
$ rpki-client -vvvf rpkica.twnic.tw/rpki/BEIDOU/1/06068E54F196F9CB56DECEC6BDF81F4E477ABF5C.mft
File: 06068E54F196F9CB56DECEC6BDF81F4E477ABF5C.mft (raw, json)
Hash identifier: X/Qs/NVs8CeKWbMKT2pqCWsSpCAr03wzIx6HMG7pcFQ=
Subject key identifier: E8:F2:C8:6D:85:92:57:85:33:51:C5:8D:B3:0B:05:9D:0D:AB:E5:5C
Authority key identifier: 06:06:8E:54:F1:96:F9:CB:56:DE:CE:C6:BD:F8:1F:4E:47:7A:BF:5C
Certificate issuer: /CN=06068E54F196F9CB56DECEC6BDF81F4E477ABF5C
Certificate serial: 25CBC0F5C72CA9CC81910D0E04CF4C8BBCF40629
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/06068E54F196F9CB56DECEC6BDF81F4E477ABF5C.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/BEIDOU/1/06068E54F196F9CB56DECEC6BDF81F4E477ABF5C.mft
Manifest number: CE
Signing time: Sun 04 Oct 2026 19:10:27 +0000
Manifest this update: Sun 04 Oct 2026 19:05:27 +0000
Manifest next update: Mon 05 Oct 2026 20:33:27 +0000
Files and hashes: 1: 3136302e33302e37382e302f32332d3332203d3e203130313333.roa (hash: 7Je86sMchgYrmuH35GJN69x2y8hjmkP+HJO7+VYUwEM=)
2: 3136302e33302e37382e302f32332d3332203d3e20313331363537.roa (hash: Zhs1kOvnuZIjhp0oL6F9+ootWaxyP6qoJ2WZeRrbEm4=)
3: 3136302e33302e37382e302f32332d3332203d3e20313532363131.roa (hash: uMXh1FWV1RSCRcyRNUju4l4DsT5cYFrGKXMvmIV7BLs=)
4: 3136302e33302e37382e302f32332d3332203d3e203338383535.roa (hash: +lIg2evgvfalryJ8lpt7wsd6joebOkUR6Y98WeA5Jdg=)
5: 3136302e33302e37382e302f32332d3332203d3e20313734.roa (hash: gMLz1jhislEKkPKVX2TZhH//DbARthM4fmws4G0wx2A=)
6: 06068E54F196F9CB56DECEC6BDF81F4E477ABF5C.crl (hash: aQJODVxf+OrEzga8Rnt4TZGu6xtNvTeMnq/iuk8kIsM=)
7: 3136302e33302e37382e302f32332d3332203d3e2036393339.roa (hash: by+sSGTQLPLkEdizMA77jzwmp9S3ywOw9dBG6nJb10U=)
8: 3136302e33302e37382e302f32332d3332203d3e203137343038.roa (hash: CuSCoz+B9kOtQiiebXf4SYUoQ5yR/B7hKVta2ybaqW4=)
9: 3136302e33302e37382e302f32332d3332203d3e20313334383233.roa (hash: UG8caxZqepVb+RMYX+fTPdsFRGJq9XUxEtSCx0a5QtY=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/BEIDOU/1/06068E54F196F9CB56DECEC6BDF81F4E477ABF5C.crl
rsync://rpkica.twnic.tw/rpki/BEIDOU/1/06068E54F196F9CB56DECEC6BDF81F4E477ABF5C.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/06068E54F196F9CB56DECEC6BDF81F4E477ABF5C.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Oct 2026 18:18:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:cb:c0:f5:c7:2c:a9:cc:81:91:0d:0e:04:cf:4c:8b:bc:f4:06:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06068E54F196F9CB56DECEC6BDF81F4E477ABF5C
