:D2:72:13:2F:4F:61:5E:EE:14:EB:FC:C7:89 Certificate issuer: /CN=96EC32418F5DB7D272132F4F615EEE14EBFCC789 Certificate serial: 04A00F538F9A79B9EAD81BD48C1AD0FDF973B4EC Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/96EC32418F5DB7D272132F4F615EEE14EBFCC789.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CTII/0/96EC32418F5DB7D272132F4F615EEE14EBFCC789.mft Manifest number: 72 Signing time: Tue 28 Jul 2026 12:13:51 +0000 Manifest this update: Tue 28 Jul 2026 12:08:51 +0000 Manifest next update: Wed 29 Jul 2026 16:04:51 +0000 Files and hashes: 1: 96EC32418F5DB7D272132F4F615EEE14EBFCC789.crl (hash: +d9PLTsQ+dhF2hyn166O1AG5PscUAho1cNQ/L9XWa58=) 2: 3130332e3133302e3234392e302f32342d3234203d3e20323033303133.roa (hash: pqABpk3IMEQeCPJ1YCuMzE9VdO7tiwLb3Csx2ef6igs=) 3: 3130332e3133302e3235302e302f32332d3234203d3e20323033303133.roa (hash: qifQcmP7aY3KYLY0YWbHCpcdmaz7oenQE0L1tQ92F24=) 4: 3130332e3133302e3234382e302f32322d3234203d3e20323033303133.roa (hash: vdwflt80XSH+f+UsiqjaPJa3CG1W829xLEufTNoKgck=) 5: 3130332e3133302e3234392e302f32342d3234203d3e20393834.roa (hash: Nd+vxwk113iKIVjwRMjJ+fIaoSaKjb89bytlnk2AR6I=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CTII/0/96EC32418F5DB7D272132F4F615EEE14EBFCC789.crl rsync://rpkica.twnic.tw/rpki/CTII/0/96EC32418F5DB7D272132F4F615EEE14EBFCC789.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/96EC32418F5DB7D272132F4F615EEE14EBFCC789.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 07:22:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:a0:0f:53:8f:9a:79:b9:ea:d8:1b:d4:8c:1a:d0:fd:f9:73:b4:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96EC32418F5DB7D272132F4F615EEE14EBFCC789 Validity Not Before: Jul 28 12:08:51 2026 GMT Not After : Jul 29 16:04:51 2026 GMT Subject: CN=F05B6376CC669089DCD1A3F5D60DB8E362F0EC87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:55:b8:97:8d:4b:dd:2f:6e:e8:a1:eb:ab:c0: c6:7c:95:64:e9:99:eb:17:5f:3c:0b:ab:35:27:a1: ea:23:6c:0c:ba:e7:db:27:a8:57:3e:5b:5a:c4:f9: 9a:f8:8c:3d:ac:13:0b:4a:46:7a:ba:2f:32:4a:ef: 85:9b:36:99:e4:8c:8b:35:8d:ee:a5:7a:1c:74:1d: cf:15:3c:80:87:52:3c:ae:96:a1:c7:4d:e4:e5:59: 47:77:2f:aa:5d:06:71:2f:91:6e:27:47:26:b9:14: 72:1e:99:23:35:aa:71:2f:72:ca:b9:f6:e3:bd:4c: b6:ff:64:aa:73:9f:4f:47:e2:8a:b5:1c:dc:5f:a9: 31:5b:95:e2:7c:a4:d3:6b:12:04:4e:08:f7:54:7f: 18:7e:f9:a9:40:64:04:c7:cf:ad:71:e8:a2:d2:41: 68:0a:ec:42:65:3d:a9:0f:1c:a2:2f:6f:57:2c:f8: df:ef:79:f6:fd:63:07:c0:95:e4:5a:b1:fa:49:39: d8:8f:69:8f:98:f2:87:f5:43:bf:1e:2c:57:ce:3a: 56:bf:96:bc:18:ce:7e:f1:92:cf:95:d3:bf:08:74: 74:4d:1d:20:63:c7:6a:21:bf:9d:8a:ed:30:d5:26: 53:dc:1f:6e:c4:bf:eb:e0:14:27:f0:31:b9:3d:4f: 3a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:5B:63:76:CC:66:90:89:DC:D1:A3:F5:D6:0D:B8:E3:62:F0:EC:87 X509v3 Authority Key Identifier: keyid:96:EC:32:41:8F:5D:B7:D2:72:13:2F:4F:61:5E:EE:14:EB:FC:C7:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CTII/0/96EC32418F5DB7D272132F4F615EEE14EBFCC789.