$ rpki-client -vvf rpkica.twnic.tw/rpki/NCCC/1/F4194E27E15A4F76E006403795143D4EFDCF022E.mft File: F4194E27E15A4F76E006403795143D4EFDCF022E.mft (raw, json) Hash identifier: KccO7oTg2u/tLIcoX83blS60tK3w8z9QpiAfkOCIa+A= Subject key identifier: 38:31:B7:5B:67:5B:9B:0C:38:46:D9:DD:15:BC:5C:B3:68:97:0E:C7 Authority key identifier: F4:19:4E:27:E1:5A:4F:76:E0:06:40:37:95:14:3D:4E:FD:CF:02:2E Certificate issuer: /CN=F4194E27E15A4F76E006403795143D4EFDCF022E Certificate serial: 2A678BD1FEF5835F0E2808FD65077DA7B438B205 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/F4194E27E15A4F76E006403795143D4EFDCF022E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NCCC/1/F4194E27E15A4F76E006403795143D4EFDCF022E.mft Manifest number: 88 Signing time: Sat 15 Aug 2026 07:04:51 +0000 Manifest this update: Sat 15 Aug 2026 06:59:51 +0000 Manifest next update: Sun 16 Aug 2026 09:54:51 +0000 Files and hashes: 1: 3135372e32302e3130362e302f32332d3234203d3e20313530373732.roa (hash: f9osk8atvNFbwzlzm+0pX0JbzGg2b5M3dZ9aT1SRM7Y=) 2: 3135372e32302e3130372e302f32342d3234203d3e203139353531.roa (hash: h885eOx61p3k8wuxUDF9SUB/ZPMTr8/gQVLItFXI4rM=) 3: F4194E27E15A4F76E006403795143D4EFDCF022E.crl (hash: 32BRay2Z/L90f+wcuyq6YLArGP8UhkDpaqBtd+IN7Yk=) 4: 3135372e32302e3130362e302f32342d3234203d3e20313530373732.roa (hash: OmqcGxA2rNXj2dFvkkVaw1M6A48OHsdG1EyNXCLdbEU=) 5: 3135372e32302e3130362e302f32342d3234203d3e203139353531.roa (hash: tj30Mw6SegUb4xqIoH5nsbPbEgFt7VbOqElQZObdRdk=) 6: 3135372e32302e3130362e302f32332d3233203d3e2033343632.roa (hash: U1maVebHqNxJOM61IipjwHfKGQHfW803fIcL92PP6U4=) 7: 3135372e32302e3130362e302f32332d3234203d3e20313938393439.roa (hash: NsVC+kyCCo5iuf92xRmrMNAeZWnd0GFdv+b5P5erIsw=) 8: 3135372e32302e3130372e302f32342d3234203d3e20313530373732.roa (hash: nTtkDIS/9RWSvXhNtKm7NzCRLQuNi0ZYeYDRWbSZUkY=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NCCC/1/F4194E27E15A4F76E006403795143D4EFDCF022E.crl rsync://rpkica.twnic.tw/rpki/NCCC/1/F4194E27E15A4F76E006403795143D4EFDCF022E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/F4194E27E15A4F76E006403795143D4EFDCF022E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 16 Aug 2026 02:50:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:67:8b:d1:fe:f5:83:5f:0e:28:08:fd:65:07:7d:a7:b4:38:b2:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F4194E27E15A4F76E006403795143D4EFDCF022E Validity Not Before: Aug 15 06:59:51 2026 GMT Not After : Aug 16 09:54:51 2026 GMT Subject: CN=3831B75B675B9B0C3846D9DD15BC5CB368970EC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:25:1b:07:85:fe:a0:60:72:90:97:1b:66:44: 15:32:d7:e4:8e:24:ac:c2:a2:b8:52:b5:6a:c0:7d: 35:da:0d:96:70:5c:f6:c1:89:78:03:83:b5:05:83: be:44:cf:e4:15:98:36:b1:fb:cd:71:3e:90:a6:62: 76:32:a2:35:79:a2:91:a2:4d:bc:c7:5b:fd:9a:e8: e9:ee:01:ad:15:c7:8c:90:64:b3:ad:8c:37:32:09: 47:28:1e:c5:98:3c:37:ab:ac:cb:62:37:3e:c5:fa: f9:6e:97:80:38:ba:4d:19:04:58:cb:57:34:f7:4e: 7c:0f:42:29:ad:92:57:e7:03:ce:87:84:19:33:64: 9a:8d:f6:3d:79:38:3a:2d:27:60:9d:f7:81:57:29: 5a:c9:78:e5:9b:1a:1f:81:39:3a:60:58:a9:d3:48: ef:39:33:1e:94:53:39:6b:76:99:99:80:d5:c3:6b: ae:ed:15:2a:f2:25:e4:df:1e:9e:25:d6:80:24:4c: 