$ rpki-client -vvf rpkica.twnic.tw/rpki/NCREE/0/97D4884F986D543782ED0796247DD5237461E32E.mft File: 97D4884F986D543782ED0796247DD5237461E32E.mft (raw, json) Hash identifier: T/Om6jaT29PlQ7+ffKw/iRopuuSxKguH5+V2mWyOfq8= Subject key identifier: 95:F2:AC:D5:D7:76:0E:ED:E5:78:41:41:A2:01:E8:CD:EE:39:0B:1E Authority key identifier: 97:D4:88:4F:98:6D:54:37:82:ED:07:96:24:7D:D5:23:74:61:E3:2E Certificate issuer: /CN=97D4884F986D543782ED0796247DD5237461E32E Certificate serial: 71147F0D939C129336B92F018B9EBAA0A4020FD3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/97D4884F986D543782ED0796247DD5237461E32E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NCREE/0/97D4884F986D543782ED0796247DD5237461E32E.mft Manifest number: 47 Signing time: Tue 30 Jun 2026 14:14:07 +0000 Manifest this update: Tue 30 Jun 2026 14:09:07 +0000 Manifest next update: Wed 01 Jul 2026 16:55:07 +0000 Files and hashes: 1: 3230322e352e31322e302f32322d3232203d3e203138313833.roa (hash: XbkYTDNrq99sllfWjZ/d99FzReEgoNHkyUkg86NPTgw=) 2: 97D4884F986D543782ED0796247DD5237461E32E.crl (hash: scxo1nrT5zmgnF+SL+rvX0Ypb7PiT7o1DRfPcXrsNRM=) 3: 323430303a383561303a3a2f33322d3332203d3e203138313833.roa (hash: C6OKHDxWyKxWvrSfW3hF42Kke8nwN95k72tbWDAEl2M=) 4: 3130332e3138392e3133322e302f32332d3233203d3e203138313833.roa (hash: 52gdtA1LdP2xK0dCg/MXu3Df1UL36Mp+kCidYA74Lo8=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NCREE/0/97D4884F986D543782ED0796247DD5237461E32E.crl rsync://rpkica.twnic.tw/rpki/NCREE/0/97D4884F986D543782ED0796247DD5237461E32E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/97D4884F986D543782ED0796247DD5237461E32E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Jul 2026 14:08:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:14:7f:0d:93:9c:12:93:36:b9:2f:01:8b:9e:ba:a0:a4:02:0f:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97D4884F986D543782ED0796247DD5237461E32E Validity Not Before: Jun 30 14:09:07 2026 GMT Not After : Jul 1 16:55:07 2026 GMT Subject: CN=95F2ACD5D7760EEDE5784141A201E8CDEE390B1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:1c:7c:f5:f6:28:90:97:45:69:ba:42:90:1b: 85:d4:34:f2:fa:a5:3b:17:af:1d:8f:7a:10:37:13: de:bf:f1:e3:d8:5a:01:f2:9f:2d:d1:86:2b:ed:4b: 22:06:c5:0b:a9:42:77:c1:d0:0c:51:cd:ff:e6:93: a7:e5:93:14:79:13:a5:65:8d:58:a8:29:55:33:70: 41:c1:29:cb:01:33:9e:54:ea:88:94:15:a4:da:ce: 6e:93:da:98:9c:c5:d9:b9:b5:4d:75:39:b8:70:72: a1:54:9a:54:63:40:46:f2:bc:ed:00:df:db:5f:30: 81:43:07:39:87:95:9b:07:32:27:ff:85:93:bb:76: a0:41:67:d8:c9:05:0e:45:1a:91:db:df:07:27:76: 06:54:89:03:4f:f7:0b:82:bc:16:1c:fe:9d:b6:5e: 74:28:be:34:2e:7c:4c:19:fd:cc:27:74:be:2a:ac: 4c:87:a3:64:87:2d:9a:9d:31:1b:9f:ae:a6:6a:ee: 11:52:30:a9:84:b2:a7:89:ff:5f:52:94:ae:79:5e: 0c:ea:38:bd:bc:55:e0:ea:a1:a0:c2:21:d9:a9:3a: 5e:05:7e:73:af:3e:b2:04:69:9f:72:67:7a:eb:f1: 4a:8d:5d:e8:30:a1:3c:8a:c2:48:54:d4:9d:c4:29: 0f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:F2:AC:D5:D7:76:0E:ED:E5:78:41:41:A2:01:E8:CD:EE:39:0B:1E X509v3 Authority Key Identifier: keyid:97:D4:88:4F:98:6D:54:37:82:ED:07:96:24:7D:D5:23:74:61:E3:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NCREE/0/97D4884F986D543782ED0796247DD5237461E32E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/97D4884F986D543782ED0796247DD5237461E32E.