$ rpki-client -vvf rpkica.twnic.tw/rpki/NCCC/1/F4194E27E15A4F76E006403795143D4EFDCF022E.mft File: F4194E27E15A4F76E006403795143D4EFDCF022E.mft (raw, json) Hash identifier: PCxZLIr4VN6uHSlQUL8puVBubPsCOmcS+7tFMZPxSIU= Subject key identifier: 2D:7F:F4:1A:86:02:99:98:86:BA:44:F5:06:AB:29:7B:80:5A:9F:88 Authority key identifier: F4:19:4E:27:E1:5A:4F:76:E0:06:40:37:95:14:3D:4E:FD:CF:02:2E Certificate issuer: /CN=F4194E27E15A4F76E006403795143D4EFDCF022E Certificate serial: 1B15B226FAA76D184887A7946162979008EBBC9E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/F4194E27E15A4F76E006403795143D4EFDCF022E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NCCC/1/F4194E27E15A4F76E006403795143D4EFDCF022E.mft Manifest number: 0D Signing time: Fri 15 May 2026 11:11:50 +0000 Manifest this update: Fri 15 May 2026 11:06:50 +0000 Manifest next update: Sat 16 May 2026 13:53:50 +0000 Files and hashes: 1: 3135372e32302e3130362e302f32332d3234203d3e20313938393439.roa (hash: NsVC+kyCCo5iuf92xRmrMNAeZWnd0GFdv+b5P5erIsw=) 2: 3135372e32302e3130362e302f32332d3233203d3e2033343632.roa (hash: U1maVebHqNxJOM61IipjwHfKGQHfW803fIcL92PP6U4=) 3: F4194E27E15A4F76E006403795143D4EFDCF022E.crl (hash: pUFK+4bPTZV0HslQFZSYioQm4XSrTqM7gM8LEDiyjw0=) 4: 3135372e32302e3130372e302f32342d3234203d3e203139353531.roa (hash: h885eOx61p3k8wuxUDF9SUB/ZPMTr8/gQVLItFXI4rM=) 5: 3135372e32302e3130362e302f32332d3234203d3e20313530373732.roa (hash: f9osk8atvNFbwzlzm+0pX0JbzGg2b5M3dZ9aT1SRM7Y=) 6: 3135372e32302e3130362e302f32342d3234203d3e203139353531.roa (hash: tj30Mw6SegUb4xqIoH5nsbPbEgFt7VbOqElQZObdRdk=) 7: 3135372e32302e3130372e302f32342d3234203d3e20313530373732.roa (hash: nTtkDIS/9RWSvXhNtKm7NzCRLQuNi0ZYeYDRWbSZUkY=) 8: 3135372e32302e3130362e302f32342d3234203d3e20313530373732.roa (hash: OmqcGxA2rNXj2dFvkkVaw1M6A48OHsdG1EyNXCLdbEU=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NCCC/1/F4194E27E15A4F76E006403795143D4EFDCF022E.crl rsync://rpkica.twnic.tw/rpki/NCCC/1/F4194E27E15A4F76E006403795143D4EFDCF022E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/F4194E27E15A4F76E006403795143D4EFDCF022E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 16 May 2026 13:53:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:15:b2:26:fa:a7:6d:18:48:87:a7:94:61:62:97:90:08:eb:bc:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F4194E27E15A4F76E006403795143D4EFDCF022E Validity Not Before: May 15 11:06:50 2026 GMT Not After : May 16 13:53:50 2026 GMT Subject: CN=2D7FF41A8602999886BA44F506AB297B805A9F88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ac:cb:5c:a9:7e:8b:1c:e6:c6:93:81:de:2e: b1:0a:e2:3d:8b:99:24:1b:d5:42:84:26:20:20:e2: e9:c6:a4:ad:07:94:2d:43:e5:25:31:f5:79:51:77: 30:b2:82:bf:87:ec:b0:db:43:58:4e:50:85:4f:17: 62:82:a3:ef:83:4f:a2:9b:13:d5:72:e3:6b:df:11: 54:62:b9:cc:26:14:bf:e9:1a:37:37:7f:1c:3e:b3: d7:8b:14:ff:67:0f:b6:f0:d9:7d:3c:a0:16:45:5e: 64:47:ab:b8:06:15:4b:3c:2c:24:0a:f2:93:5b:5c: 78:d7:c8:72:e2:ae:bf:8a:d0:2b:cf:21:8d:e5:e4: 58:bc:c7:db:3f:0c:9c:7a:9b:7f:3e:cd:cd:62:03: c5:62:e6:d8:d0:c2:57:a1:b1:8a:25:8a:75:87:c2: f5:b8:3f:d1:a9:b4:8a:02:3c:cf:fc:2b:c2:5c:79: ad:d4:4d:ea:9f:63:90:f6:e9:f6:2f:9b:c4:e7:90: 