$ rpki-client -vvf rpkica.twnic.tw/rpki/NORDATW/0/432716EE054CEBDC62FC02DDE8C62AFC5333A2A8.mft File: 432716EE054CEBDC62FC02DDE8C62AFC5333A2A8.mft (raw, json) Hash identifier: U/9g+Bh6FwDzFttgqQdLeML2/VMFq1f8if6GBAr6iUM= Subject key identifier: 2D:30:FA:88:80:86:2F:DC:EB:98:00:A6:9A:33:67:7C:E0:C3:CD:0B Authority key identifier: 43:27:16:EE:05:4C:EB:DC:62:FC:02:DD:E8:C6:2A:FC:53:33:A2:A8 Certificate issuer: /CN=432716EE054CEBDC62FC02DDE8C62AFC5333A2A8 Certificate serial: 3524F8C2169FB76AC4251D9D056A1D28C71A4CE2 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/432716EE054CEBDC62FC02DDE8C62AFC5333A2A8.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NORDATW/0/432716EE054CEBDC62FC02DDE8C62AFC5333A2A8.mft Manifest number: 6C Signing time: Tue 28 Jul 2026 10:58:14 +0000 Manifest this update: Tue 28 Jul 2026 10:53:14 +0000 Manifest next update: Wed 29 Jul 2026 14:24:14 +0000 Files and hashes: 1: 3130332e3133382e3139342e302f32332d3234203d3e2037343833.roa (hash: zbX9ASNL5w9sJWWX7Nf2PDDJj816BJvv/iDAe1HP1Zg=) 2: 432716EE054CEBDC62FC02DDE8C62AFC5333A2A8.crl (hash: jYQ3h4Gk3crQkElTx8ocRGb4ALr8wkRd4oM7wFipbCU=) 3: 3231312e37392e39382e302f32332d3234203d3e203231383539.roa (hash: I1jX/SnnFc+gmcZStVqiSrnNdoqyaCZ0ExujTfgAaX0=) 4: 3231312e37392e39382e302f32332d3234203d3e20313530323838.roa (hash: hyBqf6CtEwkG2N35ylu9mRRCVoEzfqPS3BAfelnzHEQ=) 5: 3231312e37392e39382e302f32332d3234203d3e2037343833.roa (hash: CV931fhtw0I4Ug+ZdjJ2kNYqIh93pZBX4rG+jxT2d9s=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NORDATW/0/432716EE054CEBDC62FC02DDE8C62AFC5333A2A8.crl rsync://rpkica.twnic.tw/rpki/NORDATW/0/432716EE054CEBDC62FC02DDE8C62AFC5333A2A8.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/432716EE054CEBDC62FC02DDE8C62AFC5333A2A8.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 07:22:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:24:f8:c2:16:9f:b7:6a:c4:25:1d:9d:05:6a:1d:28:c7:1a:4c:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=432716EE054CEBDC62FC02DDE8C62AFC5333A2A8 Validity Not Before: Jul 28 10:53:14 2026 GMT Not After : Jul 29 14:24:14 2026 GMT Subject: CN=2D30FA8880862FDCEB9800A69A33677CE0C3CD0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:5b:cd:98:ee:84:3b:a7:36:45:52:8c:e0:ee: 89:fe:27:95:1f:c1:c5:3f:16:aa:b8:97:06:2b:a0: c0:7e:75:41:96:fc:ba:38:c2:81:ed:1f:65:14:77: 4b:71:c6:18:83:ec:cc:f4:91:85:ce:42:89:17:95: 04:be:f7:ea:56:b2:7a:6e:60:4f:de:e7:44:b1:3c: 4c:c0:dd:bb:19:1e:fd:01:d2:ef:e2:0a:87:67:6e: 56:02:0b:f7:a7:a3:f8:37:80:5b:22:e8:be:c6:bd: 2c:35:56:f0:a6:22:70:9d:b0:a2:13:ba:d3:5e:70: 16:31:b0:a3:af:b3:53:c1:b9:db:f0:aa:c3:17:f4: 93:56:e8:d1:86:56:7c:47:ae:d4:f9:ef:9f:4f:01: 8c:7c:eb:8a:1d:bf:ec:32:08:36:0d:cd:b2:e1:0f: 6e:5f:8c:33:49:68:1f:28:49:c6:1a:e8:1f:0a:9b: 69:6c:14:12:da:1c:08:7f:a7:43:13:b5:0e:3d:64: d4:10:38:14:0c:d4:f3:6d:45:f5:f3:e8:cf:dd:f2: 47:4e:aa:06:7f:9b:d7:f4:23:36:60:20:e6:4c:79: 54:79:67:e3:36:9a:91:d1:ad:bc:47:50:df:68:f1: 16:34:be:8c:76:c7:77:92:3a:63:1b:2a:24:ab:03: 00:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:30:FA:88:80:86:2F:DC:EB:98:00:A6:9A:33:67:7C:E0:C3:CD:0B X509v3 Authority Key Identifier: keyid:43:27:16:EE:05:4C:EB:DC:62:FC:02:DD:E8:C6:2A:FC:53:33:A2:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NORDATW/0/432716EE054CEBDC62FC02DDE8C62AFC5333A2A8.