$ rpki-client -vvf rpkica.twnic.tw/rpki/NCREE/0/97D4884F986D543782ED0796247DD5237461E32E.mft File: 97D4884F986D543782ED0796247DD5237461E32E.mft (raw, json) Hash identifier: w6uycR9YqvdXhnL8Tb2YZdefY7W/7+0+KU2zHtMH940= Subject key identifier: 80:F9:8B:72:F9:07:EC:19:3A:2A:AB:31:E6:9E:77:34:5C:AE:51:37 Authority key identifier: 97:D4:88:4F:98:6D:54:37:82:ED:07:96:24:7D:D5:23:74:61:E3:2E Certificate issuer: /CN=97D4884F986D543782ED0796247DD5237461E32E Certificate serial: 41266F358B76804F9BA36AAE7F2BD030792EC145 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/97D4884F986D543782ED0796247DD5237461E32E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NCREE/0/97D4884F986D543782ED0796247DD5237461E32E.mft Manifest number: 83 Signing time: Fri 14 Aug 2026 23:23:42 +0000 Manifest this update: Fri 14 Aug 2026 23:18:42 +0000 Manifest next update: Sat 15 Aug 2026 23:30:42 +0000 Files and hashes: 1: 323430303a383561303a3a2f33322d3332203d3e203138313833.roa (hash: C6OKHDxWyKxWvrSfW3hF42Kke8nwN95k72tbWDAEl2M=) 2: 97D4884F986D543782ED0796247DD5237461E32E.crl (hash: ilKiIbJqX0lXk318TgkPDwNeVVn7jHxGkMkI7OAEYsU=) 3: 3230322e352e31322e302f32322d3232203d3e203138313833.roa (hash: XbkYTDNrq99sllfWjZ/d99FzReEgoNHkyUkg86NPTgw=) 4: 3130332e3138392e3133322e302f32332d3233203d3e203138313833.roa (hash: 52gdtA1LdP2xK0dCg/MXu3Df1UL36Mp+kCidYA74Lo8=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NCREE/0/97D4884F986D543782ED0796247DD5237461E32E.crl rsync://rpkica.twnic.tw/rpki/NCREE/0/97D4884F986D543782ED0796247DD5237461E32E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/97D4884F986D543782ED0796247DD5237461E32E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 15 Aug 2026 23:30:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:26:6f:35:8b:76:80:4f:9b:a3:6a:ae:7f:2b:d0:30:79:2e:c1:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97D4884F986D543782ED0796247DD5237461E32E Validity Not Before: Aug 14 23:18:42 2026 GMT Not After : Aug 15 23:30:42 2026 GMT Subject: CN=80F98B72F907EC193A2AAB31E69E77345CAE5137 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:d4:1b:5e:bc:21:d2:60:8b:1b:f4:a7:5f:bd: 0e:c2:02:0b:a6:08:a9:1b:e9:12:e4:2a:1c:86:02: 7f:9c:07:b3:e9:68:74:46:aa:38:e4:82:7f:c0:25: e7:2b:8c:d8:af:03:09:2d:f7:dc:5e:b8:77:95:5d: 73:75:25:aa:e1:a4:8d:3b:cf:8c:71:1e:de:c8:65: 62:8c:3e:a5:2b:83:58:24:95:b6:fd:1d:9a:54:0a: 22:1a:d6:d4:f2:64:87:59:58:39:a5:99:f1:28:e3: 76:38:a6:d2:03:dd:1d:42:a6:8a:1b:28:61:a9:c2: 4e:08:24:78:d6:3c:0e:21:f1:ec:fe:4d:c6:c4:80: 50:66:81:55:5a:b4:d7:03:80:47:9e:b5:97:b6:2d: fc:70:cb:01:62:18:22:99:82:a6:53:aa:fb:4e:7e: 2a:1b:01:1d:fb:12:77:32:ea:ac:7f:2e:67:bb:8c: ab:92:31:0b:6d:54:ff:05:75:f4:a3:be:4c:2b:e7: da:22:08:b1:c1:68:ae:32:45:52:99:57:16:eb:2e: ab:6d:0c:d5:20:c9:84:fa:b2:1c:a0:da:a6:40:6e: 6b:31:19:21:29:55:49:42:2a:02:2b:7b:e7:c6:ec: 83:9c:28:a0:ad:51:dd:4a:5c:ca:36:6c:39:a4:e5: d3:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:F9:8B:72:F9:07:EC:19:3A:2A:AB:31:E6:9E:77:34:5C:AE:51:37 X509v3 Authority Key Identifier: keyid:97:D4:88:4F:98:6D:54:37:82:ED:07:96:24:7D:D5:23:74:61:E3:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NCREE/0/97D4884F986D543782ED0796247DD5237461E32E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/97D4884F986D543782ED0796247DD5237461E32E.