$ rpki-client -vvf rpkica.twnic.tw/rpki/NETGUARD/0/A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.mft File: A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.mft (raw, json) Hash identifier: 9cL6eF0UQPXe8W9j2wlyIAuqmHaD77bLoscX/ETvP2E= Subject key identifier: F8:B5:ED:47:F8:FF:A5:94:5F:D6:3D:E7:29:DC:61:AE:E1:C4:72:A6 Authority key identifier: A7:9F:FF:D9:8D:67:B1:DC:F7:64:D6:C6:0D:9D:8F:77:B1:8C:80:F8 Certificate issuer: /CN=A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8 Certificate serial: 3F649300AA0860137B200C04BC77A26CBC9F0E6E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NETGUARD/0/A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.mft Manifest number: 6A Signing time: Tue 28 Jul 2026 08:12:59 +0000 Manifest this update: Tue 28 Jul 2026 08:07:59 +0000 Manifest next update: Wed 29 Jul 2026 10:32:59 +0000 Files and hashes: 1: 3130332e3136302e3232342e302f32332d3234203d3e20313331363539.roa (hash: 7S4FcOba0oK0ThFobE5ZoA1Yfm0vEJ1gjov31dZGXJY=) 2: A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.crl (hash: 4Zk662U/dn5JoDtIuD29xIhrxAGuhtDgZkf53jj9Ff8=) 3: 3130332e3136302e3232342e302f32332d3234203d3e20313331363532.roa (hash: 47voBXTyiYiW0GNSqQXzjv9mGc6KAROEr3k+QrljAQs=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NETGUARD/0/A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.crl rsync://rpkica.twnic.tw/rpki/NETGUARD/0/A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 07:22:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:64:93:00:aa:08:60:13:7b:20:0c:04:bc:77:a2:6c:bc:9f:0e:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8 Validity Not Before: Jul 28 08:07:59 2026 GMT Not After : Jul 29 10:32:59 2026 GMT Subject: CN=F8B5ED47F8FFA5945FD63DE729DC61AEE1C472A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:28:34:05:30:9f:1c:41:6a:45:c8:22:5e:83: 53:57:2e:d8:9f:05:be:71:d4:f7:0f:ef:80:4f:7f: 66:e6:7f:8b:f9:2b:9d:38:1f:9e:bf:ca:0f:a9:b3: ac:9d:03:44:cf:88:fc:0e:10:4a:a4:2a:5a:f5:d7: 8d:d0:3a:07:76:bf:3e:40:7c:9b:93:97:00:8b:47: 7c:b7:5a:70:59:41:2a:ee:66:70:fa:b5:46:81:8a: 14:79:55:7d:9b:70:35:2d:c8:cd:1c:1a:51:74:8d: 20:21:f4:31:db:f9:2e:ec:42:8f:00:9b:9d:88:dc: 74:2e:44:80:ca:f2:d6:da:22:87:51:6d:4d:60:6c: 53:8d:70:f2:49:1a:cb:73:be:9c:0c:a6:cd:be:61: a7:e0:ef:fc:24:ab:25:44:0e:c1:4e:fc:e6:ea:f9: 57:a9:21:eb:08:f1:e7:17:29:9e:a2:7a:57:30:ea: 24:fd:d7:a1:09:d8:b9:0b:f2:bd:b6:26:32:f1:c5: 99:64:57:55:d6:7a:9d:d8:ca:79:89:b2:fe:89:c9: 43:6b:d5:5f:8e:ae:e1:1f:9d:b3:f7:91:e1:20:58: b6:84:63:a9:1d:9c:54:85:71:d1:12:03:d8:61:60: 8b:c6:7c:f5:11:56:eb:b5:e4:8f:99:87:e4:90:ea: 98:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:B5:ED:47:F8:FF:A5:94:5F:D6:3D:E7:29:DC:61:AE:E1:C4:72:A6 X509v3 