$ rpki-client -vvf rpkica.twnic.tw/rpki/NSSCYBER/0/7E4A0094054DD1AE4C3AA73976E554F191BC5230.mft File: 7E4A0094054DD1AE4C3AA73976E554F191BC5230.mft (raw, json) Hash identifier: Mlalx+wYLXZfrlNfRGbp3hxlZZtHB9HDgWqsS5jD3xA= Subject key identifier: 14:88:DB:68:3D:B9:B7:81:6C:A4:35:CF:A7:CE:93:A5:0E:98:AA:C7 Authority key identifier: 7E:4A:00:94:05:4D:D1:AE:4C:3A:A7:39:76:E5:54:F1:91:BC:52:30 Certificate issuer: /CN=7E4A0094054DD1AE4C3AA73976E554F191BC5230 Certificate serial: 2135AD12DC329741D204A6D331FE33CD2D378BBC Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7E4A0094054DD1AE4C3AA73976E554F191BC5230.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NSSCYBER/0/7E4A0094054DD1AE4C3AA73976E554F191BC5230.mft Manifest number: 2F Signing time: Fri 12 Jun 2026 20:18:00 +0000 Manifest this update: Fri 12 Jun 2026 20:13:00 +0000 Manifest next update: Sat 13 Jun 2026 23:22:00 +0000 Files and hashes: 1: 323430363a623463303a3a2f33322d3332203d3e203633383938.roa (hash: YWptf+2qSV9npfR4/3yUmYD8apviaOrBsr9jvocDV+4=) 2: 3130332e3135382e37382e302f32332d3234203d3e203633383938.roa (hash: Q+s1vVVcnXTpW/r/MnON9SbkY3njdmQ1XoB50+rVZow=) 3: 7E4A0094054DD1AE4C3AA73976E554F191BC5230.crl (hash: FChiwcfMJuB8qSUohFf/KCH6EhGCWidZ7kv1L4xs6qk=) 4: 3130332e3134342e33322e302f32332d3234203d3e20313331363236.roa (hash: ceVA/LJaRY6/q+EaJ/ByMtC2DxZ+XlY891yuFfz5/6Y=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NSSCYBER/0/7E4A0094054DD1AE4C3AA73976E554F191BC5230.crl rsync://rpkica.twnic.tw/rpki/NSSCYBER/0/7E4A0094054DD1AE4C3AA73976E554F191BC5230.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7E4A0094054DD1AE4C3AA73976E554F191BC5230.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 23:22:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:35:ad:12:dc:32:97:41:d2:04:a6:d3:31:fe:33:cd:2d:37:8b:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E4A0094054DD1AE4C3AA73976E554F191BC5230 Validity Not Before: Jun 12 20:13:00 2026 GMT Not After : Jun 13 23:22:00 2026 GMT Subject: CN=1488DB683DB9B7816CA435CFA7CE93A50E98AAC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:64:f8:33:5c:59:47:55:69:b3:9a:88:ca:94: 88:ae:48:53:9b:93:3e:29:31:08:f7:4a:13:fe:9b: 05:69:00:ec:aa:d0:20:06:92:2d:b8:31:98:aa:b0: 71:c4:63:88:ea:25:04:7b:79:54:6a:c1:5c:03:24: 02:34:15:95:56:7c:5f:a6:2e:73:a5:b4:5d:6d:00: 9d:9f:3f:de:45:0c:bd:d3:5c:f9:67:2e:5d:46:73: a8:a6:90:fc:30:5c:1a:18:48:11:f7:09:b5:c8:c4: 4f:bc:df:dc:1b:d8:69:b9:9a:7f:5f:f9:21:33:3f: 9f:c3:63:a8:bc:09:4a:06:b4:96:f1:92:08:c4:83: 68:e1:ae:dc:76:34:94:4d:91:98:cf:b0:c4:79:26: f2:7a:b0:2f:f1:36:6a:13:94:39:ea:3f:e4:e8:83: 31:07:62:1f:d9:57:df:f7:ef:ee:22:45:88:2e:e0: 89:8b:1d:7c:66:43:e3:0f:9c:97:f1:d9:98:b7:42: a2:4f:9b:cf:c7:b1:7a:a8:ac:9f:63:65:11:a6:2c: 6d:f6:c4:a2:63:90:a8:00:cf:dc:c2:0b:85:24:22: 65:b2:e6:9a:a3:22:20:2e:c1:eb:f8:dd:83:cb:c9: 95:16:3c:f8:c3:15:c6:fe:a2:94:82:00:be:e9:75: 24:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:88:DB:68:3D:B9:B7:81:6C:A4:35:CF:A7:CE:93:A5:0E:98:AA:C7 X509v3 Authority Key Identifier: keyid:7E:4A:00:94:05:4D:D1:AE:4C:3A:A7:39:76:E5:54:F1:91:BC:52:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NSSCYBER/0/7E4A0094054DD1AE4C3AA73976E554F191BC5230.