$ rpki-client -vvvf rpkica.twnic.tw/rpki/NCCC/1/F4194E27E15A4F76E006403795143D4EFDCF022E.mft File: F4194E27E15A4F76E006403795143D4EFDCF022E.mft (raw, json) Hash identifier: 5rdaBN0ZStQkElRx7c6v+cj4X/izPafwWzKJi1XnZIA= Subject key identifier: 2D:C2:10:93:24:CC:A1:A0:6A:1C:34:B9:95:F0:07:8E:B1:DA:76:1B Authority key identifier: F4:19:4E:27:E1:5A:4F:76:E0:06:40:37:95:14:3D:4E:FD:CF:02:2E Certificate issuer: /CN=F4194E27E15A4F76E006403795143D4EFDCF022E Certificate serial: 380ABF533AC2E3E0CB28B843A3FFCD79FFA4A5A3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/F4194E27E15A4F76E006403795143D4EFDCF022E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NCCC/1/F4194E27E15A4F76E006403795143D4EFDCF022E.mft Manifest number: 0102 Signing time: Sun 15 Nov 2026 04:24:48 +0000 Manifest this update: Sun 15 Nov 2026 04:19:48 +0000 Manifest next update: Mon 16 Nov 2026 04:44:48 +0000 Files and hashes: 1: F4194E27E15A4F76E006403795143D4EFDCF022E.crl (hash: npfmKCW7j44e4bAB/S7BjJFdynfyQ0ck8MGjnxKTntM=) 2: 3135372e32302e3130362e302f32342d3234203d3e20313530373732.roa (hash: OmqcGxA2rNXj2dFvkkVaw1M6A48OHsdG1EyNXCLdbEU=) 3: 3135372e32302e3130362e302f32332d3233203d3e2033343632.roa (hash: U1maVebHqNxJOM61IipjwHfKGQHfW803fIcL92PP6U4=) 4: 3135372e32302e3130372e302f32342d3234203d3e203139353531.roa (hash: h885eOx61p3k8wuxUDF9SUB/ZPMTr8/gQVLItFXI4rM=) 5: 3135372e32302e3130362e302f32342d3234203d3e203139353531.roa (hash: tj30Mw6SegUb4xqIoH5nsbPbEgFt7VbOqElQZObdRdk=) 6: 3135372e32302e3130372e302f32342d3234203d3e20313530373732.roa (hash: nTtkDIS/9RWSvXhNtKm7NzCRLQuNi0ZYeYDRWbSZUkY=) 7: 3135372e32302e3130362e302f32332d3234203d3e20313938393439.roa (hash: NsVC+kyCCo5iuf92xRmrMNAeZWnd0GFdv+b5P5erIsw=) 8: 3135372e32302e3130362e302f32332d3234203d3e20313530373732.roa (hash: f9osk8atvNFbwzlzm+0pX0JbzGg2b5M3dZ9aT1SRM7Y=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NCCC/1/F4194E27E15A4F76E006403795143D4EFDCF022E.crl rsync://rpkica.twnic.tw/rpki/NCCC/1/F4194E27E15A4F76E006403795143D4EFDCF022E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/F4194E27E15A4F76E006403795143D4EFDCF022E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 04:44:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:0a:bf:53:3a:c2:e3:e0:cb:28:b8:43:a3:ff:cd:79:ff:a4:a5:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F4194E27E15A4F76E006403795143D4EFDCF022E Validity Not Before: Nov 15 04:19:48 2026 GMT Not After : Nov 16 04:44:48 2026 GMT Subject: CN=2DC2109324CCA1A06A1C34B995F0078EB1DA761B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:83:b7:15:a7:80:74:2f:b3:dd:52:4d:5f:fd: b8:0b:43:69:7d:35:eb:6b:10:15:0c:ce:46:ae:a5: f4:14:1b:9f:f9:fe:41:9a:cc:06:41:fb:79:3a:6b: dc:f5:9c:e5:25:d8:ca:0a:be:34:ec:65:73:b9:fa: b1:95:f3:65:44:58:86:9a:b4:bd:3b:33:f9:67:f4: d9:8e:88:3b:98:aa:6f:a4:8d:c2:6b:e9:a7:15:f8: 5e:e1:1f:21:f7:98:63:76:01:7b:a8:3f:00:89:65: 9c:00:cc:82:16:7f:16:ec:62:77:02:b6:08:73:3e: 6d:5b:8f:2c:63:84:37:94:05:98:96:6d:88:da:08: 15:c2:a9:32:6c:22:f0:42:9e:01:21:fa:b6:7c:2c: 04:ca:7a:57:c6:c3:22:3d:fa:db:5e:7e:0f:4e:3a: 92:ca:03:25:c6:f1:db:ba:ff:b0:56:f6:df:0b:3f: f8:08:1f:66:5c:e3:19:30:6e:f1:5a:fd:73:ba:0a: e1:5e:30:a5:c8:80:9d:48:c1:93:aa:ae:e1:ed:13: 