$ rpki-client -vvf rpkica.twnic.tw/rpki/NCREE/0/97D4884F986D543782ED0796247DD5237461E32E.mft File: 97D4884F986D543782ED0796247DD5237461E32E.mft (raw, json) Hash identifier: 7tnitJ+K+I1JOi1W9uGMWaHctEahQhJOoINCAPa52Fs= Subject key identifier: 62:63:DD:AC:E8:4D:56:8F:0F:E9:FF:03:1F:E5:EA:93:14:18:87:7E Authority key identifier: 97:D4:88:4F:98:6D:54:37:82:ED:07:96:24:7D:D5:23:74:61:E3:2E Certificate issuer: /CN=97D4884F986D543782ED0796247DD5237461E32E Certificate serial: 386321F21C5F19D9626892B633002231D37C2E80 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/97D4884F986D543782ED0796247DD5237461E32E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NCREE/0/97D4884F986D543782ED0796247DD5237461E32E.mft Manifest number: 6B Signing time: Mon 27 Jul 2026 21:36:39 +0000 Manifest this update: Mon 27 Jul 2026 21:31:39 +0000 Manifest next update: Tue 28 Jul 2026 23:57:39 +0000 Files and hashes: 1: 97D4884F986D543782ED0796247DD5237461E32E.crl (hash: aYPZcgdC4NIN6SjKy64d7F3zNR/IJ0lezjBDbWOdvIU=) 2: 3230322e352e31322e302f32322d3232203d3e203138313833.roa (hash: XbkYTDNrq99sllfWjZ/d99FzReEgoNHkyUkg86NPTgw=) 3: 3130332e3138392e3133322e302f32332d3233203d3e203138313833.roa (hash: 52gdtA1LdP2xK0dCg/MXu3Df1UL36Mp+kCidYA74Lo8=) 4: 323430303a383561303a3a2f33322d3332203d3e203138313833.roa (hash: C6OKHDxWyKxWvrSfW3hF42Kke8nwN95k72tbWDAEl2M=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NCREE/0/97D4884F986D543782ED0796247DD5237461E32E.crl rsync://rpkica.twnic.tw/rpki/NCREE/0/97D4884F986D543782ED0796247DD5237461E32E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/97D4884F986D543782ED0796247DD5237461E32E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 23:57:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:63:21:f2:1c:5f:19:d9:62:68:92:b6:33:00:22:31:d3:7c:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97D4884F986D543782ED0796247DD5237461E32E Validity Not Before: Jul 27 21:31:39 2026 GMT Not After : Jul 28 23:57:39 2026 GMT Subject: CN=6263DDACE84D568F0FE9FF031FE5EA931418877E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8b:d6:f8:5f:39:f6:91:18:04:19:1c:83:13: 44:49:1c:81:e1:ed:b2:ee:18:90:f0:94:1d:82:c0: f5:ec:ef:7c:fa:58:64:6f:63:64:ce:e9:8a:85:2f: 38:4e:98:a4:7e:13:f6:2f:3b:de:4b:48:4c:91:c4: 20:24:0e:3d:e9:5c:99:14:90:dc:d8:a7:28:6d:54: ae:44:60:8e:4b:54:7e:13:b5:ab:88:87:f8:21:8a: b5:aa:fd:e6:5f:06:ce:0c:4d:78:cb:cb:42:92:18: cc:83:e9:58:0d:29:43:f7:83:f7:f1:6c:e8:5f:f6: 38:5e:ed:a1:16:ea:59:3e:0b:64:ac:74:15:f0:6c: 31:01:bc:6b:ef:c1:27:e7:b8:02:5f:66:b1:0f:48: 45:59:9b:2c:08:f1:6f:80:d1:76:c8:25:e8:f4:9e: 3b:74:ac:0b:be:1a:a1:87:e7:cb:7d:8e:62:7c:d8: ac:d0:86:02:29:50:2d:bf:c2:c2:98:0d:cb:d4:3d: 8e:3f:07:70:ed:da:b3:44:ef:c9:f9:f5:73:65:8f: 61:3b:e5:56:8d:77:30:f3:5f:3a:25:2a:4f:2c:16: 87:85:46:bd:38:ab:b2:14:72:be:2d:97:45:e7:0a: 77:3c:ea:e4:4a:d8:cd:5e:34:2a:de:7a:2f:13:ca: 5c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:63:DD:AC:E8:4D:56:8F:0F:E9:FF:03:1F:E5:EA:93:14:18:87:7E X509v3 Authority Key Identifier: keyid:97:D4:88:4F:98:6D:54:37:82:ED:07:96:24:7D:D5:23:74:61:E3:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NCREE/0/97D4884F986D543782ED0796247DD5237461E32E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/97D4884F986D543782ED0796247DD5237461E32E.