$ rpki-client -vvf rpkica.twnic.tw/rpki/NCCC/1/F4194E27E15A4F76E006403795143D4EFDCF022E.mft File: F4194E27E15A4F76E006403795143D4EFDCF022E.mft (raw, json) Hash identifier: 4BJk4rOR03uRBYUOqX9doex78/8h58ziIdMXdLunhys= Subject key identifier: 2B:A4:D9:93:4B:FE:EF:BC:04:DA:67:FE:F2:74:41:24:16:84:1C:1D Authority key identifier: F4:19:4E:27:E1:5A:4F:76:E0:06:40:37:95:14:3D:4E:FD:CF:02:2E Certificate issuer: /CN=F4194E27E15A4F76E006403795143D4EFDCF022E Certificate serial: 70E9D0B8B828BF34867BCD002133079A4084958C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/F4194E27E15A4F76E006403795143D4EFDCF022E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NCCC/1/F4194E27E15A4F76E006403795143D4EFDCF022E.mft Manifest number: 71 Signing time: Wed 29 Jul 2026 00:20:18 +0000 Manifest this update: Wed 29 Jul 2026 00:15:18 +0000 Manifest next update: Thu 30 Jul 2026 02:50:18 +0000 Files and hashes: 1: 3135372e32302e3130372e302f32342d3234203d3e203139353531.roa (hash: h885eOx61p3k8wuxUDF9SUB/ZPMTr8/gQVLItFXI4rM=) 2: F4194E27E15A4F76E006403795143D4EFDCF022E.crl (hash: RGZvG2wO29shKqWSkd2mu3bGJZ0euCrOK5ekGKCgDJw=) 3: 3135372e32302e3130362e302f32332d3234203d3e20313530373732.roa (hash: f9osk8atvNFbwzlzm+0pX0JbzGg2b5M3dZ9aT1SRM7Y=) 4: 3135372e32302e3130362e302f32342d3234203d3e203139353531.roa (hash: tj30Mw6SegUb4xqIoH5nsbPbEgFt7VbOqElQZObdRdk=) 5: 3135372e32302e3130372e302f32342d3234203d3e20313530373732.roa (hash: nTtkDIS/9RWSvXhNtKm7NzCRLQuNi0ZYeYDRWbSZUkY=) 6: 3135372e32302e3130362e302f32342d3234203d3e20313530373732.roa (hash: OmqcGxA2rNXj2dFvkkVaw1M6A48OHsdG1EyNXCLdbEU=) 7: 3135372e32302e3130362e302f32332d3233203d3e2033343632.roa (hash: U1maVebHqNxJOM61IipjwHfKGQHfW803fIcL92PP6U4=) 8: 3135372e32302e3130362e302f32332d3234203d3e20313938393439.roa (hash: NsVC+kyCCo5iuf92xRmrMNAeZWnd0GFdv+b5P5erIsw=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NCCC/1/F4194E27E15A4F76E006403795143D4EFDCF022E.crl rsync://rpkica.twnic.tw/rpki/NCCC/1/F4194E27E15A4F76E006403795143D4EFDCF022E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/F4194E27E15A4F76E006403795143D4EFDCF022E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 00:05:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:e9:d0:b8:b8:28:bf:34:86:7b:cd:00:21:33:07:9a:40:84:95:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F4194E27E15A4F76E006403795143D4EFDCF022E Validity Not Before: Jul 29 00:15:18 2026 GMT Not After : Jul 30 02:50:18 2026 GMT Subject: CN=2BA4D9934BFEEFBC04DA67FEF274412416841C1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:99:d1:16:bf:b5:1a:2d:d4:df:52:b3:19:e8: a4:e7:fd:36:d2:47:0d:91:fc:23:df:57:aa:80:76: 44:16:e7:78:36:7c:1b:33:51:15:5b:35:c6:df:df: 32:c5:63:98:ff:11:5e:4c:e7:07:ad:74:7f:31:eb: e1:56:3a:8e:c6:16:47:49:2b:d6:a6:fd:84:8a:ed: 8d:40:88:00:e3:bb:0a:b9:ea:9f:72:92:df:33:4c: e9:b5:2f:53:6e:38:9c:23:90:99:65:17:ed:8a:95: 02:5a:54:0a:d8:89:b9:7f:c2:91:2f:ab:80:1a:9e: e6:30:34:d5:a9:65:a7:46:5a:ee:10:28:de:e7:63: b7:87:24:d7:d2:7d:b1:f1:c4:12:e2:29:1d:bc:7d: d2:34:1d:48:3d:84:b0:c6:6d:c8:e8:94:ff:c5:db: 1e:b2:2f:dc:0e:4b:bd:1c:dd:a4:e8:ef:89:ef:16: 24:4a:11:66:89:9c:9d:e3:e0:fd:f7:5a:2a:76:5f: 2e:27:d2:44:11:fc:b7:0a:35:0d:c8:f7:6e:5f:7d: 