$ rpki-client -vvf rpkica.twnic.tw/rpki/MCK/0/9C6C404D96BB112984EB14C46BE0526514B6BFBF.mft File: 9C6C404D96BB112984EB14C46BE0526514B6BFBF.mft (raw, json) Hash identifier: D7V44Vu3o/niL5eFwwBLeivAOAchvETTp21shomkFjY= Subject key identifier: 21:CF:11:C7:C3:DD:AB:1C:00:97:CF:C4:41:8D:D5:B9:0C:F7:9C:F5 Authority key identifier: 9C:6C:40:4D:96:BB:11:29:84:EB:14:C4:6B:E0:52:65:14:B6:BF:BF Certificate issuer: /CN=9C6C404D96BB112984EB14C46BE0526514B6BFBF Certificate serial: 73BD5FA59FE3FB226FC18CD400BD463DE78703D9 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9C6C404D96BB112984EB14C46BE0526514B6BFBF.cer Subject info access: rsync://rpkica.twnic.tw/rpki/MCK/0/9C6C404D96BB112984EB14C46BE0526514B6BFBF.mft Manifest number: 04 Signing time: Wed 13 May 2026 06:12:16 +0000 Manifest this update: Wed 13 May 2026 06:07:16 +0000 Manifest next update: Thu 14 May 2026 07:36:16 +0000 Files and hashes: 1: 3130332e3134382e36382e302f32332d3234203d3e20313331363138.roa (hash: BACFnkZaw8ZPpbq3IkwDxSxDzFcQk+Vm9o3aE8Vt++E=) 2: 9C6C404D96BB112984EB14C46BE0526514B6BFBF.crl (hash: wPdwikKYfBqhJdmUGb1ylDfuwktI47N5vWOWqgoqmFk=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/MCK/0/9C6C404D96BB112984EB14C46BE0526514B6BFBF.crl rsync://rpkica.twnic.tw/rpki/MCK/0/9C6C404D96BB112984EB14C46BE0526514B6BFBF.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9C6C404D96BB112984EB14C46BE0526514B6BFBF.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 07:36:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:bd:5f:a5:9f:e3:fb:22:6f:c1:8c:d4:00:bd:46:3d:e7:87:03:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C6C404D96BB112984EB14C46BE0526514B6BFBF Validity Not Before: May 13 06:07:16 2026 GMT Not After : May 14 07:36:16 2026 GMT Subject: CN=21CF11C7C3DDAB1C0097CFC4418DD5B90CF79CF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:dd:8a:9c:43:d4:68:a4:68:70:26:d0:b9:b0: f6:96:a9:1a:bc:a9:df:01:55:26:d4:88:43:0c:6a: 13:b3:ea:9f:7c:70:9d:d3:df:88:05:13:87:c8:03: a0:c6:c0:10:34:8a:d9:68:04:ee:c7:25:1a:79:78: f8:c5:da:c1:7e:05:c4:07:94:b6:dc:fc:ab:73:97: cb:41:58:a1:60:0a:b9:f3:93:22:bd:ba:e3:2d:bf: a5:5f:06:44:bf:28:4f:d7:06:7b:fb:89:18:aa:f5: ae:e2:74:66:b1:8f:23:2d:70:80:a7:7d:ae:86:98: 1c:b9:7a:59:18:08:8f:cc:b7:0e:cc:14:70:a0:9e: 5f:60:db:eb:0b:93:be:36:5f:4f:2d:65:84:82:6a: 4c:8e:54:87:a8:bd:df:2b:f7:54:5d:e7:c4:47:19: ec:33:cf:38:08:82:30:8c:64:e6:7d:8c:e9:63:32: 07:0e:00:0d:8a:91:f3:5d:96:08:26:fc:b0:e2:2e: 52:de:c5:00:0c:9e:91:6f:5d:26:3c:fe:4e:7a:9f: 71:9f:db:a0:be:a7:7b:ac:43:fe:eb:76:be:b5:29: 14:e8:1f:80:a7:83:71:05:d7:42:7c:52:f4:c5:a8: 62:65:11:12:3e:0b:0b:8a:6b:55:2d:81:9c:2f:f6: 97:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:CF:11:C7:C3:DD:AB:1C:00:97:CF:C4:41:8D:D5:B9:0C:F7:9C:F5 X509v3 Authority Key Identifier: keyid:9C:6C:40:4D:96:BB:11:29:84:EB:14:C4:6B:E0:52:65:14:B6:BF:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/MCK/0/9C6C404D96BB112984EB14C46BE0526514B6BFBF.