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NCREE/0/97D4884F986D543782ED0796247DD5237461E32E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:f5:ea:86:bb:5e:19:04:50:f9:11:91:63:e7:32:d6:ec:8b: 04:56:06:94:a5:c5:9d:76:fe:f6:e9:6b:a8:c1:77:56:f8:d6: da:e7:4a:d4:32:cf:2f:0d:8a:99:5b:2a:ae:93:42:5b:f9:8d: f0:d1:45:21:3d:ae:aa:59:bd:99:52:c9:c7:81:24:0e:8b:5e: 5f:11:45:ad:47:d2:8a:87:88:28:d0:22:c4:cd:08:ba:1f:73: bb:2e:ea:25:52:61:36:b4:38:fc:83:45:eb:16:50:16:f2:8b: 88:1e:ea:03:07:12:48:9e:d4:f4:8a:4e:84:f7:d1:00:88:a7: 06:c1:19:47:fb:56:c3:9e:c8:21:ef:0c:e9:ec:26:44:b0:ac: 06:c6:76:9b:e5:81:b0:b0:5c:f7:04:c9:02:37:15:cb:86:f8: c6:7f:54:9a:0f:c6:69:81:88:70:bf:3c:b6:7e:6d:bb:24:d7: 2e:eb:82:ae:4a:b5:79:7f:ca:0b:84:1d:fb:de:ef:4a:83:28: 45:88:96:ad:85:a2:a0:e2:68:9a:33:fe:9d:5c:f8:c8:2c:32: c9:65:ad:16:2c:58:95:5d:84:60:ed:1a:eb:57:11:f3:c7:b9: 05:01:2c:b8:92:ab:f3:97:8f:12:dc:eb:19:00:06:9c:aa:9c: f0:2c:a8:ce -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUQSZvNYt2gE+bo2qufyvQMHkuwUUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTdENDg4NEY5ODZENTQzNzgyRUQwNzk2MjQ3REQ1MjM3 NDYxRTMyRTAeFw0yNjA4MTQyMzE4NDJaFw0yNjA4MTUyMzMwNDJaMDMxMTAvBgNV BAMTKDgwRjk4QjcyRjkwN0VDMTkzQTJBQUIzMUU2OUU3NzM0NUNBRTUxMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD51BtevCHSYIsb9KdfvQ7CAgum CKkb6RLkKhyGAn+cB7PpaHRGqjjkgn/AJecrjNivAwkt99xeuHeVXXN1JarhpI07 z4xxHt7IZWKMPqUrg1gklbb9HZpUCiIa1tTyZIdZWDmlmfEo43Y4ptID3R1Cpoob KGGpwk4IJHjWPA4h8ez+TcbEgFBmgVVatNcDgEeetZe2LfxwywFiGCKZgqZTqvtO fiobAR37Ency6qx/Lme7jKuSMQttVP8FdfSjvkwr59oiCLHBaK4yRVKZVxbrLqtt DNUgyYT6shyg2qZAbmsxGSEpVUlCKgIre+fG7IOcKKCtUd1KXMo2bDmk5dM3AgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUgPmLcvkH7Bk6Kqsx5p53NFyuUTcwHwYDVR0j BBgwFoAUl9SIT5htVDeC7QeWJH3VI3Rh4y4wDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTkNSRUUv MC85N0Q0ODg0Rjk4NkQ1NDM3ODJFRDA3OTYyNDdERDUyMzc0NjFFMzJFLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzk3RDQ4ODRGOTg2RDU0Mzc4MkVEMDc5NjI0N0RE NTIzNzQ2MUUzMkUuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9OQ1JFRS8wLzk3RDQ4ODRGOTg2RDU0 Mzc4MkVEMDc5NjI0N0RENTIzNzQ2MUUzMkUubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCd9eqGu14ZBFD5 EZFj5zLW7IsEVgaUpcWddv726WuowXdW+Nba50rUMs8vDYqZWyquk0Jb+Y3w0UUh Pa6qWb2ZUsnHgSQOi15fEUWtR9KKh4go0CLEzQi6H3O7LuolUmE2tDj8g0XrFlAW 8ouIHuoDBxJIntT0ik6E99EAiKcGwRlH+1bDnsgh7wzp7CZEsKwGxnab5YGwsFz3 BMkCNxXLhvjGf1SaD8ZpgYhwvzy2fm27JNcu64KuSrV5f8oLhB373u9KgyhFiJat haKg4miaM/6dXPjILDLJZa0WLFiVXYRg7RrrVxHzx7kFASy4kqvzl48S3OsZAAac qpzwLKjO -----END CERTIFICATE-----Generated at Sat Aug 15 05:21:26 2026 by rpki-client