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/96EC32418F5DB7D272132F4F615EEE14EBFCC789.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CTII/0/96EC32418F5DB7D272132F4F615EEE14EBFCC789.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:30:b0:f7:a0:ea:0e:69:d9:97:34:03:50:4a:91:b4:13:04: 4d:43:d8:b9:b0:fd:45:3c:89:0f:ca:73:ad:ed:c8:c2:00:5e: 67:19:9c:79:00:aa:e6:e2:9f:74:9a:61:56:49:a1:f4:60:a2: 02:f5:1f:6a:0c:f8:4f:09:e2:e0:6f:0c:97:7d:a4:b6:a7:78: 7c:93:02:03:b0:5d:82:ae:60:ac:b2:41:db:9c:eb:46:a4:e6: 89:e0:ae:a9:b9:71:55:59:59:d0:c2:9e:07:8e:b3:c7:28:87: fa:22:bf:00:28:f0:02:ee:a0:56:57:a4:21:5d:3e:9a:43:08: 37:23:b4:bd:f4:14:b4:ee:ac:d3:df:36:7e:06:11:05:9a:74: 31:dc:56:9e:21:15:3b:d1:57:d2:49:b9:22:6a:e1:e2:5d:28: ca:41:3d:d1:2b:6a:87:48:ec:ab:69:cb:03:94:61:ab:3e:0c: 9e:0b:f0:15:10:54:e1:4b:ba:ea:08:52:de:57:be:9a:8e:c2: 67:0b:cd:1b:ab:05:06:71:e4:2d:1d:8e:02:8c:26:1a:98:07: 98:3f:24:eb:4e:0c:43:5a:7e:1c:60:7a:29:11:f4:59:ac:e9: 78:78:dc:0e:0f:be:43:85:d7:ca:91:cc:a1:94:ef:9a:6a:a4: 47:d7:9d:7d -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUBKAPU4+aebnq2BvUjBrQ/flztOwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTZFQzMyNDE4RjVEQjdEMjcyMTMyRjRGNjE1RUVFMTRF QkZDQzc4OTAeFw0yNjA3MjgxMjA4NTFaFw0yNjA3MjkxNjA0NTFaMDMxMTAvBgNV BAMTKEYwNUI2Mzc2Q0M2NjkwODlEQ0QxQTNGNUQ2MERCOEUzNjJGMEVDODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtVbiXjUvdL27ooeurwMZ8lWTp mesXXzwLqzUnoeojbAy659snqFc+W1rE+Zr4jD2sEwtKRnq6LzJK74WbNpnkjIs1 je6lehx0Hc8VPICHUjyulqHHTeTlWUd3L6pdBnEvkW4nRya5FHIemSM1qnEvcsq5 9uO9TLb/ZKpzn09H4oq1HNxfqTFbleJ8pNNrEgROCPdUfxh++alAZATHz61x6KLS QWgK7EJlPakPHKIvb1cs+N/vefb9YwfAleRasfpJOdiPaY+Y8of1Q78eLFfOOla/ lrwYzn7xks+V078IdHRNHSBjx2ohv52K7TDVJlPcH27Ev+vgFCfwMbk9TzqJAgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQU8FtjdsxmkInc0aP11g2442Lw7IcwHwYDVR0j BBgwFoAUluwyQY9dt9JyEy9PYV7uFOv8x4kwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ1RJSS8w Lzk2RUMzMjQxOEY1REI3RDI3MjEzMkY0RjYxNUVFRTE0RUJGQ0M3ODkuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvOTZFQzMyNDE4RjVEQjdEMjcyMTMyRjRGNjE1RUVF MTRFQkZDQzc4OS5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0NUSUkvMC85NkVDMzI0MThGNURCN0Qy NzIxMzJGNEY2MTVFRUUxNEVCRkNDNzg5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeTCw96DqDmnZlzQD UEqRtBMETUPYubD9RTyJD8pzre3IwgBeZxmceQCq5uKfdJphVkmh9GCiAvUfagz4 Twni4G8Ml32ktqd4fJMCA7Bdgq5grLJB25zrRqTmieCuqblxVVlZ0MKeB46zxyiH +iK/ACjwAu6gVlekIV0+mkMINyO0vfQUtO6s0982fgYRBZp0MdxWniEVO9FX0km5 Imrh4l0oykE90Stqh0jsq2nLA5Rhqz4MngvwFRBU4Uu66ghS3le+mo7CZwvNG6sF BnHkLR2OAowmGpgHmD8k604MQ1p+HGB6KRH0WazpeHjcDg++Q4XXypHMoZTvmmqk R9edfQ== -----END CERTIFICATE-----Generated at Tue Jul 28 22:40:51 2026 by rpki-client