$ rpki-client -vvf rpkica.twnic.tw/rpki/CTII/0/96EC32418F5DB7D272132F4F615EEE14EBFCC789.mft File: 96EC32418F5DB7D272132F4F615EEE14EBFCC789.mft (raw, json) Hash identifier: yPWGoZ1liZ3FztbQiEkSvQ5uImKJLb6lkplYulDNTMY= Subject key identifier: 16:D7:DC:A3:C3:06:7B:59:10:C3:57:61:3C:EF:29:52:00:31:7F:DE Authority key identifier: 96:EC:32:41:8F:5D:B7:D2:72:13:2F:4F:61:5E:EE:14:EB:FC:C7:89 Certificate issuer: /CN=96EC32418F5DB7D272132F4F615EEE14EBFCC789 Certificate serial: 524DA15FF15820977083530080D3DFF6B58060D6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/96EC32418F5DB7D272132F4F615EEE14EBFCC789.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CTII/0/96EC32418F5DB7D272132F4F615EEE14EBFCC789.mft Manifest number: 89 Signing time: Fri 14 Aug 2026 15:17:08 +0000 Manifest this update: Fri 14 Aug 2026 15:12:08 +0000 Manifest next update: Sat 15 Aug 2026 17:35:08 +0000 Files and hashes: 1: 3130332e3133302e3234392e302f32342d3234203d3e20323033303133.roa (hash: pqABpk3IMEQeCPJ1YCuMzE9VdO7tiwLb3Csx2ef6igs=) 2: 3130332e3133302e3235302e302f32332d3234203d3e20323033303133.roa (hash: qifQcmP7aY3KYLY0YWbHCpcdmaz7oenQE0L1tQ92F24=) 3: 3130332e3133302e3234392e302f32342d3234203d3e20393834.roa (hash: Nd+vxwk113iKIVjwRMjJ+fIaoSaKjb89bytlnk2AR6I=) 4: 96EC32418F5DB7D272132F4F615EEE14EBFCC789.crl (hash: fLkfEK9DBFaqfMnAW7TvvYSDrgXE/ILunZV7VB8voYU=) 5: 3130332e3133302e3234382e302f32322d3234203d3e20323033303133.roa (hash: vdwflt80XSH+f+UsiqjaPJa3CG1W829xLEufTNoKgck=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CTII/0/96EC32418F5DB7D272132F4F615EEE14EBFCC789.crl rsync://rpkica.twnic.tw/rpki/CTII/0/96EC32418F5DB7D272132F4F615EEE14EBFCC789.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/96EC32418F5DB7D272132F4F615EEE14EBFCC789.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 15 Aug 2026 17:35:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:4d:a1:5f:f1:58:20:97:70:83:53:00:80:d3:df:f6:b5:80:60:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96EC32418F5DB7D272132F4F615EEE14EBFCC789 Validity Not Before: Aug 14 15:12:08 2026 GMT Not After : Aug 15 17:35:08 2026 GMT Subject: CN=16D7DCA3C3067B5910C357613CEF295200317FDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:2b:3c:80:61:b3:45:11:e5:64:2b:6c:e3:89: 26:48:15:9c:a7:60:83:2b:37:15:dc:37:73:34:fb: f3:a2:00:0f:cf:83:e2:cf:2e:2c:a9:d7:2a:ad:69: af:b4:c1:20:a9:0a:78:63:2e:9d:d7:4d:22:57:2d: 01:b0:32:46:11:ec:e1:b2:4c:ee:5d:1b:ab:ad:f0: c1:0e:63:4b:5d:a0:a0:f9:a0:38:0c:d0:b5:34:37: 80:1d:78:03:20:7e:83:cd:7c:96:87:40:29:db:a5: 77:07:cb:d7:f8:d1:a2:01:73:1a:39:ff:46:a4:ed: ef:a3:4b:63:42:35:5b:60:d8:49:35:25:27:ae:3f: f4:b3:79:c4:79:e3:a6:c0:bf:c3:b6:7a:29:48:60: a2:41:69:8e:7d:04:b7:99:4e:13:9f:a8:b2:6a:cd: df:eb:00:af:a6:32:d6:98:9c:3f:34:88:b2:a7:5e: 56:5e:fe:4c:a9:39:7f:00:47:fc:b6:9f:4e:da:64: 9e:f4:4e:84:10:fb:b0:51:ca:87:be:91:0a:0f:4c: 97:6a:da:31:3d:87:9a:a7:07:f8:00:8d:f9:fc:35: 48:f3:ad:65:1d:26:00:b0:c9:b0:52:fb:0c:4e:de: b6:49:18:80:60:8d:29:ef:bb:58:c0:c2:3d:ed:13: 50:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:D7:DC:A3:C3:06:7B:59:10:C3:57:61:3C:EF:29:52:00:31:7F:DE X509v3 Authority Key Identifier: keyid:96:EC:32:41:8F:5D:B7:D2:72:13:2F:4F:61:5E:EE:14:EB:FC:C7:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CTII/0/96EC32418F5DB7D272132F4F615EEE14EBFCC789.