$ rpki-client -vvvf rpkica.twnic.tw/rpki/NSS/0/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.mft File: 9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.mft (raw, json) Hash identifier: B4CjMbhZ/eaA6noZ65oLmMpufchTDo+zQONrpym0NrI= Subject key identifier: AE:70:EF:A4:23:B4:E8:70:36:49:8D:93:08:8F:B8:08:BC:D7:4C:42 Authority key identifier: 9E:13:5A:CA:9B:3B:7E:42:3F:6A:6E:49:C9:22:E7:C9:FF:9D:04:3E Certificate issuer: /CN=9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E Certificate serial: 069C2707A477D342E77A654DE59B3B5BF4672E2D Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NSS/0/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.mft Manifest number: B6 Signing time: Wed 23 Sep 2026 05:11:40 +0000 Manifest this update: Wed 23 Sep 2026 05:06:40 +0000 Manifest next update: Thu 24 Sep 2026 06:22:40 +0000 Files and hashes: 1: 9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.crl (hash: vApdV/wZGljcHOWqipGHnFHfMiuhYbgylDhJflnY128=) 2: 323430333a663363303a3a2f33322d3332203d3e20313331363236.roa (hash: U+TwGMruloppvfph33ur/zLTpQNWHiQ2kQh2YCvkqAQ=) 3: 3130332e3131382e32342e302f32322d3234203d3e20313331363236.roa (hash: 7ZYOaD4BiHJMT5uylYeAq6oBkT9jOAeVwRTnZzrlVB0=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NSS/0/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.crl rsync://rpkica.twnic.tw/rpki/NSS/0/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 06:22:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:9c:27:07:a4:77:d3:42:e7:7a:65:4d:e5:9b:3b:5b:f4:67:2e:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E Validity Not Before: Sep 23 05:06:40 2026 GMT Not After : Sep 24 06:22:40 2026 GMT Subject: CN=AE70EFA423B4E87036498D93088FB808BCD74C42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:37:d0:2e:8f:91:27:d2:14:a5:27:d9:a1:24: a1:69:80:ac:bf:70:98:ad:5b:7d:04:ed:69:d9:51: 35:39:a6:3e:29:f3:48:ba:e9:7a:b9:1e:de:c2:e5: e0:ad:d1:73:fe:99:ee:23:ef:67:34:34:58:6d:04: 6b:98:76:03:90:44:da:ae:be:c1:34:87:fc:b0:d2: 70:54:c7:47:5c:a6:b0:49:e4:90:3b:c5:a6:b3:81: e1:0c:3e:47:ac:13:f7:70:87:e1:2e:43:d0:6e:bf: 7a:81:82:e0:93:77:33:62:59:1f:0e:72:1f:13:32: 59:7c:7d:54:16:62:cc:77:16:a6:8a:0a:16:d6:fa: f6:07:62:22:50:35:0a:c8:6f:a5:bb:9d:7b:7a:7a: 91:ce:85:79:72:b2:40:ae:41:9b:2a:82:9e:aa:1c: 89:9d:0c:98:45:05:e9:9e:c1:c2:07:16:e7:04:82: 1f:82:d0:0e:83:6b:8e:2f:30:50:a1:01:0c:87:96: 45:08:24:10:3f:47:a8:c8:76:b5:88:c5:00:29:19: fc:ef:ff:1a:36:f4:a0:11:e2:8b:88:23:44:c0:07: c8:8e:39:27:95:78:7f:e6:52:c2:41:a4:5c:0c:bb: 9f:42:60:2e:b3:35:8d:25:77:47:be:94:b9:60:41: f4:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:70:EF:A4:23:B4:E8:70:36:49:8D:93:08:8F:B8:08:BC:D7:4C:42 X509v3 Authority Key