$ rpki-client -vvvf rpkica.twnic.tw/rpki/NCCC/1/F4194E27E15A4F76E006403795143D4EFDCF022E.mft File: F4194E27E15A4F76E006403795143D4EFDCF022E.mft (raw, json) Hash identifier: kr+d44zx/Nmd5P1a10IBtC+oG4AOgT/7L3cX41+vHr8= Subject key identifier: CB:FF:75:BB:6C:26:2C:53:42:81:0A:C3:04:05:06:12:4B:1F:A9:76 Authority key identifier: F4:19:4E:27:E1:5A:4F:76:E0:06:40:37:95:14:3D:4E:FD:CF:02:2E Certificate issuer: /CN=F4194E27E15A4F76E006403795143D4EFDCF022E Certificate serial: 33C2369487B465FFA38CDE55691314BBBB02C809 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/F4194E27E15A4F76E006403795143D4EFDCF022E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NCCC/1/F4194E27E15A4F76E006403795143D4EFDCF022E.mft Manifest number: B9 Signing time: Mon 21 Sep 2026 04:20:45 +0000 Manifest this update: Mon 21 Sep 2026 04:15:45 +0000 Manifest next update: Tue 22 Sep 2026 06:14:45 +0000 Files and hashes: 1: 3135372e32302e3130362e302f32332d3233203d3e2033343632.roa (hash: U1maVebHqNxJOM61IipjwHfKGQHfW803fIcL92PP6U4=) 2: 3135372e32302e3130362e302f32342d3234203d3e203139353531.roa (hash: tj30Mw6SegUb4xqIoH5nsbPbEgFt7VbOqElQZObdRdk=) 3: 3135372e32302e3130362e302f32342d3234203d3e20313530373732.roa (hash: OmqcGxA2rNXj2dFvkkVaw1M6A48OHsdG1EyNXCLdbEU=) 4: 3135372e32302e3130372e302f32342d3234203d3e20313530373732.roa (hash: nTtkDIS/9RWSvXhNtKm7NzCRLQuNi0ZYeYDRWbSZUkY=) 5: 3135372e32302e3130362e302f32332d3234203d3e20313530373732.roa (hash: f9osk8atvNFbwzlzm+0pX0JbzGg2b5M3dZ9aT1SRM7Y=) 6: F4194E27E15A4F76E006403795143D4EFDCF022E.crl (hash: aAKj2hb7+k0TihEVeFWGty//q8UYUVvLgE92pxing0k=) 7: 3135372e32302e3130362e302f32332d3234203d3e20313938393439.roa (hash: NsVC+kyCCo5iuf92xRmrMNAeZWnd0GFdv+b5P5erIsw=) 8: 3135372e32302e3130372e302f32342d3234203d3e203139353531.roa (hash: h885eOx61p3k8wuxUDF9SUB/ZPMTr8/gQVLItFXI4rM=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NCCC/1/F4194E27E15A4F76E006403795143D4EFDCF022E.crl rsync://rpkica.twnic.tw/rpki/NCCC/1/F4194E27E15A4F76E006403795143D4EFDCF022E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/F4194E27E15A4F76E006403795143D4EFDCF022E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 06:14:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:c2:36:94:87:b4:65:ff:a3:8c:de:55:69:13:14:bb:bb:02:c8:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F4194E27E15A4F76E006403795143D4EFDCF022E Validity Not Before: Sep 21 04:15:45 2026 GMT Not After : Sep 22 06:14:45 2026 GMT Subject: CN=CBFF75BB6C262C5342810AC3040506124B1FA976 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:62:a1:34:d8:03:dc:aa:4d:3c:70:0c:c1:5c: 9b:44:98:51:33:62:68:ec:5b:c2:16:d1:c2:8f:34: 65:91:4f:26:14:a2:fb:ce:2a:18:b6:4d:7b:3b:89: ec:ca:ff:a3:df:d9:89:3f:bc:37:c7:26:09:4d:dc: a8:f6:01:d5:e2:c0:c7:b4:82:da:4a:9d:7d:90:e3: dc:36:cf:b6:bb:b1:4c:e2:2b:75:f4:71:75:7a:1f: 2e:a4:7f:d7:6b:69:5d:5e:28:26:cf:24:a5:40:3b: e7:07:98:d7:d9:a8:5b:45:0d:bd:0c:8a:09:2d:6b: 59:32:fe:86:ce:e2:33:df:67:72:77:b2:96:2d:a4: f7:ba:f7:05:7c:78:30:1e:9b:f4:07:70:60:47:f8: b1:88:a0:40:ae:33:b7:d0:fc:ad:42:ff:5a:25:97: 1f:b9:24:24:7a:50:d4:de:74:83:16:bc:4b:9b:3f: 04:69:b7:fe:c6:5d:77:ea:75:16:e6:15:e9:df:b3: f3:02:0a:8d:c2:73:12:39:d0:66:da:81:07:28:f3: