$ rpki-client -vvf rpkica.twnic.tw/rpki/NCREE/0/97D4884F986D543782ED0796247DD5237461E32E.mft File: 97D4884F986D543782ED0796247DD5237461E32E.mft (raw, json) Hash identifier: yk3olijrZKG2lvyi5/VLALWPZoNRPs4raziHZIqC/vU= Subject key identifier: C5:14:74:98:78:82:A2:BC:87:3A:89:13:96:CB:9D:11:D5:9D:85:0F Authority key identifier: 97:D4:88:4F:98:6D:54:37:82:ED:07:96:24:7D:D5:23:74:61:E3:2E Certificate issuer: /CN=97D4884F986D543782ED0796247DD5237461E32E Certificate serial: 039EE9EF65F802B91E9BB6928491C5457081C7AA Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/97D4884F986D543782ED0796247DD5237461E32E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NCREE/0/97D4884F986D543782ED0796247DD5237461E32E.mft Manifest number: 30 Signing time: Sat 13 Jun 2026 04:13:58 +0000 Manifest this update: Sat 13 Jun 2026 04:08:58 +0000 Manifest next update: Sun 14 Jun 2026 04:39:58 +0000 Files and hashes: 1: 97D4884F986D543782ED0796247DD5237461E32E.crl (hash: KJeLK4fdNk8IVW+YYLQZp2Y4dZi7Hey4ZOSVzEinYnA=) 2: 323430303a383561303a3a2f33322d3332203d3e203138313833.roa (hash: C6OKHDxWyKxWvrSfW3hF42Kke8nwN95k72tbWDAEl2M=) 3: 3130332e3138392e3133322e302f32332d3233203d3e203138313833.roa (hash: 52gdtA1LdP2xK0dCg/MXu3Df1UL36Mp+kCidYA74Lo8=) 4: 3230322e352e31322e302f32322d3232203d3e203138313833.roa (hash: XbkYTDNrq99sllfWjZ/d99FzReEgoNHkyUkg86NPTgw=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NCREE/0/97D4884F986D543782ED0796247DD5237461E32E.crl rsync://rpkica.twnic.tw/rpki/NCREE/0/97D4884F986D543782ED0796247DD5237461E32E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/97D4884F986D543782ED0796247DD5237461E32E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 00:20:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:9e:e9:ef:65:f8:02:b9:1e:9b:b6:92:84:91:c5:45:70:81:c7:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97D4884F986D543782ED0796247DD5237461E32E Validity Not Before: Jun 13 04:08:58 2026 GMT Not After : Jun 14 04:39:58 2026 GMT Subject: CN=C51474987882A2BC873A891396CB9D11D59D850F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:a1:5d:0d:a3:57:eb:84:ee:a6:05:51:0e:a4: de:0f:5a:e7:50:5f:01:9b:68:00:40:87:fb:c5:51: ab:43:32:3a:82:0b:a3:b0:df:b6:68:b6:82:9d:b3: e0:dd:ad:04:37:ee:c7:d2:5c:ff:d3:c0:5c:84:79: c5:59:b2:bb:ba:a7:8d:c1:49:89:b9:21:18:28:a8: 79:d9:9b:d5:d6:15:82:cd:ff:23:83:4d:d5:10:a3: b9:a7:d5:8f:72:a1:a6:34:fc:1f:4f:1f:32:62:40: 7d:82:bd:31:78:fd:7c:7a:64:e1:10:bd:93:ca:81: 39:4d:db:29:bd:98:08:f6:ed:7d:cf:08:0d:74:62: 56:55:25:36:70:48:e7:0a:99:74:31:73:4e:bb:f2: 89:be:51:c5:f7:ac:ae:12:5e:76:8b:9b:6f:84:34: 1b:91:4b:1b:f6:1b:08:b0:4a:3f:c3:5b:f1:c6:c8: 4b:cc:1b:cf:f2:b3:9b:40:8b:c4:0d:2a:7a:8e:03: c7:97:75:65:74:bc:d4:50:93:8c:f9:c8:e0:56:f6: f0:ee:0e:a4:fa:92:5a:e3:18:82:98:fd:65:25:16: d3:ef:e2:5c:3f:84:53:06:b5:fc:1d:e3:67:e7:1f: fa:40:d7:4c:37:71:d7:04:79:39:29:46:ea:16:aa: 55:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:14:74:98:78:82:A2:BC:87:3A:89:13:96:CB:9D:11:D5:9D:85:0F X509v3 Authority Key Identifier: keyid:97:D4:88:4F:98:6D:54:37:82:ED:07:96:24:7D:D5:23:74:61:E3:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NCREE/0/97D4884F986D543782ED0796247DD5237461E32E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/97D4884F986D543782ED0796247DD5237461E32E.