$ rpki-client -vvvf rpkica.twnic.tw/rpki/NSS/0/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.mft File: 9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.mft (raw, json) Hash identifier: ugKags+K6rFST8N/fwSZ46d6Llx2xXAsTXVKlib4Wa4= Subject key identifier: FC:84:E5:31:1C:7F:82:9C:9D:D4:36:BB:4C:B7:2F:06:D2:24:B5:F4 Authority key identifier: 9E:13:5A:CA:9B:3B:7E:42:3F:6A:6E:49:C9:22:E7:C9:FF:9D:04:3E Certificate issuer: /CN=9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E Certificate serial: 5A71976245BF507306AB711CA0A0FFACE20FB169 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NSS/0/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.mft Manifest number: C2 Signing time: Fri 02 Oct 2026 09:16:21 +0000 Manifest this update: Fri 02 Oct 2026 09:11:21 +0000 Manifest next update: Sat 03 Oct 2026 11:13:21 +0000 Files and hashes: 1: 3130332e3131382e32342e302f32322d3234203d3e20313331363236.roa (hash: 7ZYOaD4BiHJMT5uylYeAq6oBkT9jOAeVwRTnZzrlVB0=) 2: 323430333a663363303a3a2f33322d3332203d3e20313331363236.roa (hash: U+TwGMruloppvfph33ur/zLTpQNWHiQ2kQh2YCvkqAQ=) 3: 9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.crl (hash: 6DpyJVq6VQBpfi04t8lYksp3cxHftYkP9pwdAJ9SNR4=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NSS/0/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.crl rsync://rpkica.twnic.tw/rpki/NSS/0/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 10:19:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:71:97:62:45:bf:50:73:06:ab:71:1c:a0:a0:ff:ac:e2:0f:b1:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E Validity Not Before: Oct 2 09:11:21 2026 GMT Not After : Oct 3 11:13:21 2026 GMT Subject: CN=FC84E5311C7F829C9DD436BB4CB72F06D224B5F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b3:f8:fe:b9:fb:e6:54:c8:d6:96:0a:f4:fe: a9:38:4d:f5:9d:00:f2:e1:d4:7e:b5:65:a3:0c:e5: e6:a1:ac:9a:a1:78:cf:cb:46:90:2e:25:54:2c:7d: 73:0d:1f:ff:cb:89:95:25:57:ad:c3:d7:de:6a:1e: 6e:70:99:dd:77:49:61:06:fd:ad:4b:5e:df:f1:60: 74:dd:38:fc:d5:27:4d:d0:6a:4d:7f:0a:c3:91:51: 1d:2c:91:ab:60:57:22:ea:38:52:c7:07:22:07:dc: 8c:64:b1:1a:8c:38:04:ee:8a:b4:ff:49:6c:45:be: 73:f6:d9:46:f9:f7:a5:da:e0:fb:7e:22:69:1a:21: 8c:2d:b9:a8:24:9f:8c:49:2f:15:9a:2f:3c:ac:d9: 0d:82:a2:47:5d:12:33:9b:44:ac:ff:e4:2b:52:f9: 03:92:8c:a6:2e:bb:ce:b6:a2:ce:be:be:25:af:ae: d1:89:79:86:cd:4f:96:be:f9:4c:53:5c:e8:28:6c: 49:eb:8f:bf:4f:da:db:4f:72:2e:7e:6c:f0:82:6a: c8:30:35:13:e7:5b:1f:bc:71:33:4c:60:78:56:b7: 00:60:c8:33:3f:da:25:7a:fb:21:c9:8b:70:c3:ee: ab:f4:03:09:fb:2c:70:59:47:3f:0d:be:97:94:bb: 90:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:84:E5:31:1C:7F:82:9C:9D:D4:36:BB:4C:B7:2F:06:D2:24:B5:F4 X509v3 Authority Key