8c:19:77:01:c1:ae:b9:94:4e:56:23:1f:c3:e6:ec: c4:37:92:36:d8:aa:b3:39:46:c1:d2:61:c8:3c:69: 97:90:e7:98:54:84:50:8c:4b:4a:ba:52:af:9e:c5: 5f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:C2:10:93:24:CC:A1:A0:6A:1C:34:B9:95:F0:07:8E:B1:DA:76:1B X509v3 Authority Key Identifier: keyid:F4:19:4E:27:E1:5A:4F:76:E0:06:40:37:95:14:3D:4E:FD:CF:02:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NCCC/1/F4194E27E15A4F76E006403795143D4EFDCF022E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/F4194E27E15A4F76E006403795143D4EFDCF022E.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NCCC/1/F4194E27E15A4F76E006403795143D4EFDCF022E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:25:8d:77:77:c9:ac:e7:e1:fa:75:9f:87:3a:c2:c5:f0:78: d7:9e:02:ef:e9:8a:a4:69:34:ae:b3:02:a2:00:33:33:0f:e6: 79:01:0f:81:04:70:70:b3:7f:70:0e:e5:4a:8d:15:ab:8e:05: 37:ad:5f:f1:aa:21:60:e1:ec:66:e8:d6:d9:5e:91:f3:0e:5b: 01:46:ac:d8:2d:06:68:67:83:08:e5:bb:95:3e:a5:b3:af:14: 9c:6c:35:12:2f:44:14:cb:10:06:45:82:2c:41:7a:cd:56:97: 09:76:a5:cc:f8:d5:10:11:b7:31:1d:58:c0:3a:05:54:3d:6b: 55:75:c3:70:d7:f9:a0:97:31:df:01:5b:f7:33:74:d1:fc:2b: 1e:e3:15:ef:88:6f:26:55:2f:97:7a:08:13:d2:07:67:0e:94: cc:41:88:be:7d:e3:98:ee:70:5f:ec:f1:92:9c:9f:37:45:7d: dd:1f:c1:7c:a2:aa:b6:d2:57:7c:72:c4:be:c2:b9:17:f5:bf: 57:2e:87:d3:2e:a8:e9:68:38:c8:80:5a:9a:76:9a:ec:c4:04: 58:1f:cd:90:ca:f8:d9:c7:98:85:b9:d3:64:eb:98:3a:15:31: 5d:38:b1:b5:db:85:56:0d:63:e9:b7:d2:a2:a0:54:e0:ae:99: 5d:cb:a4:c3 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUOAq/UzrC4+DLKLhDo//Nef+kpaMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjQxOTRFMjdFMTVBNEY3NkUwMDY0MDM3OTUxNDNENEVG RENGMDIyRTAeFw0yNjExMTUwNDE5NDhaFw0yNjExMTYwNDQ0NDhaMDMxMTAvBgNV BAMTKDJEQzIxMDkzMjRDQ0ExQTA2QTFDMzRCOTk1RjAwNzhFQjFEQTc2MUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxg7cVp4B0L7PdUk1f/bgLQ2l9 NetrEBUMzkaupfQUG5/5/kGazAZB+3k6a9z1nOUl2MoKvjTsZXO5+rGV82VEWIaa tL07M/ln9NmOiDuYqm+kjcJr6acV+F7hHyH3mGN2AXuoPwCJZZwAzIIWfxbsYncC tghzPm1bjyxjhDeUBZiWbYjaCBXCqTJsIvBCngEh+rZ8LATKelfGwyI9+ttefg9O OpLKAyXG8du6/7BW9t8LP/gIH2Zc4xkwbvFa/XO6CuFeMKXIgJ1IwZOqruHtE4wZ dwHBrrmUTlYjH8Pm7MQ3kjbYqrM5RsHSYcg8aZeQ55hUhFCMS0q6Uq+exV/fAgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQULcIQkyTMoaBqHDS5lfAHjrHadhswHwYDVR0j BBgwFoAU9BlOJ+FaT3bgBkA3lRQ9Tv3PAi4wDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTkNDQy8x L0Y0MTk0RTI3RTE1QTRGNzZFMDA2NDAzNzk1MTQzRDRFRkRDRjAyMkUuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzAvRjQxOTRFMjdFMTVBNEY3NkUwMDY0MDM3OTUxNDNE NEVGRENGMDIyRS5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05DQ0MvMS9GNDE5NEUyN0UxNUE0Rjc2 RTAwNjQwMzc5NTE0M0Q0RUZEQ0YwMjJFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgCWNd3fJrOfh+nWf hzrCxfB4154C7+mKpGk0rrMCogAzMw/meQEPgQRwcLN/cA7lSo0Vq44FN61f8aoh YOHsZujW2V6R8w5bAUas2C0GaGeDCOW7lT6ls68UnGw1Ei9EFMsQBkWCLEF6zVaX CXalzPjVEBG3MR1YwDoFVD1rVXXDcNf5oJcx3wFb9zN00fwrHuMV74hvJlUvl3oI E9IHZw6UzEGIvn3jmO5wX+zxkpyfN0V93R/BfKKqttJXfHLEvsK5F/W/Vy6H0y6o 6Wg4yIBamnaa7MQEWB/NkMr42ceYhbnTZOuYOhUxXTixtduFVg1j6bfSoqBU4K6Z Xcukww== -----END CERTIFICATE-----Generated at Sun Nov 15 16:16:20 2026 by rpki-client