$ rpki-client -vvvf rpkica.twnic.tw/rpki/NCIC/1/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.mft File: D5C99016D01EDDE0A4D47C3C948EE8859612C73B.mft (raw, json) Hash identifier: 2wNO6yPUgiNUwjVqsb32CmIZB/x+AWe/BFad6J7oWVg= Subject key identifier: 3E:36:95:94:FF:89:0A:FB:F7:40:4E:42:4E:17:EE:B8:0F:F3:ED:EC Authority key identifier: D5:C9:90:16:D0:1E:DD:E0:A4:D4:7C:3C:94:8E:E8:85:96:12:C7:3B Certificate issuer: /CN=D5C99016D01EDDE0A4D47C3C948EE8859612C73B Certificate serial: 7D89E5313BA6B04EC01AAFE2204DE5694475BA4D Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NCIC/1/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.mft Manifest number: 0209 Signing time: Wed 23 Sep 2026 00:46:01 +0000 Manifest this update: Wed 23 Sep 2026 00:41:01 +0000 Manifest next update: Thu 24 Sep 2026 03:36:01 +0000 Files and hashes: 1: 3139322e37322e31362e302f32302d3234203d3e2034373830.roa (hash: 9ZGrNp+VsLlXW7PeBXw8YpqEX/WVDXlTYIwuby9ILk4=) 2: 3139322e37322e3234302e302f32312d3234203d3e2039393139.roa (hash: zyCP5RCcYrInB0mG7H3w0fJawxlNECjjYSjAg7D7d1Y=) 3: 3139322e37322e3235322e302f32342d3234203d3e2039393139.roa (hash: VBtmPKe5I226J9zWpVQAjkGTwQ8c6xfoJIAIP/bSZoI=) 4: 3139322e37322e3234302e302f32312d3234203d3e2034373830.roa (hash: w9y6pwWmA3JFdHYwXGU59AkfbSQ5hRF5f8RxZemOXM8=) 5: 3139322e37322e332e302f32342d3234203d3e2039393139.roa (hash: qMTF96rAy8wZ4NUEpq4S8Q/4tASEMCoJMKXrGLo6KtQ=) 6: 3139322e37322e3235322e302f32342d3234203d3e2034373830.roa (hash: QUCYMabkjkOS3bq4pnYLsjSc27ckRrPNJ8pg8qqNByc=) 7: 3139322e37322e33322e302f31392d3234203d3e2034373830.roa (hash: IAJDcSfRLpjVsd3ilJuaUqAl0u4sdr8+zfKeB8N1STk=) 8: 3139322e37322e3132382e302f31382d3234203d3e2034373830.roa (hash: LzN8cI51zk5jZy8rEOcECVIZmpi8vie+TUsPNlzdXuc=) 9: 3139322e37322e342e302f32322d3234203d3e2039393139.roa (hash: Mc3y+NW93aC6lat66PDBZYR8qmh9c+fZPRpk7bBYllo=) 10: 3133392e3137352e302e302f31362d3234203d3e2039393139.roa (hash: 3pZVp3TNQ/sRl3TjQTLvkQ3q6JCaq0d/zamjf+77kx8=) 11: 3139322e37322e332e302f32342d3234203d3e2034373830.roa (hash: hj2bnED2YLfhRnAL+cGxD8mEc2iquoy7i11842ivkl8=) 12: 3139322e37322e36342e302f31382d3234203d3e2039393139.roa (hash: 6ubqZ+h8/1xZM/Z1mXArWRioq7/yui3/nMg9Ngz6hKA=) 13: 3139322e37322e3232342e302f32302d3234203d3e2034373830.roa (hash: JFJbmB7cfEuw1iDDZaeMc1QewQMUllS7sHbdWQbrgDc=) 14: 3139322e37322e31362e302f32302d3234203d3e2039393139.roa (hash: YfF/tC6LRnh/bsWMphOM4qUtQ57nFavnsqtfTl2of/U=) 15: 3139322e37322e36342e302f31382d3234203d3e2034373830.roa (hash: IkE5VbWeMMJYwmOD5YW4lS/zGapdsVeaSsB5x46YyVs=) 16: 3139322e37322e3139322e302f31392d3234203d3e2039393139.roa (hash: Ah2jakkWaX8SyRrg2TG3GrlMUxHdK/+BuuzbL3/oW74=) 17: 3139322e37322e342e302f32322d3234203d3e2034373830.roa (hash: Ba5i8ude16dQiEfcAiO+btSj/eH4uGS0xcFo7grp3x0=) 18: 3139322e37322e382e302f32312d3234203d3e2039393139.roa (hash: GbQSPFutvMmuWccC6y+kxjUSwDJ1ik/mT03jQDCuwD4=) 19: 3139322e37322e382e302f32312d3234203d3e2034373830.roa (hash: 1Hh6x51Jeg1BSF3NwDHjHunpz1y1V3E8ygnYaLHBszo=) 20: 3139322e37322e3234382e302f32322d3234203d3e2034373830.roa (hash: 65UG56uDtaduhHckiIsfYUMD5Llwyc25pnJQFOvZ6Bo=) 21: 3139322e37322e3234382e302f32322d3234203d3e2039393139.roa (hash: w2LmOI1eQP3xj9n4sBqRb67lBeJFTEuUVe+BjjWP/g8=) 22: 3139322e37322e3232342e302f32302d3234203d3e2039393139.roa (hash: IbJvzNWqowT9ss8SkDFFbTJBrs2hceylDNcxXN29XFI=) 23: 3139322e37322e33322e302f31392d3234203d3e2039393139.roa (hash: IdXpC8VBeG7nz0JfgL+likpQtKVBBBXtQNRSvEXG1d0=) 24: D5C99016D01EDDE0A4D47C3C948EE8859612C73B.crl (hash: nwolsUFuuWawCJeYZiSt1aUlHvW/VinlpWW5MeNkcvY=) 25: 3133392e3137352e302e302f31362d3234203d3e2034373830.roa (hash: /ZgMlJJWHzRz3oSWNjGyPTQH1Mg84+PLKC/H5qUI7Ns=) 26: 3139322e37322e3132382e302f31382d3234203d3e2039393139.roa (hash: bXHD2UHkc/GfgCH5hcaP2+voIqd8TOjXlXtoDjGW8JA=) 27: 3139322e37322e3139322e302f31392d3234203d3e2034373830.roa (hash: HDP+weW9NczVRv3tVvCtth7CO+aCW75PFkRxJDjQFGU=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NCIC/1/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.crl rsync://rpkica.twnic.tw/rpki/NCIC/1/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 03:36:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:89:e5:31:3b:a6:b0:4e:c0:1a:af:e2:20:4d:e5:69:44:75:ba:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5C99016D01EDDE0A4D47C3C948EE8859612C73B Validity Not Before: Sep 23 00:41:01 2026 GMT Not After : Sep 24 03:36:01 2026 GMT Subject: CN=3E369594FF890AFBF7404E424E17EEB80FF3EDEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ff:a2:6e:65:6e:f0:ad:ab:40:f9:36:64:f9: 64:7d:98:6f:3b:92:a7:48:d0:95:ba:d3:7e:93:b7: 50:d5:c4:12:f2:4a:2c:50:93:66:5f:bd:52:b0:06: 64:7d:bf:2b:f5:99:5e:13:6e:f1:a4:2d:4c:07:e1: 13:26:fb:5c:bc:14:cb:7a:ba:ac:15:d9:bd:1b:8e: 87:b1:78:94:4e:c7:ab:12:1c:1a:84:8d:af:12:11: 9d:f0:fe:5d:9d:29:5e:33:37:cd:fc:93:4b:5f:5e: 23:b4:3e:06:ef:da:9a:3a:c0:bf:3d:f1:76:16:1f: 05:82:07:88:bc:ab:65:10:5f:84:a3:06:d4:14:a7: 60:74:d2:e2:01:16:12:b8:45:62:48:b8:c9:18:e4: 65:ab:5d:db:2d:8b:92:75:68:97:94:c8:a7:20:7d: 60:fa:7b:2a:f5:2b:96:55:3d:ff:70:c9:4d:17:ad: 01:3e:43:65:3a:0f:b5:6d:6f:97:33:bd:a5:4a:f5: 1a:c9:6b:ad:8d:91:68:63:72:9b:1f:c2:3c:48:b2: 4f:c2:35:35:3d:ff:b3:10:31:90:ae:a6:53:7f:bb: 8e:56:ab:1a:6e:75:c5:1c:ca:ac:c5:46:21:64:50: 92:dd:96:09:bb:b4:31:9c:39:c1:71:d8:10:46:85: c1:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:36:95:94:FF:89:0A:FB:F7:40:4E:42:4E:17:EE:B8:0F:F3:ED:EC X509v3 Authority Key