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NCREE/0/97D4884F986D543782ED0796247DD5237461E32E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:c7:04:18:4a:82:90:4d:6d:fb:ec:89:fe:c1:6d:8d:c2:64: cb:48:bf:cc:6a:28:4b:5b:d3:da:42:bb:bf:28:ba:42:06:40: 76:e1:85:7b:39:48:a1:e4:0d:e0:cd:6d:44:75:28:0b:e9:49: a5:80:f0:3e:06:0b:1e:60:44:4c:5e:4c:fc:11:7c:08:45:6d: 5f:1e:56:1d:de:6a:b0:9a:5f:9a:6f:8b:b1:c0:c8:95:14:b1: 3d:6c:d7:b9:a8:1c:06:76:fa:99:ef:0f:15:81:09:cc:22:a4: e0:be:1e:ae:43:c7:f8:d6:37:e4:c1:5a:4d:bc:eb:65:aa:a3: 5b:92:72:e7:e2:fa:c7:7c:79:ed:bd:1a:5f:b5:56:98:f5:92: 7b:e0:f4:44:7e:83:b7:7d:e7:35:cd:f3:77:98:75:6e:6c:22: a9:56:68:c4:b1:d3:6a:da:99:48:bf:3e:4d:5f:99:ff:2f:e4: 84:3c:91:b2:98:57:63:99:b6:19:cb:40:f4:df:9e:85:79:20: 98:7d:7c:69:a9:e9:39:b3:8f:08:ca:e6:37:a9:4f:a0:aa:b2: c1:00:82:f3:03:30:40:43:7b:6a:be:08:2c:19:2c:01:9e:cd: 93:a2:9f:b3:87:af:0d:c0:c3:5e:02:7b:69:d6:c0:8e:0a:8c: a0:03:8b:82 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUOGMh8hxfGdliaJK2MwAiMdN8LoAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTdENDg4NEY5ODZENTQzNzgyRUQwNzk2MjQ3REQ1MjM3 NDYxRTMyRTAeFw0yNjA3MjcyMTMxMzlaFw0yNjA3MjgyMzU3MzlaMDMxMTAvBgNV BAMTKDYyNjNEREFDRTg0RDU2OEYwRkU5RkYwMzFGRTVFQTkzMTQxODg3N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5i9b4Xzn2kRgEGRyDE0RJHIHh 7bLuGJDwlB2CwPXs73z6WGRvY2TO6YqFLzhOmKR+E/YvO95LSEyRxCAkDj3pXJkU kNzYpyhtVK5EYI5LVH4TtauIh/ghirWq/eZfBs4MTXjLy0KSGMyD6VgNKUP3g/fx bOhf9jhe7aEW6lk+C2SsdBXwbDEBvGvvwSfnuAJfZrEPSEVZmywI8W+A0XbIJej0 njt0rAu+GqGH58t9jmJ82KzQhgIpUC2/wsKYDcvUPY4/B3Dt2rNE78n59XNlj2E7 5VaNdzDzXzolKk8sFoeFRr04q7IUcr4tl0XnCnc86uRK2M1eNCreei8Tyly/AgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUYmPdrOhNVo8P6f8DH+XqkxQYh34wHwYDVR0j BBgwFoAUl9SIT5htVDeC7QeWJH3VI3Rh4y4wDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTkNSRUUv MC85N0Q0ODg0Rjk4NkQ1NDM3ODJFRDA3OTYyNDdERDUyMzc0NjFFMzJFLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzk3RDQ4ODRGOTg2RDU0Mzc4MkVEMDc5NjI0N0RE NTIzNzQ2MUUzMkUuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9OQ1JFRS8wLzk3RDQ4ODRGOTg2RDU0 Mzc4MkVEMDc5NjI0N0RENTIzNzQ2MUUzMkUubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCBxwQYSoKQTW37 7In+wW2NwmTLSL/MaihLW9PaQru/KLpCBkB24YV7OUih5A3gzW1EdSgL6UmlgPA+ BgseYERMXkz8EXwIRW1fHlYd3mqwml+ab4uxwMiVFLE9bNe5qBwGdvqZ7w8VgQnM IqTgvh6uQ8f41jfkwVpNvOtlqqNbknLn4vrHfHntvRpftVaY9ZJ74PREfoO3fec1 zfN3mHVubCKpVmjEsdNq2plIvz5NX5n/L+SEPJGymFdjmbYZy0D0356FeSCYfXxp qek5s48IyuY3qU+gqrLBAILzAzBAQ3tqvggsGSwBns2Top+zh68NwMNeAntp1sCO CoygA4uC -----END CERTIFICATE-----Generated at Tue Jul 28 17:10:11 2026 by rpki-client