$ rpki-client -vvf rpkica.twnic.tw/rpki/NSSCYBER/0/7E4A0094054DD1AE4C3AA73976E554F191BC5230.mft File: 7E4A0094054DD1AE4C3AA73976E554F191BC5230.mft (raw, json) Hash identifier: vMICpN2IU+tF7G0n4VcbqRI8UVtd2tt3icqImefx3qo= Subject key identifier: 9F:C6:45:08:4A:C7:B0:D4:C6:57:3B:67:BB:BA:C1:E4:BA:15:2C:D4 Authority key identifier: 7E:4A:00:94:05:4D:D1:AE:4C:3A:A7:39:76:E5:54:F1:91:BC:52:30 Certificate issuer: /CN=7E4A0094054DD1AE4C3AA73976E554F191BC5230 Certificate serial: 1B65F7D90359E6AFCC27AFBEC6C1DD0713E61A5B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7E4A0094054DD1AE4C3AA73976E554F191BC5230.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NSSCYBER/0/7E4A0094054DD1AE4C3AA73976E554F191BC5230.mft Manifest number: 46 Signing time: Tue 30 Jun 2026 07:13:17 +0000 Manifest this update: Tue 30 Jun 2026 07:08:17 +0000 Manifest next update: Wed 01 Jul 2026 10:43:17 +0000 Files and hashes: 1: 3130332e3135382e37382e302f32332d3234203d3e203633383938.roa (hash: Q+s1vVVcnXTpW/r/MnON9SbkY3njdmQ1XoB50+rVZow=) 2: 323430363a623463303a3a2f33322d3332203d3e203633383938.roa (hash: YWptf+2qSV9npfR4/3yUmYD8apviaOrBsr9jvocDV+4=) 3: 7E4A0094054DD1AE4C3AA73976E554F191BC5230.crl (hash: i6mZdIwWbBpiSl0u7NYVHp+gZcWdE3BMZvichYLgWoM=) 4: 3130332e3134342e33322e302f32332d3234203d3e20313331363236.roa (hash: ceVA/LJaRY6/q+EaJ/ByMtC2DxZ+XlY891yuFfz5/6Y=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NSSCYBER/0/7E4A0094054DD1AE4C3AA73976E554F191BC5230.crl rsync://rpkica.twnic.tw/rpki/NSSCYBER/0/7E4A0094054DD1AE4C3AA73976E554F191BC5230.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7E4A0094054DD1AE4C3AA73976E554F191BC5230.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Jul 2026 10:43:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:65:f7:d9:03:59:e6:af:cc:27:af:be:c6:c1:dd:07:13:e6:1a:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E4A0094054DD1AE4C3AA73976E554F191BC5230 Validity Not Before: Jun 30 07:08:17 2026 GMT Not After : Jul 1 10:43:17 2026 GMT Subject: CN=9FC645084AC7B0D4C6573B67BBBAC1E4BA152CD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:a9:bd:38:3b:1c:8e:00:34:aa:a3:0f:29:92: d6:87:0b:9f:c7:a9:56:fe:9d:f0:58:14:51:3f:43: 36:bd:0b:54:9f:68:70:48:6c:84:94:ae:08:81:67: 31:6b:19:48:e0:41:85:96:7d:fd:66:89:35:82:55: 8d:ff:d5:70:65:ed:e1:6b:78:ed:49:cd:72:62:48: 78:a6:c4:48:d5:8f:71:5c:a3:e0:0d:f3:44:dc:d0: 6c:89:41:fe:d7:34:95:c7:f1:7a:e2:55:2c:db:65: 5a:41:63:82:9f:cf:63:a1:0b:d7:12:48:a0:62:13: 8d:76:c9:fe:4c:2d:37:48:98:cd:b5:85:28:dd:46: 69:f1:3b:91:fb:e9:7c:45:6d:6a:67:08:db:c6:b4: b1:fb:60:96:8d:50:41:ec:1c:c2:e9:17:f0:e8:1b: b3:a3:54:82:d9:3c:73:49:48:42:11:f9:06:72:b6: 0f:83:93:81:db:67:d8:65:50:d9:73:5b:43:a0:94: fc:e8:fb:1d:a0:74:f9:c2:07:39:1d:be:8e:fc:69: 13:65:b2:4d:45:90:05:08:6d:96:96:b2:a6:23:95: 3a:fa:0b:c9:14:96:ec:a1:a6:70:5f:68:a8:16:81: 63:81:a9:6d:f0:c5:67:17:c8:32:9c:32:89:7b:9b: a3:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:C6:45:08:4A:C7:B0:D4:C6:57:3B:67:BB:BA:C1:E4:BA:15:2C:D4 X509v3 Authority Key Identifier: keyid:7E:4A:00:94:05:4D:D1:AE:4C:3A:A7:39:76:E5:54:F1:91:BC:52:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NSSCYBER/0/7E4A0094054DD1AE4C3AA73976E554F191BC5230.