
$ rpki-client -vvvf rpkica.twnic.tw/rpki/CTII/0/96EC32418F5DB7D272132F4F615EEE14EBFCC789.mft
File: 96EC32418F5DB7D272132F4F615EEE14EBFCC789.mft (raw, json)
Hash identifier: sCdUPDUv1lnCxnEIfx6mWaYLhdFCY3bp0SfwPmMd0LM=
Subject key identifier: 5B:E7:F4:4A:8C:B7:7B:10:CE:17:41:18:78:7F:7D:AF:79:73:1A:BB
Authority key identifier: 96:EC:32:41:8F:5D:B7:D2:72:13:2F:4F:61:5E:EE:14:EB:FC:C7:89
Certificate issuer: /CN=96EC32418F5DB7D272132F4F615EEE14EBFCC789
Certificate serial: 42896736702693ED46C2459F4D50DFE313C4BD9D
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/96EC32418F5DB7D272132F4F615EEE14EBFCC789.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CTII/0/96EC32418F5DB7D272132F4F615EEE14EBFCC789.mft
Manifest number: CF
Signing time: Mon 05 Oct 2026 21:15:09 +0000
Manifest this update: Mon 05 Oct 2026 21:10:09 +0000
Manifest next update: Tue 06 Oct 2026 23:54:09 +0000
Files and hashes: 1: 3130332e3133302e3235302e302f32332d3234203d3e20323033303133.roa (hash: qifQcmP7aY3KYLY0YWbHCpcdmaz7oenQE0L1tQ92F24=)
2: 96EC32418F5DB7D272132F4F615EEE14EBFCC789.crl (hash: aITIXZIYgdSzAXqqya0ASLPJtxkOPDtLvch5BC1+50A=)
3: 3130332e3133302e3234392e302f32342d3234203d3e20323033303133.roa (hash: pqABpk3IMEQeCPJ1YCuMzE9VdO7tiwLb3Csx2ef6igs=)
4: 3130332e3133302e3234382e302f32322d3234203d3e20323033303133.roa (hash: vdwflt80XSH+f+UsiqjaPJa3CG1W829xLEufTNoKgck=)
5: 3130332e3133302e3234392e302f32342d3234203d3e20393834.roa (hash: Nd+vxwk113iKIVjwRMjJ+fIaoSaKjb89bytlnk2AR6I=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/CTII/0/96EC32418F5DB7D272132F4F615EEE14EBFCC789.crl
rsync://rpkica.twnic.tw/rpki/CTII/0/96EC32418F5DB7D272132F4F615EEE14EBFCC789.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/96EC32418F5DB7D272132F4F615EEE14EBFCC789.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 06 Oct 2026 23:54:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:89:67:36:70:26:93:ed:46:c2:45:9f:4d:50:df:e3:13:c4:bd:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96EC32418F5DB7D272132F4F615EEE14EBFCC789
Validity
Not Before: Oct 5 21:10:09 2026 GMT
Not After : Oct 6 23:54:09 2026 GMT
Subject: CN=5BE7F44A8CB77B10CE174118787F7DAF79731ABB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:18:f3:41:3f:13:37:89:0b:1e:1a:b4:49:67:
7e:a3:89:95:e3:94:82:4a:23:2b:bd:4f:b8:b7:d6:
27:bf:87:df:67:23:cc:0d:5b:81:73:34:70:b7:24:
29:c1:a2:12:5a:2f:91:71:f9:96:53:13:e0:2a:c3:
49:6d:f1:fd:d8:11:b6:3d:17:ee:11:aa:ca:c3:4d:
0e:f1:3b:40:99:b5:e2:aa:f3:34:d9:e7:c1:78:32:
67:0d:a9:c1:2c:80:c7:9d:a9:8a:43:d5:c7:0f:45:
37:27:85:64:00:ef:f4:16:89:c0:1f:70:82:3c:84:
43:80:b5:95:fc:59:4e:f9:d6:21:4d:49:77:7e:e4:
9f:70:56:d4:88:4c:e5:82:60:99:3f:41:2e:0f:b5:
ac:bc:5e:af:ba:db:a1:b3:00:64:83:a6:a0:21:4f:
73:be:b0:0a:e5:74:cd:c3:f4:c8:26:c4:b6:22:5a:
20:c6:08:c4:25:97:d3:b6:8c:13:91:b6:83:fe:24:
66:20:58:04:f1:71:79:ac:80:fb:f4:6b:14:e0:cb:
66:40:be:36:14:63:a7:8f:14:7f:f6:87:75:8a:91:
e2:4f:a4:c9:0c:40:0d:28:1d:58:93:f7:ee:c1:4b:
35:e8:fd:d9:08:3c:ce:8d:4d:f5:bb:43:29:46:0f:
98:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:E7:F4:4A:8C:B7:7B:10:CE:17:41:18:78:7F:7D:AF:79:73:1A:BB
X509v3 Authority Key Identifier:
keyid:96:EC:32:41:8F:5D:B7:D2:72:13:2F:4F:61:5E:EE:14:EB:FC:C7:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CTII/0/96EC32418F5DB7D272132F4F615EEE14EBFCC789.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/96EC32418F5DB7D272132F4F615EEE14EBFCC789.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CTII/0/96EC32418F5DB7D272132F4F615EEE14EBFCC789.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:67:7e:15:33:28:35:c5:c0:75:51:9c:9d:88:f8:28:14:25:
59:53:c1:b9:bd:27:9e:bf:8f:8c:1d:76:ee:eb:98:09:ad:cc:
2f:7b:dc:74:ae:27:e1:fa:85:01:a2:94:93:95:17:46:d7:26:
ae:65:40:2d:0f:62:4f:31:98:03:6d:b8:6e:1e:17:30:63:8f:
3c:70:b8:0f:a0:08:17:3e:4b:c7:8e:0e:21:56:2b:c5:e6:81:
d8:53:0b:cd:84:d7:51:6b:19:f5:6c:ae:d1:c5:47:0e:b9:c9:
92:3a:cf:aa:bc:1d:44:fe:4c:90:d2:21:3c:de:0f:8e:f3:a3:
35:b0:a5:53:f0:a6:ff:2f:1b:f4:59:e5:6d:93:ba:ed:df:17:
88:03:06:ca:2c:5d:43:e6:b4:38:a2:b7:af:ff:76:a0:d1:e1:
2e:ae:a5:0b:40:30:c5:5f:ca:ae:7a:bb:eb:99:16:84:7a:3d:
54:2b:cd:bb:9d:32:7e:23:9f:3c:dc:fc:b5:76:19:77:20:7e:
72:f2:1e:a3:2a:d4:79:c7:86:d1:45:79:01:97:2e:5f:ff:26:
6d:d5:e7:b6:ef:ad:ce:80:58:83:c3:8b:61:b9:9b:2f:dc:d7:
1f:38:5c:ee:69:6c:fe:74:b4:c3:d6:8f:a4:b9:ec:d6:fa:b1:
85:1f:be:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 14:51:24 2026 by rpki-client