7c:3c:33:d1:11:55:18:77:5b:48:d2:b3:c0:f6:91: bc:27:c8:72:68:5e:08:6d:ca:69:d8:df:a0:2b:8b: 83:0a:25:df:65:e8:69:8d:a3:a8:ac:48:39:98:8e: 75:a2:27:ed:2e:9e:a1:49:52:b3:43:dc:e1:a5:72: a2:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:7F:F4:1A:86:02:99:98:86:BA:44:F5:06:AB:29:7B:80:5A:9F:88 X509v3 Authority Key Identifier: keyid:F4:19:4E:27:E1:5A:4F:76:E0:06:40:37:95:14:3D:4E:FD:CF:02:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NCCC/1/F4194E27E15A4F76E006403795143D4EFDCF022E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/F4194E27E15A4F76E006403795143D4EFDCF022E.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NCCC/1/F4194E27E15A4F76E006403795143D4EFDCF022E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:d5:17:40:2b:df:1d:4c:1f:a8:38:36:15:50:b1:85:2e:51: bc:fd:9c:9c:51:24:70:d1:7e:c2:3c:48:2d:48:fc:1e:cc:6e: 99:7e:1a:fe:5a:e0:9a:79:b3:90:bf:89:53:d5:d3:10:4c:5e: cc:25:e3:67:d9:0e:f8:3d:7b:d2:9e:87:a2:57:e3:9f:4b:32: bd:e1:f3:42:05:7f:bf:13:b3:0c:3c:69:49:9b:62:89:44:80: 5c:72:e9:f3:01:dd:2d:40:90:be:2e:4d:88:6d:4d:72:75:8c: eb:6e:4f:44:8e:92:80:9a:cc:e3:75:1e:c4:58:d7:ac:de:96: d6:de:0f:da:ea:56:43:0e:27:d8:3e:ee:cb:b6:fc:04:50:47: ce:dd:d9:a6:bd:2b:69:c1:d4:16:1a:62:0e:29:70:b5:78:13: 58:e4:7d:4a:f6:67:0f:c5:56:f7:1a:b1:ac:14:5c:50:3d:04: cf:b2:ba:ff:a3:63:54:d6:dc:58:1a:74:1a:85:c5:56:f0:66: 43:fb:90:f1:d6:61:bf:c3:6f:76:4c:e3:c1:45:a3:8d:ab:0d: 79:5a:fe:6b:da:81:24:e1:18:47:3b:cd:40:3d:86:40:3b:94: b6:0e:f0:b2:e0:1c:12:28:a7:29:c4:73:00:9b:f6:67:21:2e: 73:d6:80:33 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUGxWyJvqnbRhIh6eUYWKXkAjrvJ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjQxOTRFMjdFMTVBNEY3NkUwMDY0MDM3OTUxNDNENEVG RENGMDIyRTAeFw0yNjA1MTUxMTA2NTBaFw0yNjA1MTYxMzUzNTBaMDMxMTAvBgNV BAMTKDJEN0ZGNDFBODYwMjk5OTg4NkJBNDRGNTA2QUIyOTdCODA1QTlGODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxrMtcqX6LHObGk4HeLrEK4j2L mSQb1UKEJiAg4unGpK0HlC1D5SUx9XlRdzCygr+H7LDbQ1hOUIVPF2KCo++DT6Kb E9Vy42vfEVRiucwmFL/pGjc3fxw+s9eLFP9nD7bw2X08oBZFXmRHq7gGFUs8LCQK 8pNbXHjXyHLirr+K0CvPIY3l5Fi8x9s/DJx6m38+zc1iA8Vi5tjQwlehsYolinWH wvW4P9GptIoCPM/8K8Jcea3UTeqfY5D26fYvm8TnkHw8M9ERVRh3W0jSs8D2kbwn yHJoXghtymnY36Ari4MKJd9l6GmNo6isSDmYjnWiJ+0unqFJUrND3OGlcqJjAgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQULX/0GoYCmZiGukT1Bqspe4Ban4gwHwYDVR0j BBgwFoAU9BlOJ+FaT3bgBkA3lRQ9Tv3PAi4wDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTkNDQy8x L0Y0MTk0RTI3RTE1QTRGNzZFMDA2NDAzNzk1MTQzRDRFRkRDRjAyMkUuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzAvRjQxOTRFMjdFMTVBNEY3NkUwMDY0MDM3OTUxNDNE NEVGRENGMDIyRS5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05DQ0MvMS9GNDE5NEUyN0UxNUE0Rjc2 RTAwNjQwMzc5NTE0M0Q0RUZEQ0YwMjJFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn9UXQCvfHUwfqDg2 FVCxhS5RvP2cnFEkcNF+wjxILUj8HsxumX4a/lrgmnmzkL+JU9XTEExezCXjZ9kO +D170p6Holfjn0syveHzQgV/vxOzDDxpSZtiiUSAXHLp8wHdLUCQvi5NiG1NcnWM 625PRI6SgJrM43UexFjXrN6W1t4P2upWQw4n2D7uy7b8BFBHzt3Zpr0racHUFhpi DilwtXgTWOR9SvZnD8VW9xqxrBRcUD0Ez7K6/6NjVNbcWBp0GoXFVvBmQ/uQ8dZh v8NvdkzjwUWjjasNeVr+a9qBJOEYRzvNQD2GQDuUtg7wsuAcEiinKcRzAJv2ZyEu c9aAMw== -----END CERTIFICATE-----Generated at Sat May 16 04:50:12 2026 by rpki-client