$ rpki-client -vvvf rpkica.twnic.tw/rpki/NCCC/1/F4194E27E15A4F76E006403795143D4EFDCF022E.mft File: F4194E27E15A4F76E006403795143D4EFDCF022E.mft (raw, json) Hash identifier: wEmOP/86G483xGzNwQyECyOe9uf0Veff715NYJxMGw4= Subject key identifier: 71:3D:AE:0D:44:83:D0:6F:0A:3C:78:35:02:C8:FD:41:61:E6:9D:06 Authority key identifier: F4:19:4E:27:E1:5A:4F:76:E0:06:40:37:95:14:3D:4E:FD:CF:02:2E Certificate issuer: /CN=F4194E27E15A4F76E006403795143D4EFDCF022E Certificate serial: 29B5616B60458EF82FBC3E90A6D496D465BDDC42 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/F4194E27E15A4F76E006403795143D4EFDCF022E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NCCC/1/F4194E27E15A4F76E006403795143D4EFDCF022E.mft Manifest number: CC Signing time: Mon 05 Oct 2026 12:53:30 +0000 Manifest this update: Mon 05 Oct 2026 12:48:30 +0000 Manifest next update: Tue 06 Oct 2026 16:10:30 +0000 Files and hashes: 1: 3135372e32302e3130372e302f32342d3234203d3e203139353531.roa (hash: h885eOx61p3k8wuxUDF9SUB/ZPMTr8/gQVLItFXI4rM=) 2: 3135372e32302e3130362e302f32332d3234203d3e20313530373732.roa (hash: f9osk8atvNFbwzlzm+0pX0JbzGg2b5M3dZ9aT1SRM7Y=) 3: 3135372e32302e3130362e302f32342d3234203d3e203139353531.roa (hash: tj30Mw6SegUb4xqIoH5nsbPbEgFt7VbOqElQZObdRdk=) 4: 3135372e32302e3130362e302f32332d3233203d3e2033343632.roa (hash: U1maVebHqNxJOM61IipjwHfKGQHfW803fIcL92PP6U4=) 5: 3135372e32302e3130362e302f32332d3234203d3e20313938393439.roa (hash: NsVC+kyCCo5iuf92xRmrMNAeZWnd0GFdv+b5P5erIsw=) 6: 3135372e32302e3130372e302f32342d3234203d3e20313530373732.roa (hash: nTtkDIS/9RWSvXhNtKm7NzCRLQuNi0ZYeYDRWbSZUkY=) 7: F4194E27E15A4F76E006403795143D4EFDCF022E.crl (hash: aW2aia/tD+90d9GmPct1RSnN2EDxWy+Q4xwo55v4ZQg=) 8: 3135372e32302e3130362e302f32342d3234203d3e20313530373732.roa (hash: OmqcGxA2rNXj2dFvkkVaw1M6A48OHsdG1EyNXCLdbEU=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NCCC/1/F4194E27E15A4F76E006403795143D4EFDCF022E.crl rsync://rpkica.twnic.tw/rpki/NCCC/1/F4194E27E15A4F76E006403795143D4EFDCF022E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/F4194E27E15A4F76E006403795143D4EFDCF022E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 Oct 2026 10:45:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:b5:61:6b:60:45:8e:f8:2f:bc:3e:90:a6:d4:96:d4:65:bd:dc:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F4194E27E15A4F76E006403795143D4EFDCF022E Validity Not Before: Oct 5 12:48:30 2026 GMT Not After : Oct 6 16:10:30 2026 GMT Subject: CN=713DAE0D4483D06F0A3C783502C8FD4161E69D06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:6c:3b:18:01:43:53:a4:93:fe:34:0f:ad:3d: 8c:7a:18:29:64:71:37:8d:70:70:e4:fc:f1:ba:7b: 7e:a7:8d:e2:ab:59:b5:3a:fe:b8:a5:7c:56:96:65: 9e:a5:20:4b:85:bb:74:27:24:48:21:10:c3:92:03: 7c:3c:45:a8:85:76:4b:2a:41:d6:d7:50:91:f0:14: 6a:03:2f:c7:34:1a:9f:38:1e:21:d3:91:31:d0:bc: ce:8b:ab:51:d1:7b:c7:d3:37:19:23:57:28:fc:b3: 58:ad:da:02:2f:2a:93:cf:1f:62:23:01:67:bc:92: b1:f7:40:c6:9f:6b:1d:8e:6f:62:b6:6a:2a:c6:06: a2:d7:87:16:a9:c2:14:12:6c:67:9c:14:84:40:de: c5:8d:08:d7:3f:79:6d:68:8f:3c:db:d9:a3:5b:ef: 2a:fb:1b:ff:94:0b:11:ff:ec:84:93:92:2e:e9:7c: c4:a3:79:63:72:57:64:e9:ad:64:cd:21:11:f8:44: