$ rpki-client -vvf rpkica.twnic.tw/rpki/NCCC/1/F4194E27E15A4F76E006403795143D4EFDCF022E.mft File: F4194E27E15A4F76E006403795143D4EFDCF022E.mft (raw, json) Hash identifier: QhZ2WHdP43Hnr/cxIhuCG1xCiDW1tezGS1UzGRbofN4= Subject key identifier: E2:E0:3E:57:F6:C4:B3:14:4F:6F:63:28:C6:94:11:A7:10:AA:DF:FD Authority key identifier: F4:19:4E:27:E1:5A:4F:76:E0:06:40:37:95:14:3D:4E:FD:CF:02:2E Certificate issuer: /CN=F4194E27E15A4F76E006403795143D4EFDCF022E Certificate serial: 25B9C3C655837579E36C81CDCF589D7ADCE37370 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/F4194E27E15A4F76E006403795143D4EFDCF022E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NCCC/1/F4194E27E15A4F76E006403795143D4EFDCF022E.mft Manifest number: 33 Signing time: Sat 13 Jun 2026 02:53:47 +0000 Manifest this update: Sat 13 Jun 2026 02:48:47 +0000 Manifest next update: Sun 14 Jun 2026 05:08:47 +0000 Files and hashes: 1: 3135372e32302e3130372e302f32342d3234203d3e203139353531.roa (hash: h885eOx61p3k8wuxUDF9SUB/ZPMTr8/gQVLItFXI4rM=) 2: 3135372e32302e3130362e302f32342d3234203d3e20313530373732.roa (hash: OmqcGxA2rNXj2dFvkkVaw1M6A48OHsdG1EyNXCLdbEU=) 3: 3135372e32302e3130362e302f32332d3234203d3e20313530373732.roa (hash: f9osk8atvNFbwzlzm+0pX0JbzGg2b5M3dZ9aT1SRM7Y=) 4: 3135372e32302e3130362e302f32342d3234203d3e203139353531.roa (hash: tj30Mw6SegUb4xqIoH5nsbPbEgFt7VbOqElQZObdRdk=) 5: 3135372e32302e3130372e302f32342d3234203d3e20313530373732.roa (hash: nTtkDIS/9RWSvXhNtKm7NzCRLQuNi0ZYeYDRWbSZUkY=) 6: 3135372e32302e3130362e302f32332d3233203d3e2033343632.roa (hash: U1maVebHqNxJOM61IipjwHfKGQHfW803fIcL92PP6U4=) 7: F4194E27E15A4F76E006403795143D4EFDCF022E.crl (hash: I7wWIiFlXtuZsI9hyEXv0wRpUspxRQzLKThMYziXYyY=) 8: 3135372e32302e3130362e302f32332d3234203d3e20313938393439.roa (hash: NsVC+kyCCo5iuf92xRmrMNAeZWnd0GFdv+b5P5erIsw=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NCCC/1/F4194E27E15A4F76E006403795143D4EFDCF022E.crl rsync://rpkica.twnic.tw/rpki/NCCC/1/F4194E27E15A4F76E006403795143D4EFDCF022E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/F4194E27E15A4F76E006403795143D4EFDCF022E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 22:38:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:b9:c3:c6:55:83:75:79:e3:6c:81:cd:cf:58:9d:7a:dc:e3:73:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F4194E27E15A4F76E006403795143D4EFDCF022E Validity Not Before: Jun 13 02:48:47 2026 GMT Not After : Jun 14 05:08:47 2026 GMT Subject: CN=E2E03E57F6C4B3144F6F6328C69411A710AADFFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:94:3a:39:33:ed:f6:5e:c6:32:fb:be:68:fc: b1:f8:1a:18:e3:34:84:0f:df:2d:06:2c:5a:c4:8a: a9:3d:9a:bf:58:a9:f3:52:94:bb:24:8b:d1:af:fe: 58:c2:9f:e8:9e:64:17:ba:7b:6c:a1:40:94:83:a0: a4:5c:09:04:82:28:b1:05:5f:b6:52:a0:ab:30:ef: 29:c1:75:91:ce:20:cf:ef:44:b7:3d:24:3d:8f:76: 74:58:9a:78:0f:e3:77:30:67:4c:e2:5e:b5:19:e3: ae:bd:a3:b9:d6:11:4a:86:1b:8f:37:7f:ff:8f:d5: 49:00:40:f9:b8:d4:28:7a:38:0a:ec:42:f4:d1:07: ee:75:4a:42:5f:69:ba:22:b2:f3:f3:36:5f:b9:9b: 9e:d6:b7:1e:51:fe:11:88:31:df:a7:95:12:8b:d9: 74:c8:50:f3:2e:e1:a3:2c:94:5c:20:bf:43:4d:ca: e3:bf:d9:ac:72:1e:2f:91:03:b1:7a:9c:09:2e:b7: dc:bf:ec:ea:53:18:8e:dc:cd:ee:a7:cf:c5:0d:18: 