$ rpki-client -vvf rpkica.twnic.tw/rpki/NARL/0/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.mft File: 9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.mft (raw, json) Hash identifier: +ms0YSMRRteuFI6cmH4OB2jr0EM5a/p0uLxibULTT9k= Subject key identifier: 3E:CB:A0:54:61:9C:CE:4F:5D:A2:47:12:FF:92:35:8B:B0:88:1E:B1 Authority key identifier: 9D:85:BB:8D:93:00:6D:35:86:E2:8D:0D:66:12:CA:FA:CC:8E:A6:C1 Certificate issuer: /CN=9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1 Certificate serial: 4909739912074D06164BD3E67089DD985AD6D076 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NARL/0/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.mft Manifest number: 50 Signing time: Tue 30 Jun 2026 14:14:07 +0000 Manifest this update: Tue 30 Jun 2026 14:09:07 +0000 Manifest next update: Wed 01 Jul 2026 15:53:07 +0000 Files and hashes: 1: 3230332e3134352e3139322e302f32312d3234203d3e203138343236.roa (hash: gNPPk70chubQg8rvqCFhjNMJr/GwTZPy8GKS/JxLGtk=) 2: 323030313a6531303a3a2f33322d3634203d3e2037353339.roa (hash: YSlCSDgV7ONwXR8qLUKp0gub/ohO6L6glqkIRmUnSSI=) 3: 323030313a6335383a3a2f33322d3634203d3e2037353339.roa (hash: KHGZSCyTjAFf8gkceCez8q0dI7RMF2GjBnOSsXKo2tY=) 4: 3231312e37392e34382e302f32302d3234203d3e2037353339.roa (hash: I5PmO4GML9TmcQR3Fe6NQsOfRlP4bey95QSbpiOHW9g=) 5: 3230332e3134352e3230302e302f32312d3234203d3e2037353339.roa (hash: jxkAJdAcKZ8RSCBcISH4Y4rq8GCUJiutzooENkFUhIc=) 6: 9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.crl (hash: v/9OtNGnrQIbU9hI6l8kpMLjlTTt0SOe7UD4F3Mul9U=) 7: 323030313a343530303a313030303a3a2f34302d3634203d3e2037353339.roa (hash: aCon7ihkrSQu1jOrSasXY8xC7tkNYvzzB6OK08dUqns=) 8: 3130332e3136302e3232302e302f32332d3234203d3e2037353339.roa (hash: C3OJeu7QwWAZKqQNtD3rtSGZubdl01iTngU6YcVIGgI=) 9: 3231312e37332e36342e302f31392d3234203d3e2037353339.roa (hash: 2F7wVvWL/EB7PGkj0VVEyWuWlBMkBD3Mrsqa9Y9SivA=) 10: 3230332e3134352e3230382e302f32302d3234203d3e2037353339.roa (hash: TkgRJDcSEgq7NjOc3j8nZRABpENJrXFx+4WnsRFtzh4=) 11: 3130332e3132342e37322e302f32322d3234203d3e2037353339.roa (hash: /oWUtrivyYYR3xINxuZfk4J46KekrLAODBaoBbnjf6g=) 12: 323030313a343530303a3a2f33322d3634203d3e203138313833.roa (hash: PMzGY0PfcdsGzBMtdtqJG5vua06dScgAEtiVBZ8oJwQ=) 13: 3231312e37332e38362e302f32342d3234203d3e203138343134.roa (hash: RcN4dOIBTFqY1G5jI8viPt6e6PNTMt4L6CpBX1XlPOU=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NARL/0/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.crl rsync://rpkica.twnic.tw/rpki/NARL/0/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Jul 2026 14:08:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:09:73:99:12:07:4d:06:16:4b:d3:e6:70:89:dd:98:5a:d6:d0:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1 Validity Not Before: Jun 30 14:09:07 2026 GMT Not After : Jul 1 15:53:07 2026 GMT Subject: CN=3ECBA054619CCE4F5DA24712FF92358BB0881EB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c0:af:43:a3:0e:84:d4:81:54:54:68:10:ba: e9:1a:bd:f7:c9:20:f7:ba:5b:87:03:87:7a:96:11: 5c:5f:1e:9a:92:69:74:ba:2d:e8:5d:ac:c2:4f:3b: ff:09:ed:8d:4f:17:dc:57:99:13:2f:2e:e2:77:a0: 0f:c9:53:53:de:0b:85:88:93:46:a5:2a:a7:ec:8c: 86:7f:e9:71:b9:f8:b3:d0:25:9d:44:16:17:ac:27: 4f:18:75:bd:47:c3:d6:0b:be:8f:a5:0e:b0:11:9c: ad:16:12:2f:40:54:92:be:ed:71:d9:61:56:f3:99: 