
$ rpki-client -vvf rpkica.twnic.tw/rpki/GIGABYTE/0/208C9AF2E59EAA30DB13E50969BD866B673DAB68.mft
File: 208C9AF2E59EAA30DB13E50969BD866B673DAB68.mft (raw, json)
Hash identifier: NkU8c8TseSPI5RZ94zkB0M5kihUWlMk32kZULXKtZo4=
Subject key identifier: AA:96:70:72:E7:CE:F2:BD:84:CB:CC:9A:16:42:AA:6E:EC:6C:27:B1
Authority key identifier: 20:8C:9A:F2:E5:9E:AA:30:DB:13:E5:09:69:BD:86:6B:67:3D:AB:68
Certificate issuer: /CN=208C9AF2E59EAA30DB13E50969BD866B673DAB68
Certificate serial: 51C141B81C83A90B7169FB1564B7E90967CD2723
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/208C9AF2E59EAA30DB13E50969BD866B673DAB68.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/GIGABYTE/0/208C9AF2E59EAA30DB13E50969BD866B673DAB68.mft
Manifest number: 05
Signing time: Wed 13 May 2026 05:17:06 +0000
Manifest this update: Wed 13 May 2026 05:12:06 +0000
Manifest next update: Thu 14 May 2026 05:19:06 +0000
Files and hashes: 1: 323430333a623763303a3a2f33322d3332203d3e20313331363633.roa (hash: Mt8YVfAFEz60eNMhlP46Ju7thmG6SaKiJ1M/RQIpa58=)
2: 3130332e3133302e3130302e302f32322d3234203d3e20313331363633.roa (hash: sfnsYqq0KjfihimyfpgsDMNj1nls/Ip5uSoBuI60p1I=)
3: 208C9AF2E59EAA30DB13E50969BD866B673DAB68.crl (hash: 7aADwPFgbEQgQOC5/MdwW5kO3/1eKjSZ54Z5nS32Ysk=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/GIGABYTE/0/208C9AF2E59EAA30DB13E50969BD866B673DAB68.crl
rsync://rpkica.twnic.tw/rpki/GIGABYTE/0/208C9AF2E59EAA30DB13E50969BD866B673DAB68.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/208C9AF2E59EAA30DB13E50969BD866B673DAB68.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 05:19:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:c1:41:b8:1c:83:a9:0b:71:69:fb:15:64:b7:e9:09:67:cd:27:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=208C9AF2E59EAA30DB13E50969BD866B673DAB68
Validity
Not Before: May 13 05:12:06 2026 GMT
Not After : May 14 05:19:06 2026 GMT
Subject: CN=AA967072E7CEF2BD84CBCC9A1642AA6EEC6C27B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:44:12:df:20:ab:ca:10:9d:58:3f:a7:4d:61:
26:19:e3:89:39:80:da:e7:e7:66:83:27:44:55:64:
b2:95:cc:fb:76:a8:d9:ba:a0:87:2d:de:26:1a:28:
f8:e6:44:54:b8:12:ad:13:7e:2b:7b:63:df:61:c1:
13:54:bd:ae:df:b7:08:20:f9:af:3b:53:05:30:78:
61:99:35:07:ad:50:69:29:9c:bb:b6:46:81:c9:05:
57:8b:c8:8f:62:15:47:1c:ce:96:f7:ac:f3:1e:06:
7f:bf:7c:e3:a6:1e:86:ca:48:08:63:c2:cf:fa:a3:
c7:af:29:5b:7b:22:23:84:23:47:36:f1:09:d7:24:
b8:96:00:43:7b:f3:a5:9f:1d:5d:17:2b:c2:81:c2:
42:16:83:bf:e1:4c:d5:ba:bd:2b:99:53:9e:c8:6f:
f7:8b:84:92:02:86:cd:56:17:7b:79:98:53:f5:73:
cc:de:48:58:46:03:d7:50:45:04:c0:df:68:f3:98:
17:69:43:56:85:0e:0d:c2:06:08:a6:6c:90:dc:62:
74:3d:31:bb:28:82:02:22:b5:77:d0:0c:e2:78:53:
51:1f:5f:e8:54:3e:73:7c:22:3d:5d:e9:e9:59:b3:
d9:04:b9:70:2c:a9:cf:7d:4f:fb:c9:b7:ba:03:92:
40:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:96:70:72:E7:CE:F2:BD:84:CB:CC:9A:16:42:AA:6E:EC:6C:27:B1
X509v3 Authority Key Identifier:
keyid:20:8C:9A:F2:E5:9E:AA:30:DB:13:E5:09:69:BD:86:6B:67:3D:AB:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/GIGABYTE/0/208C9AF2E59EAA30DB13E50969BD866B673DAB68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/208C9AF2E59EAA30DB13E50969BD866B673DAB68.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/GIGABYTE/0/208C9AF2E59EAA30DB13E50969BD866B673DAB68.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:8e:c5:a0:0c:88:2d:d4:cd:c0:bf:18:bf:c6:9c:4a:dc:b7:
53:d5:21:49:80:7b:55:40:97:e1:20:f9:e9:80:73:ea:26:18:
3d:c1:86:92:fe:aa:34:d9:da:d9:1c:82:62:9a:f5:61:88:2c:
59:04:c8:d9:6a:e9:88:bb:35:5b:c4:10:3d:57:39:06:78:b7:
90:9a:4b:eb:48:df:86:a4:df:46:7a:3c:3c:e1:c8:59:f9:67:
3e:b7:96:2b:cd:ee:4e:ca:3f:e0:b0:15:a7:7e:28:d8:f7:f2:
cd:e8:fa:ab:0f:7c:bf:22:6f:db:1d:5d:21:6c:13:57:c2:74:
df:9a:28:53:4e:00:ad:dc:04:e2:f1:43:00:03:9d:ab:00:0e:
86:10:1d:e6:81:02:5f:c5:1c:c2:27:95:eb:69:64:e0:14:67:
bd:72:ed:44:15:14:04:bd:a9:9f:ab:fc:e6:01:49:0b:43:1e:
3d:83:bb:7a:ef:3c:03:16:a3:98:9f:e8:a3:a6:c8:85:df:ec:
57:c1:3d:27:0d:03:83:38:ad:26:cd:65:bf:08:53:1c:09:b4:
91:1a:aa:cb:e8:09:93:12:89:06:a9:73:6d:3d:5b:f0:6f:eb:
09:a9:11:42:5c:a2:b4:18:f9:59:e0:73:f0:12:a9:43:0e:c9:
5e:ce:e9:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:34:01 2026 by rpki-client