84:5d:0e:fb:89:96:58:69:a7:dd:44:03:2b:85:00: 26:76:5b:78:c7:4d:bf:2e:b5:88:19:95:9b:d4:f4: c9:cd:a2:4c:73:08:93:f1:17:57:fb:4d:92:14:db: ce:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:A4:D9:93:4B:FE:EF:BC:04:DA:67:FE:F2:74:41:24:16:84:1C:1D X509v3 Authority Key Identifier: keyid:F4:19:4E:27:E1:5A:4F:76:E0:06:40:37:95:14:3D:4E:FD:CF:02:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NCCC/1/F4194E27E15A4F76E006403795143D4EFDCF022E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/F4194E27E15A4F76E006403795143D4EFDCF022E.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NCCC/1/F4194E27E15A4F76E006403795143D4EFDCF022E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:e8:44:dd:10:73:f2:16:c1:a0:45:78:88:80:da:cc:d6:c1: 70:6e:fd:ce:45:3a:de:2b:67:bb:4c:af:73:1b:89:98:59:cd: 73:92:50:15:24:40:3c:3e:96:88:4d:0f:3a:3c:63:bc:00:35: a0:3d:ed:ed:c6:52:08:3a:b2:17:7d:76:c9:81:ae:82:88:60: f8:ff:3d:9c:d7:82:91:8e:6f:50:2f:5a:6b:62:95:51:22:2b: d9:ec:82:c9:c1:96:5f:df:f6:33:d1:1a:98:dc:1e:04:12:0c: 31:27:89:88:2a:56:2a:b1:52:71:b6:ec:9b:a8:d2:1b:a8:46: 9d:1c:0a:e8:49:59:3e:6c:4a:9b:f9:7f:cc:63:69:19:27:10: 53:ff:21:b0:89:23:2b:1b:ae:b5:5f:f1:4e:99:1c:03:1d:73: bb:e4:ce:10:f8:3c:cc:f4:4d:43:b2:c7:5a:12:32:f4:5b:03: 2a:e0:9f:4f:24:93:bc:30:6a:b3:49:6d:da:ac:10:5c:21:a4: eb:bc:97:2d:a5:f0:14:a9:ef:96:a3:21:03:93:60:63:a8:82: 8f:dd:66:2f:5a:f1:71:7f:2c:5f:17:af:7a:f9:ed:e8:d2:5f: e0:d5:ee:2f:3b:32:ec:4d:31:cd:57:3f:1e:de:aa:60:32:b9: fb:84:e1:32 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUcOnQuLgovzSGe80AITMHmkCElYwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjQxOTRFMjdFMTVBNEY3NkUwMDY0MDM3OTUxNDNENEVG RENGMDIyRTAeFw0yNjA3MjkwMDE1MThaFw0yNjA3MzAwMjUwMThaMDMxMTAvBgNV BAMTKDJCQTREOTkzNEJGRUVGQkMwNERBNjdGRUYyNzQ0MTI0MTY4NDFDMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9mdEWv7UaLdTfUrMZ6KTn/TbS Rw2R/CPfV6qAdkQW53g2fBszURVbNcbf3zLFY5j/EV5M5wetdH8x6+FWOo7GFkdJ K9am/YSK7Y1AiADjuwq56p9ykt8zTOm1L1NuOJwjkJllF+2KlQJaVArYibl/wpEv q4AanuYwNNWpZadGWu4QKN7nY7eHJNfSfbHxxBLiKR28fdI0HUg9hLDGbcjolP/F 2x6yL9wOS70c3aTo74nvFiRKEWaJnJ3j4P33Wip2Xy4n0kQR/LcKNQ3I925ffYRd DvuJllhpp91EAyuFACZ2W3jHTb8utYgZlZvU9MnNokxzCJPxF1f7TZIU284DAgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQUK6TZk0v+77wE2mf+8nRBJBaEHB0wHwYDVR0j BBgwFoAU9BlOJ+FaT3bgBkA3lRQ9Tv3PAi4wDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTkNDQy8x L0Y0MTk0RTI3RTE1QTRGNzZFMDA2NDAzNzk1MTQzRDRFRkRDRjAyMkUuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzAvRjQxOTRFMjdFMTVBNEY3NkUwMDY0MDM3OTUxNDNE NEVGRENGMDIyRS5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05DQ0MvMS9GNDE5NEUyN0UxNUE0Rjc2 RTAwNjQwMzc5NTE0M0Q0RUZEQ0YwMjJFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG+hE3RBz8hbBoEV4 iIDazNbBcG79zkU63itnu0yvcxuJmFnNc5JQFSRAPD6WiE0POjxjvAA1oD3t7cZS CDqyF312yYGugohg+P89nNeCkY5vUC9aa2KVUSIr2eyCycGWX9/2M9EamNweBBIM MSeJiCpWKrFScbbsm6jSG6hGnRwK6ElZPmxKm/l/zGNpGScQU/8hsIkjKxuutV/x TpkcAx1zu+TOEPg8zPRNQ7LHWhIy9FsDKuCfTySTvDBqs0lt2qwQXCGk67yXLaXw FKnvlqMhA5NgY6iCj91mL1rxcX8sXxevevnt6NJf4NXuLzsy7E0xzVc/Ht6qYDK5 +4ThMg== -----END CERTIFICATE-----Generated at Wed Jul 29 07:28:13 2026 by rpki-client