$ rpki-client -vvvf rpkica.twnic.tw/rpki/NSSCYBER/0/7E4A0094054DD1AE4C3AA73976E554F191BC5230.mft File: 7E4A0094054DD1AE4C3AA73976E554F191BC5230.mft (raw, json) Hash identifier: PaSW8LYLJlqU/CE8M7OzSLtbtQNKRcPPcGub6QztLpU= Subject key identifier: CA:73:C8:62:D2:E7:9A:59:51:84:FA:2F:5A:08:E2:07:19:04:A1:1F Authority key identifier: 7E:4A:00:94:05:4D:D1:AE:4C:3A:A7:39:76:E5:54:F1:91:BC:52:30 Certificate issuer: /CN=7E4A0094054DD1AE4C3AA73976E554F191BC5230 Certificate serial: 63C904DD8ABCC599320E0C6F2FB3ADD3DD1D2D43 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7E4A0094054DD1AE4C3AA73976E554F191BC5230.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NSSCYBER/0/7E4A0094054DD1AE4C3AA73976E554F191BC5230.mft Manifest number: B6 Signing time: Tue 22 Sep 2026 03:38:35 +0000 Manifest this update: Tue 22 Sep 2026 03:33:35 +0000 Manifest next update: Wed 23 Sep 2026 05:08:35 +0000 Files and hashes: 1: 7E4A0094054DD1AE4C3AA73976E554F191BC5230.crl (hash: TfJdD4pLY3v+Z/XFH9KUUnIajE0CHeIL34PC6D2ODa0=) 2: 3130332e3135382e37382e302f32332d3234203d3e203633383938.roa (hash: Q+s1vVVcnXTpW/r/MnON9SbkY3njdmQ1XoB50+rVZow=) 3: 3130332e3134342e33322e302f32332d3234203d3e20313331363236.roa (hash: ceVA/LJaRY6/q+EaJ/ByMtC2DxZ+XlY891yuFfz5/6Y=) 4: 323430363a623463303a3a2f33322d3332203d3e203633383938.roa (hash: YWptf+2qSV9npfR4/3yUmYD8apviaOrBsr9jvocDV+4=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NSSCYBER/0/7E4A0094054DD1AE4C3AA73976E554F191BC5230.crl rsync://rpkica.twnic.tw/rpki/NSSCYBER/0/7E4A0094054DD1AE4C3AA73976E554F191BC5230.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7E4A0094054DD1AE4C3AA73976E554F191BC5230.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 05:08:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:c9:04:dd:8a:bc:c5:99:32:0e:0c:6f:2f:b3:ad:d3:dd:1d:2d:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E4A0094054DD1AE4C3AA73976E554F191BC5230 Validity Not Before: Sep 22 03:33:35 2026 GMT Not After : Sep 23 05:08:35 2026 GMT Subject: CN=CA73C862D2E79A595184FA2F5A08E2071904A11F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b3:1a:27:c5:02:c2:56:e8:fe:4d:04:2f:d9: 8c:be:b0:10:85:82:64:8b:01:63:73:82:2b:45:6b: fc:e4:1d:da:25:29:fe:34:35:e5:9d:85:5c:b8:ea: 86:a9:a9:ef:a0:49:f1:97:c8:5a:c9:bc:05:10:63: ad:7c:cd:06:6c:aa:6d:e5:a0:65:dd:4d:39:a8:1d: 43:3a:a2:35:84:a0:ec:16:8f:20:6b:bc:c1:65:d1: a3:26:a6:8b:cb:a9:fe:ef:1f:a1:aa:7c:4a:0b:65: 1c:82:71:5a:d5:85:40:25:a3:47:90:46:77:a0:3a: 58:b5:cc:e4:22:db:aa:7f:6f:10:45:44:a6:38:a9: ae:56:e6:54:56:ee:3e:af:85:a9:05:81:88:57:27: a8:e7:ac:e1:a8:d1:69:b5:3f:8d:8e:31:30:97:9a: db:79:3a:f6:fe:fc:37:40:58:8d:d8:6a:4a:b2:6c: 32:d1:f3:e5:a8:2f:0e:84:f1:20:00:0b:bf:e5:bd: 00:29:48:26:2a:8e:6b:fd:6e:eb:ee:4e:60:1a:89: 64:23:36:37:e4:d2:5c:d4:d0:dd:66:06:22:c8:b6: 2b:ff:fb:62:43:6a:73:86:7f:0e:37:be:17:bb:36: cd:19:b2:29:cd:58:4d:1e:46:4b:ca:18:17:d1:26: 93:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:73:C8:62:D2:E7:9A:59:51:84:FA:2F:5A:08:E2:07:19:04:A1:1F X509v3 Authority Key Identifier: keyid:7E:4A:00:94:05:4D:D1:AE:4C:3A:A7:39:76:E5:54:F1:91:BC:52:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NSSCYBER/0/7E4A0094054DD1AE4C3AA73976E554F191BC5230.