$ rpki-client -vvf rpkica.twnic.tw/rpki/NCCC/1/F4194E27E15A4F76E006403795143D4EFDCF022E.mft File: F4194E27E15A4F76E006403795143D4EFDCF022E.mft (raw, json) Hash identifier: 7tST9mqFHCFM+fsOcqB7dpCAqFpwaUsh4PvyPyWJR3w= Subject key identifier: 7F:41:33:C6:3E:46:6F:C8:47:0D:58:12:C9:5E:AC:F6:F3:4E:5E:DA Authority key identifier: F4:19:4E:27:E1:5A:4F:76:E0:06:40:37:95:14:3D:4E:FD:CF:02:2E Certificate issuer: /CN=F4194E27E15A4F76E006403795143D4EFDCF022E Certificate serial: 6C0C1E0F90920984FDB26FABBDD54B100D178AFA Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/F4194E27E15A4F76E006403795143D4EFDCF022E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NCCC/1/F4194E27E15A4F76E006403795143D4EFDCF022E.mft Manifest number: 4A Signing time: Tue 30 Jun 2026 04:38:07 +0000 Manifest this update: Tue 30 Jun 2026 04:33:07 +0000 Manifest next update: Wed 01 Jul 2026 08:10:07 +0000 Files and hashes: 1: 3135372e32302e3130362e302f32332d3233203d3e2033343632.roa (hash: U1maVebHqNxJOM61IipjwHfKGQHfW803fIcL92PP6U4=) 2: 3135372e32302e3130362e302f32342d3234203d3e20313530373732.roa (hash: OmqcGxA2rNXj2dFvkkVaw1M6A48OHsdG1EyNXCLdbEU=) 3: 3135372e32302e3130372e302f32342d3234203d3e203139353531.roa (hash: h885eOx61p3k8wuxUDF9SUB/ZPMTr8/gQVLItFXI4rM=) 4: 3135372e32302e3130362e302f32332d3234203d3e20313938393439.roa (hash: NsVC+kyCCo5iuf92xRmrMNAeZWnd0GFdv+b5P5erIsw=) 5: 3135372e32302e3130362e302f32342d3234203d3e203139353531.roa (hash: tj30Mw6SegUb4xqIoH5nsbPbEgFt7VbOqElQZObdRdk=) 6: 3135372e32302e3130362e302f32332d3234203d3e20313530373732.roa (hash: f9osk8atvNFbwzlzm+0pX0JbzGg2b5M3dZ9aT1SRM7Y=) 7: F4194E27E15A4F76E006403795143D4EFDCF022E.crl (hash: 4mC3etdQOXIC5F3H6bPridpXfnT+ZzOHALlG4Ku3K8s=) 8: 3135372e32302e3130372e302f32342d3234203d3e20313530373732.roa (hash: nTtkDIS/9RWSvXhNtKm7NzCRLQuNi0ZYeYDRWbSZUkY=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NCCC/1/F4194E27E15A4F76E006403795143D4EFDCF022E.crl rsync://rpkica.twnic.tw/rpki/NCCC/1/F4194E27E15A4F76E006403795143D4EFDCF022E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/F4194E27E15A4F76E006403795143D4EFDCF022E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Jul 2026 08:10:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:0c:1e:0f:90:92:09:84:fd:b2:6f:ab:bd:d5:4b:10:0d:17:8a:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F4194E27E15A4F76E006403795143D4EFDCF022E Validity Not Before: Jun 30 04:33:07 2026 GMT Not After : Jul 1 08:10:07 2026 GMT Subject: CN=7F4133C63E466FC8470D5812C95EACF6F34E5EDA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6a:d5:ee:19:56:28:98:e1:af:4b:72:e1:0c: 12:ff:da:43:fe:47:42:5e:3b:9d:a5:0f:f6:68:6b: f9:e8:ef:93:0f:f7:f5:53:ad:a3:e0:d9:e1:cd:0f: d7:7c:e2:c0:2c:c7:dc:b1:8f:d5:f3:33:6e:d9:21: 78:03:3c:e1:73:13:22:45:4c:3d:64:77:2a:b4:40: 68:c1:9a:4c:b4:8a:2e:35:5c:c4:3f:6b:6e:1b:c2: d0:54:48:94:e0:c4:5c:e3:8d:0e:5c:b9:5d:d1:eb: 79:1f:c5:a5:8b:2e:1e:0d:eb:8f:71:b1:14:78:ea: e2:a6:b4:31:a9:30:0a:0b:ab:14:ed:51:59:af:47: 76:a7:21:6f:99:96:5f:e9:d7:ff:de:c0:00:52:1e: 36:88:da:8d:1d:ff:f6:64:11:7c:5f:7a:58:6f:42: 55:ee:1a:e2:1e:4d:91:05:88:e0:45:b6:77:a2:1b: 88:86:cd:05:a1:8b:08:0c:33:00:ce:a2:66:9b:9e: b0:c2:33:b2:55:54:95:22:d9:9c:1d:d8:cf:a5:92: 