03:af:ed:68:7f:62:aa:e8:f7:d8:53:d1:b1:63:88: fa:54:e9:3b:36:cc:1f:c6:e2:c9:30:ee:cd:f9:12: 70:ef:6e:30:87:4d:99:43:f6:ce:0c:ba:91:d7:a6: 9c:b2:48:19:88:58:a3:48:d8:c9:be:c3:fe:54:7f: f5:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:31:B7:5B:67:5B:9B:0C:38:46:D9:DD:15:BC:5C:B3:68:97:0E:C7 X509v3 Authority Key Identifier: keyid:F4:19:4E:27:E1:5A:4F:76:E0:06:40:37:95:14:3D:4E:FD:CF:02:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NCCC/1/F4194E27E15A4F76E006403795143D4EFDCF022E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/F4194E27E15A4F76E006403795143D4EFDCF022E.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NCCC/1/F4194E27E15A4F76E006403795143D4EFDCF022E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:4c:73:44:0c:05:f9:69:13:75:a3:00:28:60:61:4b:93:f5: 27:df:53:2f:71:5d:3d:f6:ff:b6:39:30:8b:ad:9f:5a:35:17: 92:bf:d5:cd:92:b3:93:c1:7a:e3:39:1c:56:30:3b:13:c9:0f: 78:7b:bf:f2:94:c5:68:9b:d9:94:c0:3c:62:20:ba:3c:a0:7e: 91:20:0b:6f:72:d5:91:74:e3:a7:1b:0b:ed:0d:13:c3:0e:cc: 1c:44:50:b6:0c:97:e6:47:06:9b:d2:6d:44:51:b3:7d:03:1f: 27:a6:ad:b1:f9:f1:2f:c8:a7:6f:ae:79:bc:99:fe:8b:e3:68: 9f:b9:db:84:29:ed:b5:f2:c7:19:9c:f5:a2:f9:62:31:9e:77: 53:c3:46:7d:2d:cc:e9:0b:18:e3:c5:95:55:0b:b3:02:35:e8: e1:c7:77:1a:63:a5:bd:83:33:8e:88:8b:ac:20:ee:67:96:2c: 5b:6b:0f:a1:fa:b0:13:25:6c:aa:e9:c9:79:d1:ef:54:29:d9: 01:0e:9d:f1:9f:eb:bf:3a:7f:6e:d7:da:6f:f4:eb:68:70:1d: 4a:80:7c:65:a3:31:40:74:e0:e3:6d:03:93:d7:c7:17:6b:cb: 17:cf:d1:7b:3c:eb:3e:5b:4b:bd:8c:1f:e8:0e:54:1f:c7:b8: 5a:31:c9:2e -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUKmeL0f71g18OKAj9ZQd9p7Q4sgUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjQxOTRFMjdFMTVBNEY3NkUwMDY0MDM3OTUxNDNENEVG RENGMDIyRTAeFw0yNjA4MTUwNjU5NTFaFw0yNjA4MTYwOTU0NTFaMDMxMTAvBgNV BAMTKDM4MzFCNzVCNjc1QjlCMEMzODQ2RDlERDE1QkM1Q0IzNjg5NzBFQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpJRsHhf6gYHKQlxtmRBUy1+SO JKzCorhStWrAfTXaDZZwXPbBiXgDg7UFg75Ez+QVmDax+81xPpCmYnYyojV5opGi TbzHW/2a6OnuAa0Vx4yQZLOtjDcyCUcoHsWYPDerrMtiNz7F+vlul4A4uk0ZBFjL VzT3TnwPQimtklfnA86HhBkzZJqN9j15ODotJ2Cd94FXKVrJeOWbGh+BOTpgWKnT SO85Mx6UUzlrdpmZgNXDa67tFSryJeTfHp4l1oAkTAOv7Wh/Yqro99hT0bFjiPpU 6Ts2zB/G4skw7s35EnDvbjCHTZlD9s4MupHXppyySBmIWKNI2Mm+w/5Uf/UFAgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQUODG3W2dbmww4RtndFbxcs2iXDscwHwYDVR0j BBgwFoAU9BlOJ+FaT3bgBkA3lRQ9Tv3PAi4wDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTkNDQy8x L0Y0MTk0RTI3RTE1QTRGNzZFMDA2NDAzNzk1MTQzRDRFRkRDRjAyMkUuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzAvRjQxOTRFMjdFMTVBNEY3NkUwMDY0MDM3OTUxNDNE NEVGRENGMDIyRS5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05DQ0MvMS9GNDE5NEUyN0UxNUE0Rjc2 RTAwNjQwMzc5NTE0M0Q0RUZEQ0YwMjJFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADkxzRAwF+WkTdaMA KGBhS5P1J99TL3FdPfb/tjkwi62fWjUXkr/VzZKzk8F64zkcVjA7E8kPeHu/8pTF aJvZlMA8YiC6PKB+kSALb3LVkXTjpxsL7Q0Tww7MHERQtgyX5kcGm9JtRFGzfQMf J6atsfnxL8inb655vJn+i+Non7nbhCnttfLHGZz1ovliMZ53U8NGfS3M6QsY48WV VQuzAjXo4cd3GmOlvYMzjoiLrCDuZ5YsW2sPofqwEyVsqunJedHvVCnZAQ6d8Z/r vzp/btfab/TraHAdSoB8ZaMxQHTg420Dk9fHF2vLF8/RezzrPltLvYwf6A5UH8e4 WjHJLg== -----END CERTIFICATE-----Generated at Sat Aug 15 10:17:11 2026 by rpki-client