
$ rpki-client -vvf rpkica.twnic.tw/rpki/ETIME/0/60DF11AF99914DE6BE9FA9FC357DA624FB09A782.mft
File: 60DF11AF99914DE6BE9FA9FC357DA624FB09A782.mft (raw, json)
Hash identifier: yugI8OpcI3oq/uWeLQ5U5pCKcg+6RbejdDtpbO9w5UM=
Subject key identifier: 13:A3:9B:98:C7:53:59:9C:33:47:A4:82:7B:73:37:04:33:84:7C:48
Authority key identifier: 60:DF:11:AF:99:91:4D:E6:BE:9F:A9:FC:35:7D:A6:24:FB:09:A7:82
Certificate issuer: /CN=60DF11AF99914DE6BE9FA9FC357DA624FB09A782
Certificate serial: 6E42AF995F07503AE836F085560F54BD2DEBE0E3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60DF11AF99914DE6BE9FA9FC357DA624FB09A782.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/ETIME/0/60DF11AF99914DE6BE9FA9FC357DA624FB09A782.mft
Manifest number: 4B
Signing time: Mon 29 Jun 2026 23:07:33 +0000
Manifest this update: Mon 29 Jun 2026 23:02:33 +0000
Manifest next update: Wed 01 Jul 2026 03:02:33 +0000
Files and hashes: 1: 3130332e3232372e3232372e302f32342d3234203d3e203436353539.roa (hash: PexZ5/ttIlxxzCl8DT6JrqWQ7DlW6W8Ek+MtGNVEoCI=)
2: 3130332e3135382e3232392e302f32342d3234203d3e20323032313738.roa (hash: 36VbKnSGpgcdcCiZk8qKilZQbhaGmPl28tkFxSGT1yg=)
3: 3130332e3135382e3232382e302f32332d3234203d3e203338303432.roa (hash: ESFw0aIs2H2WE3n5vMYD8DiRXzpjyIx6BH09Jb/uPSA=)
4: 3130332e3135382e3232382e302f32332d3234203d3e20313334383233.roa (hash: DqWqI7QKyLevd3P8uVl5JKPNPOWQfU6GCWPgrPGrGbU=)
5: 3130332e3232372e3232362e302f32332d3234203d3e20313334383233.roa (hash: VgELE2Z0+fZSqQX80y/ZKahTNsQCGSrMSvntHyntpVk=)
6: 3130332e3232372e3232362e302f32342d3234203d3e20313438393936.roa (hash: jTOUh86WcVTFs/4H0jRDiOylI1e3Cfw5Tggw5E2CXt4=)
7: 60DF11AF99914DE6BE9FA9FC357DA624FB09A782.crl (hash: lcLpSzhao6Uw6elE1f41uF6G3jkzgwSh+Sw8O/0/29g=)
8: 3130332e3232372e3232362e302f32332d3234203d3e203338303432.roa (hash: ff5S7OEmM//n6GU4K964/uiKkS6MgGcigh6CQDM5Nu4=)
9: 3130332e3135382e3232382e302f32332d3234203d3e20313331313531.roa (hash: JMHd5OxzysIcZM3XC770NhHz5R1MfZGIE6Db7xvSS4g=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/ETIME/0/60DF11AF99914DE6BE9FA9FC357DA624FB09A782.crl
rsync://rpkica.twnic.tw/rpki/ETIME/0/60DF11AF99914DE6BE9FA9FC357DA624FB09A782.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60DF11AF99914DE6BE9FA9FC357DA624FB09A782.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Jul 2026 03:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:42:af:99:5f:07:50:3a:e8:36:f0:85:56:0f:54:bd:2d:eb:e0:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60DF11AF99914DE6BE9FA9FC357DA624FB09A782
