$ rpki-client -vvvf rpkica.twnic.tw/rpki/NCIC/1/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.mft File: D5C99016D01EDDE0A4D47C3C948EE8859612C73B.mft (raw, json) Hash identifier: ScwhYu1M1E5/mZC+66GcohspoFOCOj47MgkcL564MXo= Subject key identifier: 88:B5:36:A3:73:00:47:3B:B2:2E:D3:A7:A0:76:43:3C:B3:F0:43:73 Authority key identifier: D5:C9:90:16:D0:1E:DD:E0:A4:D4:7C:3C:94:8E:E8:85:96:12:C7:3B Certificate issuer: /CN=D5C99016D01EDDE0A4D47C3C948EE8859612C73B Certificate serial: 4356908C304855EA3B515834FA64E7EE2488822E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NCIC/1/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.mft Manifest number: 021C Signing time: Tue 06 Oct 2026 22:59:40 +0000 Manifest this update: Tue 06 Oct 2026 22:54:40 +0000 Manifest next update: Thu 08 Oct 2026 01:18:40 +0000 Files and hashes: 1: 3139322e37322e33322e302f31392d3234203d3e2034373830.roa (hash: IAJDcSfRLpjVsd3ilJuaUqAl0u4sdr8+zfKeB8N1STk=) 2: 3139322e37322e382e302f32312d3234203d3e2039393139.roa (hash: GbQSPFutvMmuWccC6y+kxjUSwDJ1ik/mT03jQDCuwD4=) 3: 3139322e37322e3234382e302f32322d3234203d3e2039393139.roa (hash: w2LmOI1eQP3xj9n4sBqRb67lBeJFTEuUVe+BjjWP/g8=) 4: 3139322e37322e36342e302f31382d3234203d3e2034373830.roa (hash: IkE5VbWeMMJYwmOD5YW4lS/zGapdsVeaSsB5x46YyVs=) 5: 3139322e37322e3139322e302f31392d3234203d3e2034373830.roa (hash: HDP+weW9NczVRv3tVvCtth7CO+aCW75PFkRxJDjQFGU=) 6: 3139322e37322e3132382e302f31382d3234203d3e2034373830.roa (hash: LzN8cI51zk5jZy8rEOcECVIZmpi8vie+TUsPNlzdXuc=) 7: 3139322e37322e382e302f32312d3234203d3e2034373830.roa (hash: 1Hh6x51Jeg1BSF3NwDHjHunpz1y1V3E8ygnYaLHBszo=) 8: 3139322e37322e3234382e302f32322d3234203d3e2034373830.roa (hash: 65UG56uDtaduhHckiIsfYUMD5Llwyc25pnJQFOvZ6Bo=) 9: 3139322e37322e3235322e302f32342d3234203d3e2039393139.roa (hash: VBtmPKe5I226J9zWpVQAjkGTwQ8c6xfoJIAIP/bSZoI=) 10: 3139322e37322e332e302f32342d3234203d3e2034373830.roa (hash: hj2bnED2YLfhRnAL+cGxD8mEc2iquoy7i11842ivkl8=) 11: 3139322e37322e3232342e302f32302d3234203d3e2034373830.roa (hash: JFJbmB7cfEuw1iDDZaeMc1QewQMUllS7sHbdWQbrgDc=) 12: 3139322e37322e3235322e302f32342d3234203d3e2034373830.roa (hash: QUCYMabkjkOS3bq4pnYLsjSc27ckRrPNJ8pg8qqNByc=) 13: 3139322e37322e3232342e302f32302d3234203d3e2039393139.roa (hash: IbJvzNWqowT9ss8SkDFFbTJBrs2hceylDNcxXN29XFI=) 14: 3133392e3137352e302e302f31362d3234203d3e2034373830.roa (hash: /ZgMlJJWHzRz3oSWNjGyPTQH1Mg84+PLKC/H5qUI7Ns=) 15: 3139322e37322e342e302f32322d3234203d3e2039393139.roa (hash: Mc3y+NW93aC6lat66PDBZYR8qmh9c+fZPRpk7bBYllo=) 16: 3139322e37322e31362e302f32302d3234203d3e2039393139.roa (hash: YfF/tC6LRnh/bsWMphOM4qUtQ57nFavnsqtfTl2of/U=) 17: 3139322e37322e36342e302f31382d3234203d3e2039393139.roa (hash: 6ubqZ+h8/1xZM/Z1mXArWRioq7/yui3/nMg9Ngz6hKA=) 18: 3139322e37322e332e302f32342d3234203d3e2039393139.roa (hash: qMTF96rAy8wZ4NUEpq4S8Q/4tASEMCoJMKXrGLo6KtQ=) 19: 3139322e37322e31362e302f32302d3234203d3e2034373830.roa (hash: 9ZGrNp+VsLlXW7PeBXw8YpqEX/WVDXlTYIwuby9ILk4=) 20: 3133392e3137352e302e302f31362d3234203d3e2039393139.roa (hash: 3pZVp3TNQ/sRl3TjQTLvkQ3q6JCaq0d/zamjf+77kx8=) 21: 3139322e37322e3132382e302f31382d3234203d3e2039393139.roa (hash: bXHD2UHkc/GfgCH5hcaP2+voIqd8TOjXlXtoDjGW8JA=) 22: 3139322e37322e3234302e302f32312d3234203d3e2034373830.roa (hash: w9y6pwWmA3JFdHYwXGU59AkfbSQ5hRF5f8RxZemOXM8=) 23: D5C99016D01EDDE0A4D47C3C948EE8859612C73B.crl (hash: Hz2e0nXZom2pOckITtci/MxBXyXGG21s/5Sv2xPrjHA=) 24: 3139322e37322e3234302e302f32312d3234203d3e2039393139.roa (hash: zyCP5RCcYrInB0mG7H3w0fJawxlNECjjYSjAg7D7d1Y=) 25: 3139322e37322e33322e302f31392d3234203d3e2039393139.roa (hash: IdXpC8VBeG7nz0JfgL+likpQtKVBBBXtQNRSvEXG1d0=) 26: 3139322e37322e3139322e302f31392d3234203d3e2039393139.roa (hash: Ah2jakkWaX8SyRrg2TG3GrlMUxHdK/+BuuzbL3/oW74=) 27: 3139322e37322e342e302f32322d3234203d3e2034373830.roa (hash: Ba5i8ude16dQiEfcAiO+btSj/eH4uGS0xcFo7grp3x0=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NCIC/1/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.crl rsync://rpkica.twnic.tw/rpki/NCIC/1/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Oct 2026 20:49:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:56:90:8c:30:48:55:ea:3b:51:58:34:fa:64:e7:ee:24:88:82:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5C99016D01EDDE0A4D47C3C948EE8859612C73B Validity Not Before: Oct 6 22:54:40 2026 GMT Not After : Oct 8 01:18:40 2026 GMT Subject: CN=88B536A37300473BB22ED3A7A076433CB3F04373 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:2a:1c:ea:e4:72:6b:13:03:cd:a8:3b:4f:91: 4c:57:63:b8:6f:4d:56:63:43:2c:9b:03:22:5d:72: 45:00:db:10:2d:62:e2:6f:50:76:c2:e8:e9:4d:0c: 47:e7:c3:db:c9:45:c9:49:1f:a8:db:6e:28:c2:0d: 83:c4:fe:a6:27:92:aa:f0:74:39:67:98:b3:c4:8e: 63:39:12:b2:77:65:ef:57:a4:1e:bf:0c:4b:3b:cc: 9f:49:34:76:ce:71:d2:5c:86:4f:77:6f:e2:73:95: c9:1a:ae:b7:be:e1:43:d5:38:2f:62:1e:cd:43:9a: 0a:e1:9a:fc:d5:1c:fb:77:e2:8f:15:8d:63:2b:73: bd:5c:73:ed:c5:8b:44:f5:06:e0:a9:ed:e9:b5:ee: 1e:91:75:aa:db:7f:79:a7:06:f4:12:39:2c:51:85: 8c:67:e8:54:50:0d:92:1e:79:ff:4c:08:37:29:60: a9:9b:d6:77:c7:ee:93:29:59:08:18:0b:09:72:d5: c8:2e:9d:48:6f:0c:af:be:0c:fc:64:ae:42:46:5c: 11:c6:fe:de:f9:d3:10:7a:95:f7:94:13:70:8a:be: 8d:cb:e8:fa:ab:e2:fc:af:cd:9d:a4:3a:01:7f:c4: 06:9a:35:82:84:20:1a:43:70:11:48:d9:d5:28:53: 1c:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:B5:36:A3:73:00:47:3B:B2:2E:D3:A7:A0:76:43:3C:B3:F0:43:73 X509v3 Authority Key