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NCREE/0/97D4884F986D543782ED0796247DD5237461E32E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:98:65:dd:1f:9b:01:44:ff:ab:88:67:7c:ab:3b:26:f6:2e: 8b:72:ca:56:ef:dc:b0:50:9f:04:15:0d:98:d6:a1:69:1a:c1: fc:8b:04:8a:2a:76:ec:7f:10:6c:dd:b3:ac:40:9e:c2:72:22: e8:b2:8a:2b:58:ab:dc:bb:45:5e:49:5d:ba:56:ee:ca:8b:71: 31:20:59:c3:d0:fb:91:f5:13:38:bf:c7:35:93:9f:4d:61:9e: e4:8f:3d:3e:f6:a0:3f:1c:77:92:65:5a:6c:c8:dd:b9:76:4b: bc:74:e0:98:e7:21:5b:67:b1:d8:04:c9:d8:4b:db:e6:25:67: 3c:20:ec:97:39:c2:09:a0:04:ec:f9:4e:9d:cd:88:58:1a:d4: 6f:1d:45:7b:96:c1:b1:b3:4a:4a:46:6a:9a:a5:79:a2:b2:5b: 3c:05:68:48:4e:ff:38:e7:5d:3d:8a:9d:21:2b:8c:f6:40:ea: 90:fd:86:d4:75:2b:ed:54:8b:cb:46:15:e1:80:88:47:a6:43: 84:07:a9:9c:da:8b:00:68:a7:f7:e8:b4:19:7a:1b:09:4a:f0: 79:e5:de:bf:3a:f3:1a:93:2e:89:2a:b9:39:d7:72:aa:b8:10: 6c:ae:47:7f:7f:df:1e:fc:de:db:eb:f9:22:35:89:fb:11:48: db:51:3d:fb -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUcRR/DZOcEpM2uS8Bi566oKQCD9MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTdENDg4NEY5ODZENTQzNzgyRUQwNzk2MjQ3REQ1MjM3 NDYxRTMyRTAeFw0yNjA2MzAxNDA5MDdaFw0yNjA3MDExNjU1MDdaMDMxMTAvBgNV BAMTKDk1RjJBQ0Q1RDc3NjBFRURFNTc4NDE0MUEyMDFFOENERUUzOTBCMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaHHz19iiQl0VpukKQG4XUNPL6 pTsXrx2PehA3E96/8ePYWgHyny3RhivtSyIGxQupQnfB0AxRzf/mk6flkxR5E6Vl jVioKVUzcEHBKcsBM55U6oiUFaTazm6T2picxdm5tU11ObhwcqFUmlRjQEbyvO0A 39tfMIFDBzmHlZsHMif/hZO7dqBBZ9jJBQ5FGpHb3wcndgZUiQNP9wuCvBYc/p22 XnQovjQufEwZ/cwndL4qrEyHo2SHLZqdMRufrqZq7hFSMKmEsqeJ/19SlK55Xgzq OL28VeDqoaDCIdmpOl4FfnOvPrIEaZ9yZ3rr8UqNXegwoTyKwkhU1J3EKQ+jAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUlfKs1dd2Du3leEFBogHoze45Cx4wHwYDVR0j BBgwFoAUl9SIT5htVDeC7QeWJH3VI3Rh4y4wDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTkNSRUUv MC85N0Q0ODg0Rjk4NkQ1NDM3ODJFRDA3OTYyNDdERDUyMzc0NjFFMzJFLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzk3RDQ4ODRGOTg2RDU0Mzc4MkVEMDc5NjI0N0RE NTIzNzQ2MUUzMkUuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9OQ1JFRS8wLzk3RDQ4ODRGOTg2RDU0 Mzc4MkVEMDc5NjI0N0RENTIzNzQ2MUUzMkUubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAbmGXdH5sBRP+r iGd8qzsm9i6LcspW79ywUJ8EFQ2Y1qFpGsH8iwSKKnbsfxBs3bOsQJ7CciLosoor WKvcu0VeSV26Vu7Ki3ExIFnD0PuR9RM4v8c1k59NYZ7kjz0+9qA/HHeSZVpsyN25 dku8dOCY5yFbZ7HYBMnYS9vmJWc8IOyXOcIJoATs+U6dzYhYGtRvHUV7lsGxs0pK RmqapXmisls8BWhITv845109ip0hK4z2QOqQ/YbUdSvtVIvLRhXhgIhHpkOEB6mc 2osAaKf36LQZehsJSvB55d6/OvMaky6JKrk513KquBBsrkd/f98e/N7b6/kiNYn7 EUjbUT37 -----END CERTIFICATE-----Generated at Tue Jun 30 19:09:18 2026 by rpki-client