Identifier: keyid:9E:13:5A:CA:9B:3B:7E:42:3F:6A:6E:49:C9:22:E7:C9:FF:9D:04:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NSS/0/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NSS/0/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:be:e2:1f:53:fb:7d:d9:63:bf:0a:79:11:e7:fe:3a:53:de: 4b:04:a9:a6:51:00:23:7e:0a:c4:33:fe:dd:26:4d:3a:ca:c3: 73:21:2b:8d:f5:3a:73:f0:d1:09:84:78:c6:f4:87:13:8e:17: f1:38:a2:1a:28:d8:a8:50:53:43:b0:fe:f2:79:67:b4:f4:43: e6:ec:0d:d1:a2:85:69:8a:68:9e:d4:21:ed:ab:ca:56:ca:e9: 57:40:28:02:a7:c0:38:9d:cb:e7:48:d8:f0:b2:29:d6:53:a5: b4:47:cf:d9:84:86:d5:40:1c:12:28:d8:7d:3f:93:55:2d:1e: 76:62:36:29:8c:ca:25:f9:8e:2e:bf:e1:b6:ba:56:98:ba:60: 38:05:b3:fb:72:56:b2:fc:31:9e:df:e5:7c:2d:03:04:2c:11: 4f:7c:3f:17:6f:7c:c3:75:98:df:8b:8a:c8:03:6e:1a:14:ec: 65:a6:71:8b:cd:b4:ae:63:d3:14:c0:75:b5:f4:25:98:b9:82: 12:f5:91:13:c2:86:28:ff:4a:02:95:0d:c7:22:ca:3f:21:e7: 29:e6:0b:db:fd:2a:fe:aa:e4:65:4b:2e:89:62:c1:f5:57:e5: bf:0c:ee:c1:47:79:5e:5c:10:ad:1e:0e:17:ec:62:f3:07:b0: 82:14:e3:6c -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUBpwnB6R300LnemVN5Zs7W/RnLi0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUUxMzVBQ0E5QjNCN0U0MjNGNkE2RTQ5QzkyMkU3QzlG RjlEMDQzRTAeFw0yNjA5MjMwNTA2NDBaFw0yNjA5MjQwNjIyNDBaMDMxMTAvBgNV BAMTKEFFNzBFRkE0MjNCNEU4NzAzNjQ5OEQ5MzA4OEZCODA4QkNENzRDNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPN9Auj5En0hSlJ9mhJKFpgKy/ cJitW30E7WnZUTU5pj4p80i66Xq5Ht7C5eCt0XP+me4j72c0NFhtBGuYdgOQRNqu vsE0h/yw0nBUx0dcprBJ5JA7xaazgeEMPkesE/dwh+EuQ9Buv3qBguCTdzNiWR8O ch8TMll8fVQWYsx3FqaKChbW+vYHYiJQNQrIb6W7nXt6epHOhXlyskCuQZsqgp6q HImdDJhFBemewcIHFucEgh+C0A6Da44vMFChAQyHlkUIJBA/R6jIdrWIxQApGfzv /xo29KAR4ouII0TAB8iOOSeVeH/mUsJBpFwMu59CYC6zNY0ld0e+lLlgQfQvAgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUrnDvpCO06HA2SY2TCI+4CLzXTEIwHwYDVR0j BBgwFoAUnhNayps7fkI/am5JySLnyf+dBD4wDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTlNTLzAv OUUxMzVBQ0E5QjNCN0U0MjNGNkE2RTQ5QzkyMkU3QzlGRjlEMDQzRS5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS85RTEzNUFDQTlCM0I3RTQyM0Y2QTZFNDlDOTIyRTdD OUZGOUQwNDNFLmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTlNTLzAvOUUxMzVBQ0E5QjNCN0U0MjNG NkE2RTQ5QzkyMkU3QzlGRjlEMDQzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAF2+4h9T+33ZY78KeRHn /jpT3ksEqaZRACN+CsQz/t0mTTrKw3MhK431OnPw0QmEeMb0hxOOF/E4ohoo2KhQ U0Ow/vJ5Z7T0Q+bsDdGihWmKaJ7UIe2rylbK6VdAKAKnwDidy+dI2PCyKdZTpbRH z9mEhtVAHBIo2H0/k1UtHnZiNimMyiX5ji6/4ba6Vpi6YDgFs/tyVrL8MZ7f5Xwt AwQsEU98PxdvfMN1mN+LisgDbhoU7GWmcYvNtK5j0xTAdbX0JZi5ghL1kRPChij/ SgKVDcciyj8h5ynmC9v9Kv6q5GVLLoliwfVX5b8M7sFHeV5cEK0eDhfsYvMHsIIU 42w= -----END CERTIFICATE-----Generated at Wed Sep 23 11:36:36 2026 by rpki-client