$ rpki-client -vvvf rpkica.twnic.tw/rpki/NSSCYBER/0/7E4A0094054DD1AE4C3AA73976E554F191BC5230.mft File: 7E4A0094054DD1AE4C3AA73976E554F191BC5230.mft (raw, json) Hash identifier: G8JF5X7DOh/de8ell7/tXeEeqCKf0YUu+3nye+3lpU8= Subject key identifier: 6B:9F:59:84:C7:62:8D:F7:AC:04:AA:CE:24:98:B0:E0:30:69:51:A0 Authority key identifier: 7E:4A:00:94:05:4D:D1:AE:4C:3A:A7:39:76:E5:54:F1:91:BC:52:30 Certificate issuer: /CN=7E4A0094054DD1AE4C3AA73976E554F191BC5230 Certificate serial: 3AD617C6957CE4E46CB9F6BEFD2691412818CD90 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7E4A0094054DD1AE4C3AA73976E554F191BC5230.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NSSCYBER/0/7E4A0094054DD1AE4C3AA73976E554F191BC5230.mft Manifest number: C6 Signing time: Sun 04 Oct 2026 04:49:12 +0000 Manifest this update: Sun 04 Oct 2026 04:44:12 +0000 Manifest next update: Mon 05 Oct 2026 06:24:12 +0000 Files and hashes: 1: 3130332e3135382e37382e302f32332d3234203d3e203633383938.roa (hash: Q+s1vVVcnXTpW/r/MnON9SbkY3njdmQ1XoB50+rVZow=) 2: 3130332e3134342e33322e302f32332d3234203d3e20313331363236.roa (hash: ceVA/LJaRY6/q+EaJ/ByMtC2DxZ+XlY891yuFfz5/6Y=) 3: 323430363a623463303a3a2f33322d3332203d3e203633383938.roa (hash: YWptf+2qSV9npfR4/3yUmYD8apviaOrBsr9jvocDV+4=) 4: 7E4A0094054DD1AE4C3AA73976E554F191BC5230.crl (hash: hGlLHWdJ968dkwXjEAQnzBAeW2mjF+mm9VpOVBytsSU=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NSSCYBER/0/7E4A0094054DD1AE4C3AA73976E554F191BC5230.crl rsync://rpkica.twnic.tw/rpki/NSSCYBER/0/7E4A0094054DD1AE4C3AA73976E554F191BC5230.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7E4A0094054DD1AE4C3AA73976E554F191BC5230.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 06:24:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:d6:17:c6:95:7c:e4:e4:6c:b9:f6:be:fd:26:91:41:28:18:cd:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E4A0094054DD1AE4C3AA73976E554F191BC5230 Validity Not Before: Oct 4 04:44:12 2026 GMT Not After : Oct 5 06:24:12 2026 GMT Subject: CN=6B9F5984C7628DF7AC04AACE2498B0E0306951A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:24:b4:7d:51:b1:24:14:eb:c8:bd:ac:09:fa: 66:47:6e:5d:31:74:88:a0:06:4f:29:a5:67:dc:75: 11:44:ee:c2:e5:06:3e:f2:41:c8:c5:5c:81:a7:db: e7:6c:70:b3:f8:b0:34:16:57:82:7c:48:79:ea:9e: a3:c9:69:04:0b:24:37:55:15:2c:b2:db:83:22:17: dc:47:7a:97:7c:b0:39:7f:30:46:f7:39:f9:b3:7b: a3:7a:1b:cf:a0:ef:5a:95:1b:8e:92:6a:c5:69:60: 50:ae:26:d6:f8:29:7f:c5:81:2e:41:31:b5:64:b2: 45:15:1c:90:93:7e:26:48:78:8f:6d:6b:1e:e0:a7: af:8b:e4:c6:21:1b:2e:e0:4a:a6:2f:5c:51:5b:2d: a4:76:33:27:51:4d:36:80:2c:9f:8c:31:9d:ec:a9: 6b:83:6d:b1:13:ea:39:19:ab:50:e9:8b:e7:7c:c6: 55:89:35:b7:d4:65:2b:7a:06:06:5e:4f:a9:7c:25: 60:e3:b5:ae:c9:7b:3e:03:80:5a:7b:0d:30:05:2d: 83:a8:c1:15:e6:53:9d:8b:05:b7:67:2f:6c:d2:3d: e6:9e:61:3a:51:99:be:8f:96:76:8f:34:1f:47:a6: cc:1d:f0:70:f1:eb:f1:e8:68:56:fb:e3:a9:92:65: fb:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:9F:59:84:C7:62:8D:F7:AC:04:AA:CE:24:98:B0:E0:30:69:51:A0 X509v3 Authority Key Identifier: keyid:7E:4A:00:94:05:4D:D1:AE:4C:3A:A7:39:76:E5:54:F1:91:BC:52:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NSSCYBER/0/7E4A0094054DD1AE4C3AA73976E554F191BC5230.