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/96EC32418F5DB7D272132F4F615EEE14EBFCC789.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CTII/0/96EC32418F5DB7D272132F4F615EEE14EBFCC789.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:c2:9a:6a:62:d4:db:88:61:33:8f:69:6a:eb:87:61:1a:ec: 2c:a7:db:2c:29:db:56:b4:30:59:22:fe:f6:db:41:15:51:fc: ac:32:17:d5:35:11:c7:9c:7b:78:1c:84:fd:a2:73:b7:45:8d: 42:b2:c8:c3:7f:5f:44:68:e9:2e:8b:50:57:02:c1:9c:68:bd: d3:dc:e5:a6:44:31:c1:11:4b:89:9c:a1:b8:d0:b2:93:10:32: e1:c0:a5:4f:8d:92:82:38:57:88:91:30:bc:f7:36:83:b5:ec: 50:33:b1:66:27:32:66:e5:ce:1e:9a:51:5a:c2:c0:cf:ef:68: 02:0f:fa:26:81:7d:4b:4a:c5:be:0a:13:4f:19:23:cb:45:9a: a9:00:70:0c:86:33:cb:86:b1:b8:dd:42:fb:bd:30:77:1f:06: 4a:a9:0b:84:c8:33:fe:00:79:d8:b3:72:da:19:2c:f7:f6:c2: a0:29:0b:2c:cb:58:ce:5f:53:3e:46:61:46:1e:02:77:70:23: 09:6b:9d:bf:88:d8:e8:4c:09:3a:2a:4c:0d:28:ec:a4:9c:0c: bb:9c:26:24:16:ba:87:b7:40:2d:27:27:34:8b:03:c2:9d:2a: d2:fa:bf:7e:d6:56:85:f4:24:69:90:cc:69:21:56:38:ec:13: 55:51:a6:62 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUUk2hX/FYIJdwg1MAgNPf9rWAYNYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTZFQzMyNDE4RjVEQjdEMjcyMTMyRjRGNjE1RUVFMTRF QkZDQzc4OTAeFw0yNjA4MTQxNTEyMDhaFw0yNjA4MTUxNzM1MDhaMDMxMTAvBgNV BAMTKDE2RDdEQ0EzQzMwNjdCNTkxMEMzNTc2MTNDRUYyOTUyMDAzMTdGREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJKzyAYbNFEeVkK2zjiSZIFZyn YIMrNxXcN3M0+/OiAA/Pg+LPLiyp1yqtaa+0wSCpCnhjLp3XTSJXLQGwMkYR7OGy TO5dG6ut8MEOY0tdoKD5oDgM0LU0N4AdeAMgfoPNfJaHQCnbpXcHy9f40aIBcxo5 /0ak7e+jS2NCNVtg2Ek1JSeuP/SzecR546bAv8O2eilIYKJBaY59BLeZThOfqLJq zd/rAK+mMtaYnD80iLKnXlZe/kypOX8AR/y2n07aZJ70ToQQ+7BRyoe+kQoPTJdq 2jE9h5qnB/gAjfn8NUjzrWUdJgCwybBS+wxO3rZJGIBgjSnvu1jAwj3tE1BPAgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQUFtfco8MGe1kQw1dhPO8pUgAxf94wHwYDVR0j BBgwFoAUluwyQY9dt9JyEy9PYV7uFOv8x4kwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ1RJSS8w Lzk2RUMzMjQxOEY1REI3RDI3MjEzMkY0RjYxNUVFRTE0RUJGQ0M3ODkuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvOTZFQzMyNDE4RjVEQjdEMjcyMTMyRjRGNjE1RUVF MTRFQkZDQzc4OS5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0NUSUkvMC85NkVDMzI0MThGNURCN0Qy NzIxMzJGNEY2MTVFRUUxNEVCRkNDNzg5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALsKaamLU24hhM49p auuHYRrsLKfbLCnbVrQwWSL+9ttBFVH8rDIX1TURx5x7eByE/aJzt0WNQrLIw39f RGjpLotQVwLBnGi909zlpkQxwRFLiZyhuNCykxAy4cClT42SgjhXiJEwvPc2g7Xs UDOxZicyZuXOHppRWsLAz+9oAg/6JoF9S0rFvgoTTxkjy0WaqQBwDIYzy4axuN1C +70wdx8GSqkLhMgz/gB52LNy2hks9/bCoCkLLMtYzl9TPkZhRh4Cd3AjCWudv4jY 6EwJOipMDSjspJwMu5wmJBa6h7dALScnNIsDwp0q0vq/ftZWhfQkaZDMaSFWOOwT VVGmYg== -----END CERTIFICATE-----Generated at Sat Aug 15 05:20:37 2026 by rpki-client