
$ rpki-client -vvf rpkica.twnic.tw/rpki/ASNET/0/9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.mft
File: 9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.mft (raw, json)
Hash identifier: xV7Ej4iDS/bmeD2KdBPgZfNC4wyC4f2NmrDtpgN5/rc=
Subject key identifier: 0C:C1:5B:6F:F4:6F:20:4C:BD:0B:08:7C:4D:3F:E9:9B:85:5E:C7:6C
Authority key identifier: 98:32:A7:E4:CF:45:72:9E:DC:D3:68:1D:01:46:E1:ED:3A:4A:40:C3
Certificate issuer: /CN=9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3
Certificate serial: 5F578947A421E2210C76C204978268AD5344B7F2
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/ASNET/0/9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.mft
Manifest number: 0C
Signing time: Wed 13 May 2026 04:51:55 +0000
Manifest this update: Wed 13 May 2026 04:46:55 +0000
Manifest next update: Thu 14 May 2026 06:46:55 +0000
Files and hashes: 1: 3131372e3130332e39362e302f32302d3230203d3e2039323634.roa (hash: QzqhrVUHom/+44097wyR/SgbPwVIpPZtBP2vJQUQT34=)
2: 323030313a6330383a3a2f33322d3332203d3e2039323634.roa (hash: Za2eLedW7Dgj1YKn18rk+zYaiAYcT3aXmTUgI60NrbY=)
3: 3130332e3133302e3235322e302f32322d3234203d3e2039323634.roa (hash: ebYSyc6wu3utGCh3CfyxTzxW7KNMw2xjNw8vV6+J0FQ=)
4: 323430333a633234303a3a2f33322d3332203d3e2039323634.roa (hash: oe8xOwIqr2mO81l6+e7ZMOIERS2RYBz6q6ygl7MIFms=)
5: 3230322e3134302e3136302e302f31392d3139203d3e2039323634.roa (hash: LA74+HRCy+YQeY35gYYWFZPH2WSKO8OariSVC3JqHzM=)
6: 3230322e3136392e3136302e302f32302d3230203d3e2039323634.roa (hash: sSOmlXcn9YAxBpR7Y/Omip1XRS2+5nTj6dTKOHSNkp4=)
7: 323030313a6330383a666666663a666666663a666666663a666666663a666666613a3830302f3131392d313139203d3e203138323137.roa (hash: LlmnWD7qIwStfYARyzYDm1T1rVnzOKq6b9lEjT/7ewQ=)
8: 3130332e3133302e3235322e302f32322d3232203d3e2039323634.roa (hash: VvHRqWxVEtxPJcjsyJFxfRKVgF0vRJqpYge9SzO33qM=)
9: 323430303a343530303a3a2f33322d3332203d3e2039323634.roa (hash: KHJasWZ7ZRecfk0BbyKR1BgVi3lPmEGN9yAwpdYHKvo=)
10: 9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.crl (hash: AHn/ObshNGuhfBDuPKK6H0QMj/rBuiZ4lxBXpQEBrdY=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/ASNET/0/9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.crl
rsync://rpkica.twnic.tw/rpki/ASNET/0/9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 06:46:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:57:89:47:a4:21:e2:21:0c:76:c2:04:97:82:68:ad:53:44:b7:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3
Validity
Not Before: May 13 04:46:55 2026 GMT
Not After : May 14 06:46:55 2026 GMT
Subject: CN=0CC15B6FF46F204CBD0B087C4D3FE99B855EC76C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ee:cb:a7:54:2a:9d:5f:bb:4a:69:3f:eb:9d:
9c:1d:69:8e:13:49:54:cb:80:bf:1c:42:5b:7d:8b:
20:14:38:61:e6:f7:64:37:db:82:0c:e3:00:f6:65:
ef:8a:c8:79:68:c8:0a:85:17:69:35:dd:5c:87:9d:
47:3e:5e:17:33:d1:6f:13:73:74:6c:c7:c1:0c:48:
ac:0f:1a:58:1b:4a:05:fa:6d:2c:0e:0d:5f:14:bb:
bc:78:ed:36:3b:a6:1c:26:82:5a:3c:26:e0:2b:31:
db:c2:a6:93:1c:2e:f9:17:f6:2e:37:a1:f9:57:a5:
8d:82:de:f5:b9:dd:5e:f8:f2:e4:9c:10:81:46:2b:
b4:a6:7e:71:6d:45:66:e0:ac:e0:71:b0:6f:cb:3e:
24:1a:aa:57:52:ab:26:da:68:b6:6a:ba:cc:16:7e:
b3:31:32:bd:64:5d:53:28:fc:c3:cc:f0:68:56:7e:
e2:ac:24:84:65:55:b1:35:37:7b:fe:45:a5:5e:c0:
45:9a:ab:e8:77:60:10:f8:43:21:cb:0b:e5:e2:bb:
f0:02:df:f8:22:cc:d5:a2:fe:76:c3:96:e1:6c:df:
0e:91:d4:9d:e5:f9:79:c5:c5:b6:27:df:f5:37:bc:
7e:c8:05:e8:67:2c:5e:0a:6c:86:da:09:db:3d:de:
c7:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:C1:5B:6F:F4:6F:20:4C:BD:0B:08:7C:4D:3F:E9:9B:85:5E:C7:6C
X509v3 Authority Key Identifier:
keyid:98:32:A7:E4:CF:45:72:9E:DC:D3:68:1D:01:46:E1:ED:3A:4A:40:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/ASNET/0/9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ASNET/0/9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:d8:f3:f6:58:2e:f6:a4:e4:2d:77:be:6b:c3:da:d8:6e:7a:
88:d6:10:55:19:32:a0:ae:01:18:52:53:02:16:33:cb:3a:9e:
2c:cc:03:58:7e:86:20:dd:38:53:cf:1c:40:02:07:2c:b8:ec:
44:74:28:d4:c5:64:d8:ac:4d:15:28:fa:87:0a:9b:ec:8f:ef:
c7:03:98:87:84:1c:be:8f:96:f0:b8:9a:ec:cd:52:c1:2b:ba:
4d:11:70:65:3c:59:a7:f2:4d:29:fa:6f:ef:12:ba:86:b5:9a:
00:70:39:db:08:e0:d0:50:34:db:f2:e0:7b:62:2d:74:1f:8b:
04:6e:7f:b8:cd:2b:78:76:3b:d5:21:b7:ba:55:a7:00:57:65:
90:b6:51:10:a1:9a:a9:58:c5:bb:b0:8b:9b:97:04:29:62:a4:
02:27:cc:d6:72:61:80:34:f5:bf:e1:15:95:34:cf:06:35:2b:
b6:ce:e2:fe:0d:8b:38:2f:42:86:4b:62:f8:31:df:e0:41:05:
e9:25:29:d3:de:22:b2:54:7d:81:39:e9:e8:f9:94:30:a7:c3:
64:2f:3d:98:85:3c:52:5b:8a:b8:47:7a:00:42:85:be:c5:62:
62:bb:45:36:4d:9e:19:a4:70:ca:1f:5d:4c:23:07:15:52:62:
fc:9c:84:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:35:49 2026 by rpki-client