$ rpki-client -vvvf rpkica.twnic.tw/rpki/NCREE/0/97D4884F986D543782ED0796247DD5237461E32E.mft File: 97D4884F986D543782ED0796247DD5237461E32E.mft (raw, json) Hash identifier: WdvAoFMuBdVZLrLs7BftOwq6I2VYeNvS+Yh8DiiyJG8= Subject key identifier: 20:CE:0A:72:BD:AC:15:D6:5D:42:48:4B:C0:06:5E:9D:D1:D7:57:B0 Authority key identifier: 97:D4:88:4F:98:6D:54:37:82:ED:07:96:24:7D:D5:23:74:61:E3:2E Certificate issuer: /CN=97D4884F986D543782ED0796247DD5237461E32E Certificate serial: 326F781C250D0134BBE03BDF79F9723EAB8245D8 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/97D4884F986D543782ED0796247DD5237461E32E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NCREE/0/97D4884F986D543782ED0796247DD5237461E32E.mft Manifest number: C5 Signing time: Sat 03 Oct 2026 13:20:10 +0000 Manifest this update: Sat 03 Oct 2026 13:15:10 +0000 Manifest next update: Sun 04 Oct 2026 14:16:10 +0000 Files and hashes: 1: 323430303a383561303a3a2f33322d3332203d3e203138313833.roa (hash: C6OKHDxWyKxWvrSfW3hF42Kke8nwN95k72tbWDAEl2M=) 2: 97D4884F986D543782ED0796247DD5237461E32E.crl (hash: tXqeZyupTe7JPWNG1mVqStyTPDwJLsSBPgrffLq4mFs=) 3: 3130332e3138392e3133322e302f32332d3233203d3e203138313833.roa (hash: 52gdtA1LdP2xK0dCg/MXu3Df1UL36Mp+kCidYA74Lo8=) 4: 3230322e352e31322e302f32322d3232203d3e203138313833.roa (hash: XbkYTDNrq99sllfWjZ/d99FzReEgoNHkyUkg86NPTgw=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NCREE/0/97D4884F986D543782ED0796247DD5237461E32E.crl rsync://rpkica.twnic.tw/rpki/NCREE/0/97D4884F986D543782ED0796247DD5237461E32E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/97D4884F986D543782ED0796247DD5237461E32E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 14:16:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:6f:78:1c:25:0d:01:34:bb:e0:3b:df:79:f9:72:3e:ab:82:45:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97D4884F986D543782ED0796247DD5237461E32E Validity Not Before: Oct 3 13:15:10 2026 GMT Not After : Oct 4 14:16:10 2026 GMT Subject: CN=20CE0A72BDAC15D65D42484BC0065E9DD1D757B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:49:54:1a:f4:ae:c4:08:a3:70:0e:a6:cb:7f: 9b:ef:66:c2:2c:32:bb:05:26:bb:e6:8f:7e:bb:32: 4a:42:a5:f7:84:d4:9d:1c:28:c1:08:78:61:cb:71: c5:9d:09:47:8a:0b:14:4c:01:64:83:f8:74:73:4e: 60:de:4f:21:dc:18:30:a4:8f:6f:d5:c2:7d:a0:32: 2b:45:12:36:6c:6b:4e:12:8e:0d:60:79:f2:28:2a: bc:09:ad:a5:06:8e:c7:15:38:a3:2d:6c:6c:0f:31: 14:63:0b:69:2f:2e:89:40:d2:78:77:69:9f:6f:84: d3:5d:1d:9f:c8:f0:86:a1:48:86:2a:53:40:cf:31: 6c:d4:6e:a3:04:27:0d:40:4f:98:19:b5:01:29:12: bf:29:42:63:c8:6f:60:d8:ca:07:da:44:85:47:cf: d5:70:1e:3e:87:d2:ad:c1:b7:ab:30:e7:2a:c3:36: fe:e5:18:46:37:f1:f8:15:5c:ee:c3:b6:3a:4f:65: 46:5b:b7:65:d7:61:77:6d:23:b3:5d:5f:0b:56:a3: 0b:6f:a6:aa:ee:6d:f0:be:bf:9c:b5:e9:49:ee:ee: 4a:d2:13:21:0e:57:04:fc:c0:42:48:15:ed:f0:7d: b1:a9:64:5b:13:e1:f5:78:18:bf:d7:e9:71:03:9e: 70:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:CE:0A:72:BD:AC:15:D6:5D:42:48:4B:C0:06:5E:9D:D1:D7:57:B0 X509v3 Authority Key Identifier: keyid:97:D4:88:4F:98:6D:54:37:82:ED:07:96:24:7D:D5:23:74:61:E3:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NCREE/0/97D4884F986D543782ED0796247DD5237461E32E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/97D4884F986D543782ED0796247DD5237461E32E.