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7E4A0094054DD1AE4C3AA73976E554F191BC5230.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NSSCYBER/0/7E4A0094054DD1AE4C3AA73976E554F191BC5230.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:e5:c5:c8:d6:75:c1:2d:28:b9:ff:47:5b:74:7a:8c:8c:d8: 0f:85:6d:91:72:46:03:6f:27:f8:83:d7:ed:19:47:a0:9c:e8: 17:76:9a:c3:0c:e4:65:e4:67:0d:45:a6:19:5b:c3:38:f1:0d: 94:0c:f8:c1:33:1b:3e:fe:c3:a8:ed:7b:fd:36:00:2a:e8:a9: 96:ee:b2:ac:d1:43:e0:f3:d3:de:e7:7f:db:cf:3c:2f:40:41: 1a:03:95:0b:89:0a:ad:03:06:c2:61:7c:f4:1f:16:90:23:51: 19:e9:bf:e4:30:b7:64:0d:6d:1b:81:ed:c3:58:1a:5f:37:0e: f1:e7:b2:42:c0:bd:43:47:bd:8e:0c:96:9c:29:9a:cd:fd:62: f8:f5:ea:3d:27:40:58:d7:74:fb:bd:bf:88:93:ab:c4:cd:7c: c0:fa:cd:36:ad:de:5d:00:ba:61:aa:5f:df:df:af:f7:d9:54: c3:04:eb:0c:f6:c3:83:95:7e:b2:fc:3b:2c:77:41:08:4f:9d: 14:f0:b0:9d:63:bb:e6:00:85:cd:df:fa:35:b9:b5:f2:62:ec: c2:77:52:df:45:d3:ec:a2:c0:0f:99:90:cf:8a:1b:f4:3a:85: c7:23:33:90:42:f6:d7:92:f0:cc:87:d9:82:d7:9a:06:a3:80: 22:1f:ad:71 -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUG2X32QNZ5q/MJ6++xsHdBxPmGlswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0U0QTAwOTQwNTRERDFBRTRDM0FBNzM5NzZFNTU0RjE5 MUJDNTIzMDAeFw0yNjA2MzAwNzA4MTdaFw0yNjA3MDExMDQzMTdaMDMxMTAvBgNV BAMTKDlGQzY0NTA4NEFDN0IwRDRDNjU3M0I2N0JCQkFDMUU0QkExNTJDRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXqb04OxyOADSqow8pktaHC5/H qVb+nfBYFFE/Qza9C1SfaHBIbISUrgiBZzFrGUjgQYWWff1miTWCVY3/1XBl7eFr eO1JzXJiSHimxEjVj3Fco+AN80Tc0GyJQf7XNJXH8XriVSzbZVpBY4Kfz2OhC9cS SKBiE412yf5MLTdImM21hSjdRmnxO5H76XxFbWpnCNvGtLH7YJaNUEHsHMLpF/Do G7OjVILZPHNJSEIR+QZytg+Dk4HbZ9hlUNlzW0OglPzo+x2gdPnCBzkdvo78aRNl sk1FkAUIbZaWsqYjlTr6C8kUluyhpnBfaKgWgWOBqW3wxWcXyDKcMol7m6NFAgMB AAGjggHyMIIB7jAdBgNVHQ4EFgQUn8ZFCErHsNTGVztnu7rB5LoVLNQwHwYDVR0j BBgwFoAUfkoAlAVN0a5MOqc5duVU8ZG8UjAwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTlNTQ1lC RVIvMC83RTRBMDA5NDA1NEREMUFFNEMzQUE3Mzk3NkU1NTRGMTkxQkM1MjMwLmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8xLzdFNEEwMDk0MDU0REQxQUU0QzNBQTczOTc2 RTU1NEYxOTFCQzUyMzAuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9OU1NDWUJFUi8wLzdFNEEwMDk0 MDU0REQxQUU0QzNBQTczOTc2RTU1NEYxOTFCQzUyMzAubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBd5cXI 1nXBLSi5/0dbdHqMjNgPhW2RckYDbyf4g9ftGUegnOgXdprDDORl5GcNRaYZW8M4 8Q2UDPjBMxs+/sOo7Xv9NgAq6KmW7rKs0UPg89Pe53/bzzwvQEEaA5ULiQqtAwbC YXz0HxaQI1EZ6b/kMLdkDW0bge3DWBpfNw7x57JCwL1DR72ODJacKZrN/WL49eo9 J0BY13T7vb+Ik6vEzXzA+s02rd5dALphql/f36/32VTDBOsM9sODlX6y/Dssd0EI T50U8LCdY7vmAIXN3/o1ubXyYuzCd1LfRdPsosAPmZDPihv0OoXHIzOQQvbXkvDM h9mC15oGo4AiH61x -----END CERTIFICATE-----Generated at Tue Jun 30 19:09:54 2026 by rpki-client