$ rpki-client -vvf rpkica.twnic.tw/rpki/NCCC/1/F4194E27E15A4F76E006403795143D4EFDCF022E.mft File: F4194E27E15A4F76E006403795143D4EFDCF022E.mft (raw, json) Hash identifier: AZ9srS+gQHR8BULNcyCQ8xBIVFCwFDQGogiFEQXhYPs= Subject key identifier: 84:7E:92:58:FA:82:A2:C4:BE:C3:F7:D8:B7:99:C3:CC:B9:A9:E7:8B Authority key identifier: F4:19:4E:27:E1:5A:4F:76:E0:06:40:37:95:14:3D:4E:FD:CF:02:2E Certificate issuer: /CN=F4194E27E15A4F76E006403795143D4EFDCF022E Certificate serial: 3B621F5E1BF00CFF9961AFD5E1A72CA5E21FBE01 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/F4194E27E15A4F76E006403795143D4EFDCF022E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NCCC/1/F4194E27E15A4F76E006403795143D4EFDCF022E.mft Manifest number: 70 Signing time: Tue 28 Jul 2026 05:12:36 +0000 Manifest this update: Tue 28 Jul 2026 05:07:36 +0000 Manifest next update: Wed 29 Jul 2026 08:16:36 +0000 Files and hashes: 1: 3135372e32302e3130362e302f32342d3234203d3e203139353531.roa (hash: tj30Mw6SegUb4xqIoH5nsbPbEgFt7VbOqElQZObdRdk=) 2: 3135372e32302e3130362e302f32332d3234203d3e20313530373732.roa (hash: f9osk8atvNFbwzlzm+0pX0JbzGg2b5M3dZ9aT1SRM7Y=) 3: 3135372e32302e3130372e302f32342d3234203d3e203139353531.roa (hash: h885eOx61p3k8wuxUDF9SUB/ZPMTr8/gQVLItFXI4rM=) 4: 3135372e32302e3130372e302f32342d3234203d3e20313530373732.roa (hash: nTtkDIS/9RWSvXhNtKm7NzCRLQuNi0ZYeYDRWbSZUkY=) 5: 3135372e32302e3130362e302f32332d3234203d3e20313938393439.roa (hash: NsVC+kyCCo5iuf92xRmrMNAeZWnd0GFdv+b5P5erIsw=) 6: 3135372e32302e3130362e302f32332d3233203d3e2033343632.roa (hash: U1maVebHqNxJOM61IipjwHfKGQHfW803fIcL92PP6U4=) 7: 3135372e32302e3130362e302f32342d3234203d3e20313530373732.roa (hash: OmqcGxA2rNXj2dFvkkVaw1M6A48OHsdG1EyNXCLdbEU=) 8: F4194E27E15A4F76E006403795143D4EFDCF022E.crl (hash: /GS9dlJi/0Sor76D/gNZETUrm0Cd+CTts3ExwipVFTQ=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NCCC/1/F4194E27E15A4F76E006403795143D4EFDCF022E.crl rsync://rpkica.twnic.tw/rpki/NCCC/1/F4194E27E15A4F76E006403795143D4EFDCF022E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/F4194E27E15A4F76E006403795143D4EFDCF022E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 07:44:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:62:1f:5e:1b:f0:0c:ff:99:61:af:d5:e1:a7:2c:a5:e2:1f:be:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F4194E27E15A4F76E006403795143D4EFDCF022E Validity Not Before: Jul 28 05:07:36 2026 GMT Not After : Jul 29 08:16:36 2026 GMT Subject: CN=847E9258FA82A2C4BEC3F7D8B799C3CCB9A9E78B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:85:19:1b:96:a5:15:4f:3d:bd:c8:4a:21:d9: 59:4c:eb:f9:a9:9e:9b:7c:e2:49:2a:db:bd:d3:45: aa:a8:79:90:08:c1:6c:1f:e6:87:45:b6:ee:e5:98: cb:f6:ec:f1:ee:fa:a7:1a:2f:42:0a:9c:7a:d7:f2: cf:74:78:db:c8:a6:62:f8:55:34:34:09:94:bb:86: 68:bd:f5:be:50:41:af:71:84:0d:cf:18:72:20:72: b1:72:a2:83:46:f3:a3:d7:c4:dc:87:89:0b:ee:d4: 05:b3:f9:d2:b5:05:1e:51:64:38:78:97:d4:cd:40: 79:17:32:fd:dc:c5:b0:75:79:7e:95:e4:df:3c:aa: 4f:84:ee:ab:5c:77:6b:08:08:6a:a6:bc:1f:11:31: 84:bc:0d:83:13:a3:b2:61:52:63:ec:28:e4:ed:15: dc:8c:3d:fa:5f:a6:f2:97:cd:13:61:b9:bc:f3:ae: e1:f7:58:86:f7:74:3e:17:f4:a2:8d:ba:6c:06:53: 6c:a0:30:0d:6c:8a:dd:0c:7a:22:2a:4c:0b:cd:be: 