$ rpki-client -vvvf rpkica.twnic.tw/rpki/CTII/0/96EC32418F5DB7D272132F4F615EEE14EBFCC789.mft File: 96EC32418F5DB7D272132F4F615EEE14EBFCC789.mft (raw, json) Hash identifier: 0NwFUArCI5BYwtGuGR8WUx2mSSvk/XCW1iIrHh4SdZQ= Subject key identifier: DC:FE:55:68:9E:73:5C:79:DA:A0:77:43:76:E5:FC:F0:43:44:50:92 Authority key identifier: 96:EC:32:41:8F:5D:B7:D2:72:13:2F:4F:61:5E:EE:14:EB:FC:C7:89 Certificate issuer: /CN=96EC32418F5DB7D272132F4F615EEE14EBFCC789 Certificate serial: 690E61A069D675DE5064B1E65D416B5E6F14878A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/96EC32418F5DB7D272132F4F615EEE14EBFCC789.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CTII/0/96EC32418F5DB7D272132F4F615EEE14EBFCC789.mft Manifest number: FC Signing time: Sun 08 Nov 2026 17:16:21 +0000 Manifest this update: Sun 08 Nov 2026 17:11:21 +0000 Manifest next update: Mon 09 Nov 2026 18:19:21 +0000 Files and hashes: 1: 96EC32418F5DB7D272132F4F615EEE14EBFCC789.crl (hash: 5luBeHklwUWbCLU20wrUmElFz6eTMERcdfBzq4QfxjI=) 2: 3130332e3133302e3234382e302f32322d3234203d3e20323033303133.roa (hash: vdwflt80XSH+f+UsiqjaPJa3CG1W829xLEufTNoKgck=) 3: 3130332e3133302e3235302e302f32332d3234203d3e20323033303133.roa (hash: qifQcmP7aY3KYLY0YWbHCpcdmaz7oenQE0L1tQ92F24=) 4: 3130332e3133302e3234392e302f32342d3234203d3e20393834.roa (hash: Nd+vxwk113iKIVjwRMjJ+fIaoSaKjb89bytlnk2AR6I=) 5: 3130332e3133302e3234392e302f32342d3234203d3e20323033303133.roa (hash: pqABpk3IMEQeCPJ1YCuMzE9VdO7tiwLb3Csx2ef6igs=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CTII/0/96EC32418F5DB7D272132F4F615EEE14EBFCC789.crl rsync://rpkica.twnic.tw/rpki/CTII/0/96EC32418F5DB7D272132F4F615EEE14EBFCC789.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/96EC32418F5DB7D272132F4F615EEE14EBFCC789.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 18:19:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:0e:61:a0:69:d6:75:de:50:64:b1:e6:5d:41:6b:5e:6f:14:87:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96EC32418F5DB7D272132F4F615EEE14EBFCC789 Validity Not Before: Nov 8 17:11:21 2026 GMT Not After : Nov 9 18:19:21 2026 GMT Subject: CN=DCFE55689E735C79DAA0774376E5FCF043445092 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:35:c3:ed:57:4a:49:2c:94:05:21:e1:d8:0f: 4b:31:75:9e:43:ed:b2:ba:7f:cc:08:77:d7:7d:1a: c3:81:9f:7f:97:b3:f2:0f:6f:2e:ef:1b:be:d9:7d: 64:95:b3:3f:67:15:cc:5a:9c:bc:53:f6:fc:b0:e6: d4:88:47:fd:df:57:95:26:36:40:c3:0a:6b:52:5e: 9a:13:57:56:2c:04:1b:b5:4b:8f:55:e2:ac:a9:27: 75:f5:0e:2e:fa:3f:74:c6:83:8a:ab:68:6c:b5:5c: ae:0d:b3:c7:ff:47:8a:43:ae:1d:3b:8b:da:c5:2b: 06:5a:95:c0:9b:98:a0:0f:4c:1a:ee:28:f4:b0:08: 7c:32:2c:ba:21:02:fc:5c:f3:c0:5d:21:2c:6d:0e: dc:71:d0:87:72:8f:d7:50:c9:5c:8c:b6:d3:2b:26: 39:f4:59:80:f3:56:03:d1:2c:0d:f4:e8:91:e4:93: be:ec:e2:72:1a:f7:39:9e:62:b7:88:43:33:78:4b: d5:13:f4:9e:5b:70:ab:fc:03:33:4f:5e:41:a2:5d: 06:26:68:7c:53:20:7b:b1:8c:67:9b:04:a8:67:91: c6:0e:3f:3a:be:66:1b:f5:70:b6:db:a6:86:2b:4d: 71:57:43:35:71:92:90:10:6b:d4:36:f7:8c:88:8a: 41:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:FE:55:68:9E:73:5C:79:DA:A0:77:43:76:E5:FC:F0:43:44:50:92 X509v3 Authority Key Identifier: keyid:96:EC:32:41:8F:5D:B7:D2:72:13:2F:4F:61:5E:EE:14:EB:FC:C7:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CTII/0/96EC32418F5DB7D272132F4F615EEE14EBFCC789.