
$ rpki-client -vvf rpkica.twnic.tw/rpki/AOTERNET/1/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.mft
File: DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.mft (raw, json)
Hash identifier: g57tUOf+f8qDgEqbUsHioUcBnttWMdcWe7durlaRYRw=
Subject key identifier: 9B:60:D3:76:2A:FC:B4:8B:95:2E:73:ED:51:90:BB:59:FC:0A:26:A1
Authority key identifier: DB:E0:6A:5F:C5:A5:E2:89:AC:EB:48:7B:50:C5:EC:D3:B6:DE:23:4C
Certificate issuer: /CN=DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C
Certificate serial: 160DDCA85F44F2CD450B17B00B9744D057F8841A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/AOTERNET/1/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.mft
Manifest number: 94
Signing time: Sat 15 Aug 2026 06:14:45 +0000
Manifest this update: Sat 15 Aug 2026 06:09:45 +0000
Manifest next update: Sun 16 Aug 2026 07:47:45 +0000
Files and hashes: 1: DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.crl (hash: M6BOIsBWnfAxKxU5xc7uHdoMZzNo+dpd3BqbvAR5bfA=)
2: 3134342e37392e3233362e302f32342d3234203d3e203138303430.roa (hash: ZudjpagHov1aZlrdTbsVSXtYt3YeCsmSW4h5XCZ/uzs=)
3: 3134342e37392e3233372e302f32342d3332203d3e203138303430.roa (hash: r6p1Am50m6SY4C22THPfAzr++Eba9JH1Hgnd4WmFLsA=)
4: 3134342e37392e3233372e302f32342d3234203d3e203138303430.roa (hash: YiNfhn2rfnFW/2M2Ag4d3OUBywy0FERwAc5K7Q8vyfc=)
5: 3134342e37392e3233362e302f32342d3332203d3e203138303430.roa (hash: 1FIFjMBcizShdvw6u5phvDGtZhnMBusqAuzpJLq+G90=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/AOTERNET/1/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.crl
rsync://rpkica.twnic.tw/rpki/AOTERNET/1/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 16 Aug 2026 02:50:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:0d:dc:a8:5f:44:f2:cd:45:0b:17:b0:0b:97:44:d0:57:f8:84:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C
Validity
Not Before: Aug 15 06:09:45 2026 GMT
Not After : Aug 16 07:47:45 2026 GMT
Subject: CN=9B60D3762AFCB48B952E73ED5190BB59FC0A26A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:c7:88:57:fc:21:5c:1b:fe:c5:c3:ce:7b:ab:
51:39:38:16:44:86:f4:73:c6:da:23:65:9d:31:3c:
3d:73:52:16:e9:b4:e2:30:d9:81:5f:1e:d0:54:af:
0b:15:eb:9d:50:ca:17:6c:fc:ea:87:ea:7e:3a:75:
d5:d9:77:4a:4f:b2:6e:14:7a:96:2a:cd:78:b8:22:
bb:78:e3:2d:41:4d:2c:55:6b:74:98:d2:6e:a5:9c:
2b:fa:71:18:3e:bc:81:22:10:ab:46:5b:46:6e:7a:
25:4f:58:eb:ac:9b:96:7e:9b:ee:01:11:01:df:2d:
45:b9:bd:12:51:a2:b1:d4:3e:41:a7:63:80:15:14:
1a:aa:3b:71:b2:60:7e:c7:5e:1b:9c:fc:cf:55:d7:
2b:6a:c2:de:72:a4:95:ad:9b:c5:65:08:96:16:ca:
2b:24:60:cc:d6:42:a2:1e:77:32:06:f9:e6:e9:26:
70:42:b6:9e:6b:c4:1c:51:95:cc:c5:d9:84:ab:ac:
49:fa:27:0f:34:c5:e3:4f:ef:0d:2e:1e:b1:43:bd:
0a:0c:20:c6:f2:41:3b:e8:38:12:27:e0:7d:72:43:
61:82:07:d5:d7:b8:26:3e:aa:9d:5f:84:88:93:bf:
4f:c5:65:7a:08:01:68:b3:5a:8b:35:17:d7:45:14:
35:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:60:D3:76:2A:FC:B4:8B:95:2E:73:ED:51:90:BB:59:FC:0A:26:A1
X509v3 Authority Key Identifier:
keyid:DB:E0:6A:5F:C5:A5:E2:89:AC:EB:48:7B:50:C5:EC:D3:B6:DE:23:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/AOTERNET/1/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/AOTERNET/1/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:8c:08:a7:1c:e3:92:69:8d:82:7d:90:73:61:b1:19:06:53:
9f:8a:bb:08:8a:77:27:6e:16:5a:88:ff:e9:dd:08:70:c7:7f:
9e:32:80:96:7d:10:76:18:11:16:df:64:a1:e0:38:37:e7:34:
b1:7e:8f:fb:3c:89:0c:3d:27:f0:42:b6:be:8b:bf:bf:c0:fd:
cc:d1:7d:36:66:b1:cf:b8:07:86:10:5c:8d:cc:7d:2c:01:79:
8d:9d:54:f2:62:47:8c:22:8d:2d:66:02:b7:9b:eb:2c:44:fc:
d1:f4:41:4e:7e:72:23:ec:f9:88:f7:4c:28:46:1e:a7:57:6c:
7d:79:fd:b8:85:cb:bf:6b:65:77:1d:64:13:8f:4d:69:f9:dd:
e5:3e:fe:4b:66:1e:c6:fc:9f:c6:25:74:22:2a:98:20:2b:1a:
39:cc:14:64:b1:fd:fd:35:b4:10:d8:33:c6:c2:43:9d:e1:6a:
53:6e:e4:e9:47:8f:3e:1f:c3:34:32:4a:74:0f:7d:ba:c7:c5:
51:30:06:bf:d8:ee:1e:0a:e1:2a:14:fd:ab:e1:5d:0d:d0:2c:
52:e1:e7:d6:39:db:4d:91:91:80:83:8a:a7:18:4f:ba:48:b0:
84:81:b8:46:c3:bd:8e:7b:f0:eb:7b:96:4b:d9:e1:f0:d7:38:
09:93:0d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 10:15:56 2026 by rpki-client