$ rpki-client -vvf rpkica.twnic.tw/rpki/NCREE/0/97D4884F986D543782ED0796247DD5237461E32E.mft File: 97D4884F986D543782ED0796247DD5237461E32E.mft (raw, json) Hash identifier: iIcEfyfMq/XJluCs5RucdQUdchUVs0Np2Z/ZuZrYUJQ= Subject key identifier: A0:C5:B1:49:4D:67:65:AC:4F:8D:5E:C4:81:95:41:9E:7A:00:3B:45 Authority key identifier: 97:D4:88:4F:98:6D:54:37:82:ED:07:96:24:7D:D5:23:74:61:E3:2E Certificate issuer: /CN=97D4884F986D543782ED0796247DD5237461E32E Certificate serial: 75DF34F1939849473E3CF8A7374FEEB86BA5B64A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/97D4884F986D543782ED0796247DD5237461E32E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NCREE/0/97D4884F986D543782ED0796247DD5237461E32E.mft Manifest number: 06 Signing time: Wed 13 May 2026 04:31:48 +0000 Manifest this update: Wed 13 May 2026 04:26:48 +0000 Manifest next update: Thu 14 May 2026 05:46:48 +0000 Files and hashes: 1: 97D4884F986D543782ED0796247DD5237461E32E.crl (hash: W5uMTBziLpDJ+HL5jnWAw4e0ei4U5ZAxvvk/yKqJkn4=) 2: 3230322e352e31322e302f32322d3232203d3e203138313833.roa (hash: XbkYTDNrq99sllfWjZ/d99FzReEgoNHkyUkg86NPTgw=) 3: 3130332e3138392e3133322e302f32332d3233203d3e203138313833.roa (hash: 52gdtA1LdP2xK0dCg/MXu3Df1UL36Mp+kCidYA74Lo8=) 4: 323430303a383561303a3a2f33322d3332203d3e203138313833.roa (hash: C6OKHDxWyKxWvrSfW3hF42Kke8nwN95k72tbWDAEl2M=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NCREE/0/97D4884F986D543782ED0796247DD5237461E32E.crl rsync://rpkica.twnic.tw/rpki/NCREE/0/97D4884F986D543782ED0796247DD5237461E32E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/97D4884F986D543782ED0796247DD5237461E32E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 05:46:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:df:34:f1:93:98:49:47:3e:3c:f8:a7:37:4f:ee:b8:6b:a5:b6:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97D4884F986D543782ED0796247DD5237461E32E Validity Not Before: May 13 04:26:48 2026 GMT Not After : May 14 05:46:48 2026 GMT Subject: CN=A0C5B1494D6765AC4F8D5EC48195419E7A003B45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:3c:58:62:85:6d:2d:95:66:25:fe:4e:d6:8b: 9d:08:85:d9:87:5b:e2:04:bf:53:23:6d:98:6e:f8: 71:da:b3:bb:70:8e:30:19:6c:bd:4b:cf:2c:d4:98: 5d:cc:a8:15:c6:e4:62:e4:ec:4c:5c:ce:d6:d5:24: 4d:0d:93:f3:47:04:f9:9d:19:f9:df:f1:03:b0:93: ad:c2:6d:2b:f7:16:2e:66:1c:60:57:4f:41:df:2e: 8c:a1:9b:52:66:33:66:69:06:25:68:b3:85:6a:c1: 4a:2f:34:5b:7b:95:74:3c:de:3e:d3:96:90:18:1d: 1c:48:80:db:43:cf:54:a1:df:67:11:65:d0:82:bb: 5a:32:97:64:bb:e7:9a:71:13:25:af:21:59:f6:40: 72:1c:44:4d:29:86:47:9d:b2:2a:dc:a3:d4:2e:be: 7b:27:83:ac:15:e8:4d:71:f2:83:0c:b3:25:eb:44: b6:22:62:b0:9a:07:d6:3f:41:77:22:57:17:e7:91: 2e:38:1a:61:ca:5c:aa:6d:ec:a6:19:9a:91:60:b7: 1c:0d:8a:10:3c:b0:06:37:37:c7:b4:20:99:06:d6: 34:4f:09:b1:d2:a7:79:22:03:81:01:84:68:fa:f1: 45:bd:50:04:1c:21:8b:06:ba:e7:71:3a:1c:ac:d7: 6d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:C5:B1:49:4D:67:65:AC:4F:8D:5E:C4:81:95:41:9E:7A:00:3B:45 X509v3 Authority Key Identifier: keyid:97:D4:88:4F:98:6D:54:37:82:ED:07:96:24:7D:D5:23:74:61:E3:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NCREE/0/97D4884F986D543782ED0796247DD5237461E32E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/97D4884F986D543782ED0796247DD5237461E32E.