36:14:44:aa:c6:c3:30:dd:a6:4c:66:5c:11:e6:69: 51:14:b9:48:28:91:04:26:7c:a2:f2:d6:5c:31:78: a0:25:06:63:99:87:d4:3d:de:3d:22:47:c0:97:ce: 42:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:41:33:C6:3E:46:6F:C8:47:0D:58:12:C9:5E:AC:F6:F3:4E:5E:DA X509v3 Authority Key Identifier: keyid:F4:19:4E:27:E1:5A:4F:76:E0:06:40:37:95:14:3D:4E:FD:CF:02:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NCCC/1/F4194E27E15A4F76E006403795143D4EFDCF022E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/F4194E27E15A4F76E006403795143D4EFDCF022E.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NCCC/1/F4194E27E15A4F76E006403795143D4EFDCF022E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:62:8f:8b:14:2b:05:c2:d2:ba:af:bd:86:e0:cd:71:fa:b6: 48:b4:b9:f5:9f:13:26:ee:fb:95:ac:00:62:27:7c:be:bf:69: f8:3f:34:2b:e5:c3:6e:cd:83:b4:40:ef:d8:bb:b1:3b:d8:36: cd:ea:a5:f2:98:5a:e6:8e:da:25:cb:3d:fc:f4:66:3c:15:19: 34:fd:bc:4c:91:3b:20:15:0c:9b:f9:db:07:da:30:be:80:12: 1f:ae:35:90:f9:5d:43:44:9f:0d:0c:de:bc:af:16:93:f5:79: 6d:f1:83:0b:4e:2d:6a:ec:50:13:a6:aa:5e:4f:f4:27:9d:a7: b7:3c:d6:24:de:e8:75:ef:c7:e2:2b:56:48:cb:6c:14:d3:95: 08:d4:6a:6a:a4:c7:2d:9f:2a:c8:9e:f2:8e:39:66:a8:c3:58: f4:a7:e2:68:00:36:fc:b9:d6:91:97:e6:e9:21:8f:5d:6f:bc: ad:de:62:75:00:71:1f:80:ef:c0:4f:71:95:eb:7e:34:ee:94: cf:17:85:8b:3e:9a:1a:3a:a1:eb:8c:4f:0d:c5:9c:e3:1d:77: b9:96:44:49:25:4c:d4:9f:3d:9e:63:f3:e7:cf:81:2e:52:d7: 6d:a1:3f:bd:bc:60:5d:59:ec:7a:9b:d5:25:e3:7e:67:04:5d: 98:32:5b:f2 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUbAweD5CSCYT9sm+rvdVLEA0XivowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjQxOTRFMjdFMTVBNEY3NkUwMDY0MDM3OTUxNDNENEVG RENGMDIyRTAeFw0yNjA2MzAwNDMzMDdaFw0yNjA3MDEwODEwMDdaMDMxMTAvBgNV BAMTKDdGNDEzM0M2M0U0NjZGQzg0NzBENTgxMkM5NUVBQ0Y2RjM0RTVFREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvatXuGVYomOGvS3LhDBL/2kP+ R0JeO52lD/Zoa/no75MP9/VTraPg2eHND9d84sAsx9yxj9XzM27ZIXgDPOFzEyJF TD1kdyq0QGjBmky0ii41XMQ/a24bwtBUSJTgxFzjjQ5cuV3R63kfxaWLLh4N649x sRR46uKmtDGpMAoLqxTtUVmvR3anIW+Zll/p1//ewABSHjaI2o0d//ZkEXxfelhv QlXuGuIeTZEFiOBFtneiG4iGzQWhiwgMMwDOomabnrDCM7JVVJUi2Zwd2M+lkjYU RKrGwzDdpkxmXBHmaVEUuUgokQQmfKLy1lwxeKAlBmOZh9Q93j0iR8CXzkIVAgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQUf0Ezxj5Gb8hHDVgSyV6s9vNOXtowHwYDVR0j BBgwFoAU9BlOJ+FaT3bgBkA3lRQ9Tv3PAi4wDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTkNDQy8x L0Y0MTk0RTI3RTE1QTRGNzZFMDA2NDAzNzk1MTQzRDRFRkRDRjAyMkUuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzAvRjQxOTRFMjdFMTVBNEY3NkUwMDY0MDM3OTUxNDNE NEVGRENGMDIyRS5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05DQ0MvMS9GNDE5NEUyN0UxNUE0Rjc2 RTAwNjQwMzc5NTE0M0Q0RUZEQ0YwMjJFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHmKPixQrBcLSuq+9 huDNcfq2SLS59Z8TJu77lawAYid8vr9p+D80K+XDbs2DtEDv2LuxO9g2zeql8pha 5o7aJcs9/PRmPBUZNP28TJE7IBUMm/nbB9owvoASH641kPldQ0SfDQzevK8Wk/V5 bfGDC04tauxQE6aqXk/0J52ntzzWJN7ode/H4itWSMtsFNOVCNRqaqTHLZ8qyJ7y jjlmqMNY9KfiaAA2/LnWkZfm6SGPXW+8rd5idQBxH4DvwE9xlet+NO6UzxeFiz6a Gjqh64xPDcWc4x13uZZESSVM1J89nmPz58+BLlLXbaE/vbxgXVnsepvVJeN+ZwRd mDJb8g== -----END CERTIFICATE-----Generated at Tue Jun 30 13:09:55 2026 by rpki-client