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/96EC32418F5DB7D272132F4F615EEE14EBFCC789.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CTII/0/96EC32418F5DB7D272132F4F615EEE14EBFCC789.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:bb:bc:7c:7d:7f:bc:09:fb:7a:e2:41:77:03:0b:1d:0f:ca: b7:15:4e:ed:3f:aa:55:7c:95:77:73:d8:ac:e9:28:e3:cb:7c: 69:a5:65:76:74:db:d9:fe:12:2b:b8:03:ac:1f:bf:54:a6:5a: f1:d7:f4:c0:c6:da:1b:3b:90:a4:f0:91:0e:e9:e7:e1:fb:95: 9c:7d:5c:40:d6:d2:0c:fb:1b:58:3c:ef:13:49:6b:2b:90:fd: 2c:97:c5:fb:21:44:e0:2b:86:24:18:d7:42:59:8d:26:7d:25: 00:41:55:8a:63:98:8b:dc:2e:8e:e8:b9:4b:79:9f:e7:2c:bc: 2f:bd:24:a2:27:5d:e1:7e:c4:73:90:fc:c1:7f:dd:de:64:77: f5:51:48:f4:14:a9:cc:81:34:e0:79:3d:81:20:4c:cc:f0:f2: 2a:97:65:f4:db:14:2e:31:bf:c1:d2:f1:e6:22:92:3e:3f:ac: 94:1b:28:b6:d1:39:7f:8b:00:8b:38:e3:06:f8:83:61:ca:43: 55:d6:9d:54:05:29:71:6a:09:26:b3:84:32:64:79:94:ec:cc: e2:dd:85:87:16:be:c3:25:48:93:85:34:02:df:e0:6b:06:83: bc:67:6f:60:7d:8d:9b:ac:39:99:da:e3:a0:55:ec:df:57:6d: 55:e9:0b:60 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUaQ5hoGnWdd5QZLHmXUFrXm8Uh4owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTZFQzMyNDE4RjVEQjdEMjcyMTMyRjRGNjE1RUVFMTRF QkZDQzc4OTAeFw0yNjExMDgxNzExMjFaFw0yNjExMDkxODE5MjFaMDMxMTAvBgNV BAMTKERDRkU1NTY4OUU3MzVDNzlEQUEwNzc0Mzc2RTVGQ0YwNDM0NDUwOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxNcPtV0pJLJQFIeHYD0sxdZ5D 7bK6f8wId9d9GsOBn3+Xs/IPby7vG77ZfWSVsz9nFcxanLxT9vyw5tSIR/3fV5Um NkDDCmtSXpoTV1YsBBu1S49V4qypJ3X1Di76P3TGg4qraGy1XK4Ns8f/R4pDrh07 i9rFKwZalcCbmKAPTBruKPSwCHwyLLohAvxc88BdISxtDtxx0Idyj9dQyVyMttMr Jjn0WYDzVgPRLA306JHkk77s4nIa9zmeYreIQzN4S9UT9J5bcKv8AzNPXkGiXQYm aHxTIHuxjGebBKhnkcYOPzq+Zhv1cLbbpoYrTXFXQzVxkpAQa9Q294yIikHdAgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQU3P5VaJ5zXHnaoHdDduX88ENEUJIwHwYDVR0j BBgwFoAUluwyQY9dt9JyEy9PYV7uFOv8x4kwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ1RJSS8w Lzk2RUMzMjQxOEY1REI3RDI3MjEzMkY0RjYxNUVFRTE0RUJGQ0M3ODkuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvOTZFQzMyNDE4RjVEQjdEMjcyMTMyRjRGNjE1RUVF MTRFQkZDQzc4OS5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0NUSUkvMC85NkVDMzI0MThGNURCN0Qy NzIxMzJGNEY2MTVFRUUxNEVCRkNDNzg5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvbu8fH1/vAn7euJB dwMLHQ/KtxVO7T+qVXyVd3PYrOko48t8aaVldnTb2f4SK7gDrB+/VKZa8df0wMba GzuQpPCRDunn4fuVnH1cQNbSDPsbWDzvE0lrK5D9LJfF+yFE4CuGJBjXQlmNJn0l AEFVimOYi9wujui5S3mf5yy8L70koidd4X7Ec5D8wX/d3mR39VFI9BSpzIE04Hk9 gSBMzPDyKpdl9NsULjG/wdLx5iKSPj+slBsottE5f4sAizjjBviDYcpDVdadVAUp cWoJJrOEMmR5lOzM4t2Fhxa+wyVIk4U0At/gawaDvGdvYH2Nm6w5mdrjoFXs31dt VekLYA== -----END CERTIFICATE-----Generated at Mon Nov 9 11:07:37 2026 by rpki-client