be:c8:28:ae:d5:fe:62:de:73:4e:5f:6e:e6:3d:c3: 9f:69:30:9e:08:26:84:a2:e7:22:be:81:f0:f3:3d: 87:22:f5:cf:35:cf:e8:5a:16:07:a5:90:c7:45:31: fc:83:7a:06:0d:62:15:96:be:5a:f2:94:82:ec:bc: 27:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:3D:AE:0D:44:83:D0:6F:0A:3C:78:35:02:C8:FD:41:61:E6:9D:06 X509v3 Authority Key Identifier: keyid:F4:19:4E:27:E1:5A:4F:76:E0:06:40:37:95:14:3D:4E:FD:CF:02:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NCCC/1/F4194E27E15A4F76E006403795143D4EFDCF022E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/F4194E27E15A4F76E006403795143D4EFDCF022E.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NCCC/1/F4194E27E15A4F76E006403795143D4EFDCF022E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ce:3c:95:d7:7f:a8:01:de:98:01:29:33:c3:e3:e3:99:2b:41: 69:3d:45:8b:79:84:c5:77:26:95:70:0b:28:70:c7:f3:f8:d3: 54:fd:87:97:09:c1:41:cd:ae:5e:ec:60:0a:7d:d2:0c:06:c7: d9:29:96:38:c4:dc:bd:49:c0:fa:38:73:f2:9d:2f:db:88:9f: a5:e2:47:c0:cd:36:c7:2d:3e:bd:11:49:e4:6c:75:e6:2e:4e: 8c:69:0a:02:80:ec:21:3d:6b:2b:de:e5:25:2f:17:21:a4:09: 1c:62:3d:19:b1:b4:2f:0b:9c:0b:7d:02:0e:63:fb:0d:bb:07: 16:6c:b5:69:94:df:ba:17:b8:7a:a2:0b:31:d4:5a:4b:c5:a3: 12:6a:a4:c2:64:fb:52:57:0a:56:88:06:4c:cd:6b:a7:7a:12: 82:a9:c0:50:5c:af:89:4c:92:3d:41:0f:65:e4:15:75:42:70: 16:10:eb:04:8f:a7:05:ee:d9:ed:8a:e0:3f:98:f8:4e:bd:73: 80:ed:d4:1d:f5:14:43:58:86:8f:f8:9e:0c:bf:47:e1:4d:29: 15:51:f6:e6:15:69:a2:10:80:d1:92:51:87:26:62:e9:46:ba: 3f:12:6e:68:3e:22:69:40:ba:5e:97:01:7c:a5:67:82:d3:ec: f6:e8:a0:a8 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUKbVha2BFjvgvvD6QptSW1GW93EIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjQxOTRFMjdFMTVBNEY3NkUwMDY0MDM3OTUxNDNENEVG RENGMDIyRTAeFw0yNjEwMDUxMjQ4MzBaFw0yNjEwMDYxNjEwMzBaMDMxMTAvBgNV BAMTKDcxM0RBRTBENDQ4M0QwNkYwQTNDNzgzNTAyQzhGRDQxNjFFNjlEMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDObDsYAUNTpJP+NA+tPYx6GClk cTeNcHDk/PG6e36njeKrWbU6/rilfFaWZZ6lIEuFu3QnJEghEMOSA3w8RaiFdksq QdbXUJHwFGoDL8c0Gp84HiHTkTHQvM6Lq1HRe8fTNxkjVyj8s1it2gIvKpPPH2Ij AWe8krH3QMafax2Ob2K2airGBqLXhxapwhQSbGecFIRA3sWNCNc/eW1ojzzb2aNb 7yr7G/+UCxH/7ISTki7pfMSjeWNyV2TprWTNIRH4RL7IKK7V/mLec05fbuY9w59p MJ4IJoSi5yK+gfDzPYci9c81z+haFgelkMdFMfyDegYNYhWWvlrylILsvCfxAgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQUcT2uDUSD0G8KPHg1Asj9QWHmnQYwHwYDVR0j BBgwFoAU9BlOJ+FaT3bgBkA3lRQ9Tv3PAi4wDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTkNDQy8x L0Y0MTk0RTI3RTE1QTRGNzZFMDA2NDAzNzk1MTQzRDRFRkRDRjAyMkUuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzAvRjQxOTRFMjdFMTVBNEY3NkUwMDY0MDM3OTUxNDNE NEVGRENGMDIyRS5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05DQ0MvMS9GNDE5NEUyN0UxNUE0Rjc2 RTAwNjQwMzc5NTE0M0Q0RUZEQ0YwMjJFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzjyV13+oAd6YASkz w+PjmStBaT1Fi3mExXcmlXALKHDH8/jTVP2HlwnBQc2uXuxgCn3SDAbH2SmWOMTc vUnA+jhz8p0v24ifpeJHwM02xy0+vRFJ5Gx15i5OjGkKAoDsIT1rK97lJS8XIaQJ HGI9GbG0LwucC30CDmP7DbsHFmy1aZTfuhe4eqILMdRaS8WjEmqkwmT7UlcKVogG TM1rp3oSgqnAUFyviUySPUEPZeQVdUJwFhDrBI+nBe7Z7YrgP5j4Tr1zgO3UHfUU Q1iGj/ieDL9H4U0pFVH25hVpohCA0ZJRhyZi6Ua6PxJuaD4iaUC6XpcBfKVngtPs 9uigqA== -----END CERTIFICATE-----Generated at Mon Oct 5 20:11:28 2026 by rpki-client