$ rpki-client -vvvf rpkica.twnic.tw/rpki/NTCCATV/0/B621735E324046FFFC1DD75D4ED8815E08CD25AE.mft File: B621735E324046FFFC1DD75D4ED8815E08CD25AE.mft (raw, json) Hash identifier: r40afCjidsR1r0WcVSwoEhdYQYcUR2CcF9ap8aU3bzo= Subject key identifier: DF:E2:5A:62:BA:0B:44:42:9E:7B:78:4A:5B:D0:6B:D0:22:07:03:3D Authority key identifier: B6:21:73:5E:32:40:46:FF:FC:1D:D7:5D:4E:D8:81:5E:08:CD:25:AE Certificate issuer: /CN=B621735E324046FFFC1DD75D4ED8815E08CD25AE Certificate serial: 7588BEAABD110877ECA7B9A7E46167C96C540C2F Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B621735E324046FFFC1DD75D4ED8815E08CD25AE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NTCCATV/0/B621735E324046FFFC1DD75D4ED8815E08CD25AE.mft Manifest number: BA Signing time: Mon 21 Sep 2026 04:20:46 +0000 Manifest this update: Mon 21 Sep 2026 04:15:46 +0000 Manifest next update: Tue 22 Sep 2026 05:07:46 +0000 Files and hashes: 1: 34332e3232372e32342e302f32322d3232203d3e203338383531.roa (hash: Jc0taR/H4saYaDAoJgE+9UiKJq1S+bCLyLdRp8kMM8s=) 2: 3130332e34362e3138382e302f32332d3233203d3e203338383531.roa (hash: mG1ga13lp7MgEJvmiHGi6aFGInKwqgg1PecqbqqFlqE=) 3: 34332e3232372e32362e302f32332d3233203d3e203338383531.roa (hash: C2usZixthQiIE+xeQ3sCGdfoDlrvv1uF2zFJ8tVVXIc=) 4: 3130332e3133312e3137322e302f32322d3232203d3e203338383531.roa (hash: wAf5rAvxkIVF2EmVrtaklm33SqKTtuxnUU+SmUZADj8=) 5: 34332e3232372e32342e302f32332d3233203d3e203338383531.roa (hash: sZR2upIjgJ8ucZv/gsPF7tQAoIHfXdof9Y1BIEmdMEk=) 6: 34332e3232372e32352e302f32342d3234203d3e203338383531.roa (hash: AVukq4MJYvCGIAziMbV6ZV4Pe3c02PVGzfhBcKVubb8=) 7: 3130332e34362e3138382e302f32322d3232203d3e203338383531.roa (hash: IGUXagfNdDGbcIwOiNJB2WILqRSYaabubVYlRzK02WU=) 8: 3130332e3133312e3137322e302f32322d3234203d3e203338383531.roa (hash: gJf9DLGPPpkcFmCRmCzChYMvtlZ7ty7+aorHZQ0RXhY=) 9: B621735E324046FFFC1DD75D4ED8815E08CD25AE.crl (hash: GPM/1C679Pw/1epiKfsGp0XntSXR5oatFJHiuo5P+Tc=) 10: 3130332e34362e3139302e302f32332d3233203d3e203338383531.roa (hash: s3NIqrucGxxXoVh7k9P2N6l5jBGUlMpH1t4x77/+R9g=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NTCCATV/0/B621735E324046FFFC1DD75D4ED8815E08CD25AE.crl rsync://rpkica.twnic.tw/rpki/NTCCATV/0/B621735E324046FFFC1DD75D4ED8815E08CD25AE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B621735E324046FFFC1DD75D4ED8815E08CD25AE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 03:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:88:be:aa:bd:11:08:77:ec:a7:b9:a7:e4:61:67:c9:6c:54:0c:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B621735E324046FFFC1DD75D4ED8815E08CD25AE Validity Not Before: Sep 21 04:15:46 2026 GMT Not After : Sep 22 05:07:46 2026 GMT Subject: CN=DFE25A62BA0B44429E7B784A5BD06BD02207033D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a0:6d:7a:ee:4b:24:1c:dc:a9:a9:4c:6f:d5: e7:cc:b3:db:9f:ec:c7:ef:6f:d5:76:c0:17:ab:d6: a1:07:a1:4e:85:45:de:99:52:33:a0:b3:cc:85:3f: 06:a7:19:91:9a:7e:97:2e:f6:04:14:f4:d1:c9:2f: 9c:87:41:0b:37:9b:8a:d6:2b:70:e1:8b:17:5d:8a: 3e:0a:e9:9c:8c:16:73:e4:25:76:20:50:2f:c8:db: 38:60:b9:7c:fe:01:ea:16:d8:87:a7:82:0d:cb:06: 19:c4:01:f0:21:45:6f:27:96:1a:90:c6:bb:9f:50: 06:cf:bc:e3:95:35:f5:ad:45:91:ca:c5:a1:e3:84: 98:9a:3e:b6:75:e8:50:dd:88:3e:b0:0c:33:e9:f3: a7:42:d6:4e:0e:fe:9d:72:8d:93:bc:54:15:8a:68: c3:a3:d3:64:0a:40:77:1d:2a:1b:35:4b:0b:58:c4: 96:6f:59:2f:f8:19:6b:54:eb:d4:50:80:9f:2c:72: cf:7e:12:ab:bc:d2:30:10:08:57:2a:71:5c:58:05: 72:67:40:a1:a1:2e:54:a1:e9:64:63:8b:1d:ab:ba: fb:eb:b9:f0:53:79:ad:e5:83:24:26:5a:5e:60:97: 35:63:77:be:96:71:ba:91:52:59:0b:07:e0:a2:6f: 10:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:E2:5A:62:BA:0B:44:42:9E:7B:78:4A:5B:D0:6B:D0:22:07:03:3D X509v3 Authority Key Identifier: keyid:B6:21:73:5E:32:40:46:FF:FC:1D:D7:5D:4E:D8:81:5E:08:CD:25:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NTCCATV/0/B621735E324046FFFC1DD75D4ED8815E08CD25AE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B621735E324046FFFC1DD75D4ED8815E08CD25AE.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NTCCATV/0/B621735E324046FFFC1DD75D4ED8815E08CD25AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:e5:2c:bf:de:77:b4:a5:c8:68:c2:87:9e:7d:f4:d2:ab:b4: 9a:84:7d:dd:31:20:2f:ef:e5:e5:c5:65:ed:31:31:97:6a:bd: 48:e2:1f:6b:3e:58:5e:bf:be:40:c8:44:08:29:72:58:e9:a1: 71:2f:a2:02:03:93:fe:da:46:0e:bd:af:50:74:fb:4a:b7:42: 65:46:02:32:21:71:80:d7:13:48:2d:e5:9f:d3:74:b5:ff:48: a7:54:89:10:d4:4f:83:3f:9b:22:5d:6c:55:dc:66:7c:1d:4b: 06:27:19:d4:67:13:0f:4e:e6:c2:5d:25:2c:af:aa:85:9a:a9: d9:f3:44:79:c2:ab:53:a5:e9:fb:0f:50:ba:d7:fa:cf:26:95: 8a:9f:00:31:f6:16:64:01:15:fe:e4:3b:79:64:c8:3e:2d:eb: 8f:57:bb:35:3c:e7:bb:04:98:e2:36:4f:51:27:09:a4:0d:49: 2a:86:23:b1:69:7f:aa:f6:b7:6d:5f:74:60:27:e5:f0:b6:20: 76:cd:28:b7:71:9b:eb:6f:2c:06:f8:5f:f2:48:47:aa:f0:b7: 74:8a:1f:df:11:72:7d:3d:25:f9:01:79:d1:ee:fd:a7:ba:8d: f2:ed:90:bf:f2:a3:fd:7c:ef:36:c7:d4:77:b1:d9:f6:51:56: 8c:56:69:31 -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIUdYi+qr0RCHfsp7mn5GFnyWxUDC8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjYyMTczNUUzMjQwNDZGRkZDMURENzVENEVEODgxNUUw OENEMjVBRTAeFw0yNjA5MjEwNDE1NDZaFw0yNjA5MjIwNTA3NDZaMDMxMTAvBgNV BAMTKERGRTI1QTYyQkEwQjQ0NDI5RTdCNzg0QTVCRDA2QkQwMjIwNzAzM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3oG167kskHNypqUxv1efMs9uf 7Mfvb9V2wBer1qEHoU6FRd6ZUjOgs8yFPwanGZGafpcu9gQU9NHJL5yHQQs3m4rW K3Dhixddij4K6ZyMFnPkJXYgUC/I2zhguXz+AeoW2Iengg3LBhnEAfAhRW8nlhqQ xrufUAbPvOOVNfWtRZHKxaHjhJiaPrZ16FDdiD6wDDPp86dC1k4O/p1yjZO8VBWK aMOj02QKQHcdKhs1SwtYxJZvWS/4GWtU69RQgJ8scs9+Equ80jAQCFcqcVxYBXJn QKGhLlSh6WRjix2ruvvrufBTea3lgyQmWl5glzVjd76WcbqRUlkLB+CibxAJAgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQU3+JaYroLREKee3hKW9Br0CIHAz0wHwYDVR0j BBgwFoAUtiFzXjJARv/8HdddTtiBXgjNJa4wDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTlRDQ0FU Vi8wL0I2MjE3MzVFMzI0MDQ2RkZGQzFERDc1RDRFRDg4MTVFMDhDRDI1QUUuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvQjYyMTczNUUzMjQwNDZGRkZDMURENzVENEVE ODgxNUUwOENEMjVBRS5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05UQ0NBVFYvMC9CNjIxNzM1RTMy NDA0NkZGRkMxREQ3NUQ0RUQ4ODE1RTA4Q0QyNUFFLm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHOUsv953 tKXIaMKHnn300qu0moR93TEgL+/l5cVl7TExl2q9SOIfaz5YXr++QMhECClyWOmh cS+iAgOT/tpGDr2vUHT7SrdCZUYCMiFxgNcTSC3ln9N0tf9Ip1SJENRPgz+bIl1s VdxmfB1LBicZ1GcTD07mwl0lLK+qhZqp2fNEecKrU6Xp+w9Qutf6zyaVip8AMfYW ZAEV/uQ7eWTIPi3rj1e7NTznuwSY4jZPUScJpA1JKoYjsWl/qva3bV90YCfl8LYg ds0ot3Gb628sBvhf8khHqvC3dIof3xFyfT0l+QF50e79p7qN8u2Qv/Kj/XzvNsfU d7HZ9lFWjFZpMQ== -----END CERTIFICATE-----Generated at Mon Sep 21 19:43:45 2026 by rpki-client