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NCREE/0/97D4884F986D543782ED0796247DD5237461E32E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:e2:f5:7b:9b:f8:54:73:98:e2:07:71:31:d0:04:91:23:98: 59:fe:f8:23:45:0e:3f:7c:cb:53:19:fb:1b:23:84:0a:6e:fe: 55:88:3d:86:53:5f:94:7d:ce:e5:a5:6e:77:21:fa:a1:ac:ab: 3b:bf:3a:16:62:5b:9c:54:9f:05:97:e9:e3:83:c9:84:9f:90: 3e:79:6c:15:c8:46:b0:1a:15:2b:03:23:4d:a5:c7:9b:de:04: ae:56:ed:83:d1:4d:85:e6:e1:c0:71:65:6f:54:9f:3e:44:f0: a5:41:52:54:5c:d2:3c:05:1a:a3:1d:48:2e:0d:15:49:43:5b: 42:e0:3a:df:21:7f:3a:07:8c:93:89:55:3e:98:e3:63:9f:85: 2e:42:35:17:b6:33:6d:82:28:06:1e:00:59:53:0d:1d:4a:7e: a7:aa:79:78:cb:0b:dd:dc:0a:56:74:9b:31:43:37:5e:fa:b9: 26:7d:b2:80:20:8b:5f:1b:3d:90:ab:88:61:34:74:27:50:2b: 0b:4f:b6:4a:78:d4:8f:a0:97:15:c3:30:4d:c5:36:31:23:c8: 56:62:15:52:fb:52:ec:49:1c:2d:6d:b1:5b:e4:cc:4f:bd:12: 17:95:e7:02:08:86:5f:ee:dd:6c:5f:12:ff:e1:14:86:ed:48: 4e:5e:4b:45 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUMm94HCUNATS74DvfeflyPquCRdgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTdENDg4NEY5ODZENTQzNzgyRUQwNzk2MjQ3REQ1MjM3 NDYxRTMyRTAeFw0yNjEwMDMxMzE1MTBaFw0yNjEwMDQxNDE2MTBaMDMxMTAvBgNV BAMTKDIwQ0UwQTcyQkRBQzE1RDY1RDQyNDg0QkMwMDY1RTlERDFENzU3QjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7SVQa9K7ECKNwDqbLf5vvZsIs MrsFJrvmj367MkpCpfeE1J0cKMEIeGHLccWdCUeKCxRMAWSD+HRzTmDeTyHcGDCk j2/Vwn2gMitFEjZsa04Sjg1gefIoKrwJraUGjscVOKMtbGwPMRRjC2kvLolA0nh3 aZ9vhNNdHZ/I8IahSIYqU0DPMWzUbqMEJw1AT5gZtQEpEr8pQmPIb2DYygfaRIVH z9VwHj6H0q3Bt6sw5yrDNv7lGEY38fgVXO7DtjpPZUZbt2XXYXdtI7NdXwtWowtv pqrubfC+v5y16Unu7krSEyEOVwT8wEJIFe3wfbGpZFsT4fV4GL/X6XEDnnABAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUIM4Kcr2sFdZdQkhLwAZendHXV7AwHwYDVR0j BBgwFoAUl9SIT5htVDeC7QeWJH3VI3Rh4y4wDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTkNSRUUv MC85N0Q0ODg0Rjk4NkQ1NDM3ODJFRDA3OTYyNDdERDUyMzc0NjFFMzJFLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzk3RDQ4ODRGOTg2RDU0Mzc4MkVEMDc5NjI0N0RE NTIzNzQ2MUUzMkUuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9OQ1JFRS8wLzk3RDQ4ODRGOTg2RDU0 Mzc4MkVEMDc5NjI0N0RENTIzNzQ2MUUzMkUubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB04vV7m/hUc5ji B3Ex0ASRI5hZ/vgjRQ4/fMtTGfsbI4QKbv5ViD2GU1+Ufc7lpW53IfqhrKs7vzoW YlucVJ8Fl+njg8mEn5A+eWwVyEawGhUrAyNNpceb3gSuVu2D0U2F5uHAcWVvVJ8+ RPClQVJUXNI8BRqjHUguDRVJQ1tC4DrfIX86B4yTiVU+mONjn4UuQjUXtjNtgigG HgBZUw0dSn6nqnl4ywvd3ApWdJsxQzde+rkmfbKAIItfGz2Qq4hhNHQnUCsLT7ZK eNSPoJcVwzBNxTYxI8hWYhVS+1LsSRwtbbFb5MxPvRIXlecCCIZf7t1sXxL/4RSG 7UhOXktF -----END CERTIFICATE-----Generated at Sun Oct 4 07:04:02 2026 by rpki-client