Validity
Not Before: Oct 4 19:05:27 2026 GMT
Not After : Oct 5 20:33:27 2026 GMT
Subject: CN=E8F2C86D859257853351C58DB30B059D0DABE55C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:bd:b9:b0:a6:af:bc:bc:6b:85:a3:6c:fb:76:
fa:54:b4:34:82:53:ee:9a:3f:c5:fa:1a:be:e7:b6:
b6:d1:8d:20:55:66:3b:5e:27:20:25:5b:81:56:d2:
06:10:34:94:59:1a:2f:73:45:f4:a4:51:c7:5c:e2:
29:8a:d3:0e:f4:70:ea:32:04:6e:55:11:11:31:aa:
c7:19:2c:91:9e:62:e9:2c:5d:2e:79:a2:30:30:2c:
df:31:76:2e:16:a9:d5:43:b9:eb:88:b9:75:2d:97:
db:1f:05:c8:1c:b7:06:16:2f:90:17:28:f2:b2:d3:
44:4f:74:78:7f:46:7f:a5:fa:7d:69:ca:d6:90:fe:
42:15:6b:56:9f:75:9c:3c:95:88:5e:78:97:5a:47:
c9:e3:5e:11:fa:cc:60:28:b0:b6:d9:46:85:40:ba:
fd:a5:59:21:32:07:7a:ac:c1:d8:a4:48:ab:72:15:
ac:a1:02:c8:db:3b:a1:cf:96:89:71:ae:70:ed:99:
70:7b:b2:3e:b6:c5:84:89:a3:a6:54:5c:c3:21:b6:
ec:ec:56:78:77:26:f9:38:c8:91:cb:6e:52:e4:7c:
b6:b6:4b:fe:ba:1f:73:1b:17:00:ca:8e:9e:4a:58:
5f:bd:14:02:0d:1f:6b:35:6d:20:15:25:c1:ef:6e:
fc:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:F2:C8:6D:85:92:57:85:33:51:C5:8D:B3:0B:05:9D:0D:AB:E5:5C
X509v3 Authority Key Identifier:
keyid:06:06:8E:54:F1:96:F9:CB:56:DE:CE:C6:BD:F8:1F:4E:47:7A:BF:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/BEIDOU/1/06068E54F196F9CB56DECEC6BDF81F4E477ABF5C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/06068E54F196F9CB56DECEC6BDF81F4E477ABF5C.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/BEIDOU/1/06068E54F196F9CB56DECEC6BDF81F4E477ABF5C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:35:3f:8f:23:59:d5:32:bb:c8:da:8e:0a:47:e1:03:9e:73:
cb:16:d7:92:a2:fc:ec:e2:03:07:f3:01:c2:70:ff:d8:e2:fe:
7b:c8:7c:26:8a:49:73:d5:e1:72:cd:af:7a:69:ae:98:52:55:
f1:78:16:e5:1b:77:16:c1:77:a3:8f:92:10:21:36:10:15:47:
0c:42:05:0c:85:3e:0c:d3:36:e9:3d:5d:55:db:86:8f:d3:61:
5e:7a:bc:2c:19:dc:3b:44:de:3e:e1:2a:ec:e4:0f:63:f6:ba:
f4:fa:69:f8:1f:9b:7c:28:d7:b1:35:7e:21:ad:1d:99:9d:fa:
db:ef:d1:85:54:15:32:c7:35:e1:1e:f4:37:e5:5e:7b:50:83:
2d:76:f7:d1:46:8f:34:f0:f8:84:f6:60:1e:4d:5b:5c:af:bf:
a9:8b:8c:93:47:b4:ed:e8:ce:d1:64:95:17:b6:c2:90:3a:39:
31:eb:28:96:2b:d0:0b:3a:53:40:27:1d:8d:dd:99:4b:e3:cb:
68:35:73:08:00:de:17:dd:11:77:16:c6:f9:fe:b9:ec:8b:a4:
cc:86:97:0f:f1:1b:09:1b:10:fb:35:ff:a5:9d:33:d6:1c:5a:
b9:2e:54:a7:a3:99:59:ed:52:04:2f:6b:ef:ae:d8:be:90:c5:
7d:7e:8d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 06:57:17 2026 by rpki-client