$ rpki-client -vvf rpkica.twnic.tw/rpki/GTBC/0/9FC99B1F4812CCA2E8D1D56A069F9D18DE7D118D.mft File: 9FC99B1F4812CCA2E8D1D56A069F9D18DE7D118D.mft (raw, json) Hash identifier: Lg2RMi6SaGqWeSxfNjTRg+UO7o17kwASBU7P+MBxha4= Subject key identifier: 30:C7:CF:56:8D:07:F6:02:F6:95:37:32:B6:CC:C9:44:69:6A:3C:5A Authority key identifier: 9F:C9:9B:1F:48:12:CC:A2:E8:D1:D5:6A:06:9F:9D:18:DE:7D:11:8D Certificate issuer: /CN=9FC99B1F4812CCA2E8D1D56A069F9D18DE7D118D Certificate serial: 4E20FE54A27BC781E139AB716B860689DCB84995 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9FC99B1F4812CCA2E8D1D56A069F9D18DE7D118D.cer Subject info access: rsync://rpkica.twnic.tw/rpki/GTBC/0/9FC99B1F4812CCA2E8D1D56A069F9D18DE7D118D.mft Manifest number: 6C Signing time: Tue 28 Jul 2026 02:57:15 +0000 Manifest this update: Tue 28 Jul 2026 02:52:15 +0000 Manifest next update: Wed 29 Jul 2026 04:45:15 +0000 Files and hashes: 1: 36312e36352e3139322e302f32302d3234203d3e203138343133.roa (hash: 2ch2o9TLeb/MBH9YdAv7ipxLIfbYN2VZNtKXRqBGHLk=) 2: 9FC99B1F4812CCA2E8D1D56A069F9D18DE7D118D.crl (hash: QQieuF7pueJriYF9cKb4eqKw8nkVtDwQ29yQFdPOi/0=) 3: 36312e36372e302e302f32302d3234203d3e203138343133.roa (hash: 4OAaz01ws8LVf2JI1ICMosiWzPxRsaL73hiseT4WS1E=) 4: 36312e36352e3230382e302f32302d3234203d3e203138303436.roa (hash: vRIqijp979dxoSTc2NKisYL6rD337qk+R1Y6aC4riSQ=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/GTBC/0/9FC99B1F4812CCA2E8D1D56A069F9D18DE7D118D.crl rsync://rpkica.twnic.tw/rpki/GTBC/0/9FC99B1F4812CCA2E8D1D56A069F9D18DE7D118D.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9FC99B1F4812CCA2E8D1D56A069F9D18DE7D118D.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 04:45:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:20:fe:54:a2:7b:c7:81:e1:39:ab:71:6b:86:06:89:dc:b8:49:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FC99B1F4812CCA2E8D1D56A069F9D18DE7D118D Validity Not Before: Jul 28 02:52:15 2026 GMT Not After : Jul 29 04:45:15 2026 GMT Subject: CN=30C7CF568D07F602F6953732B6CCC944696A3C5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:07:f0:3d:6e:90:6a:1e:21:55:8b:7e:d8:24: c3:34:57:9c:1f:66:d5:6c:9e:c9:35:6a:da:28:5c: 62:25:22:da:3c:15:d9:44:07:4b:a5:3d:c5:33:c8: ff:6b:96:94:50:dc:be:7f:86:f1:b5:b6:ac:64:a9: 31:11:34:61:a6:58:de:4d:d0:fd:d6:4d:12:03:ba: 13:7b:dc:a4:74:36:29:db:0a:8c:28:c7:33:0c:e9: 3a:72:88:4f:0d:6a:ca:23:53:ce:eb:99:38:c7:9e: 58:ef:23:f2:4d:72:f4:12:6e:22:a8:77:18:56:ae: a7:cc:f3:f7:51:89:b2:af:39:84:4e:b2:a1:78:1a: b4:e3:0e:90:03:4a:d7:42:22:87:d2:00:fb:a0:5a: 7d:33:e4:31:23:4b:a5:6d:99:10:0e:ed:e0:79:22: ca:58:94:00:f4:3c:f2:d9:60:e4:76:8d:17:f8:bc: a0:ca:c2:71:e7:ce:77:a0:f0:13:72:81:18:a7:a6: 77:c3:a8:76:9a:e1:d0:f9:4a:86:13:fd:5d:e9:20: 7e:01:63:0f:1b:54:bb:a6:d6:69:36:d9:59:f1:cf: 7a:a6:2c:58:c5:e9:0a:93:a5:b0:e4:4c:53:94:75: 3f:bf:bd:b8:68:74:96:78:79:48:7e:3b:2f:39:85: da:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:C7:CF:56:8D:07:F6:02:F6:95:37:32:B6:CC:C9:44:69:6A:3C:5A X509v3 Authority Key Identifier: keyid:9F:C9:9B:1F:48:12:CC:A2:E8:D1:D5:6A:06:9F:9D:18:DE:7D:11:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/GTBC/0/9FC99B1F4812CCA2E8D1D56A069F9D18DE7D118D.