59:1f:1c:20:20:7a:dc:aa:2e:a8:0c:3c:14:82:bd: ee:bb:9b:74:06:6c:ce:30:77:23:17:14:c9:b5:4c: c1:d7:21:56:6f:1d:8d:7e:bf:34:fb:df:c8:24:c9: 46:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:7E:92:58:FA:82:A2:C4:BE:C3:F7:D8:B7:99:C3:CC:B9:A9:E7:8B X509v3 Authority Key Identifier: keyid:F4:19:4E:27:E1:5A:4F:76:E0:06:40:37:95:14:3D:4E:FD:CF:02:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NCCC/1/F4194E27E15A4F76E006403795143D4EFDCF022E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/F4194E27E15A4F76E006403795143D4EFDCF022E.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NCCC/1/F4194E27E15A4F76E006403795143D4EFDCF022E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:f7:ee:86:f4:7c:7f:00:ae:40:a2:bd:f5:17:1e:b5:c5:7f: 13:23:0a:c4:d0:31:0b:8c:a8:4e:9c:63:1b:d8:4f:a6:dd:dc: 4e:38:a7:4c:95:fc:92:69:3b:45:0b:d8:e9:16:af:1b:00:e8: 3b:d2:20:e7:0c:43:4d:48:b2:a7:5c:a6:59:5e:a1:6b:2e:0b: 23:a8:5e:20:99:76:70:37:c4:c6:6f:ba:d5:c3:8b:53:34:22: 21:45:9d:e5:4b:71:ce:8e:e1:42:95:0c:52:eb:d9:b3:ed:aa: 96:9d:8a:d5:da:b2:dc:08:42:a8:48:66:80:14:4d:e2:29:f0: 64:cc:0b:20:b9:e3:0a:e6:e2:0f:e8:2c:20:1e:02:a1:a1:a9: 29:35:09:a5:c5:3c:d7:66:ec:62:07:ff:13:81:e9:f3:fe:b5: 3a:a7:77:94:9f:38:55:95:ae:c9:15:34:0a:70:0d:f7:8c:2c: 1f:ac:7b:11:d6:ce:67:a1:2d:b7:b8:8f:1a:9f:53:82:46:e2: 40:7e:28:36:65:9e:0a:d2:ad:6f:53:e1:64:b1:9b:dd:cb:ba: 4e:d8:42:ed:19:60:c6:4a:f6:ae:3c:d6:72:68:4a:a0:1c:fc: 6e:44:21:91:21:cd:d0:d7:0b:e7:4f:35:fb:76:7d:23:ae:c8: 0f:f0:a4:ad -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUO2IfXhvwDP+ZYa/V4acspeIfvgEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjQxOTRFMjdFMTVBNEY3NkUwMDY0MDM3OTUxNDNENEVG RENGMDIyRTAeFw0yNjA3MjgwNTA3MzZaFw0yNjA3MjkwODE2MzZaMDMxMTAvBgNV BAMTKDg0N0U5MjU4RkE4MkEyQzRCRUMzRjdEOEI3OTlDM0NDQjlBOUU3OEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqhRkblqUVTz29yEoh2VlM6/mp npt84kkq273TRaqoeZAIwWwf5odFtu7lmMv27PHu+qcaL0IKnHrX8s90eNvIpmL4 VTQ0CZS7hmi99b5QQa9xhA3PGHIgcrFyooNG86PXxNyHiQvu1AWz+dK1BR5RZDh4 l9TNQHkXMv3cxbB1eX6V5N88qk+E7qtcd2sICGqmvB8RMYS8DYMTo7JhUmPsKOTt FdyMPfpfpvKXzRNhubzzruH3WIb3dD4X9KKNumwGU2ygMA1sit0MeiIqTAvNvlkf HCAgetyqLqgMPBSCve67m3QGbM4wdyMXFMm1TMHXIVZvHY1+vzT738gkyUaxAgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQUhH6SWPqCosS+w/fYt5nDzLmp54swHwYDVR0j BBgwFoAU9BlOJ+FaT3bgBkA3lRQ9Tv3PAi4wDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTkNDQy8x L0Y0MTk0RTI3RTE1QTRGNzZFMDA2NDAzNzk1MTQzRDRFRkRDRjAyMkUuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzAvRjQxOTRFMjdFMTVBNEY3NkUwMDY0MDM3OTUxNDNE NEVGRENGMDIyRS5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05DQ0MvMS9GNDE5NEUyN0UxNUE0Rjc2 RTAwNjQwMzc5NTE0M0Q0RUZEQ0YwMjJFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbPfuhvR8fwCuQKK9 9RcetcV/EyMKxNAxC4yoTpxjG9hPpt3cTjinTJX8kmk7RQvY6RavGwDoO9Ig5wxD TUiyp1ymWV6hay4LI6heIJl2cDfExm+61cOLUzQiIUWd5Utxzo7hQpUMUuvZs+2q lp2K1dqy3AhCqEhmgBRN4inwZMwLILnjCubiD+gsIB4CoaGpKTUJpcU812bsYgf/ E4Hp8/61Oqd3lJ84VZWuyRU0CnAN94wsH6x7EdbOZ6Ett7iPGp9TgkbiQH4oNmWe CtKtb1PhZLGb3cu6TthC7Rlgxkr2rjzWcmhKoBz8bkQhkSHN0NcL5081+3Z9I67I D/CkrQ== -----END CERTIFICATE-----Generated at Wed Jul 29 00:23:30 2026 by rpki-client