$ rpki-client -vvf rpkica.twnic.tw/rpki/NSSCYBER/0/7E4A0094054DD1AE4C3AA73976E554F191BC5230.mft File: 7E4A0094054DD1AE4C3AA73976E554F191BC5230.mft (raw, json) Hash identifier: CIEsKcBBP7UfNzrP7Sgngz6VwBfJKOL5tm27jGiuoS4= Subject key identifier: 02:27:57:B0:40:22:CF:45:67:FC:34:6F:62:42:26:D4:BA:B0:85:4C Authority key identifier: 7E:4A:00:94:05:4D:D1:AE:4C:3A:A7:39:76:E5:54:F1:91:BC:52:30 Certificate issuer: /CN=7E4A0094054DD1AE4C3AA73976E554F191BC5230 Certificate serial: 3766B8D28658190DEC20FF3289A6D3F4252CF46D Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7E4A0094054DD1AE4C3AA73976E554F191BC5230.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NSSCYBER/0/7E4A0094054DD1AE4C3AA73976E554F191BC5230.mft Manifest number: 6C Signing time: Tue 28 Jul 2026 15:34:17 +0000 Manifest this update: Tue 28 Jul 2026 15:29:17 +0000 Manifest next update: Wed 29 Jul 2026 17:14:17 +0000 Files and hashes: 1: 3130332e3134342e33322e302f32332d3234203d3e20313331363236.roa (hash: ceVA/LJaRY6/q+EaJ/ByMtC2DxZ+XlY891yuFfz5/6Y=) 2: 3130332e3135382e37382e302f32332d3234203d3e203633383938.roa (hash: Q+s1vVVcnXTpW/r/MnON9SbkY3njdmQ1XoB50+rVZow=) 3: 7E4A0094054DD1AE4C3AA73976E554F191BC5230.crl (hash: Y9SbTXcJlpYtcKO+0sypWpOHl/me9w0/ETtUhP6NMX8=) 4: 323430363a623463303a3a2f33322d3332203d3e203633383938.roa (hash: YWptf+2qSV9npfR4/3yUmYD8apviaOrBsr9jvocDV+4=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NSSCYBER/0/7E4A0094054DD1AE4C3AA73976E554F191BC5230.crl rsync://rpkica.twnic.tw/rpki/NSSCYBER/0/7E4A0094054DD1AE4C3AA73976E554F191BC5230.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7E4A0094054DD1AE4C3AA73976E554F191BC5230.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 07:22:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:66:b8:d2:86:58:19:0d:ec:20:ff:32:89:a6:d3:f4:25:2c:f4:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E4A0094054DD1AE4C3AA73976E554F191BC5230 Validity Not Before: Jul 28 15:29:17 2026 GMT Not After : Jul 29 17:14:17 2026 GMT Subject: CN=022757B04022CF4567FC346F624226D4BAB0854C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:89:b9:c2:08:12:1d:7e:68:38:c5:37:c9:b4: d6:6e:dc:c7:74:bf:96:08:89:72:d4:8a:44:6d:db: 66:9b:5d:26:fb:a0:87:e5:52:d5:e3:49:80:db:95: 25:cb:c4:d6:5b:cc:88:17:42:17:d8:16:1f:c9:6c: 6a:f4:b5:10:f2:45:a4:be:09:e0:aa:e2:ea:0e:2b: 00:01:67:6c:32:71:0d:cd:8a:39:e5:69:45:48:05: 09:6c:aa:2a:20:1b:f4:ae:65:83:e4:fd:04:25:95: 30:f7:f8:23:8b:f1:76:2c:2d:f6:d7:5c:82:b2:cd: a4:a0:57:0b:17:de:f8:67:03:19:bd:de:62:a1:ac: 8f:2a:23:ca:0e:a4:2e:f3:a1:9f:11:ba:1c:26:d7: 02:cc:f7:12:ec:80:0e:27:74:70:94:9b:6f:15:e3: 06:4d:45:74:2f:d8:0e:f4:62:0e:e1:62:63:d7:00: 8e:00:cf:6a:05:a4:8e:58:32:c2:07:09:5c:12:83: e9:32:d5:34:b6:53:01:ab:5c:be:1d:b8:4a:ac:10: 3c:d6:84:b5:f0:c5:ec:6f:57:27:0a:f4:2d:4c:7f: 15:83:fd:3f:ad:f0:f7:8f:3b:e5:77:94:6d:76:a9: 50:d5:e7:aa:bf:08:85:84:df:8b:4b:3d:2d:2e:f9: b0:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:27:57:B0:40:22:CF:45:67:FC:34:6F:62:42:26:D4:BA:B0:85:4C X509v3 Authority Key Identifier: keyid:7E:4A:00:94:05:4D:D1:AE:4C:3A:A7:39:76:E5:54:F1:91:BC:52:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NSSCYBER/0/7E4A0094054DD1AE4C3AA73976E554F191BC5230.