Authority Key Identifier: keyid:A7:9F:FF:D9:8D:67:B1:DC:F7:64:D6:C6:0D:9D:8F:77:B1:8C:80:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NETGUARD/0/A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NETGUARD/0/A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:f6:4a:40:14:09:03:29:bf:0f:7b:10:e9:42:6c:22:28:b6: 50:aa:6f:4c:5e:69:95:e6:93:b1:e1:e5:70:3b:24:b1:5b:df: aa:df:c9:8b:7b:b5:55:a1:4c:c6:4c:ce:67:3f:c4:ca:82:b0: a2:45:96:1b:93:65:b9:82:e9:be:52:7e:90:da:bc:34:da:a7: 14:a0:85:44:f2:c2:75:57:0c:b6:97:97:97:40:53:d5:1d:45: e6:38:81:ea:8e:7e:5c:05:d1:e5:7c:3b:92:f4:e7:20:9c:a8: 25:e3:13:43:99:14:57:d9:3d:79:f8:3b:45:39:b8:06:0c:25: d1:23:d1:eb:30:8f:49:98:76:cd:25:b2:50:08:dd:56:73:1d: c7:e6:2e:1b:73:e8:fd:a0:17:5f:4e:58:20:9d:96:0e:65:8e: f9:f7:41:0c:70:50:11:e5:68:ff:93:8f:f4:78:48:7a:8f:51: ed:5a:f3:16:9f:3c:06:8e:bb:4b:5c:a0:8f:52:9c:66:4b:1e: d5:a6:68:fa:38:64:39:b0:88:f5:26:1e:ec:b8:69:bc:00:2d: d7:f6:9f:fe:f8:f2:cd:65:bc:d9:0f:45:9d:e2:5a:5b:38:1c: 94:1c:e3:e0:80:a6:25:d1:d8:1a:d7:7f:78:7a:83:cf:1b:0f: 4c:dd:ee:82 -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUP2STAKoIYBN7IAwEvHeibLyfDm4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTc5RkZGRDk4RDY3QjFEQ0Y3NjRENkM2MEQ5RDhGNzdC MThDODBGODAeFw0yNjA3MjgwODA3NTlaFw0yNjA3MjkxMDMyNTlaMDMxMTAvBgNV BAMTKEY4QjVFRDQ3RjhGRkE1OTQ1RkQ2M0RFNzI5REM2MUFFRTFDNDcyQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0KDQFMJ8cQWpFyCJeg1NXLtif Bb5x1PcP74BPf2bmf4v5K504H56/yg+ps6ydA0TPiPwOEEqkKlr1143QOgd2vz5A fJuTlwCLR3y3WnBZQSruZnD6tUaBihR5VX2bcDUtyM0cGlF0jSAh9DHb+S7sQo8A m52I3HQuRIDK8tbaIodRbU1gbFONcPJJGstzvpwMps2+Yafg7/wkqyVEDsFO/Obq +VepIesI8ecXKZ6ielcw6iT916EJ2LkL8r22JjLxxZlkV1XWep3YynmJsv6JyUNr 1V+OruEfnbP3keEgWLaEY6kdnFSFcdESA9hhYIvGfPURVuu15I+Zh+SQ6phpAgMB AAGjggHyMIIB7jAdBgNVHQ4EFgQU+LXtR/j/pZRf1j3nKdxhruHEcqYwHwYDVR0j BBgwFoAUp5//2Y1nsdz3ZNbGDZ2Pd7GMgPgwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTkVUR1VB UkQvMC9BNzlGRkZEOThENjdCMURDRjc2NEQ2QzYwRDlEOEY3N0IxOEM4MEY4LmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8xL0E3OUZGRkQ5OEQ2N0IxRENGNzY0RDZDNjBE OUQ4Rjc3QjE4QzgwRjguY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9ORVRHVUFSRC8wL0E3OUZGRkQ5 OEQ2N0IxRENGNzY0RDZDNjBEOUQ4Rjc3QjE4QzgwRjgubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAE9kpA FAkDKb8PexDpQmwiKLZQqm9MXmmV5pOx4eVwOySxW9+q38mLe7VVoUzGTM5nP8TK grCiRZYbk2W5gum+Un6Q2rw02qcUoIVE8sJ1Vwy2l5eXQFPVHUXmOIHqjn5cBdHl fDuS9OcgnKgl4xNDmRRX2T15+DtFObgGDCXRI9HrMI9JmHbNJbJQCN1Wcx3H5i4b c+j9oBdfTlggnZYOZY7590EMcFAR5Wj/k4/0eEh6j1HtWvMWnzwGjrtLXKCPUpxm Sx7Vpmj6OGQ5sIj1Jh7suGm8AC3X9p/++PLNZbzZD0Wd4lpbOByUHOPggKYl0dga 1394eoPPGw9M3e6C -----END CERTIFICATE-----Generated at Tue Jul 28 23:58:11 2026 by rpki-client