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9FC99B1F4812CCA2E8D1D56A069F9D18DE7D118D.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/GTBC/0/9FC99B1F4812CCA2E8D1D56A069F9D18DE7D118D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:dc:0f:24:4b:27:0b:a3:59:dc:53:da:0d:ba:a5:65:36:5b: 62:96:fe:dd:a4:0d:ac:8d:2a:bc:7c:4c:74:8c:cd:ef:7c:f8: ba:1e:59:be:7d:fc:a9:ab:ca:71:6a:63:0c:5d:19:a9:50:04: cd:0d:96:81:10:61:92:bf:83:09:5a:93:77:6e:b8:1a:87:9d: 63:8e:f7:5e:34:57:50:65:be:a7:fd:b4:69:cf:35:1f:3f:ea: ea:c0:f4:d8:07:ea:47:db:95:dd:fb:aa:f5:10:0c:f0:44:88: 09:34:75:0e:a0:e1:30:88:d5:26:b0:bd:68:5f:2d:82:9f:2c: 1e:bd:14:bb:c8:86:61:01:53:14:6d:68:cc:a1:db:6d:07:d0: ad:4f:48:e8:22:97:83:fc:90:3c:24:01:d9:3d:03:1f:0f:70: d1:eb:d2:cd:5a:75:d9:8e:ce:7d:b5:e2:25:33:b7:b3:c9:1a: d1:0b:95:79:8d:67:8d:b4:a7:0f:cd:53:e0:9a:14:db:14:2f: 6d:60:de:81:a6:be:98:3b:41:c2:05:d5:af:d1:b1:cd:18:30: 48:98:2b:9e:2d:50:0e:e0:22:ec:75:cf:38:c5:31:da:6a:72: 06:93:7d:e3:e8:af:7e:96:ec:71:0b:f4:8d:44:be:22:47:75: 66:b8:ea:e1 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUTiD+VKJ7x4HhOatxa4YGidy4SZUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZDOTlCMUY0ODEyQ0NBMkU4RDFENTZBMDY5RjlEMThE RTdEMTE4RDAeFw0yNjA3MjgwMjUyMTVaFw0yNjA3MjkwNDQ1MTVaMDMxMTAvBgNV BAMTKDMwQzdDRjU2OEQwN0Y2MDJGNjk1MzczMkI2Q0NDOTQ0Njk2QTNDNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSB/A9bpBqHiFVi37YJMM0V5wf ZtVsnsk1atooXGIlIto8FdlEB0ulPcUzyP9rlpRQ3L5/hvG1tqxkqTERNGGmWN5N 0P3WTRIDuhN73KR0NinbCowoxzMM6TpyiE8NasojU87rmTjHnljvI/JNcvQSbiKo dxhWrqfM8/dRibKvOYROsqF4GrTjDpADStdCIofSAPugWn0z5DEjS6VtmRAO7eB5 IspYlAD0PPLZYOR2jRf4vKDKwnHnzneg8BNygRinpnfDqHaa4dD5SoYT/V3pIH4B Yw8bVLum1mk22Vnxz3qmLFjF6QqTpbDkTFOUdT+/vbhodJZ4eUh+Oy85hdonAgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQUMMfPVo0H9gL2lTcytszJRGlqPFowHwYDVR0j BBgwFoAUn8mbH0gSzKLo0dVqBp+dGN59EY0wDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvR1RCQy8w LzlGQzk5QjFGNDgxMkNDQTJFOEQxRDU2QTA2OUY5RDE4REU3RDExOEQuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvOUZDOTlCMUY0ODEyQ0NBMkU4RDFENTZBMDY5RjlE MThERTdEMTE4RC5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0dUQkMvMC85RkM5OUIxRjQ4MTJDQ0Ey RThEMUQ1NkEwNjlGOUQxOERFN0QxMThELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADtwPJEsnC6NZ3FPa DbqlZTZbYpb+3aQNrI0qvHxMdIzN73z4uh5Zvn38qavKcWpjDF0ZqVAEzQ2WgRBh kr+DCVqTd264GoedY473XjRXUGW+p/20ac81Hz/q6sD02AfqR9uV3fuq9RAM8ESI CTR1DqDhMIjVJrC9aF8tgp8sHr0Uu8iGYQFTFG1ozKHbbQfQrU9I6CKXg/yQPCQB 2T0DHw9w0evSzVp12Y7OfbXiJTO3s8ka0QuVeY1njbSnD81T4JoU2xQvbWDegaa+ mDtBwgXVr9GxzRgwSJgrni1QDuAi7HXPOMUx2mpyBpN94+ivfpbscQv0jUS+Ikd1 Zrjq4Q== -----END CERTIFICATE-----Generated at Tue Jul 28 19:38:17 2026 by rpki-client