
$ rpki-client -vvvf rpkica.twnic.tw/rpki/DAFU/0/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.mft
File: 9D0F6D536F053C3BB5233E68E0636F8A6FADA460.mft (raw, json)
Hash identifier: aBQq0x/NICtCxGHpjen3I7AA8WnARW70RquEMsss/CY=
Subject key identifier: 9C:09:ED:B7:F1:DC:18:07:20:28:8E:D0:D2:67:7D:B4:EB:BE:7D:D9
Authority key identifier: 9D:0F:6D:53:6F:05:3C:3B:B5:23:3E:68:E0:63:6F:8A:6F:AD:A4:60
Certificate issuer: /CN=9D0F6D536F053C3BB5233E68E0636F8A6FADA460
Certificate serial: 9DB3B417EFEE9334B7BFAC55518A926CA0DE7A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/DAFU/0/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.mft
Manifest number: C8
Signing time: Sun 04 Oct 2026 10:55:15 +0000
Manifest this update: Sun 04 Oct 2026 10:50:15 +0000
Manifest next update: Mon 05 Oct 2026 12:55:15 +0000
Files and hashes: 1: 3231302e312e3233342e302f32332d3332203d3e20313334383233.roa (hash: HWI5VQZaFjKYV+LScUBkUhCoJacVyotR7e1ayxfccA8=)
2: 3231302e312e3233342e302f32342d3332203d3e20313334383233.roa (hash: dFGbPuZUVl9n4NEFbEpxmNgTeCxq+xPVEQs+VbBbgw8=)
3: 3231302e312e3233342e302f32332d3332203d3e20313331363537.roa (hash: XhpQ+C1tVRKngGZ94cXlaeW9/WXKoL5qCwvg98P9HFY=)
4: 3231302e312e3233342e302f32342d3332203d3e20313331363537.roa (hash: pYVK17zAbMWT4djhepdkPZ+a4SmhzlWvmNCdXixNe1Y=)
5: 9D0F6D536F053C3BB5233E68E0636F8A6FADA460.crl (hash: bJYQ7twaoa1Iz5Ev4gHw7XLor3pk01sAAKdVLA0ptr0=)
6: 3231302e312e3233352e302f32342d3332203d3e20313334383233.roa (hash: 1dxx2UnOoxxG5IvdlSa/CJUvxkuNs3hW+sxUCu3CP4M=)
7: 3231302e312e3233352e302f32342d3332203d3e20313331363537.roa (hash: RLXRr3oaU8tfZv8c58D+ZW+I4V/4m7eEXGAKJ8n/Gpk=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/DAFU/0/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.crl
rsync://rpkica.twnic.tw/rpki/DAFU/0/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Oct 2026 12:55:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
9d:b3:b4:17:ef:ee:93:34:b7:bf:ac:55:51:8a:92:6c:a0:de:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9D0F6D536F053C3BB5233E68E0636F8A6FADA460
Validity
Not Before: Oct 4 10:50:15 2026 GMT
Not After : Oct 5 12:55:15 2026 GMT
Subject: CN=9C09EDB7F1DC180720288ED0D2677DB4EBBE7DD9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5a:99:39:d1:d3:1a:30:53:82:a3:9a:8b:cd:
db:b6:d9:a8:1a:98:c1:7b:2a:c4:e4:45:89:7b:33:
9c:f1:60:35:d1:32:8b:65:2e:ba:7c:07:ea:00:1f:
68:53:14:d7:4a:6b:8b:ee:33:2b:ca:32:9d:17:5c:
6c:56:07:7e:48:6c:e9:38:f0:6c:8e:d8:0a:a6:2b:
65:c4:28:8d:52:08:f0:d4:fc:91:47:c4:e8:2f:5d:
fc:0f:2d:27:82:b5:90:c3:d7:d6:fb:2e:1d:38:fb:
65:40:1d:c2:5e:2e:c2:8a:33:09:a4:96:da:62:e0:
61:bc:e1:8e:ed:92:c4:a4:06:26:ff:a6:97:88:c0:
9a:a4:d9:1c:bd:95:58:e8:85:c0:41:e1:97:5e:a6:
aa:f6:cf:9c:ad:bd:6e:9b:20:55:5f:09:a0:01:82:
98:a3:05:06:3c:2b:c6:70:04:6b:0b:3a:bd:57:c6:
76:11:b5:d9:01:93:f1:45:ac:8a:8d:ce:61:80:d6:
49:77:ba:ec:fe:3e:2d:7f:59:0d:dc:7c:8e:66:66:
1b:71:6e:41:84:30:17:75:9e:a2:ec:52:a3:94:4b:
20:3c:e4:b2:c8:43:b9:5d:6e:59:ee:45:b3:da:7b:
7e:75:99:2a:70:7d:4b:0f:41:db:d0:b5:fc:83:17:
f6:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:09:ED:B7:F1:DC:18:07:20:28:8E:D0:D2:67:7D:B4:EB:BE:7D:D9
X509v3 Authority Key Identifier:
keyid:9D:0F:6D:53:6F:05:3C:3B:B5:23:3E:68:E0:63:6F:8A:6F:AD:A4:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/DAFU/0/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DAFU/0/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:5a:00:97:17:ae:d7:95:31:10:75:03:89:91:3d:58:d5:c6:
c1:fe:80:bf:2a:0e:9a:a1:63:75:b8:0a:c6:b4:83:64:7d:97:
08:9e:09:a4:8c:16:1d:55:ab:ec:63:c6:dd:89:52:90:78:1e:
c1:6d:5b:96:bf:4c:24:c9:dd:80:6e:40:e3:a8:09:00:33:08:
0b:99:53:6b:cc:7c:1f:a0:49:72:86:02:35:03:36:82:3f:04:
a0:48:cb:7d:5e:d3:68:47:87:e0:19:67:ad:cd:ea:8f:d7:1d:
4a:fd:0a:48:61:b6:f2:0b:00:a4:a1:1c:d0:94:71:0f:07:8d:
5a:d3:96:45:62:1e:d7:b2:ed:bf:75:2c:47:db:cc:72:f5:c3:
1d:56:9f:60:03:ad:b9:15:64:ea:ce:56:e6:20:9f:c8:a6:22:
46:cb:de:f6:3d:00:9a:15:19:d6:ed:3a:91:61:7a:d0:d0:dc:
9e:a8:cf:62:48:dd:63:00:c5:b6:67:b8:7e:42:ed:fa:91:0d:
6d:b4:64:ae:9c:32:32:7a:ad:d9:c9:5b:e1:2b:51:cf:a8:04:
11:99:69:00:43:0f:21:24:ab:a4:3e:89:fa:13:b3:85:d2:68:
54:95:c9:14:12:c5:c9:df:1e:14:f7:9d:20:00:6c:f5:a3:3f:
75:89:fb:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:57:34 2026 by rpki-client