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7E4A0094054DD1AE4C3AA73976E554F191BC5230.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NSSCYBER/0/7E4A0094054DD1AE4C3AA73976E554F191BC5230.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:dd:2e:80:8a:0b:ad:ab:67:86:f8:50:48:5c:f4:b7:b2:3b: 46:4e:5e:2e:f4:f9:58:fd:9c:66:fd:dc:a9:25:c6:52:d2:8c: 50:e1:6a:89:78:6c:7c:26:a5:0e:d9:19:de:41:be:d6:c3:31: a0:19:9f:f8:33:88:f1:7b:df:29:d7:a4:da:b0:0a:ce:df:91: 86:19:78:76:19:ae:9f:c6:9f:5d:51:cf:60:ce:24:7f:c2:7b: 67:d8:96:9e:81:fe:65:92:1b:f6:55:0d:da:9d:a5:57:aa:df: 01:b9:42:41:15:ee:b0:49:fb:67:00:f7:cf:9e:85:ed:cb:fe: 10:e9:d1:a4:91:d7:c8:c6:56:66:f9:a5:fa:8a:1c:8a:98:39: 0a:c7:a1:df:4c:10:8c:02:d1:ed:03:a6:ae:7a:2c:80:3e:60: e9:8d:fc:87:05:51:22:6d:52:4b:ff:dd:de:00:eb:27:d8:3e: 88:08:f7:b9:2d:7c:41:68:c5:dc:0f:3c:0b:0d:95:d2:ab:2c: 08:3d:f9:69:10:eb:81:80:66:86:fc:a5:0b:32:63:92:1e:b2: b0:fd:b7:39:d4:28:39:63:e5:82:a2:a2:27:e6:d6:8a:3d:a8: 86:1f:20:4a:c3:34:b3:ee:45:7b:81:44:53:6c:29:82:a3:b2: a7:03:38:77 -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUITWtEtwyl0HSBKbTMf4zzS03i7wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0U0QTAwOTQwNTRERDFBRTRDM0FBNzM5NzZFNTU0RjE5 MUJDNTIzMDAeFw0yNjA2MTIyMDEzMDBaFw0yNjA2MTMyMzIyMDBaMDMxMTAvBgNV BAMTKDE0ODhEQjY4M0RCOUI3ODE2Q0E0MzVDRkE3Q0U5M0E1MEU5OEFBQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnZPgzXFlHVWmzmojKlIiuSFOb kz4pMQj3ShP+mwVpAOyq0CAGki24MZiqsHHEY4jqJQR7eVRqwVwDJAI0FZVWfF+m LnOltF1tAJ2fP95FDL3TXPlnLl1Gc6imkPwwXBoYSBH3CbXIxE+839wb2Gm5mn9f +SEzP5/DY6i8CUoGtJbxkgjEg2jhrtx2NJRNkZjPsMR5JvJ6sC/xNmoTlDnqP+To gzEHYh/ZV9/37+4iRYgu4ImLHXxmQ+MPnJfx2Zi3QqJPm8/HsXqorJ9jZRGmLG32 xKJjkKgAz9zCC4UkImWy5pqjIiAuwev43YPLyZUWPPjDFcb+opSCAL7pdSTJAgMB AAGjggHyMIIB7jAdBgNVHQ4EFgQUFIjbaD25t4FspDXPp86TpQ6YqscwHwYDVR0j BBgwFoAUfkoAlAVN0a5MOqc5duVU8ZG8UjAwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTlNTQ1lC RVIvMC83RTRBMDA5NDA1NEREMUFFNEMzQUE3Mzk3NkU1NTRGMTkxQkM1MjMwLmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8xLzdFNEEwMDk0MDU0REQxQUU0QzNBQTczOTc2 RTU1NEYxOTFCQzUyMzAuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9OU1NDWUJFUi8wLzdFNEEwMDk0 MDU0REQxQUU0QzNBQTczOTc2RTU1NEYxOTFCQzUyMzAubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCn3S6A igutq2eG+FBIXPS3sjtGTl4u9PlY/Zxm/dypJcZS0oxQ4WqJeGx8JqUO2RneQb7W wzGgGZ/4M4jxe98p16TasArO35GGGXh2Ga6fxp9dUc9gziR/wntn2Jaegf5lkhv2 VQ3anaVXqt8BuUJBFe6wSftnAPfPnoXty/4Q6dGkkdfIxlZm+aX6ihyKmDkKx6Hf TBCMAtHtA6aueiyAPmDpjfyHBVEibVJL/93eAOsn2D6ICPe5LXxBaMXcDzwLDZXS qywIPflpEOuBgGaG/KULMmOSHrKw/bc51Cg5Y+WCoqIn5taKPaiGHyBKwzSz7kV7 gURTbCmCo7KnAzh3 -----END CERTIFICATE-----Generated at Sat Jun 13 09:05:11 2026 by rpki-client