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NCREE/0/97D4884F986D543782ED0796247DD5237461E32E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:d3:e8:b3:b6:d6:cd:3f:95:26:18:ea:dc:50:c1:8c:10:eb: 66:08:8d:08:5d:9f:21:36:63:24:4c:39:94:ec:5b:e6:4b:2e: 55:bd:78:d2:f1:b2:d1:e2:c1:f9:60:9c:66:65:52:61:4a:d8: ec:91:af:77:60:55:8c:e8:ef:a1:94:6f:4e:84:a0:f8:ca:cf: 4b:28:e2:42:f2:10:93:3e:e8:9e:60:bc:55:9f:43:7b:c0:cd: ef:5c:07:97:d9:94:d3:66:5d:71:5a:a8:bc:58:3f:e0:3f:81: 99:95:8d:60:27:b6:10:eb:bc:54:48:ad:e8:29:38:b9:05:20: 9c:f8:84:f6:54:6f:64:5b:32:c6:15:16:42:07:47:42:0a:07: 5a:7c:33:b7:b9:88:5b:b3:19:b6:ea:34:2e:4a:8d:7d:60:28: a0:a6:dd:d6:66:9f:0d:59:d3:eb:ea:d2:1f:2c:f1:bd:b2:f3: 0c:a9:ef:49:7e:ac:8e:51:28:09:05:c7:5e:9f:0e:98:70:da: e0:8f:14:3b:84:a9:6f:66:6c:91:f1:c7:92:d4:15:ed:38:61: d7:a6:32:2f:a1:d5:f9:1c:4c:72:96:b0:7c:80:5b:dd:24:fa: f5:aa:ce:9d:eb:a2:f8:5a:b9:fe:3a:47:5b:0e:ed:13:1c:ab: e7:c5:c8:aa -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUdd808ZOYSUc+PPinN0/uuGultkowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTdENDg4NEY5ODZENTQzNzgyRUQwNzk2MjQ3REQ1MjM3 NDYxRTMyRTAeFw0yNjA1MTMwNDI2NDhaFw0yNjA1MTQwNTQ2NDhaMDMxMTAvBgNV BAMTKEEwQzVCMTQ5NEQ2NzY1QUM0RjhENUVDNDgxOTU0MTlFN0EwMDNCNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIPFhihW0tlWYl/k7Wi50IhdmH W+IEv1MjbZhu+HHas7twjjAZbL1LzyzUmF3MqBXG5GLk7ExcztbVJE0Nk/NHBPmd Gfnf8QOwk63CbSv3Fi5mHGBXT0HfLoyhm1JmM2ZpBiVos4VqwUovNFt7lXQ83j7T lpAYHRxIgNtDz1Sh32cRZdCCu1oyl2S755pxEyWvIVn2QHIcRE0phkedsirco9Qu vnsng6wV6E1x8oMMsyXrRLYiYrCaB9Y/QXciVxfnkS44GmHKXKpt7KYZmpFgtxwN ihA8sAY3N8e0IJkG1jRPCbHSp3kiA4EBhGj68UW9UAQcIYsGuudxOhys122dAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUoMWxSU1nZaxPjV7EgZVBnnoAO0UwHwYDVR0j BBgwFoAUl9SIT5htVDeC7QeWJH3VI3Rh4y4wDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTkNSRUUv MC85N0Q0ODg0Rjk4NkQ1NDM3ODJFRDA3OTYyNDdERDUyMzc0NjFFMzJFLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzk3RDQ4ODRGOTg2RDU0Mzc4MkVEMDc5NjI0N0RE NTIzNzQ2MUUzMkUuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9OQ1JFRS8wLzk3RDQ4ODRGOTg2RDU0 Mzc4MkVEMDc5NjI0N0RENTIzNzQ2MUUzMkUubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBC0+izttbNP5Um GOrcUMGMEOtmCI0IXZ8hNmMkTDmU7FvmSy5VvXjS8bLR4sH5YJxmZVJhStjska93 YFWM6O+hlG9OhKD4ys9LKOJC8hCTPuieYLxVn0N7wM3vXAeX2ZTTZl1xWqi8WD/g P4GZlY1gJ7YQ67xUSK3oKTi5BSCc+IT2VG9kWzLGFRZCB0dCCgdafDO3uYhbsxm2 6jQuSo19YCigpt3WZp8NWdPr6tIfLPG9svMMqe9JfqyOUSgJBcdenw6YcNrgjxQ7 hKlvZmyR8ceS1BXtOGHXpjIvodX5HExylrB8gFvdJPr1qs6d66L4Wrn+OkdbDu0T HKvnxciq -----END CERTIFICATE-----Generated at Wed May 13 20:36:12 2026 by rpki-client