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NCREE/0/97D4884F986D543782ED0796247DD5237461E32E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:2f:14:1d:f4:1b:e0:4c:27:cb:69:35:08:5e:54:3d:b6:1c: 5e:f8:b2:02:11:bd:55:16:9d:ef:10:21:a0:be:9f:a3:a8:6f: 40:56:52:c4:19:31:24:77:8d:a4:8b:1c:11:c4:09:0d:24:23: 79:b7:1c:1f:10:96:f1:ab:54:78:f1:0c:07:ee:bb:cf:2e:97: 36:b8:4c:89:91:f1:67:ec:45:45:d0:83:f3:59:89:3b:48:38: 55:bf:ae:1a:75:10:43:0a:5f:b8:94:89:0a:d0:a5:a1:c6:4f: 28:12:79:16:c6:f2:2a:57:e8:fd:63:ab:0c:6c:f0:1c:5e:45: b6:cd:96:6d:1b:3e:dc:33:9a:cf:bc:36:b6:4a:a8:c0:9b:c9: 7c:e8:3b:a7:08:68:46:4b:56:d8:84:ef:2a:d0:a0:90:56:96: 09:c7:40:c7:bb:d0:d7:6f:ee:95:1a:04:b4:5d:87:d1:43:1f: 7c:e2:1a:1a:bb:7b:a1:ed:eb:a7:b4:a4:2b:5c:e9:7e:58:f2: a1:95:17:09:0f:e2:99:00:07:4f:75:52:c3:ff:68:76:5c:88: dc:04:ad:07:25:63:28:03:da:56:96:64:b0:c4:c6:d4:c6:35: 76:9c:aa:8f:d6:40:cb:b1:05:7c:1c:64:fe:cd:96:fc:ab:64: 15:7f:fb:7a -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUA57p72X4Arkem7aShJHFRXCBx6owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTdENDg4NEY5ODZENTQzNzgyRUQwNzk2MjQ3REQ1MjM3 NDYxRTMyRTAeFw0yNjA2MTMwNDA4NThaFw0yNjA2MTQwNDM5NThaMDMxMTAvBgNV BAMTKEM1MTQ3NDk4Nzg4MkEyQkM4NzNBODkxMzk2Q0I5RDExRDU5RDg1MEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD9oV0No1frhO6mBVEOpN4PWudQ XwGbaABAh/vFUatDMjqCC6Ow37ZotoKds+DdrQQ37sfSXP/TwFyEecVZsru6p43B SYm5IRgoqHnZm9XWFYLN/yODTdUQo7mn1Y9yoaY0/B9PHzJiQH2CvTF4/Xx6ZOEQ vZPKgTlN2ym9mAj27X3PCA10YlZVJTZwSOcKmXQxc0678om+UcX3rK4SXnaLm2+E NBuRSxv2GwiwSj/DW/HGyEvMG8/ys5tAi8QNKnqOA8eXdWV0vNRQk4z5yOBW9vDu DqT6klrjGIKY/WUlFtPv4lw/hFMGtfwd42fnH/pA10w3cdcEeTkpRuoWqlXbAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUxRR0mHiCoryHOokTlsudEdWdhQ8wHwYDVR0j BBgwFoAUl9SIT5htVDeC7QeWJH3VI3Rh4y4wDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTkNSRUUv MC85N0Q0ODg0Rjk4NkQ1NDM3ODJFRDA3OTYyNDdERDUyMzc0NjFFMzJFLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzk3RDQ4ODRGOTg2RDU0Mzc4MkVEMDc5NjI0N0RE NTIzNzQ2MUUzMkUuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9OQ1JFRS8wLzk3RDQ4ODRGOTg2RDU0 Mzc4MkVEMDc5NjI0N0RENTIzNzQ2MUUzMkUubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCPLxQd9BvgTCfL aTUIXlQ9thxe+LICEb1VFp3vECGgvp+jqG9AVlLEGTEkd42kixwRxAkNJCN5txwf EJbxq1R48QwH7rvPLpc2uEyJkfFn7EVF0IPzWYk7SDhVv64adRBDCl+4lIkK0KWh xk8oEnkWxvIqV+j9Y6sMbPAcXkW2zZZtGz7cM5rPvDa2SqjAm8l86DunCGhGS1bY hO8q0KCQVpYJx0DHu9DXb+6VGgS0XYfRQx984hoau3uh7euntKQrXOl+WPKhlRcJ D+KZAAdPdVLD/2h2XIjcBK0HJWMoA9pWlmSwxMbUxjV2nKqP1kDLsQV8HGT+zZb8 q2QVf/t6 -----END CERTIFICATE-----Generated at Sat Jun 13 11:29:17 2026 by rpki-client