Identifier: keyid:D5:C9:90:16:D0:1E:DD:E0:A4:D4:7C:3C:94:8E:E8:85:96:12:C7:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NCIC/1/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NCIC/1/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:19:cd:c5:ec:50:8d:a2:4b:c8:f6:49:e8:31:26:3b:09:d0: e9:12:62:e7:85:a9:4f:17:65:de:da:84:51:de:cf:b3:53:db: 88:85:53:01:c9:28:29:fc:4c:52:e7:8c:7b:ea:ed:92:e5:c8: 47:3e:09:8e:c8:56:e4:c6:63:a6:1e:cb:24:e1:0a:0a:10:bf: a6:2f:fa:16:78:29:3b:6e:ca:f4:47:dd:00:67:77:2b:bb:39: 65:df:bd:b0:82:21:1e:94:6e:6a:d1:f2:16:98:0d:80:71:b9: 10:a4:57:36:c1:3e:4d:d2:94:92:bc:ff:27:09:67:f5:3b:d4: ae:4d:40:ab:42:56:b6:c3:4a:46:61:c4:e3:44:55:d9:6b:db: 48:58:a6:a3:b6:08:8e:42:8f:47:e9:25:67:de:8c:df:2f:12: c7:bb:96:cf:00:e6:8e:95:d4:58:34:10:d1:6b:e2:a5:e1:31: 44:16:f5:e2:69:3f:79:8a:d0:bd:1a:3f:5f:8a:09:44:7c:37: 2e:d8:72:5d:79:68:42:9d:f7:ee:9a:99:e1:db:6f:3d:9f:91: 02:1b:1e:69:fa:e4:6d:c4:96:4d:ea:5b:06:65:de:13:6b:ce: df:70:1a:88:71:3a:de:7b:0e:4d:24:6a:2c:84:0c:d9:d7:32: a7:3e:b2:53 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUfYnlMTumsE7AGq/iIE3laUR1uk0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDVDOTkwMTZEMDFFRERFMEE0RDQ3QzNDOTQ4RUU4ODU5 NjEyQzczQjAeFw0yNjA5MjMwMDQxMDFaFw0yNjA5MjQwMzM2MDFaMDMxMTAvBgNV BAMTKDNFMzY5NTk0RkY4OTBBRkJGNzQwNEU0MjRFMTdFRUI4MEZGM0VERUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT/6JuZW7wratA+TZk+WR9mG87 kqdI0JW6036Tt1DVxBLySixQk2ZfvVKwBmR9vyv1mV4TbvGkLUwH4RMm+1y8FMt6 uqwV2b0bjoexeJROx6sSHBqEja8SEZ3w/l2dKV4zN838k0tfXiO0Pgbv2po6wL89 8XYWHwWCB4i8q2UQX4SjBtQUp2B00uIBFhK4RWJIuMkY5GWrXdsti5J1aJeUyKcg fWD6eyr1K5ZVPf9wyU0XrQE+Q2U6D7Vtb5czvaVK9RrJa62NkWhjcpsfwjxIsk/C NTU9/7MQMZCuplN/u45WqxpudcUcyqzFRiFkUJLdlgm7tDGcOcFx2BBGhcE3AgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQUPjaVlP+JCvv3QE5CThfuuA/z7ewwHwYDVR0j BBgwFoAU1cmQFtAe3eCk1Hw8lI7ohZYSxzswDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTkNJQy8x L0Q1Qzk5MDE2RDAxRURERTBBNEQ0N0MzQzk0OEVFODg1OTYxMkM3M0IuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzAvRDVDOTkwMTZEMDFFRERFMEE0RDQ3QzNDOTQ4RUU4 ODU5NjEyQzczQi5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05DSUMvMS9ENUM5OTAxNkQwMUVEREUw QTRENDdDM0M5NDhFRTg4NTk2MTJDNzNCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANhnNxexQjaJLyPZJ 6DEmOwnQ6RJi54WpTxdl3tqEUd7Ps1PbiIVTAckoKfxMUueMe+rtkuXIRz4JjshW 5MZjph7LJOEKChC/pi/6FngpO27K9EfdAGd3K7s5Zd+9sIIhHpRuatHyFpgNgHG5 EKRXNsE+TdKUkrz/Jwln9TvUrk1Aq0JWtsNKRmHE40RV2WvbSFimo7YIjkKPR+kl Z96M3y8Sx7uWzwDmjpXUWDQQ0WvipeExRBb14mk/eYrQvRo/X4oJRHw3LthyXXlo Qp337pqZ4dtvPZ+RAhseafrkbcSWTepbBmXeE2vO33AaiHE63nsOTSRqLIQM2dcy pz6yUw== -----END CERTIFICATE-----Generated at Wed Sep 23 13:35:57 2026 by rpki-client