
$ rpki-client -vvvf rpkica.twnic.tw/rpki/ITRINET/0/0AEFBFCC5266222C8453FE5B468C367C095C8F67.mft
File: 0AEFBFCC5266222C8453FE5B468C367C095C8F67.mft (raw, json)
Hash identifier: 435m/wPTNZnfslVWA6lAnxH1rXnjAbCm1GKgrprUn3Y=
Subject key identifier: E5:65:33:9B:3E:76:21:B5:6E:FC:D1:85:24:CA:6B:4E:DD:B3:CD:5F
Authority key identifier: 0A:EF:BF:CC:52:66:22:2C:84:53:FE:5B:46:8C:36:7C:09:5C:8F:67
Certificate issuer: /CN=0AEFBFCC5266222C8453FE5B468C367C095C8F67
Certificate serial: 52E414A4E21072420848981163E1B59447179D0B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0AEFBFCC5266222C8453FE5B468C367C095C8F67.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/ITRINET/0/0AEFBFCC5266222C8453FE5B468C367C095C8F67.mft
Manifest number: C2
Signing time: Sat 03 Oct 2026 11:44:56 +0000
Manifest this update: Sat 03 Oct 2026 11:39:56 +0000
Manifest next update: Sun 04 Oct 2026 15:26:56 +0000
Files and hashes: 1: 36312e36312e3234302e302f32302d3234203d3e203138343232.roa (hash: OENg2dUxKfNMtI2u30bsu1HnbjPScDlxxKzl3KfntJg=)
2: 0AEFBFCC5266222C8453FE5B468C367C095C8F67.crl (hash: koJxRqq2zoGzM4SReC9JFTMXn+LgOomE4V7KVDa6qxQ=)
3: 323030313a6564383a3a2f33322d3536203d3e203138343232.roa (hash: Xt2JiIyAeWDi9a4QRWUHvmXeXOlqKybS5a3x4Jwl6ss=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/ITRINET/0/0AEFBFCC5266222C8453FE5B468C367C095C8F67.crl
rsync://rpkica.twnic.tw/rpki/ITRINET/0/0AEFBFCC5266222C8453FE5B468C367C095C8F67.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0AEFBFCC5266222C8453FE5B468C367C095C8F67.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 04:17:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:e4:14:a4:e2:10:72:42:08:48:98:11:63:e1:b5:94:47:17:9d:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0AEFBFCC5266222C8453FE5B468C367C095C8F67
Validity
Not Before: Oct 3 11:39:56 2026 GMT
Not After : Oct 4 15:26:56 2026 GMT
Subject: CN=E565339B3E7621B56EFCD18524CA6B4EDDB3CD5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e6:b7:95:ae:2a:22:10:7b:8b:cd:04:f1:9d:
4e:89:91:f1:b8:0c:09:79:0e:67:e6:80:eb:75:80:
41:b6:0b:57:74:16:32:17:c4:4b:97:9b:9b:1d:0a:
d1:dd:66:89:53:d2:2f:b4:0f:79:38:d2:fa:7c:b3:
cb:87:12:e7:c9:02:70:f4:e0:22:4e:79:a4:6d:72:
32:1c:01:87:d9:a5:6d:48:54:d0:53:43:c0:2d:80:
21:60:0a:33:a7:16:7c:93:ed:5e:fe:fa:9b:82:c7:
e1:e1:8b:6f:79:20:03:79:cf:cd:6a:ab:6a:6b:17:
74:5a:22:dc:6a:9e:13:0b:aa:60:fe:6b:c2:36:a4:
6a:52:2a:b7:df:98:b2:6e:65:d1:d2:fb:ea:29:37:
6d:7a:06:d6:75:b4:90:e7:d0:e0:41:5d:cf:df:88:
13:e7:fd:27:b1:6a:bf:de:1a:19:92:a1:ab:11:45:
a6:47:a5:6b:00:a2:04:06:fa:6f:b5:53:3a:d0:4f:
ac:a2:71:94:5e:6d:f0:cf:4f:2a:19:16:2c:e6:6d:
a0:80:f7:43:2b:65:b5:02:3d:ed:73:5b:cf:d9:a7:
70:6d:0a:a2:be:b7:6d:a2:95:95:ff:51:cb:cb:7a:
af:ca:cc:cf:a5:cc:09:59:6f:b1:34:b2:24:13:2c:
e4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:65:33:9B:3E:76:21:B5:6E:FC:D1:85:24:CA:6B:4E:DD:B3:CD:5F
X509v3 Authority Key Identifier:
keyid:0A:EF:BF:CC:52:66:22:2C:84:53:FE:5B:46:8C:36:7C:09:5C:8F:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/ITRINET/0/0AEFBFCC5266222C8453FE5B468C367C095C8F67.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0AEFBFCC5266222C8453FE5B468C367C095C8F67.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ITRINET/0/0AEFBFCC5266222C8453FE5B468C367C095C8F67.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:b1:93:d7:45:db:da:65:4f:5f:36:db:6f:fc:03:82:c9:c9:
b7:fd:1d:ea:be:7c:be:88:dc:8c:22:71:85:4e:e4:78:5d:ba:
18:84:ca:d0:f8:f2:4d:76:bb:81:24:cc:28:42:e4:20:d9:fe:
0c:4b:a9:51:ed:5c:95:cc:10:24:38:f2:45:0c:55:55:b5:8d:
2a:69:f8:29:19:68:76:c0:8a:cd:a4:8b:8f:fb:8d:8b:4b:22:
1c:0c:30:63:05:72:38:72:b6:92:5d:a6:cc:67:ab:75:fa:5d:
9c:48:2e:fc:d5:f9:47:63:e7:92:1e:e7:64:10:96:e4:35:5e:
70:c7:0a:bc:b8:44:6d:b0:26:a6:6e:0d:a9:f9:47:7e:05:3b:
50:4d:94:cb:af:fb:98:82:eb:3b:0f:7e:c5:d7:08:54:86:0b:
74:47:06:d6:83:aa:76:ac:9c:e1:93:05:f6:49:f2:1e:48:c6:
52:03:a4:81:4f:a4:44:58:3d:11:53:e7:29:f3:c4:2c:8a:94:
28:32:c0:6d:15:94:40:c9:99:8d:ca:40:f4:7c:39:30:e1:21:
41:d8:e0:ba:95:26:1e:c3:1a:80:15:c0:93:b7:1f:67:b4:eb:
61:e7:22:ae:e4:22:78:7d:a2:e7:c6:6d:d3:6a:af:99:0d:06:
da:e5:50:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 19:33:33 2026 by rpki-client