4e:83:83:f4:9c:48:51:41:02:82:4c:f4:5c:ff:e2: df:ad:1a:84:df:ca:fd:52:81:74:0c:c2:92:bf:4f: 47:0f:07:f2:d4:e9:65:c4:ef:fb:cb:d6:f2:35:e2: 21:ce:50:29:0b:7d:4e:a9:10:09:dd:8c:3f:53:e2: 24:86:27:f5:08:e3:1c:dc:16:22:27:93:76:0b:9d: 52:c1:32:1f:44:97:1c:45:23:65:80:43:cd:8d:c6: b9:1f:96:86:86:fb:ae:5d:08:7d:28:d0:4e:f2:c7: 69:ca:80:29:66:00:dc:7d:e0:89:e5:73:eb:fa:94: 70:8f:81:98:42:b2:93:32:20:5a:a4:27:7f:5f:ed: 80:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:CB:A0:54:61:9C:CE:4F:5D:A2:47:12:FF:92:35:8B:B0:88:1E:B1 X509v3 Authority Key Identifier: keyid:9D:85:BB:8D:93:00:6D:35:86:E2:8D:0D:66:12:CA:FA:CC:8E:A6:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NARL/0/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NARL/0/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:ef:d5:d3:16:b2:a4:f0:b3:d9:18:c0:96:a8:90:52:93:16: 1c:03:dc:72:f9:91:02:bd:c5:25:46:94:94:72:f8:e0:47:96: 40:0b:06:3d:85:7f:3a:25:f8:a4:c7:b9:4d:6e:33:88:62:b0: 3e:a1:64:a7:bc:86:32:bc:e0:cf:84:99:37:76:dc:27:e6:42: e4:67:0f:3e:7f:27:15:4c:5b:ed:0e:8b:ae:5f:51:ea:42:d5: f8:02:d3:5c:5c:7d:6c:28:d9:bc:b3:e4:8a:67:65:15:82:78: de:1a:6b:5c:c3:16:8f:10:42:12:c7:7e:8a:d3:90:4b:68:c4: e7:8d:43:42:a5:c8:0d:7a:dc:89:4e:ad:66:b1:a1:a2:c3:d6: 53:1f:5c:3a:6e:2b:ff:e5:6f:5a:7a:50:b7:aa:05:46:b6:d3: 57:ee:d7:c2:63:62:63:1e:01:4c:8a:2c:df:0c:56:84:93:ab: b9:f4:c5:12:7d:cb:2b:36:f8:97:fe:3a:4d:c6:d7:11:71:80: f6:e5:4d:89:2e:f1:26:a1:09:18:3c:08:c5:f5:94:b8:c1:7c: 8b:1c:34:47:01:32:48:e4:6b:d5:15:62:6b:2c:26:ef:c8:79: c1:dd:62:c7:da:8a:f5:d6:99:c6:a0:3e:3d:e6:02:45:28:53: c7:6e:5d:e3 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUSQlzmRIHTQYWS9PmcIndmFrW0HYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQ4NUJCOEQ5MzAwNkQzNTg2RTI4RDBENjYxMkNBRkFD QzhFQTZDMTAeFw0yNjA2MzAxNDA5MDdaFw0yNjA3MDExNTUzMDdaMDMxMTAvBgNV BAMTKDNFQ0JBMDU0NjE5Q0NFNEY1REEyNDcxMkZGOTIzNThCQjA4ODFFQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDwK9Dow6E1IFUVGgQuukavffJ IPe6W4cDh3qWEVxfHpqSaXS6LehdrMJPO/8J7Y1PF9xXmRMvLuJ3oA/JU1PeC4WI k0alKqfsjIZ/6XG5+LPQJZ1EFhesJ08Ydb1Hw9YLvo+lDrARnK0WEi9AVJK+7XHZ YVbzmU6Dg/ScSFFBAoJM9Fz/4t+tGoTfyv1SgXQMwpK/T0cPB/LU6WXE7/vL1vI1 4iHOUCkLfU6pEAndjD9T4iSGJ/UI4xzcFiInk3YLnVLBMh9ElxxFI2WAQ82Nxrkf loaG+65dCH0o0E7yx2nKgClmANx94Inlc+v6lHCPgZhCspMyIFqkJ39f7YDrAgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQUPsugVGGczk9dokcS/5I1i7CIHrEwHwYDVR0j BBgwFoAUnYW7jZMAbTWG4o0NZhLK+syOpsEwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTkFSTC8w LzlEODVCQjhEOTMwMDZEMzU4NkUyOEQwRDY2MTJDQUZBQ0M4RUE2QzEuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvOUQ4NUJCOEQ5MzAwNkQzNTg2RTI4RDBENjYxMkNB RkFDQzhFQTZDMS5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05BUkwvMC85RDg1QkI4RDkzMDA2RDM1 ODZFMjhEMEQ2NjEyQ0FGQUNDOEVBNkMxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACu/V0xaypPCz2RjA lqiQUpMWHAPccvmRAr3FJUaUlHL44EeWQAsGPYV/OiX4pMe5TW4ziGKwPqFkp7yG Mrzgz4SZN3bcJ+ZC5GcPPn8nFUxb7Q6Lrl9R6kLV+ALTXFx9bCjZvLPkimdlFYJ4 3hprXMMWjxBCEsd+itOQS2jE541DQqXIDXrciU6tZrGhosPWUx9cOm4r/+VvWnpQ t6oFRrbTV+7XwmNiYx4BTIos3wxWhJOrufTFEn3LKzb4l/46TcbXEXGA9uVNiS7x JqEJGDwIxfWUuMF8ixw0RwEySORr1RViaywm78h5wd1ix9qK9daZxqA+PeYCRShT x25d4w== -----END CERTIFICATE-----Generated at Tue Jun 30 19:10:37 2026 by rpki-client