$ rpki-client -vvf rpkica.twnic.tw/rpki/NETGUARD/0/A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.mft File: A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.mft (raw, json) Hash identifier: s9AT8UkJK0Hd1hHR4AVNFY8HODEUXXazAkIqWSn2jxc= Subject key identifier: AD:A2:C7:82:FC:53:A0:12:48:2E:C3:BF:2D:7E:74:6A:81:18:39:D7 Authority key identifier: A7:9F:FF:D9:8D:67:B1:DC:F7:64:D6:C6:0D:9D:8F:77:B1:8C:80:F8 Certificate issuer: /CN=A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8 Certificate serial: 289BFE3985E8DEEEA0187A8B78DF2C9020AAA3D5 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NETGUARD/0/A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.mft Manifest number: 05 Signing time: Wed 13 May 2026 04:21:43 +0000 Manifest this update: Wed 13 May 2026 04:16:43 +0000 Manifest next update: Thu 14 May 2026 06:48:43 +0000 Files and hashes: 1: 3130332e3136302e3232342e302f32332d3234203d3e20313331363539.roa (hash: 7S4FcOba0oK0ThFobE5ZoA1Yfm0vEJ1gjov31dZGXJY=) 2: A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.crl (hash: k39ZqWYuRdeqVP75HUz+2V7AEs/I8T379RwIbq78YsY=) 3: 3130332e3136302e3232342e302f32332d3234203d3e20313331363532.roa (hash: 47voBXTyiYiW0GNSqQXzjv9mGc6KAROEr3k+QrljAQs=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NETGUARD/0/A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.crl rsync://rpkica.twnic.tw/rpki/NETGUARD/0/A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 06:48:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:9b:fe:39:85:e8:de:ee:a0:18:7a:8b:78:df:2c:90:20:aa:a3:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8 Validity Not Before: May 13 04:16:43 2026 GMT Not After : May 14 06:48:43 2026 GMT Subject: CN=ADA2C782FC53A012482EC3BF2D7E746A811839D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:9b:7c:a2:f8:b7:d4:bd:83:1b:89:ae:3c:d4: 10:cd:89:74:64:51:4c:57:cc:72:6a:6a:40:0a:ce: 1f:43:31:ff:fe:82:57:67:20:d4:9f:60:01:88:f2: aa:d6:ce:91:ef:e9:be:ec:7e:f4:31:cb:bc:44:b0: 52:df:48:e2:03:eb:bb:0c:18:54:c4:42:9e:13:48: 49:a0:c1:c3:51:f9:57:8e:e3:42:b3:43:20:aa:81: 23:62:e0:b7:aa:5c:f2:0c:30:e3:7f:d1:a3:79:ab: 72:14:91:de:96:63:de:e3:ce:80:f7:f5:40:86:2f: 3a:00:0a:67:fc:9c:51:c1:5c:4c:da:98:ff:69:87: 4c:2c:cd:88:74:78:ef:0c:2a:29:0e:00:2b:7d:33: 65:1b:7c:0b:5c:93:2c:a3:58:ce:29:20:bb:0f:68: a2:9e:d6:ca:10:f7:5d:91:f9:14:cf:11:f0:a0:e5: b6:6a:a7:fc:89:83:b1:d1:8b:8d:01:01:15:b0:10: b2:57:4d:43:77:b8:23:cc:6d:03:cc:20:31:28:c2: 5f:4b:d3:7f:d7:22:c0:6d:40:01:2d:62:e9:64:e3: 81:ff:cb:3b:34:a2:fc:fe:99:c5:c0:76:f3:f3:17: 15:38:b5:cf:7f:7d:b5:3a:7e:48:f6:c9:74:56:53: bf:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:A2:C7:82:FC:53:A0:12:48:2E:C3:BF:2D:7E:74:6A:81:18:39:D7 X509v3 