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7E4A0094054DD1AE4C3AA73976E554F191BC5230.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NSSCYBER/0/7E4A0094054DD1AE4C3AA73976E554F191BC5230.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:1e:96:8d:3e:b0:95:77:ef:9c:6b:db:60:b0:23:49:72:67: 25:d6:82:74:23:cc:9f:7f:b1:07:d8:12:61:ed:a1:93:60:57: 0b:a0:27:e9:a0:13:11:8f:41:71:1b:95:2d:12:93:08:84:ea: 28:90:53:fa:bc:96:a7:b1:76:35:50:ba:e7:1d:0f:83:08:24: 03:13:36:72:99:36:f7:3b:de:c9:1e:b2:43:8d:96:9d:19:17: 2a:9f:e8:01:fc:5c:c3:ce:63:e3:62:1b:05:4a:0f:4d:15:e9: 51:4c:c0:49:90:d8:b0:eb:0a:62:98:70:08:3e:aa:0c:fa:61: 08:72:d5:a0:c7:b1:8d:84:40:eb:a9:b5:44:bd:e5:cf:ac:02: 13:5c:d2:1a:8f:1c:03:ce:91:0d:da:5f:35:c0:a5:ab:98:b4: 49:19:3a:64:04:4c:0e:a9:05:06:e6:f0:32:de:30:48:b2:18: 27:7f:70:f0:b2:ff:1d:55:03:88:86:75:1b:f7:d7:66:91:0f: a2:6d:10:f6:8a:98:fd:3c:d9:cc:b3:c0:5c:5d:77:e7:17:06: 82:79:3c:7f:af:a0:32:35:a1:87:cb:28:4c:ae:ca:3a:2c:0c: c1:2b:51:29:54:07:8d:10:d6:76:97:45:1a:7a:e3:c9:ab:b6: 0e:59:f1:01 -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUY8kE3Yq8xZkyDgxvL7Ot090dLUMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0U0QTAwOTQwNTRERDFBRTRDM0FBNzM5NzZFNTU0RjE5 MUJDNTIzMDAeFw0yNjA5MjIwMzMzMzVaFw0yNjA5MjMwNTA4MzVaMDMxMTAvBgNV BAMTKENBNzNDODYyRDJFNzlBNTk1MTg0RkEyRjVBMDhFMjA3MTkwNEExMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8sxonxQLCVuj+TQQv2Yy+sBCF gmSLAWNzgitFa/zkHdolKf40NeWdhVy46oapqe+gSfGXyFrJvAUQY618zQZsqm3l oGXdTTmoHUM6ojWEoOwWjyBrvMFl0aMmpovLqf7vH6GqfEoLZRyCcVrVhUAlo0eQ RnegOli1zOQi26p/bxBFRKY4qa5W5lRW7j6vhakFgYhXJ6jnrOGo0Wm1P42OMTCX mtt5Ovb+/DdAWI3YakqybDLR8+WoLw6E8SAAC7/lvQApSCYqjmv9buvuTmAaiWQj Njfk0lzU0N1mBiLItiv/+2JDanOGfw43vhe7Ns0ZsinNWE0eRkvKGBfRJpPBAgMB AAGjggHyMIIB7jAdBgNVHQ4EFgQUynPIYtLnmllRhPovWgjiBxkEoR8wHwYDVR0j BBgwFoAUfkoAlAVN0a5MOqc5duVU8ZG8UjAwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTlNTQ1lC RVIvMC83RTRBMDA5NDA1NEREMUFFNEMzQUE3Mzk3NkU1NTRGMTkxQkM1MjMwLmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8xLzdFNEEwMDk0MDU0REQxQUU0QzNBQTczOTc2 RTU1NEYxOTFCQzUyMzAuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9OU1NDWUJFUi8wLzdFNEEwMDk0 MDU0REQxQUU0QzNBQTczOTc2RTU1NEYxOTFCQzUyMzAubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBfHpaN PrCVd++ca9tgsCNJcmcl1oJ0I8yff7EH2BJh7aGTYFcLoCfpoBMRj0FxG5UtEpMI hOookFP6vJansXY1ULrnHQ+DCCQDEzZymTb3O97JHrJDjZadGRcqn+gB/FzDzmPj YhsFSg9NFelRTMBJkNiw6wpimHAIPqoM+mEIctWgx7GNhEDrqbVEveXPrAITXNIa jxwDzpEN2l81wKWrmLRJGTpkBEwOqQUG5vAy3jBIshgnf3Dwsv8dVQOIhnUb99dm kQ+ibRD2ipj9PNnMs8BcXXfnFwaCeTx/r6AyNaGHyyhMrso6LAzBK1EpVAeNENZ2 l0UaeuPJq7YOWfEB -----END CERTIFICATE-----Generated at Tue Sep 22 16:45:21 2026 by rpki-client