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9C6C404D96BB112984EB14C46BE0526514B6BFBF.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MCK/0/9C6C404D96BB112984EB14C46BE0526514B6BFBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:a9:51:82:10:58:11:3b:ee:02:33:8b:e8:09:87:81:8e:88: 49:02:03:85:cd:b0:45:a9:68:8d:8e:e9:29:7e:55:cf:82:cd: 6d:6f:62:33:ef:9b:c7:13:3d:f8:20:5f:35:f1:60:1b:ed:83: be:62:2f:33:ae:89:00:e2:1a:5a:9d:2b:2d:46:5e:9a:84:eb: 21:6b:ae:3a:f8:8b:91:c8:a5:56:a9:8c:12:b1:5d:be:61:e6: 7f:83:10:43:93:7c:98:61:09:1a:30:32:7d:9b:b9:a7:b6:bb: fa:8a:ff:15:e8:ef:5e:65:cf:c2:a9:e8:f8:49:7d:e0:5b:ca: 21:a2:f3:de:7e:81:23:d6:62:ac:65:ef:c0:6d:6b:05:f6:ca: 83:48:25:be:ac:fc:7c:e6:d9:93:4b:19:73:25:88:8e:04:5e: 83:c8:d9:f9:85:5e:e0:a7:3f:0e:37:d9:ef:a5:95:27:b9:58: ee:2e:7b:b0:6a:2c:33:dc:c4:0a:e5:67:71:8c:58:48:4a:00: 3d:23:5e:92:c9:8b:f7:00:13:a2:fb:a8:1f:24:f2:70:35:df: 30:07:35:a9:38:87:59:00:e6:57:92:dd:12:a5:98:5b:b0:63: 78:b9:21:f1:0d:8c:12:13:f6:4a:89:ad:88:23:0d:9c:4b:36: 22:c9:96:75 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUc71fpZ/j+yJvwYzUAL1GPeeHA9kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUM2QzQwNEQ5NkJCMTEyOTg0RUIxNEM0NkJFMDUyNjUx NEI2QkZCRjAeFw0yNjA1MTMwNjA3MTZaFw0yNjA1MTQwNzM2MTZaMDMxMTAvBgNV BAMTKDIxQ0YxMUM3QzNEREFCMUMwMDk3Q0ZDNDQxOERENUI5MENGNzlDRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC83YqcQ9RopGhwJtC5sPaWqRq8 qd8BVSbUiEMMahOz6p98cJ3T34gFE4fIA6DGwBA0itloBO7HJRp5ePjF2sF+BcQH lLbc/Ktzl8tBWKFgCrnzkyK9uuMtv6VfBkS/KE/XBnv7iRiq9a7idGaxjyMtcICn fa6GmBy5elkYCI/Mtw7MFHCgnl9g2+sLk742X08tZYSCakyOVIeovd8r91Rd58RH GewzzzgIgjCMZOZ9jOljMgcOAA2KkfNdlggm/LDiLlLexQAMnpFvXSY8/k56n3Gf 26C+p3usQ/7rdr61KRToH4Cng3EF10J8UvTFqGJlERI+CwuKa1UtgZwv9pfdAgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUIc8Rx8PdqxwAl8/EQY3VuQz3nPUwHwYDVR0j BBgwFoAUnGxATZa7ESmE6xTEa+BSZRS2v78wDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTUNLLzAv OUM2QzQwNEQ5NkJCMTEyOTg0RUIxNEM0NkJFMDUyNjUxNEI2QkZCRi5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS85QzZDNDA0RDk2QkIxMTI5ODRFQjE0QzQ2QkUwNTI2 NTE0QjZCRkJGLmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTUNLLzAvOUM2QzQwNEQ5NkJCMTEyOTg0 RUIxNEM0NkJFMDUyNjUxNEI2QkZCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHupUYIQWBE77gIzi+gJ h4GOiEkCA4XNsEWpaI2O6Sl+Vc+CzW1vYjPvm8cTPfggXzXxYBvtg75iLzOuiQDi GlqdKy1GXpqE6yFrrjr4i5HIpVapjBKxXb5h5n+DEEOTfJhhCRowMn2buae2u/qK /xXo715lz8Kp6PhJfeBbyiGi895+gSPWYqxl78BtawX2yoNIJb6s/Hzm2ZNLGXMl iI4EXoPI2fmFXuCnPw432e+llSe5WO4ue7BqLDPcxArlZ3GMWEhKAD0jXpLJi/cA E6L7qB8k8nA13zAHNak4h1kA5leS3RKlmFuwY3i5IfENjBIT9kqJrYgjDZxLNiLJ lnU= -----END CERTIFICATE-----Generated at Wed May 13 20:34:02 2026 by rpki-client