
$ rpki-client -vvvf rpkica.twnic.tw/rpki/ETIME/0/60DF11AF99914DE6BE9FA9FC357DA624FB09A782.mft
File: 60DF11AF99914DE6BE9FA9FC357DA624FB09A782.mft (raw, json)
Hash identifier: bYfuDD18EDSkuOBQxafO4C/aSm29IKYkCOWAjuclx/A=
Subject key identifier: 74:5D:23:BB:44:DE:A8:E7:F8:A5:F1:6F:03:1C:34:F5:4E:9C:30:54
Authority key identifier: 60:DF:11:AF:99:91:4D:E6:BE:9F:A9:FC:35:7D:A6:24:FB:09:A7:82
Certificate issuer: /CN=60DF11AF99914DE6BE9FA9FC357DA624FB09A782
Certificate serial: 3768C9837DA3745AA5A508FB1B83211280DA2738
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60DF11AF99914DE6BE9FA9FC357DA624FB09A782.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/ETIME/0/60DF11AF99914DE6BE9FA9FC357DA624FB09A782.mft
Manifest number: C9
Signing time: Fri 02 Oct 2026 20:28:57 +0000
Manifest this update: Fri 02 Oct 2026 20:23:57 +0000
Manifest next update: Sat 03 Oct 2026 22:40:57 +0000
Files and hashes: 1: 60DF11AF99914DE6BE9FA9FC357DA624FB09A782.crl (hash: 8z/znwLJyytghILMbcVQieT1u1Cg5OVxToojwIT2Og4=)
2: 3130332e3232372e3232372e302f32342d3234203d3e203436353539.roa (hash: PexZ5/ttIlxxzCl8DT6JrqWQ7DlW6W8Ek+MtGNVEoCI=)
3: 3130332e3135382e3232392e302f32342d3234203d3e20323032313738.roa (hash: 36VbKnSGpgcdcCiZk8qKilZQbhaGmPl28tkFxSGT1yg=)
4: 3130332e3232372e3232362e302f32342d3234203d3e20313438393936.roa (hash: jTOUh86WcVTFs/4H0jRDiOylI1e3Cfw5Tggw5E2CXt4=)
5: 3130332e3232372e3232362e302f32332d3234203d3e20313334383233.roa (hash: VgELE2Z0+fZSqQX80y/ZKahTNsQCGSrMSvntHyntpVk=)
6: 3130332e3135382e3232382e302f32332d3234203d3e20313331313531.roa (hash: JMHd5OxzysIcZM3XC770NhHz5R1MfZGIE6Db7xvSS4g=)
7: 3130332e3135382e3232382e302f32332d3234203d3e203338303432.roa (hash: ESFw0aIs2H2WE3n5vMYD8DiRXzpjyIx6BH09Jb/uPSA=)
8: 3130332e3232372e3232362e302f32332d3234203d3e203338303432.roa (hash: ff5S7OEmM//n6GU4K964/uiKkS6MgGcigh6CQDM5Nu4=)
9: 3130332e3135382e3232382e302f32332d3234203d3e20313334383233.roa (hash: DqWqI7QKyLevd3P8uVl5JKPNPOWQfU6GCWPgrPGrGbU=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/ETIME/0/60DF11AF99914DE6BE9FA9FC357DA624FB09A782.crl
rsync://rpkica.twnic.tw/rpki/ETIME/0/60DF11AF99914DE6BE9FA9FC357DA624FB09A782.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60DF11AF99914DE6BE9FA9FC357DA624FB09A782.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 22:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:68:c9:83:7d:a3:74:5a:a5:a5:08:fb:1b:83:21:12:80:da:27:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60DF11AF99914DE6BE9FA9FC357DA624FB09A782
Validity
Not Before: Oct 2 20:23:57 2026 GMT
Not After : Oct 3 22:40:57 2026 GMT
Subject: CN=745D23BB44DEA8E7F8A5F16F031C34F54E9C3054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:84:62:bb:67:ed:c5:b5:81:3a:c2:a3:ce:77:
cf:a7:af:46:1c:04:ef:2b:ee:0f:22:81:38:b4:29:
c4:f3:28:37:92:0b:2c:ac:f3:94:44:a8:45:7d:69:
f2:24:c2:74:06:e0:3d:f9:4b:6e:c3:6c:35:3d:d1:
a6:b5:e4:e5:3d:ed:c8:6b:9e:2f:d4:6d:3c:ad:d9:
49:71:c9:a1:04:ec:b9:63:90:28:f1:25:d0:47:db:
d2:c9:4b:5b:cb:a6:57:f9:4b:db:fa:29:0b:9c:a6:
18:50:42:02:6d:00:8f:a9:65:92:e4:ee:89:58:c0:
23:0e:b6:2b:bc:bf:0b:b8:e3:a8:6c:2b:64:97:42:
6e:5e:c9:ff:e7:47:8a:94:eb:f2:0a:4f:44:41:b0:
94:19:7f:4d:8c:3d:b6:a3:44:d0:46:13:20:0e:c2:
97:d2:ca:5b:31:9f:1f:2e:b9:b3:e3:65:2d:47:cd:
de:b2:ac:fd:14:93:ac:04:0a:15:96:8c:7e:f4:21:
2f:9e:61:ea:df:cf:f8:b6:f6:d8:f1:d8:9e:53:af:
26:32:00:d9:fd:1f:b2:4d:9e:57:59:2c:a8:bc:bd:
e0:a8:42:49:5e:7c:b4:ec:2d:b5:06:ca:b1:44:35:
c0:17:3c:06:a2:fe:fe:37:be:9a:fe:70:ea:0c:96:
7c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:5D:23:BB:44:DE:A8:E7:F8:A5:F1:6F:03:1C:34:F5:4E:9C:30:54
X509v3 Authority Key Identifier:
keyid:60:DF:11:AF:99:91:4D:E6:BE:9F:A9:FC:35:7D:A6:24:FB:09:A7:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/ETIME/0/60DF11AF99914DE6BE9FA9FC357DA624FB09A782.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60DF11AF99914DE6BE9FA9FC357DA624FB09A782.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ETIME/0/60DF11AF99914DE6BE9FA9FC357DA624FB09A782.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:a2:0a:a5:e5:ec:54:a6:9f:45:86:22:c0:b8:23:8a:59:3e:
c9:93:42:cc:d7:13:8f:da:e9:99:87:6b:07:76:d2:71:7f:27:
a1:4f:d2:ad:31:32:e2:24:c0:07:da:5e:d2:fa:18:0b:89:a8:
86:2a:5b:2c:ab:ec:f0:fd:b1:b1:cc:48:d2:d6:41:34:bc:02:
49:25:48:af:9a:c6:35:74:c8:d6:63:e2:46:07:2e:a1:1f:3c:
6e:d5:03:42:b6:0b:5e:a4:5e:03:af:25:71:76:06:40:d5:17:
51:30:b2:75:d1:4f:a6:9e:b1:e8:8a:ad:b0:a7:c0:40:0b:fc:
8d:35:e7:46:53:6e:ff:25:a1:a3:15:b3:8a:d8:4d:4c:a2:2b:
7f:2a:85:c7:1d:be:bf:0b:12:86:53:13:be:af:07:e5:a6:3b:
1f:20:2a:aa:05:79:fc:66:ce:53:81:7e:66:72:7c:92:48:d6:
bb:27:96:6c:27:39:05:be:c9:66:e2:43:fa:1f:f5:b3:22:29:
bf:c0:e1:66:9c:d6:fd:d0:1c:6a:0a:8d:9e:e3:da:64:e4:62:
64:47:48:b1:2c:0c:59:52:e6:8c:f4:07:94:89:af:df:be:06:
bb:af:fb:e5:74:e1:57:6f:42:41:94:43:85:ac:c9:b4:b4:b8:
53:e7:83:9c
-----BEGIN CERTIFICATE-----
MIIE4jCCA8qgAwIBAgIUN2jJg32jdFqlpQj7G4MhEoDaJzgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjBERjExQUY5OTkxNERFNkJFOUZBOUZDMzU3REE2MjRG
QjA5QTc4MjAeFw0yNjEwMDIyMDIzNTdaFw0yNjEwMDMyMjQwNTdaMDMxMTAvBgNV
BAMTKDc0NUQyM0JCNDRERUE4RTdGOEE1RjE2RjAzMUMzNEY1NEU5QzMwNTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuhGK7Z+3FtYE6wqPOd8+nr0Yc
BO8r7g8igTi0KcTzKDeSCyys85REqEV9afIkwnQG4D35S27DbDU90aa15OU97chr
ni/UbTyt2UlxyaEE7LljkCjxJdBH29LJS1vLplf5S9v6KQucphhQQgJtAI+pZZLk
7olYwCMOtiu8vwu446hsK2SXQm5eyf/nR4qU6/IKT0RBsJQZf02MPbajRNBGEyAO
wpfSylsxnx8uubPjZS1Hzd6yrP0Uk6wEChWWjH70IS+eYerfz/i29tjx2J5TryYy
ANn9H7JNnldZLKi8veCoQklefLTsLbUGyrFENcAXPAai/v43vpr+cOoMlnwTAgMB
AAGjggHsMIIB6DAdBgNVHQ4EFgQUdF0ju0TeqOf4pfFvAxw09U6cMFQwHwYDVR0j
BBgwFoAUYN8Rr5mRTea+n6n8NX2mJPsJp4IwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud
HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRVRJTUUv
MC82MERGMTFBRjk5OTE0REU2QkU5RkE5RkMzNTdEQTYyNEZCMDlBNzgyLmNybDBv
BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS8xLzYwREYxMUFGOTk5MTRERTZCRTlGQTlGQzM1N0RB
NjI0RkIwOUE3ODIuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5
bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9FVElNRS8wLzYwREYxMUFGOTk5MTRE
RTZCRTlGQTlGQzM1N0RBNjI0RkIwOUE3ODIubWZ0MBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBlogql5exUpp9F
hiLAuCOKWT7Jk0LM1xOP2umZh2sHdtJxfyehT9KtMTLiJMAH2l7S+hgLiaiGKlss
q+zw/bGxzEjS1kE0vAJJJUivmsY1dMjWY+JGBy6hHzxu1QNCtgtepF4DryVxdgZA
1RdRMLJ10U+mnrHoiq2wp8BAC/yNNedGU27/JaGjFbOK2E1Moit/KoXHHb6/CxKG
UxO+rwflpjsfICqqBXn8Zs5TgX5mcnySSNa7J5ZsJzkFvslm4kP6H/WzIim/wOFm
nNb90BxqCo2e49pk5GJkR0ixLAxZUuaM9AeUia/fvga7r/vldOFXb0JBlEOFrMm0
tLhT54Oc
-----END CERTIFICATE-----
Generated at Sat Oct 3 13:05:14 2026 by rpki-client