Identifier: keyid:D5:C9:90:16:D0:1E:DD:E0:A4:D4:7C:3C:94:8E:E8:85:96:12:C7:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NCIC/1/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NCIC/1/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:b4:3f:fe:40:7f:a0:cb:14:a4:63:b3:51:fd:d1:0e:bb:16: db:63:61:3b:46:48:74:81:ca:d6:66:83:43:f6:29:0b:bf:8e: 40:fd:f4:10:fb:e2:9f:02:33:8b:37:ae:3d:3e:70:b3:12:4a: 50:bc:62:d6:c5:9a:32:c6:e7:78:e7:bb:7c:4a:f4:eb:82:97: 1d:74:77:36:9e:e6:a7:e5:cd:e2:34:c0:48:0a:44:c7:88:c3: 6b:67:40:2d:70:4d:ae:e7:fe:81:ae:9c:9c:b3:3b:10:35:1a: 09:4b:7d:74:d3:37:e3:ae:d1:79:61:b6:06:ec:d8:1c:ff:4e: b5:7e:f4:7f:0c:02:c5:1f:3a:0a:16:2a:12:a6:47:86:d3:86: 52:87:b5:bc:bf:6f:38:3d:f3:d4:b0:da:7a:84:05:57:05:8e: 33:20:8c:b6:fd:a1:0a:5a:73:67:71:19:64:e9:17:b3:0f:86: fb:f5:6c:06:01:c8:db:e9:c1:48:ea:45:b7:2d:ab:cd:e1:68: 7f:08:6c:fb:d4:3d:ab:0e:23:7a:51:90:ce:c5:e2:73:d0:d9: 1d:3f:fc:23:fe:c7:33:2f:c0:3a:4d:5c:71:8f:6a:00:ea:d1: ea:e7:a3:06:dc:8e:b7:46:3b:6c:5b:7d:7b:9a:8e:6f:90:23: f6:d9:f9:41 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUQ1aQjDBIVeo7UVg0+mTn7iSIgi4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDVDOTkwMTZEMDFFRERFMEE0RDQ3QzNDOTQ4RUU4ODU5 NjEyQzczQjAeFw0yNjEwMDYyMjU0NDBaFw0yNjEwMDgwMTE4NDBaMDMxMTAvBgNV BAMTKDg4QjUzNkEzNzMwMDQ3M0JCMjJFRDNBN0EwNzY0MzNDQjNGMDQzNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaKhzq5HJrEwPNqDtPkUxXY7hv TVZjQyybAyJdckUA2xAtYuJvUHbC6OlNDEfnw9vJRclJH6jbbijCDYPE/qYnkqrw dDlnmLPEjmM5ErJ3Ze9XpB6/DEs7zJ9JNHbOcdJchk93b+Jzlckarre+4UPVOC9i Hs1DmgrhmvzVHPt34o8VjWMrc71cc+3Fi0T1BuCp7em17h6Rdarbf3mnBvQSOSxR hYxn6FRQDZIeef9MCDcpYKmb1nfH7pMpWQgYCwly1cgunUhvDK++DPxkrkJGXBHG /t750xB6lfeUE3CKvo3L6Pqr4vyvzZ2kOgF/xAaaNYKEIBpDcBFI2dUoUxzzAgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQUiLU2o3MARzuyLtOnoHZDPLPwQ3MwHwYDVR0j BBgwFoAU1cmQFtAe3eCk1Hw8lI7ohZYSxzswDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTkNJQy8x L0Q1Qzk5MDE2RDAxRURERTBBNEQ0N0MzQzk0OEVFODg1OTYxMkM3M0IuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzAvRDVDOTkwMTZEMDFFRERFMEE0RDQ3QzNDOTQ4RUU4 ODU5NjEyQzczQi5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05DSUMvMS9ENUM5OTAxNkQwMUVEREUw QTRENDdDM0M5NDhFRTg4NTk2MTJDNzNCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADLQ//kB/oMsUpGOz Uf3RDrsW22NhO0ZIdIHK1maDQ/YpC7+OQP30EPvinwIzizeuPT5wsxJKULxi1sWa MsbneOe7fEr064KXHXR3Np7mp+XN4jTASApEx4jDa2dALXBNruf+ga6cnLM7EDUa CUt9dNM3467ReWG2BuzYHP9OtX70fwwCxR86ChYqEqZHhtOGUoe1vL9vOD3z1LDa eoQFVwWOMyCMtv2hClpzZ3EZZOkXsw+G+/VsBgHI2+nBSOpFty2rzeFofwhs+9Q9 qw4jelGQzsXic9DZHT/8I/7HMy/AOk1ccY9qAOrR6uejBtyOt0Y7bFt9e5qOb5Aj 9tn5QQ== -----END CERTIFICATE-----Generated at Wed Oct 7 06:01:34 2026 by rpki-client