56:fc:f4:c0:3d:0b:18:0b:3f:26:3c:99:b4:9c:ae: fe:23:a0:77:24:30:52:d9:a3:e4:b6:ea:f6:4c:0b: f2:e6:61:1e:e1:0f:ee:67:47:39:21:da:0a:ed:64: d5:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:E0:3E:57:F6:C4:B3:14:4F:6F:63:28:C6:94:11:A7:10:AA:DF:FD X509v3 Authority Key Identifier: keyid:F4:19:4E:27:E1:5A:4F:76:E0:06:40:37:95:14:3D:4E:FD:CF:02:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NCCC/1/F4194E27E15A4F76E006403795143D4EFDCF022E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/F4194E27E15A4F76E006403795143D4EFDCF022E.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NCCC/1/F4194E27E15A4F76E006403795143D4EFDCF022E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:78:f3:8f:34:a7:e1:f0:b5:47:53:3a:1f:c7:64:9b:80:54: ee:49:cf:09:07:6a:6a:23:55:9f:c8:eb:63:f4:2c:b5:69:5e: 11:c3:b1:89:0e:64:64:54:c5:92:2c:a7:1e:79:5b:f2:77:0a: 7e:91:47:6a:d2:c7:1b:58:20:e3:9c:4c:e4:d0:b4:2c:88:fb: 1d:7f:33:5f:bb:e5:08:fe:33:fa:3d:17:79:ce:f2:6b:a5:14: f6:12:31:1b:29:4b:68:f4:e8:33:1c:2f:ea:1c:b9:15:31:de: 5c:4c:f2:7e:aa:2e:cf:55:61:e0:d8:d3:f3:38:4a:5c:64:fb: 4b:a6:11:a4:f8:f1:35:ba:17:04:51:dc:49:8e:11:40:d4:8f: 4b:21:81:da:69:c2:d2:5d:b3:19:6c:e7:21:ac:9d:0c:2f:f1: 4c:7b:20:08:49:c3:70:7a:5c:6e:29:1c:53:69:f6:ab:61:11: d2:3d:54:93:31:64:7b:a0:73:e6:b0:bc:54:e8:ef:25:16:fb: 73:7b:de:1a:6b:d7:9c:cb:14:b2:e0:a7:65:f9:f9:95:46:f3: 12:7f:48:88:61:60:0e:cb:60:5b:5e:50:46:50:ae:72:d2:b4: 4b:a9:f0:30:9d:6e:48:3d:c0:a9:28:78:2e:dc:52:49:36:f2: cd:6e:28:d5 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUJbnDxlWDdXnjbIHNz1idetzjc3AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjQxOTRFMjdFMTVBNEY3NkUwMDY0MDM3OTUxNDNENEVG RENGMDIyRTAeFw0yNjA2MTMwMjQ4NDdaFw0yNjA2MTQwNTA4NDdaMDMxMTAvBgNV BAMTKEUyRTAzRTU3RjZDNEIzMTQ0RjZGNjMyOEM2OTQxMUE3MTBBQURGRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqlDo5M+32XsYy+75o/LH4Ghjj NIQP3y0GLFrEiqk9mr9YqfNSlLski9Gv/ljCn+ieZBe6e2yhQJSDoKRcCQSCKLEF X7ZSoKsw7ynBdZHOIM/vRLc9JD2PdnRYmngP43cwZ0ziXrUZ4669o7nWEUqGG483 f/+P1UkAQPm41Ch6OArsQvTRB+51SkJfaboisvPzNl+5m57Wtx5R/hGIMd+nlRKL 2XTIUPMu4aMslFwgv0NNyuO/2axyHi+RA7F6nAkut9y/7OpTGI7cze6nz8UNGFb8 9MA9CxgLPyY8mbScrv4joHckMFLZo+S26vZMC/LmYR7hD+5nRzkh2grtZNXLAgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQU4uA+V/bEsxRPb2MoxpQRpxCq3/0wHwYDVR0j BBgwFoAU9BlOJ+FaT3bgBkA3lRQ9Tv3PAi4wDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTkNDQy8x L0Y0MTk0RTI3RTE1QTRGNzZFMDA2NDAzNzk1MTQzRDRFRkRDRjAyMkUuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzAvRjQxOTRFMjdFMTVBNEY3NkUwMDY0MDM3OTUxNDNE NEVGRENGMDIyRS5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05DQ0MvMS9GNDE5NEUyN0UxNUE0Rjc2 RTAwNjQwMzc5NTE0M0Q0RUZEQ0YwMjJFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUXjzjzSn4fC1R1M6 H8dkm4BU7knPCQdqaiNVn8jrY/QstWleEcOxiQ5kZFTFkiynHnlb8ncKfpFHatLH G1gg45xM5NC0LIj7HX8zX7vlCP4z+j0Xec7ya6UU9hIxGylLaPToMxwv6hy5FTHe XEzyfqouz1Vh4NjT8zhKXGT7S6YRpPjxNboXBFHcSY4RQNSPSyGB2mnC0l2zGWzn IaydDC/xTHsgCEnDcHpcbikcU2n2q2ER0j1UkzFke6Bz5rC8VOjvJRb7c3veGmvX nMsUsuCnZfn5lUbzEn9IiGFgDstgW15QRlCuctK0S6nwMJ1uSD3AqSh4LtxSSTby zW4o1Q== -----END CERTIFICATE-----Generated at Sat Jun 13 10:49:11 2026 by rpki-client