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/432716EE054CEBDC62FC02DDE8C62AFC5333A2A8.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NORDATW/0/432716EE054CEBDC62FC02DDE8C62AFC5333A2A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:92:bf:e1:34:ef:55:f0:e1:c2:a2:a4:af:bb:4e:de:0a:d2: 2f:cf:bd:af:aa:46:92:b0:2d:15:82:48:14:79:58:5e:04:a5: 81:74:8f:94:dc:f5:9c:3c:64:1c:1c:e6:ef:2c:f8:28:8f:4f: 48:d9:ba:2d:ca:30:0a:26:83:e9:ee:36:d9:e6:24:a5:93:0a: 6c:55:7c:e7:63:82:72:0a:ce:73:7f:97:76:a5:46:cb:ef:06: 53:bc:7f:cd:5f:19:2b:fe:41:fb:a5:92:6c:0b:f5:d1:1b:a9: f6:10:1c:29:61:c1:6a:9a:ee:4a:fa:20:fe:c8:6d:22:74:ed: a7:6f:b3:b2:04:d4:aa:8a:07:c8:79:a5:e1:c3:8d:c2:cc:6c: d4:59:19:29:ac:e5:be:af:20:44:35:b1:ae:e5:d3:7a:b3:c9: ca:33:58:31:69:59:aa:b7:c2:6a:bf:fa:54:f7:ff:34:cd:07: 68:b1:98:c4:01:28:52:f9:21:8e:2c:a8:58:39:37:da:9f:35: ca:9c:9b:78:00:49:ba:ff:9d:26:a6:44:b5:c7:ec:b0:b3:0b: 2c:4e:12:15:b9:c5:5c:22:a1:7a:76:58:6c:4b:9c:cd:b0:5e: f8:e4:35:94:e5:ce:72:c2:8f:45:07:d2:64:52:80:18:b1:56: 34:7a:f6:fb -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIUNST4whaft2rEJR2dBWodKMcaTOIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDMyNzE2RUUwNTRDRUJEQzYyRkMwMkRERThDNjJBRkM1 MzMzQTJBODAeFw0yNjA3MjgxMDUzMTRaFw0yNjA3MjkxNDI0MTRaMDMxMTAvBgNV BAMTKDJEMzBGQTg4ODA4NjJGRENFQjk4MDBBNjlBMzM2NzdDRTBDM0NEMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWW82Y7oQ7pzZFUozg7on+J5Uf wcU/Fqq4lwYroMB+dUGW/Lo4woHtH2UUd0txxhiD7Mz0kYXOQokXlQS+9+pWsnpu YE/e50SxPEzA3bsZHv0B0u/iCodnblYCC/eno/g3gFsi6L7GvSw1VvCmInCdsKIT utNecBYxsKOvs1PBudvwqsMX9JNW6NGGVnxHrtT5759PAYx864odv+wyCDYNzbLh D25fjDNJaB8oScYa6B8Km2lsFBLaHAh/p0MTtQ49ZNQQOBQM1PNtRfXz6M/d8kdO qgZ/m9f0IzZgIOZMeVR5Z+M2mpHRrbxHUN9o8RY0vox2x3eSOmMbKiSrAwADAgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQULTD6iICGL9zrmACmmjNnfODDzQswHwYDVR0j BBgwFoAUQycW7gVM69xi/ALd6MYq/FMzoqgwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTk9SREFU Vy8wLzQzMjcxNkVFMDU0Q0VCREM2MkZDMDJEREU4QzYyQUZDNTMzM0EyQTguY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvNDMyNzE2RUUwNTRDRUJEQzYyRkMwMkRERThD NjJBRkM1MzMzQTJBOC5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05PUkRBVFcvMC80MzI3MTZFRTA1 NENFQkRDNjJGQzAyRERFOEM2MkFGQzUzMzNBMkE4Lm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfZK/4TTv VfDhwqKkr7tO3grSL8+9r6pGkrAtFYJIFHlYXgSlgXSPlNz1nDxkHBzm7yz4KI9P SNm6LcowCiaD6e422eYkpZMKbFV852OCcgrOc3+XdqVGy+8GU7x/zV8ZK/5B+6WS bAv10Rup9hAcKWHBapruSvog/shtInTtp2+zsgTUqooHyHml4cONwsxs1FkZKazl vq8gRDWxruXTerPJyjNYMWlZqrfCar/6VPf/NM0HaLGYxAEoUvkhjiyoWDk32p81 ypybeABJuv+dJqZEtcfssLMLLE4SFbnFXCKhenZYbEuczbBe+OQ1lOXOcsKPRQfS ZFKAGLFWNHr2+w== -----END CERTIFICATE-----Generated at Tue Jul 28 21:59:19 2026 by rpki-client