
$ rpki-client -vvf rpkica.twnic.tw/rpki/ASNET/0/9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.mft
File: 9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.mft (raw, json)
Hash identifier: 0XqbLZQlpzTFgcbO53iFP+SizATxcKy9CqFuaPNiVbo=
Subject key identifier: 77:09:20:BF:0E:71:7F:B0:02:50:EA:56:34:48:77:54:BA:5B:76:17
Authority key identifier: 98:32:A7:E4:CF:45:72:9E:DC:D3:68:1D:01:46:E1:ED:3A:4A:40:C3
Certificate issuer: /CN=9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3
Certificate serial: 6DB450BF35D316ABFE07254F16439CBE7B6B2E9F
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/ASNET/0/9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.mft
Manifest number: 4C
Signing time: Tue 30 Jun 2026 06:23:15 +0000
Manifest this update: Tue 30 Jun 2026 06:18:15 +0000
Manifest next update: Wed 01 Jul 2026 06:30:15 +0000
Files and hashes: 1: 3230322e3134302e3136302e302f31392d3139203d3e2039323634.roa (hash: LA74+HRCy+YQeY35gYYWFZPH2WSKO8OariSVC3JqHzM=)
2: 323030313a6330383a666666663a666666663a666666663a666666663a666666613a3830302f3131392d313139203d3e203138323137.roa (hash: LlmnWD7qIwStfYARyzYDm1T1rVnzOKq6b9lEjT/7ewQ=)
3: 3130332e3133302e3235322e302f32322d3234203d3e2039323634.roa (hash: ebYSyc6wu3utGCh3CfyxTzxW7KNMw2xjNw8vV6+J0FQ=)
4: 9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.crl (hash: +qNHMdfbvANIXh1oCXi+m34SY3aaxDLwmkyrOLyRusw=)
5: 323430303a343530303a3a2f33322d3332203d3e2039323634.roa (hash: KHJasWZ7ZRecfk0BbyKR1BgVi3lPmEGN9yAwpdYHKvo=)
6: 323430333a633234303a3a2f33322d3332203d3e2039323634.roa (hash: oe8xOwIqr2mO81l6+e7ZMOIERS2RYBz6q6ygl7MIFms=)
7: 323030313a6330383a3a2f33322d3332203d3e2039323634.roa (hash: Za2eLedW7Dgj1YKn18rk+zYaiAYcT3aXmTUgI60NrbY=)
8: 3230322e3136392e3136302e302f32302d3230203d3e2039323634.roa (hash: sSOmlXcn9YAxBpR7Y/Omip1XRS2+5nTj6dTKOHSNkp4=)
9: 3131372e3130332e39362e302f32302d3230203d3e2039323634.roa (hash: QzqhrVUHom/+44097wyR/SgbPwVIpPZtBP2vJQUQT34=)
10: 3130332e3133302e3235322e302f32322d3232203d3e2039323634.roa (hash: VvHRqWxVEtxPJcjsyJFxfRKVgF0vRJqpYge9SzO33qM=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/ASNET/0/9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.crl
rsync://rpkica.twnic.tw/rpki/ASNET/0/9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Jul 2026 06:30:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:b4:50:bf:35:d3:16:ab:fe:07:25:4f:16:43:9c:be:7b:6b:2e:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3
Validity
Not Before: Jun 30 06:18:15 2026 GMT
Not After : Jul 1 06:30:15 2026 GMT
Subject: CN=770920BF0E717FB00250EA5634487754BA5B7617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fb:9a:57:5d:b2:7d:53:4b:3a:cb:02:cd:9b:
f9:6b:85:9a:a9:24:28:21:40:63:e6:e6:ee:c7:d6:
72:4e:f9:f4:3c:21:b4:12:35:45:52:ad:f9:31:2f:
37:c6:71:28:4d:79:37:18:36:55:16:72:f3:d2:c9:
ca:8d:b3:04:81:c4:36:4a:f6:b2:1a:ef:6d:39:84:
f2:9e:26:10:22:cf:8b:24:94:2e:f8:3b:5a:37:4c:
c6:90:8a:a7:ad:90:22:f7:b0:ea:07:e9:8e:d1:9f:
de:0d:0b:de:e0:c3:95:b0:19:d6:e5:b5:92:0a:58:
81:ad:d7:60:43:aa:ef:1f:ce:34:65:99:36:18:3e:
84:4b:e3:49:e3:0b:36:c0:a6:ac:32:ef:ff:6c:c0:
1a:0d:12:6d:01:48:89:3e:49:5a:5d:6f:3d:22:be:
cb:44:d8:f0:26:22:a3:2d:a0:de:0f:82:f6:72:00:
e3:5b:9e:db:21:5e:1a:a4:68:b6:94:b4:b8:b6:49:
d9:f4:da:a9:03:51:83:88:c2:fc:ee:e4:21:7e:2b:
8a:1a:c4:35:14:d7:18:ca:1d:02:78:6e:5a:24:37:
f0:01:ad:83:4f:e0:0c:fb:07:13:a0:09:6c:3e:34:
16:01:43:f2:c5:7b:6c:60:5f:5e:23:18:f6:9e:2f:
e9:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:09:20:BF:0E:71:7F:B0:02:50:EA:56:34:48:77:54:BA:5B:76:17
X509v3 Authority Key Identifier:
keyid:98:32:A7:E4:CF:45:72:9E:DC:D3:68:1D:01:46:E1:ED:3A:4A:40:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/ASNET/0/9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ASNET/0/9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:c8:57:67:77:81:d4:2a:86:d9:36:de:56:8a:94:8c:18:6f:
e4:2d:0b:56:61:06:52:ee:46:a2:59:bb:e0:b5:3f:6f:07:70:
1e:07:c4:10:e0:07:c0:65:f9:7e:9b:f5:f4:bf:ae:91:d6:cf:
56:28:58:d1:4c:9f:b0:2f:71:c2:86:39:36:c0:b9:f0:ed:3b:
53:90:f5:21:67:9b:58:c7:b7:c6:26:43:4d:59:ee:45:a1:29:
ad:01:9c:0b:25:d9:d9:ed:4e:f1:12:b1:e7:0a:16:4d:7c:0c:
fc:7a:17:4c:b4:56:ea:5c:cb:5b:7b:69:0c:07:83:55:d0:71:
d6:1e:b9:99:ae:b9:d0:be:b4:8a:62:ba:50:36:b7:ee:d0:4a:
e7:33:f7:86:4a:a1:be:01:db:08:5c:7e:f4:c5:39:0f:fd:a1:
97:b4:27:76:22:56:8c:3e:80:f0:13:10:06:f5:d2:37:bf:68:
03:59:82:59:0a:43:e9:a0:1a:9e:9a:e3:80:56:6f:38:f5:9a:
21:4c:5e:34:a6:cd:67:85:3d:b8:72:01:01:22:94:ca:2d:54:
89:b4:c4:90:05:87:fc:e8:fd:02:e2:59:8e:23:0f:97:0f:54:
03:44:b2:c7:cc:75:c6:14:47:82:93:fd:eb:0f:14:9b:ef:8a:
4a:d9:6f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:07:01 2026 by rpki-client