Authority Key Identifier: keyid:A7:9F:FF:D9:8D:67:B1:DC:F7:64:D6:C6:0D:9D:8F:77:B1:8C:80:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NETGUARD/0/A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NETGUARD/0/A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:d1:f6:18:e2:d5:be:47:0f:d3:c2:45:14:ab:7a:d9:6a:0a: 85:65:3f:d3:56:01:31:fd:7e:6f:56:4f:e2:46:37:65:51:4d: 33:9c:e7:6b:50:0e:9b:d7:32:f5:bd:d8:a0:62:0a:9c:bd:20: 4f:1a:56:bd:22:9c:f2:e5:ba:d9:af:3b:ed:00:da:d6:64:e2: eb:75:b2:50:a9:0c:41:57:1d:89:0b:3d:33:f3:6f:7b:cf:ff: 42:63:71:6c:f6:f8:08:53:55:0b:9d:c5:54:c3:fd:19:19:74: 9c:47:77:35:d7:6c:1a:7c:75:e3:68:c1:2c:da:c6:f1:05:f4: 41:99:4a:65:e0:f8:df:1a:64:33:c5:06:c0:26:68:97:a7:3f: bf:c4:ac:65:af:c3:c8:b1:64:50:b5:04:58:4b:7b:38:84:42: c8:ac:ff:33:75:69:c3:2e:56:78:00:e7:5e:ea:ce:02:4f:02: 3f:80:25:e0:58:83:ea:1f:fa:c3:19:d6:d5:00:3c:0a:df:58: 6a:bf:f0:51:23:7d:f3:7f:40:bc:5e:1d:d2:47:14:53:00:04: 77:09:7a:7b:8c:31:4c:9a:da:3e:71:95:60:f7:9d:53:c1:44: 7c:e6:89:cc:cf:de:92:62:71:23:d7:bc:26:8b:d2:90:bb:67: f0:8f:23:26 -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUKJv+OYXo3u6gGHqLeN8skCCqo9UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTc5RkZGRDk4RDY3QjFEQ0Y3NjRENkM2MEQ5RDhGNzdC MThDODBGODAeFw0yNjA1MTMwNDE2NDNaFw0yNjA1MTQwNjQ4NDNaMDMxMTAvBgNV BAMTKEFEQTJDNzgyRkM1M0EwMTI0ODJFQzNCRjJEN0U3NDZBODExODM5RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlm3yi+LfUvYMbia481BDNiXRk UUxXzHJqakAKzh9DMf/+gldnINSfYAGI8qrWzpHv6b7sfvQxy7xEsFLfSOID67sM GFTEQp4TSEmgwcNR+VeO40KzQyCqgSNi4LeqXPIMMON/0aN5q3IUkd6WY97jzoD3 9UCGLzoACmf8nFHBXEzamP9ph0wszYh0eO8MKikOACt9M2UbfAtckyyjWM4pILsP aKKe1soQ912R+RTPEfCg5bZqp/yJg7HRi40BARWwELJXTUN3uCPMbQPMIDEowl9L 03/XIsBtQAEtYulk44H/yzs0ovz+mcXAdvPzFxU4tc9/fbU6fkj2yXRWU7+NAgMB AAGjggHyMIIB7jAdBgNVHQ4EFgQUraLHgvxToBJILsO/LX50aoEYOdcwHwYDVR0j BBgwFoAUp5//2Y1nsdz3ZNbGDZ2Pd7GMgPgwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTkVUR1VB UkQvMC9BNzlGRkZEOThENjdCMURDRjc2NEQ2QzYwRDlEOEY3N0IxOEM4MEY4LmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8xL0E3OUZGRkQ5OEQ2N0IxRENGNzY0RDZDNjBE OUQ4Rjc3QjE4QzgwRjguY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9ORVRHVUFSRC8wL0E3OUZGRkQ5 OEQ2N0IxRENGNzY0RDZDNjBEOUQ4Rjc3QjE4QzgwRjgubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAV0fYY 4tW+Rw/TwkUUq3rZagqFZT/TVgEx/X5vVk/iRjdlUU0znOdrUA6b1zL1vdigYgqc vSBPGla9Ipzy5brZrzvtANrWZOLrdbJQqQxBVx2JCz0z8297z/9CY3Fs9vgIU1UL ncVUw/0ZGXScR3c112wafHXjaMEs2sbxBfRBmUpl4PjfGmQzxQbAJmiXpz+/xKxl r8PIsWRQtQRYS3s4hELIrP8zdWnDLlZ4AOde6s4CTwI/gCXgWIPqH/rDGdbVADwK 31hqv/BRI33zf0C8Xh3SRxRTAAR3CXp7jDFMmto+cZVg951TwUR85onMz96SYnEj 17wmi9KQu2fwjyMm -----END CERTIFICATE-----Generated at Wed May 13 20:33:10 2026 by rpki-client