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7E4A0094054DD1AE4C3AA73976E554F191BC5230.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NSSCYBER/0/7E4A0094054DD1AE4C3AA73976E554F191BC5230.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:ef:24:25:dd:88:4a:7f:94:da:f8:6e:57:88:08:e7:10:41: e1:8e:35:95:3a:4a:03:71:80:5b:29:db:b5:8e:82:45:e0:70: 1c:55:7e:02:95:fa:ec:c8:e0:84:7f:e0:69:9b:5c:b5:9f:a5: 0a:b4:db:78:05:79:f9:e2:cf:a5:7f:eb:8e:1f:29:25:c9:30: 63:cd:26:f4:4f:79:b6:a5:28:01:24:1e:48:5a:ad:aa:53:ca: d5:69:0e:40:8a:24:d6:d3:d7:40:af:6e:ff:54:ae:d1:c8:cf: 7e:8c:19:0c:f4:19:3b:69:f7:63:96:1b:ed:54:c2:fa:bc:29: 9d:36:19:c2:c8:30:2f:1c:08:0f:b2:94:98:19:b9:a5:d9:16: 29:cf:44:9f:81:e1:0c:6a:49:ec:b7:74:ff:27:3b:91:9a:14: bd:e6:2b:44:f1:27:59:fd:56:ec:a0:7b:60:cc:f3:36:61:8b: a2:09:af:58:a1:26:a5:49:8d:b2:76:72:4d:52:3c:73:41:8f: 01:13:7e:40:88:73:bd:2d:34:a5:28:23:81:69:00:bd:2c:33: d4:51:6c:8d:e6:1f:cd:c8:24:01:3e:f7:29:c7:98:bf:ab:ef: 48:78:36:4d:ef:d8:53:85:db:2d:26:4c:a3:82:06:4a:5e:71: 88:4b:df:3e -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUOtYXxpV85ORsufa+/SaRQSgYzZAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0U0QTAwOTQwNTRERDFBRTRDM0FBNzM5NzZFNTU0RjE5 MUJDNTIzMDAeFw0yNjEwMDQwNDQ0MTJaFw0yNjEwMDUwNjI0MTJaMDMxMTAvBgNV BAMTKDZCOUY1OTg0Qzc2MjhERjdBQzA0QUFDRTI0OThCMEUwMzA2OTUxQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfJLR9UbEkFOvIvawJ+mZHbl0x dIigBk8ppWfcdRFE7sLlBj7yQcjFXIGn2+dscLP4sDQWV4J8SHnqnqPJaQQLJDdV FSyy24MiF9xHepd8sDl/MEb3Ofmze6N6G8+g71qVG46SasVpYFCuJtb4KX/FgS5B MbVkskUVHJCTfiZIeI9tax7gp6+L5MYhGy7gSqYvXFFbLaR2MydRTTaALJ+MMZ3s qWuDbbET6jkZq1Dpi+d8xlWJNbfUZSt6BgZeT6l8JWDjta7Jez4DgFp7DTAFLYOo wRXmU52LBbdnL2zSPeaeYTpRmb6PlnaPNB9Hpswd8HDx6/HoaFb746mSZfuPAgMB AAGjggHyMIIB7jAdBgNVHQ4EFgQUa59ZhMdijfesBKrOJJiw4DBpUaAwHwYDVR0j BBgwFoAUfkoAlAVN0a5MOqc5duVU8ZG8UjAwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTlNTQ1lC RVIvMC83RTRBMDA5NDA1NEREMUFFNEMzQUE3Mzk3NkU1NTRGMTkxQkM1MjMwLmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8xLzdFNEEwMDk0MDU0REQxQUU0QzNBQTczOTc2 RTU1NEYxOTFCQzUyMzAuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9OU1NDWUJFUi8wLzdFNEEwMDk0 MDU0REQxQUU0QzNBQTczOTc2RTU1NEYxOTFCQzUyMzAubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBR7yQl 3YhKf5Ta+G5XiAjnEEHhjjWVOkoDcYBbKdu1joJF4HAcVX4ClfrsyOCEf+Bpm1y1 n6UKtNt4BXn54s+lf+uOHyklyTBjzSb0T3m2pSgBJB5IWq2qU8rVaQ5AiiTW09dA r27/VK7RyM9+jBkM9Bk7afdjlhvtVML6vCmdNhnCyDAvHAgPspSYGbml2RYpz0Sf geEMaknst3T/JzuRmhS95itE8SdZ/VbsoHtgzPM2YYuiCa9YoSalSY2ydnJNUjxz QY8BE35AiHO9LTSlKCOBaQC9LDPUUWyN5h/NyCQBPvcpx5i/q+9IeDZN79hThdst JkyjggZKXnGIS98+ -----END CERTIFICATE-----Generated at Sun Oct 4 17:39:10 2026 by rpki-client