$ rpki-client -vvvf rpkica.twnic.tw/rpki/NCREE/0/97D4884F986D543782ED0796247DD5237461E32E.mft File: 97D4884F986D543782ED0796247DD5237461E32E.mft (raw, json) Hash identifier: srvhai8PKrlwyqaXnFXy+R0XsytbLwsZQZYDVmBoT/4= Subject key identifier: A3:1D:A0:3B:D4:39:0B:69:EC:B9:3A:6F:A0:49:A1:11:C9:44:38:A5 Authority key identifier: 97:D4:88:4F:98:6D:54:37:82:ED:07:96:24:7D:D5:23:74:61:E3:2E Certificate issuer: /CN=97D4884F986D543782ED0796247DD5237461E32E Certificate serial: 1F271D76B60310E656C61B018287DF36FF6A0C2A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/97D4884F986D543782ED0796247DD5237461E32E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NCREE/0/97D4884F986D543782ED0796247DD5237461E32E.mft Manifest number: B5 Signing time: Mon 21 Sep 2026 07:46:34 +0000 Manifest this update: Mon 21 Sep 2026 07:41:34 +0000 Manifest next update: Tue 22 Sep 2026 08:32:34 +0000 Files and hashes: 1: 97D4884F986D543782ED0796247DD5237461E32E.crl (hash: FIA7rqdG2Fc64isdbncXQGfcpAoE5/d8r6ZyWYJl5EA=) 2: 3230322e352e31322e302f32322d3232203d3e203138313833.roa (hash: XbkYTDNrq99sllfWjZ/d99FzReEgoNHkyUkg86NPTgw=) 3: 3130332e3138392e3133322e302f32332d3233203d3e203138313833.roa (hash: 52gdtA1LdP2xK0dCg/MXu3Df1UL36Mp+kCidYA74Lo8=) 4: 323430303a383561303a3a2f33322d3332203d3e203138313833.roa (hash: C6OKHDxWyKxWvrSfW3hF42Kke8nwN95k72tbWDAEl2M=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NCREE/0/97D4884F986D543782ED0796247DD5237461E32E.crl rsync://rpkica.twnic.tw/rpki/NCREE/0/97D4884F986D543782ED0796247DD5237461E32E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/97D4884F986D543782ED0796247DD5237461E32E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 03:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:27:1d:76:b6:03:10:e6:56:c6:1b:01:82:87:df:36:ff:6a:0c:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97D4884F986D543782ED0796247DD5237461E32E Validity Not Before: Sep 21 07:41:34 2026 GMT Not After : Sep 22 08:32:34 2026 GMT Subject: CN=A31DA03BD4390B69ECB93A6FA049A111C94438A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:39:ea:21:15:7b:b1:8b:f6:ef:84:4a:12:fd: 1e:23:2e:81:72:73:2a:59:a1:07:ed:f9:23:7d:a8: e9:b1:31:b9:be:6b:6f:db:16:c7:dd:c9:36:32:c7: 46:ce:af:25:5e:a0:e6:d0:df:e2:65:43:57:10:fa: a1:4d:07:88:99:20:cd:57:63:a7:a1:31:6c:18:2f: 0b:2f:40:90:6c:53:47:ed:7c:11:e2:5e:51:bb:bf: 56:27:ff:5d:90:9a:46:0f:be:2a:18:50:6a:71:61: f7:25:57:56:3e:c6:a3:27:5a:e0:84:26:56:35:72: 25:ae:f7:e0:bd:ee:31:75:14:d4:0b:9b:8d:9b:54: 3e:26:49:46:4c:c5:3b:71:9e:7b:c6:d9:76:06:f3: a1:f6:65:36:c8:dd:4e:cc:7d:d1:c9:48:b5:0e:39: 26:a4:e6:44:ce:a2:f4:9a:62:5e:ba:47:1f:99:0e: 17:e4:c7:3f:c0:09:20:72:10:51:5d:d6:57:70:3c: 5c:2f:b9:3d:43:13:00:ef:15:f2:16:a3:3f:d6:9a: e1:36:d8:3a:68:13:1a:0e:da:68:f1:83:ed:cc:39: 45:39:4f:ae:33:9a:af:b1:17:5e:25:9e:71:1f:45: a0:80:d4:f5:5e:f0:aa:a5:91:5f:63:c6:9f:92:b5: 60:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:1D:A0:3B:D4:39:0B:69:EC:B9:3A:6F:A0:49:A1:11:C9:44:38:A5 X509v3 Authority Key Identifier: keyid:97:D4:88:4F:98:6D:54:37:82:ED:07:96:24:7D:D5:23:74:61:E3:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NCREE/0/97D4884F986D543782ED0796247DD5237461E32E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/97D4884F986D543782ED0796247DD5237461E32E.