b6:f2:7a:8d:fe:eb:86:d2:fb:6f:52:0d:98:09:21: 80:96:4b:50:13:4f:4a:77:df:66:53:63:e9:7b:cf: 8a:75:7b:cd:ee:45:9b:ba:5f:aa:5d:52:e6:18:f1: 49:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:FF:75:BB:6C:26:2C:53:42:81:0A:C3:04:05:06:12:4B:1F:A9:76 X509v3 Authority Key Identifier: keyid:F4:19:4E:27:E1:5A:4F:76:E0:06:40:37:95:14:3D:4E:FD:CF:02:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NCCC/1/F4194E27E15A4F76E006403795143D4EFDCF022E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/F4194E27E15A4F76E006403795143D4EFDCF022E.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NCCC/1/F4194E27E15A4F76E006403795143D4EFDCF022E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:d8:b8:e3:cd:10:ae:39:07:43:98:e4:6b:20:4c:a9:c1:9b: 11:4b:ef:9a:d6:f5:c9:82:29:64:90:f9:92:1d:60:30:f3:f3: 03:14:2d:a2:d7:85:a0:ea:37:49:95:60:b7:26:6a:b6:b2:cd: 3d:3f:b5:5e:54:a5:67:1d:69:40:56:76:57:9f:1b:87:76:68: a6:25:18:5d:7d:b0:be:f8:4e:ac:43:c9:78:34:29:aa:ae:e5: 59:74:f0:a4:23:8d:57:1c:81:14:d8:e0:26:f0:39:a4:65:b3: a1:14:a1:24:4c:ce:82:15:c4:b8:5d:d4:0c:79:1f:96:34:c7: 1c:7c:54:51:14:f3:81:fb:a8:5c:54:a9:ff:31:1d:39:58:c0: 03:d7:2d:66:3c:2a:ef:e3:2f:6e:a1:fb:1d:03:6c:e1:68:6b: 02:2e:34:bb:ae:c8:4d:db:81:ad:e5:1c:0d:8a:8b:bc:26:99: dd:3e:2b:85:3b:75:4e:60:e5:19:47:40:3b:67:b6:d0:60:9c: 84:04:68:af:14:06:a6:ee:a2:19:e5:75:26:f7:3e:06:62:2d: 1b:c3:3b:bb:f0:c1:23:1b:32:af:4b:a9:ab:68:02:e2:a9:e6: a7:1b:24:b8:e1:49:da:90:74:2c:8b:d9:59:5e:99:3b:53:3e: 90:47:e9:c5 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUM8I2lIe0Zf+jjN5VaRMUu7sCyAkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjQxOTRFMjdFMTVBNEY3NkUwMDY0MDM3OTUxNDNENEVG RENGMDIyRTAeFw0yNjA5MjEwNDE1NDVaFw0yNjA5MjIwNjE0NDVaMDMxMTAvBgNV BAMTKENCRkY3NUJCNkMyNjJDNTM0MjgxMEFDMzA0MDUwNjEyNEIxRkE5NzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrYqE02APcqk08cAzBXJtEmFEz YmjsW8IW0cKPNGWRTyYUovvOKhi2TXs7iezK/6Pf2Yk/vDfHJglN3Kj2AdXiwMe0 gtpKnX2Q49w2z7a7sUziK3X0cXV6Hy6kf9draV1eKCbPJKVAO+cHmNfZqFtFDb0M igkta1ky/obO4jPfZ3J3spYtpPe69wV8eDAem/QHcGBH+LGIoECuM7fQ/K1C/1ol lx+5JCR6UNTedIMWvEubPwRpt/7GXXfqdRbmFenfs/MCCo3CcxI50GbagQco87by eo3+64bS+29SDZgJIYCWS1ATT0p332ZTY+l7z4p1e83uRZu6X6pdUuYY8UmZAgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQUy/91u2wmLFNCgQrDBAUGEksfqXYwHwYDVR0j BBgwFoAU9BlOJ+FaT3bgBkA3lRQ9Tv3PAi4wDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTkNDQy8x L0Y0MTk0RTI3RTE1QTRGNzZFMDA2NDAzNzk1MTQzRDRFRkRDRjAyMkUuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzAvRjQxOTRFMjdFMTVBNEY3NkUwMDY0MDM3OTUxNDNE NEVGRENGMDIyRS5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05DQ0MvMS9GNDE5NEUyN0UxNUE0Rjc2 RTAwNjQwMzc5NTE0M0Q0RUZEQ0YwMjJFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmNi4480QrjkHQ5jk ayBMqcGbEUvvmtb1yYIpZJD5kh1gMPPzAxQtoteFoOo3SZVgtyZqtrLNPT+1XlSl Zx1pQFZ2V58bh3ZopiUYXX2wvvhOrEPJeDQpqq7lWXTwpCONVxyBFNjgJvA5pGWz oRShJEzOghXEuF3UDHkfljTHHHxUURTzgfuoXFSp/zEdOVjAA9ctZjwq7+MvbqH7 HQNs4WhrAi40u67ITduBreUcDYqLvCaZ3T4rhTt1TmDlGUdAO2e20GCchARorxQG pu6iGeV1Jvc+BmItG8M7u/DBIxsyr0upq2gC4qnmpxskuOFJ2pB0LIvZWV6ZO1M+ kEfpxQ== -----END CERTIFICATE-----Generated at Mon Sep 21 19:43:17 2026 by rpki-client