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7E4A0094054DD1AE4C3AA73976E554F191BC5230.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NSSCYBER/0/7E4A0094054DD1AE4C3AA73976E554F191BC5230.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:af:c8:8e:94:9e:65:11:c4:a2:b0:e2:92:31:08:6c:79:be: 42:f2:5e:d5:f2:1a:b2:d0:c4:1c:68:91:25:d0:a1:60:c5:30: 1c:1e:77:e1:bd:05:d7:6b:0b:c0:87:d6:88:4d:7f:17:55:e3: 62:c2:51:72:f3:17:53:cd:64:f8:03:94:59:16:a4:97:a2:43: 97:59:80:40:74:42:13:c9:5a:37:8c:62:10:93:a2:82:9e:69: 27:8e:f2:51:ce:e1:e3:6e:5f:7f:18:28:e5:b4:d7:21:75:c0: de:5a:6c:9c:41:87:ab:e1:96:c6:2d:3e:50:a2:e0:01:c7:c5: 40:a2:57:fa:5b:6e:ce:bb:bf:c0:0b:91:82:36:35:d5:66:16: 1b:a4:d4:cb:a3:0f:e1:e8:40:36:02:7f:d0:e2:c5:49:92:42: de:2b:3a:86:7b:ae:ff:eb:dc:59:c6:f9:dd:a3:f2:74:0f:b1: b3:0d:20:99:e0:8a:4d:ca:f7:86:bc:42:62:ad:72:0d:e9:1d: e9:43:95:69:9b:a1:41:67:e5:b1:b8:53:03:cd:1a:0b:39:6f: 2f:b7:f5:a3:53:37:df:30:4d:d5:57:49:30:55:54:23:16:79: 99:cb:a7:93:01:9c:28:f6:25:8f:80:c1:66:55:d3:7d:d1:4d: c7:c0:a5:74 -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUN2a40oZYGQ3sIP8yiabT9CUs9G0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0U0QTAwOTQwNTRERDFBRTRDM0FBNzM5NzZFNTU0RjE5 MUJDNTIzMDAeFw0yNjA3MjgxNTI5MTdaFw0yNjA3MjkxNzE0MTdaMDMxMTAvBgNV BAMTKDAyMjc1N0IwNDAyMkNGNDU2N0ZDMzQ2RjYyNDIyNkQ0QkFCMDg1NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcibnCCBIdfmg4xTfJtNZu3Md0 v5YIiXLUikRt22abXSb7oIflUtXjSYDblSXLxNZbzIgXQhfYFh/JbGr0tRDyRaS+ CeCq4uoOKwABZ2wycQ3NijnlaUVIBQlsqiogG/SuZYPk/QQllTD3+COL8XYsLfbX XIKyzaSgVwsX3vhnAxm93mKhrI8qI8oOpC7zoZ8Ruhwm1wLM9xLsgA4ndHCUm28V 4wZNRXQv2A70Yg7hYmPXAI4Az2oFpI5YMsIHCVwSg+ky1TS2UwGrXL4duEqsEDzW hLXwxexvVycK9C1MfxWD/T+t8PePO+V3lG12qVDV56q/CIWE34tLPS0u+bAfAgMB AAGjggHyMIIB7jAdBgNVHQ4EFgQUAidXsEAiz0Vn/DRvYkIm1LqwhUwwHwYDVR0j BBgwFoAUfkoAlAVN0a5MOqc5duVU8ZG8UjAwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTlNTQ1lC RVIvMC83RTRBMDA5NDA1NEREMUFFNEMzQUE3Mzk3NkU1NTRGMTkxQkM1MjMwLmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8xLzdFNEEwMDk0MDU0REQxQUU0QzNBQTczOTc2 RTU1NEYxOTFCQzUyMzAuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9OU1NDWUJFUi8wLzdFNEEwMDk0 MDU0REQxQUU0QzNBQTczOTc2RTU1NEYxOTFCQzUyMzAubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAvr8iO lJ5lEcSisOKSMQhseb5C8l7V8hqy0MQcaJEl0KFgxTAcHnfhvQXXawvAh9aITX8X VeNiwlFy8xdTzWT4A5RZFqSXokOXWYBAdEITyVo3jGIQk6KCnmknjvJRzuHjbl9/ GCjltNchdcDeWmycQYer4ZbGLT5QouABx8VAolf6W27Ou7/AC5GCNjXVZhYbpNTL ow/h6EA2An/Q4sVJkkLeKzqGe67/69xZxvndo/J0D7GzDSCZ4IpNyveGvEJirXIN 6R3pQ5Vpm6FBZ+WxuFMDzRoLOW8vt/WjUzffME3VV0kwVVQjFnmZy6eTAZwo9iWP gMFmVdN90U3HwKV0 -----END CERTIFICATE-----Generated at Tue Jul 28 21:56:02 2026 by rpki-client