
$ rpki-client -vvf rpkica.twnic.tw/rpki/DAFU/0/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.mft
File: 9D0F6D536F053C3BB5233E68E0636F8A6FADA460.mft (raw, json)
Hash identifier: PUkaoIWfaOBrfXXRl+KK19RLvPFUx/nEHmXPub2zXHE=
Subject key identifier: 0E:5A:30:01:93:50:A4:A3:33:9B:25:68:3B:82:B3:90:0B:C1:52:28
Authority key identifier: 9D:0F:6D:53:6F:05:3C:3B:B5:23:3E:68:E0:63:6F:8A:6F:AD:A4:60
Certificate issuer: /CN=9D0F6D536F053C3BB5233E68E0636F8A6FADA460
Certificate serial: 2AC73671416A2862210CD279049875125AB23F69
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/DAFU/0/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.mft
Manifest number: 85
Signing time: Sat 15 Aug 2026 02:04:03 +0000
Manifest this update: Sat 15 Aug 2026 01:59:03 +0000
Manifest next update: Sun 16 Aug 2026 05:30:03 +0000
Files and hashes: 1: 3231302e312e3233342e302f32332d3332203d3e20313331363537.roa (hash: XhpQ+C1tVRKngGZ94cXlaeW9/WXKoL5qCwvg98P9HFY=)
2: 9D0F6D536F053C3BB5233E68E0636F8A6FADA460.crl (hash: THaSGJy3UC+5vdpDA4/WpxRG7M9iN75gQKRDbqNqOEI=)
3: 3231302e312e3233352e302f32342d3332203d3e20313334383233.roa (hash: 1dxx2UnOoxxG5IvdlSa/CJUvxkuNs3hW+sxUCu3CP4M=)
4: 3231302e312e3233352e302f32342d3332203d3e20313331363537.roa (hash: RLXRr3oaU8tfZv8c58D+ZW+I4V/4m7eEXGAKJ8n/Gpk=)
5: 3231302e312e3233342e302f32342d3332203d3e20313334383233.roa (hash: dFGbPuZUVl9n4NEFbEpxmNgTeCxq+xPVEQs+VbBbgw8=)
6: 3231302e312e3233342e302f32332d3332203d3e20313334383233.roa (hash: HWI5VQZaFjKYV+LScUBkUhCoJacVyotR7e1ayxfccA8=)
7: 3231302e312e3233342e302f32342d3332203d3e20313331363537.roa (hash: pYVK17zAbMWT4djhepdkPZ+a4SmhzlWvmNCdXixNe1Y=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/DAFU/0/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.crl
rsync://rpkica.twnic.tw/rpki/DAFU/0/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 16 Aug 2026 03:24:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:c7:36:71:41:6a:28:62:21:0c:d2:79:04:98:75:12:5a:b2:3f:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9D0F6D536F053C3BB5233E68E0636F8A6FADA460
Validity
Not Before: Aug 15 01:59:03 2026 GMT
Not After : Aug 16 05:30:03 2026 GMT
Subject: CN=0E5A30019350A4A3339B25683B82B3900BC15228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a1:c4:21:22:e1:23:b1:5e:7f:be:8d:35:87:
9c:aa:37:54:f9:ca:94:02:b3:2c:c0:c6:3d:55:6b:
cd:93:68:a1:10:e1:4a:30:fb:7d:39:35:59:9a:ec:
af:a1:7a:29:3d:5b:d1:0b:d9:95:3f:f3:fa:df:2e:
6d:df:c1:11:b5:41:e3:8e:ae:c5:58:59:c3:da:6f:
50:17:c6:fc:c1:e8:d1:42:81:fd:f3:a4:49:82:51:
76:4b:97:f3:38:bf:59:d4:7f:8d:40:6b:12:f3:56:
2f:70:6b:dc:1c:d5:2f:78:6c:43:1d:b9:28:d3:c6:
b1:d9:01:1d:a4:0b:f9:d4:df:ec:82:9f:54:d0:83:
aa:e0:4b:16:b6:ad:4c:85:e0:3e:5a:39:bf:b9:46:
3b:34:bf:b8:cb:38:d3:74:19:a0:8f:36:c3:10:d6:
86:02:79:81:fd:c0:7e:11:8e:0d:fb:28:d6:82:d3:
bf:3c:15:a4:b2:cc:62:f9:c0:67:19:79:6b:df:fb:
0c:29:08:9c:db:e5:59:4e:95:1c:c8:3c:b0:c1:1f:
59:5c:90:57:7e:80:e5:6a:bd:87:f6:17:8f:e2:7a:
3f:d2:35:6b:ec:73:a9:f5:fd:b5:73:b3:6c:3d:0e:
7b:a0:fa:b6:7a:44:16:fe:e8:85:5c:1c:71:06:ed:
bd:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:5A:30:01:93:50:A4:A3:33:9B:25:68:3B:82:B3:90:0B:C1:52:28
X509v3 Authority Key Identifier:
keyid:9D:0F:6D:53:6F:05:3C:3B:B5:23:3E:68:E0:63:6F:8A:6F:AD:A4:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/DAFU/0/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DAFU/0/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:88:95:5a:3a:bd:ea:5c:61:da:91:5c:4f:3c:dd:a0:d9:78:
f8:37:66:3e:45:72:b1:14:8a:9c:59:56:b3:fb:5d:0f:1f:5a:
60:fa:f7:0b:e8:f5:0f:88:3d:1d:87:21:a2:3f:1c:ec:7c:16:
eb:87:4c:af:e8:1e:7f:e8:ad:db:4b:9e:da:70:b2:a8:98:f0:
57:8b:63:20:ff:4b:f6:47:eb:47:31:e0:f8:d8:c2:78:35:a1:
4a:a1:e2:91:3e:29:15:8f:be:3f:dc:3a:f8:49:77:fe:c1:2f:
b9:b7:aa:d1:2b:23:41:db:90:ac:8b:f8:f3:61:6e:6c:5c:54:
20:3d:fd:b9:55:ef:2f:e2:f3:19:75:f5:7e:71:20:e2:9e:f4:
7d:9e:0b:74:13:94:04:21:ce:7d:34:81:3c:d9:5d:eb:0e:9c:
db:b0:48:03:2c:ae:86:2f:b5:66:a2:df:8b:60:da:f4:24:fd:
90:d6:09:81:0d:6b:2d:84:91:a4:71:fb:b9:3c:96:c6:55:cb:
a6:04:32:75:f3:cb:d5:4f:f9:34:f1:62:91:5f:e9:df:64:c4:
14:57:d0:f2:e6:2d:68:1f:58:fc:3e:34:a7:f6:a4:13:11:a8:
70:3c:6d:72:5d:06:2d:cf:89:69:07:f7:d2:6f:1d:16:86:40:
ae:ec:70:fd
-----BEGIN CERTIFICATE-----
MIIE4DCCA8igAwIBAgIUKsc2cUFqKGIhDNJ5BJh1ElqyP2kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUQwRjZENTM2RjA1M0MzQkI1MjMzRTY4RTA2MzZGOEE2
RkFEQTQ2MDAeFw0yNjA4MTUwMTU5MDNaFw0yNjA4MTYwNTMwMDNaMDMxMTAvBgNV
BAMTKDBFNUEzMDAxOTM1MEE0QTMzMzlCMjU2ODNCODJCMzkwMEJDMTUyMjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6ocQhIuEjsV5/vo01h5yqN1T5
ypQCsyzAxj1Va82TaKEQ4Uow+305NVma7K+heik9W9EL2ZU/8/rfLm3fwRG1QeOO
rsVYWcPab1AXxvzB6NFCgf3zpEmCUXZLl/M4v1nUf41AaxLzVi9wa9wc1S94bEMd
uSjTxrHZAR2kC/nU3+yCn1TQg6rgSxa2rUyF4D5aOb+5Rjs0v7jLONN0GaCPNsMQ
1oYCeYH9wH4Rjg37KNaC0788FaSyzGL5wGcZeWvf+wwpCJzb5VlOlRzIPLDBH1lc
kFd+gOVqvYf2F4/iej/SNWvsc6n1/bVzs2w9Dnug+rZ6RBb+6IVcHHEG7b0nAgMB
AAGjggHqMIIB5jAdBgNVHQ4EFgQUDlowAZNQpKMzmyVoO4KzkAvBUigwHwYDVR0j
BBgwFoAUnQ9tU28FPDu1Iz5o4GNvim+tpGAwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud
HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvREFGVS8w
LzlEMEY2RDUzNkYwNTNDM0JCNTIzM0U2OEUwNjM2RjhBNkZBREE0NjAuY3JsMG8G
CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu
dHcvcnBraS9UV05JQ0NBLzEvOUQwRjZENTM2RjA1M0MzQkI1MjMzRTY4RTA2MzZG
OEE2RkFEQTQ2MC5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu
YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0RBRlUvMC85RDBGNkQ1MzZGMDUzQzNC
QjUyMzNFNjhFMDYzNkY4QTZGQURBNDYwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG
AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADoiVWjq96lxh2pFc
TzzdoNl4+DdmPkVysRSKnFlWs/tdDx9aYPr3C+j1D4g9HYchoj8c7HwW64dMr+ge
f+it20ue2nCyqJjwV4tjIP9L9kfrRzHg+NjCeDWhSqHikT4pFY++P9w6+El3/sEv
ubeq0SsjQduQrIv482FubFxUID39uVXvL+LzGXX1fnEg4p70fZ4LdBOUBCHOfTSB
PNld6w6c27BIAyyuhi+1ZqLfi2Da9CT9kNYJgQ1rLYSRpHH7uTyWxlXLpgQydfPL
1U/5NPFikV/p32TEFFfQ8uYtaB9Y/D40p/akExGocDxtcl0GLc+JaQf30m8dFoZA
ruxw/Q==
-----END CERTIFICATE-----
Generated at Sat Aug 15 05:21:18 2026 by rpki-client