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NCREE/0/97D4884F986D543782ED0796247DD5237461E32E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:f7:d6:11:06:ad:62:bb:46:72:23:9c:a2:1a:78:54:3b:79: 8c:54:ff:0b:cf:a4:ff:c1:a3:82:d8:fc:85:a0:8a:d1:a4:3b: d2:34:b5:30:df:bd:f2:b7:be:81:b1:ea:e3:78:30:09:69:1f: 1e:5f:f4:14:98:20:82:f9:18:e2:30:eb:89:3e:78:91:e5:7d: f8:09:f1:32:7c:61:55:2a:53:af:a2:0e:a7:b1:34:08:94:31: 85:57:9d:22:1a:ee:d7:8c:1d:d3:7e:3d:87:36:16:63:86:dc: f1:74:b9:6e:1c:e8:06:c6:59:e9:9e:77:c4:02:27:ee:b5:14: e3:99:ba:d5:6f:bd:00:fc:a9:e3:d4:ad:2a:b8:ed:84:b2:0c: ce:91:50:e9:1e:8d:bd:2b:f2:e5:90:21:e2:c7:95:50:69:39: 4a:83:bc:1d:6a:b8:ef:4c:4f:d0:e8:2b:57:84:74:43:26:7e: 65:9f:5b:fa:21:7b:1c:b5:c4:1f:51:ff:dc:bf:60:af:7d:6f: ad:59:ce:85:68:e8:34:3d:fc:bc:99:7f:b9:ed:76:14:6a:e8: 7b:55:e6:82:d3:21:19:2b:42:ad:53:d1:ab:c2:04:e0:45:8f: 5c:fa:0c:33:31:90:07:23:7b:07:34:e1:e7:11:b6:67:b3:ac: 3f:3b:8b:2d -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUHycddrYDEOZWxhsBgoffNv9qDCowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTdENDg4NEY5ODZENTQzNzgyRUQwNzk2MjQ3REQ1MjM3 NDYxRTMyRTAeFw0yNjA5MjEwNzQxMzRaFw0yNjA5MjIwODMyMzRaMDMxMTAvBgNV BAMTKEEzMURBMDNCRDQzOTBCNjlFQ0I5M0E2RkEwNDlBMTExQzk0NDM4QTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8OeohFXuxi/bvhEoS/R4jLoFy cypZoQft+SN9qOmxMbm+a2/bFsfdyTYyx0bOryVeoObQ3+JlQ1cQ+qFNB4iZIM1X Y6ehMWwYLwsvQJBsU0ftfBHiXlG7v1Yn/12QmkYPvioYUGpxYfclV1Y+xqMnWuCE JlY1ciWu9+C97jF1FNQLm42bVD4mSUZMxTtxnnvG2XYG86H2ZTbI3U7MfdHJSLUO OSak5kTOovSaYl66Rx+ZDhfkxz/ACSByEFFd1ldwPFwvuT1DEwDvFfIWoz/WmuE2 2DpoExoO2mjxg+3MOUU5T64zmq+xF14lnnEfRaCA1PVe8KqlkV9jxp+StWAXAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUox2gO9Q5C2nsuTpvoEmhEclEOKUwHwYDVR0j BBgwFoAUl9SIT5htVDeC7QeWJH3VI3Rh4y4wDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTkNSRUUv MC85N0Q0ODg0Rjk4NkQ1NDM3ODJFRDA3OTYyNDdERDUyMzc0NjFFMzJFLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzk3RDQ4ODRGOTg2RDU0Mzc4MkVEMDc5NjI0N0RE NTIzNzQ2MUUzMkUuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9OQ1JFRS8wLzk3RDQ4ODRGOTg2RDU0 Mzc4MkVEMDc5NjI0N0RENTIzNzQ2MUUzMkUubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCV99YRBq1iu0Zy I5yiGnhUO3mMVP8Lz6T/waOC2PyFoIrRpDvSNLUw373yt76BserjeDAJaR8eX/QU mCCC+RjiMOuJPniR5X34CfEyfGFVKlOvog6nsTQIlDGFV50iGu7XjB3Tfj2HNhZj htzxdLluHOgGxlnpnnfEAifutRTjmbrVb70A/Knj1K0quO2EsgzOkVDpHo29K/Ll kCHix5VQaTlKg7wdarjvTE/Q6CtXhHRDJn5ln1v6IXsctcQfUf/cv2CvfW+tWc6F aOg0Pfy8mX+57XYUauh7VeaC0yEZK0KtU9GrwgTgRY9c+gwzMZAHI3sHNOHnEbZn s6w/O4st -----END CERTIFICATE-----Generated at Mon Sep 21 15:39:25 2026 by rpki-client