
$ rpki-client -vvf rpkica.twnic.tw/rpki/CTII/0/96EC32418F5DB7D272132F4F615EEE14EBFCC789.mft
File: 96EC32418F5DB7D272132F4F615EEE14EBFCC789.mft (raw, json)
Hash identifier: jdmyerfaZ6N9GtntF2FG3X4rTQKERs1NWsNlURJVEf4=
Subject key identifier: 76:C6:5F:19:28:90:0F:AA:E6:73:A6:80:3B:8C:03:A7:C6:90:01:B4
Authority key identifier: 96:EC:32:41:8F:5D:B7:D2:72:13:2F:4F:61:5E:EE:14:EB:FC:C7:89
Certificate issuer: /CN=96EC32418F5DB7D272132F4F615EEE14EBFCC789
Certificate serial: 42B1C3676BE72FE8FC4F4F28B7892A87D6BE6D99
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/96EC32418F5DB7D272132F4F615EEE14EBFCC789.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CTII/0/96EC32418F5DB7D272132F4F615EEE14EBFCC789.mft
Manifest number: 47
Signing time: Tue 30 Jun 2026 00:22:40 +0000
Manifest this update: Tue 30 Jun 2026 00:17:40 +0000
Manifest next update: Wed 01 Jul 2026 02:16:40 +0000
Files and hashes: 1: 3130332e3133302e3234382e302f32342d3234203d3e20313333393438.roa (hash: fD/ucDIm4GlZar7mmOLi7+OafDyoA/X6tjLQrmsYp4Q=)
2: 3130332e3133302e3235302e302f32342d3234203d3e20313333393438.roa (hash: t6zLUrqLxN1841JGifIZEELL55tSwuOCwFhWjmskA2M=)
3: 3130332e3133302e3234392e302f32342d3234203d3e20393834.roa (hash: Nd+vxwk113iKIVjwRMjJ+fIaoSaKjb89bytlnk2AR6I=)
4: 96EC32418F5DB7D272132F4F615EEE14EBFCC789.crl (hash: U3vOko0KjlmpGTm5Os1+K7svBdbTwe7OcRYI0T1Uhl0=)
5: 3130332e3133302e3235312e302f32342d3234203d3e20313333393438.roa (hash: GsOYmJWvRu80jQVFqMYosfTSy2X9/h0xqknASB9kz4E=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/CTII/0/96EC32418F5DB7D272132F4F615EEE14EBFCC789.crl
rsync://rpkica.twnic.tw/rpki/CTII/0/96EC32418F5DB7D272132F4F615EEE14EBFCC789.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/96EC32418F5DB7D272132F4F615EEE14EBFCC789.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Jul 2026 02:16:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:b1:c3:67:6b:e7:2f:e8:fc:4f:4f:28:b7:89:2a:87:d6:be:6d:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96EC32418F5DB7D272132F4F615EEE14EBFCC789
Validity
Not Before: Jun 30 00:17:40 2026 GMT
Not After : Jul 1 02:16:40 2026 GMT
Subject: CN=76C65F1928900FAAE673A6803B8C03A7C69001B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:19:7b:63:b4:a5:ed:be:79:3d:7e:03:43:3b:
1c:62:23:71:30:e3:71:5d:c7:70:b9:be:9d:1c:e7:
4a:a6:13:30:5d:c6:30:47:f9:6b:f7:7d:cd:b4:8a:
a5:f3:24:7e:12:14:9a:83:93:ed:4c:12:53:30:d2:
87:c9:cb:45:e5:f1:98:96:27:19:44:f0:07:9a:8e:
4c:78:60:65:6f:dc:2e:e0:a9:b1:3a:b5:66:24:a7:
47:5d:08:0f:55:57:2d:04:b1:e7:9f:c7:17:07:ad:
8a:3b:6f:f1:e5:81:a6:d1:c1:47:d9:21:88:2c:0e:
24:95:44:44:eb:1b:4e:03:a8:43:1d:50:6a:5c:05:
ae:76:d0:25:07:b4:49:49:5a:03:cb:68:e1:02:a6:
45:d1:95:40:9f:20:07:ac:c9:bb:e5:ae:a6:52:6b:
76:ac:6d:a7:4b:f4:51:0b:e9:36:ca:22:30:62:a0:
a2:98:89:09:48:0e:5d:8d:b2:5b:9b:fa:4f:52:ea:
7a:ce:2e:9c:81:8e:b8:6d:46:03:12:ad:4a:f6:c6:
42:64:a6:d7:8c:dc:c7:10:c1:7e:53:28:97:e4:9f:
d3:e5:76:d2:22:f9:c9:af:3d:2d:46:54:61:df:0b:
75:e7:19:40:65:9d:7b:0a:0c:62:73:11:ea:d2:1d:
20:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:C6:5F:19:28:90:0F:AA:E6:73:A6:80:3B:8C:03:A7:C6:90:01:B4
X509v3 Authority Key Identifier:
keyid:96:EC:32:41:8F:5D:B7:D2:72:13:2F:4F:61:5E:EE:14:EB:FC:C7:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CTII/0/96EC32418F5DB7D272132F4F615EEE14EBFCC789.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/96EC32418F5DB7D272132F4F615EEE14EBFCC789.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CTII/0/96EC32418F5DB7D272132F4F615EEE14EBFCC789.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:fa:d0:e1:17:2f:d0:dd:03:aa:96:32:46:9c:07:3e:45:08:
fa:db:82:a6:d1:0b:58:7b:d4:eb:8d:90:54:77:6d:09:c9:c6:
48:6a:db:e8:30:2f:a8:77:4d:ba:2a:73:09:9a:5c:c6:cf:48:
5c:65:5d:2a:3b:a4:29:d5:94:7c:e2:86:f4:95:5b:ff:fc:16:
d3:08:1d:b3:bc:2b:ad:6d:5e:8c:ea:5a:b0:a6:8f:fa:05:8a:
42:70:d8:05:8e:c8:f0:b3:00:94:f6:de:c6:01:28:21:f0:d7:
30:d9:03:e5:c2:8e:61:da:75:8d:0d:c4:dc:49:78:08:ea:af:
62:63:35:ae:9b:a4:8f:c7:14:67:1e:5d:50:8e:4b:f1:aa:da:
19:d7:7f:7b:25:b9:9d:8e:0d:73:bb:a8:39:b1:94:a5:a4:82:
52:f6:3f:e1:cc:c1:b8:00:f4:e4:9e:e2:66:e6:55:5b:67:bb:
79:35:e1:19:9e:b8:0b:4c:68:01:12:e8:af:13:b1:09:d8:25:
d1:0d:39:8a:a5:6b:2d:cc:b4:e9:a6:57:3d:ee:57:7e:a8:29:
6b:43:be:c9:f8:3f:a9:17:8c:c9:56:82:38:b2:a2:0b:a4:d0:
c6:18:52:2c:0b:f8:4b:46:0d:14:06:76:f1:37:20:97:ed:aa:
6b:06:17:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:07:19 2026 by rpki-client