Identifier: keyid:9E:13:5A:CA:9B:3B:7E:42:3F:6A:6E:49:C9:22:E7:C9:FF:9D:04:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NSS/0/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NSS/0/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:14:a8:25:ae:85:aa:66:e8:b3:a1:9d:0b:fc:45:6e:d7:c8: aa:e0:02:b1:98:0f:e4:26:f4:5d:17:a1:ba:91:83:33:98:5e: da:bc:1e:3d:5f:0a:32:33:b6:8e:ac:e7:20:4d:01:53:2e:61: c7:1f:0f:44:19:48:9f:f8:11:dc:ec:2b:3f:67:37:fa:64:48: 02:e8:f7:09:35:d8:68:f5:8a:6d:0a:2f:5d:87:b4:4e:3d:a5: 96:d4:86:76:73:97:62:2e:3b:af:87:e5:b4:55:12:72:33:69: 9c:27:71:d3:40:f0:4e:cd:dc:db:7b:0e:74:f5:49:15:fc:b7: 80:ac:ee:de:d6:00:87:81:66:43:51:8d:71:04:b8:6e:3a:4d: 16:76:e0:d7:74:d3:5b:1d:2b:00:fa:cd:99:9d:2c:0b:e3:e1: b3:58:e6:21:ac:18:e8:5a:c3:5a:03:30:75:00:85:a8:09:5f: 91:e4:8c:20:d3:cc:a3:36:8b:1a:d2:df:1a:7f:43:54:b6:c9: af:9b:1b:be:38:5b:f6:40:a7:2a:1c:5c:13:ef:da:f7:bb:71: eb:90:eb:ad:75:02:5e:6f:2e:56:54:62:6f:08:09:a2:61:2b: 82:ec:62:c4:27:4e:3e:44:a2:95:06:9e:87:7a:ec:5d:88:59: 89:0c:c1:b1 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUWnGXYkW/UHMGq3EcoKD/rOIPsWkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUUxMzVBQ0E5QjNCN0U0MjNGNkE2RTQ5QzkyMkU3QzlG RjlEMDQzRTAeFw0yNjEwMDIwOTExMjFaFw0yNjEwMDMxMTEzMjFaMDMxMTAvBgNV BAMTKEZDODRFNTMxMUM3RjgyOUM5REQ0MzZCQjRDQjcyRjA2RDIyNEI1RjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCws/j+ufvmVMjWlgr0/qk4TfWd APLh1H61ZaMM5eahrJqheM/LRpAuJVQsfXMNH//LiZUlV63D195qHm5wmd13SWEG /a1LXt/xYHTdOPzVJ03Qak1/CsORUR0skatgVyLqOFLHByIH3IxksRqMOATuirT/ SWxFvnP22Ub596Xa4Pt+ImkaIYwtuagkn4xJLxWaLzys2Q2CokddEjObRKz/5CtS +QOSjKYuu862os6+viWvrtGJeYbNT5a++UxTXOgobEnrj79P2ttPci5+bPCCasgw NRPnWx+8cTNMYHhWtwBgyDM/2iV6+yHJi3DD7qv0Awn7LHBZRz8NvpeUu5BvAgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQU/ITlMRx/gpyd1Da7TLcvBtIktfQwHwYDVR0j BBgwFoAUnhNayps7fkI/am5JySLnyf+dBD4wDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTlNTLzAv OUUxMzVBQ0E5QjNCN0U0MjNGNkE2RTQ5QzkyMkU3QzlGRjlEMDQzRS5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS85RTEzNUFDQTlCM0I3RTQyM0Y2QTZFNDlDOTIyRTdD OUZGOUQwNDNFLmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTlNTLzAvOUUxMzVBQ0E5QjNCN0U0MjNG NkE2RTQ5QzkyMkU3QzlGRjlEMDQzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBACEUqCWuhapm6LOhnQv8 RW7XyKrgArGYD+Qm9F0XobqRgzOYXtq8Hj1fCjIzto6s5yBNAVMuYccfD0QZSJ/4 EdzsKz9nN/pkSALo9wk12Gj1im0KL12HtE49pZbUhnZzl2IuO6+H5bRVEnIzaZwn cdNA8E7N3Nt7DnT1SRX8t4Cs7t7WAIeBZkNRjXEEuG46TRZ24Nd001sdKwD6zZmd LAvj4bNY5iGsGOhaw1oDMHUAhagJX5HkjCDTzKM2ixrS3xp/Q1S2ya+bG744W/ZA pyocXBPv2ve7ceuQ6611Al5vLlZUYm8ICaJhK4LsYsQnTj5EopUGnod67F2IWYkM wbE= -----END CERTIFICATE-----Generated at Fri Oct 2 16:24:35 2026 by rpki-client