Validity
Not Before: Jun 29 23:02:33 2026 GMT
Not After : Jul 1 03:02:33 2026 GMT
Subject: CN=13A39B98C753599C3347A4827B73370433847C48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:41:5d:27:3c:34:50:09:55:f9:17:b8:05:b4:
38:1d:07:9f:e9:05:89:d5:d9:1a:d5:45:4f:7a:49:
b0:d9:03:78:80:1c:73:b4:c7:25:94:70:57:af:b6:
18:b2:1c:33:1f:2c:8d:c2:89:24:92:c1:4b:39:3d:
6a:5a:6b:da:5c:23:91:4e:7a:3c:1d:6f:43:87:e3:
fb:59:bc:a7:94:6f:86:d9:53:9b:f2:c2:90:89:b3:
04:32:e0:1e:06:ff:4c:77:ee:e3:fc:91:61:e0:20:
db:34:93:12:bf:91:f7:79:97:19:ee:5e:a1:17:40:
a4:5b:72:2b:88:4a:a3:e4:be:b7:32:94:df:81:4a:
9b:01:78:cb:ef:2b:aa:ed:ad:c2:7e:4d:53:26:6f:
07:5c:fa:dc:02:79:e3:58:62:16:ec:7d:97:af:97:
72:50:04:0c:fd:20:71:d7:41:4b:52:78:c1:48:07:
51:10:0b:ee:1a:52:71:91:b5:cf:32:05:e0:0d:de:
18:b1:3f:b2:4d:30:4d:ea:67:32:0c:ff:51:65:d5:
66:e1:3c:7d:ae:cd:f0:5d:75:63:84:91:fc:3c:ec:
8d:71:58:33:bc:54:22:9f:96:bb:79:91:ee:55:1f:
a0:f9:e6:78:81:79:51:84:36:93:c3:8c:50:38:f2:
67:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:A3:9B:98:C7:53:59:9C:33:47:A4:82:7B:73:37:04:33:84:7C:48
X509v3 Authority Key Identifier:
keyid:60:DF:11:AF:99:91:4D:E6:BE:9F:A9:FC:35:7D:A6:24:FB:09:A7:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/ETIME/0/60DF11AF99914DE6BE9FA9FC357DA624FB09A782.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60DF11AF99914DE6BE9FA9FC357DA624FB09A782.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ETIME/0/60DF11AF99914DE6BE9FA9FC357DA624FB09A782.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:58:4c:08:42:75:26:cc:95:72:f1:b4:73:99:b4:84:cc:0f:
3b:11:62:be:c3:57:ad:20:3a:c3:98:79:e3:c7:44:f4:64:b7:
d6:cf:60:16:30:38:96:e7:0c:ba:95:cd:28:9a:ab:55:8f:13:
06:08:f2:29:97:93:43:a1:c6:db:5b:89:92:27:5f:d1:95:b0:
60:23:01:88:ad:da:43:29:79:2a:6d:42:40:89:82:12:d7:3c:
16:67:59:4f:8e:01:25:2a:a0:87:68:3d:7e:3a:fa:0b:35:7f:
6a:b4:78:9f:99:a1:17:64:0b:4e:13:a5:49:a5:d3:bf:23:af:
fe:5b:cf:c4:0c:08:c7:80:81:df:12:2a:6e:6e:e7:e6:5d:1c:
73:d8:ce:96:c7:e8:63:9d:38:12:0b:52:0a:21:33:25:1c:55:
14:dd:6f:b7:42:aa:f0:cc:8c:01:3e:3e:ac:37:fb:cb:46:39:
cd:8c:8a:f2:2a:b6:27:b4:1e:26:5b:11:c7:21:5d:a6:ad:06:
ad:b2:1e:e8:74:5d:ee:94:92:2b:e3:5c:5a:70:4c:a0:a8:7c:
70:39:43:5f:09:e9:ee:34:b9:49:9c:6a:5d:dd:fb:bd:87:c3:
1f:db:44:98:53:cf:0e:ca:ea:08:79:bc:27:b9:d0:09:f1:6d:
5a:2f:35:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:09:15 2026 by rpki-client