
$ rpki-client -vvvf rpkica.twnic.tw/rpki/KKH/0/FB752D6E1A89A824BE6E04852D1F505F01ED185B.mft
File: FB752D6E1A89A824BE6E04852D1F505F01ED185B.mft (raw, json)
Hash identifier: gcA0YQz9HiUV0WAAAh4DvMvSbz+l8OzWrwEbPIDqwFg=
Subject key identifier: BA:00:0B:1D:C2:3C:D4:37:BB:DA:7F:53:E6:D6:0C:11:42:12:D2:52
Authority key identifier: FB:75:2D:6E:1A:89:A8:24:BE:6E:04:85:2D:1F:50:5F:01:ED:18:5B
Certificate issuer: /CN=FB752D6E1A89A824BE6E04852D1F505F01ED185B
Certificate serial: 690C06605D6AC97F1AE2B5E8E5BD38112173621A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/FB752D6E1A89A824BE6E04852D1F505F01ED185B.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/KKH/0/FB752D6E1A89A824BE6E04852D1F505F01ED185B.mft
Manifest number: C4
Signing time: Sun 04 Oct 2026 01:28:34 +0000
Manifest this update: Sun 04 Oct 2026 01:23:34 +0000
Manifest next update: Mon 05 Oct 2026 02:21:34 +0000
Files and hashes: 1: 323430313a653736303a3a2f33322d3438203d3e20313331363435.roa (hash: 8YC3WhfA/JwpTpT4EA1dLfSVRzAraHz3m65LBo1nSas=)
2: FB752D6E1A89A824BE6E04852D1F505F01ED185B.crl (hash: LMp1AipXUsm/CSsu6zkWsmd6uOFiClxYISlA3CcZdmg=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/KKH/0/FB752D6E1A89A824BE6E04852D1F505F01ED185B.crl
rsync://rpkica.twnic.tw/rpki/KKH/0/FB752D6E1A89A824BE6E04852D1F505F01ED185B.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/FB752D6E1A89A824BE6E04852D1F505F01ED185B.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 22:23:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:0c:06:60:5d:6a:c9:7f:1a:e2:b5:e8:e5:bd:38:11:21:73:62:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB752D6E1A89A824BE6E04852D1F505F01ED185B
Validity
Not Before: Oct 4 01:23:34 2026 GMT
Not After : Oct 5 02:21:34 2026 GMT
Subject: CN=BA000B1DC23CD437BBDA7F53E6D60C114212D252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ff:9b:3b:90:dc:99:d8:bc:bf:73:4b:6e:4b:
08:11:e6:c3:14:09:39:72:19:2c:be:8e:e4:a7:a5:
c4:e5:9b:cb:5d:fd:0c:64:1d:de:1d:8e:83:94:ee:
4f:7e:58:f9:d6:48:b0:e7:7f:ea:6e:3f:17:5d:b2:
75:ca:9d:78:2a:b9:c2:22:73:1f:49:ed:c8:5d:4e:
c3:67:ba:e8:83:4f:c8:04:ef:7e:25:04:65:33:4b:
b5:38:fd:0a:2c:60:2b:f1:92:08:27:26:52:88:ff:
12:8c:fb:ac:44:2c:e2:14:b6:4b:79:e4:79:4e:f4:
36:6b:c4:15:3d:42:e1:1a:7a:59:06:1d:12:66:a8:
9e:1b:47:27:c9:ac:f9:7b:22:60:ea:58:41:bc:9b:
7a:4f:95:1d:e2:2b:c3:36:4b:ff:06:84:4c:87:f5:
35:e5:74:29:59:bb:71:9b:ea:f3:ea:ef:80:60:2c:
db:90:e6:87:72:eb:8d:f8:41:e7:d0:a5:23:1f:7e:
9f:50:33:3f:af:f0:c4:fe:68:c1:39:ad:30:f1:86:
0a:22:43:ff:c9:f7:e5:9a:83:ed:ab:dc:b4:4a:84:
4b:05:ca:65:99:1e:7a:ec:94:d6:56:34:26:6c:6c:
5c:0b:fb:23:68:79:63:35:d8:09:9b:ad:bd:59:46:
f7:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:00:0B:1D:C2:3C:D4:37:BB:DA:7F:53:E6:D6:0C:11:42:12:D2:52
X509v3 Authority Key Identifier:
keyid:FB:75:2D:6E:1A:89:A8:24:BE:6E:04:85:2D:1F:50:5F:01:ED:18:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/KKH/0/FB752D6E1A89A824BE6E04852D1F505F01ED185B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/FB752D6E1A89A824BE6E04852D1F505F01ED185B.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KKH/0/FB752D6E1A89A824BE6E04852D1F505F01ED185B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:0d:13:c1:4a:15:4b:7e:a7:37:35:3b:9e:cd:b8:8b:a8:48:
e0:1f:4d:c8:06:04:c7:58:f2:87:a9:23:42:9e:b2:9a:48:b7:
46:39:74:a0:8a:1b:00:d5:87:e6:23:af:b1:72:66:ec:94:5a:
6d:86:16:e4:a3:98:69:a9:aa:98:94:15:c6:80:ae:cf:e4:75:
c1:28:ee:f3:53:fb:0e:66:07:52:e4:06:88:60:b4:48:54:64:
6b:aa:73:8d:9b:fc:d2:18:ed:4a:e4:55:2f:89:51:7e:b0:55:
8e:c0:9d:e1:0d:c9:fb:85:5d:8c:fa:f0:15:bd:58:94:ce:2c:
fd:dc:04:8d:f8:ff:a5:9a:17:79:a0:a7:77:41:32:62:d7:d1:
f1:7d:76:85:94:a6:f0:05:71:23:b4:34:9d:e4:07:08:34:e2:
0d:0d:0d:ac:6f:c1:b3:f2:36:04:cd:36:ca:b7:28:5b:ce:3a:
e5:41:56:94:96:c4:bd:b9:6a:b9:bf:3f:0f:75:b2:f8:ac:ee:
26:aa:34:db:58:73:17:19:8d:ba:7e:8e:a0:bc:c4:44:8a:6f:
95:48:9e:29:33:7d:8c:ba:bf:04:83:ce:71:bc:9e:27:da:2e:
a0:6e:65:1d:9a:70:de:89:97:0d:bf:7f:44:24:17:7a:96:ed:
09:cb:5f:32
-----BEGIN CERTIFICATE-----
MIIE3jCCA8agAwIBAgIUaQwGYF1qyX8a4rXo5b04ESFzYhowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkI3NTJENkUxQTg5QTgyNEJFNkUwNDg1MkQxRjUwNUYw
MUVEMTg1QjAeFw0yNjEwMDQwMTIzMzRaFw0yNjEwMDUwMjIxMzRaMDMxMTAvBgNV
BAMTKEJBMDAwQjFEQzIzQ0Q0MzdCQkRBN0Y1M0U2RDYwQzExNDIxMkQyNTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI/5s7kNyZ2Ly/c0tuSwgR5sMU
CTlyGSy+juSnpcTlm8td/QxkHd4djoOU7k9+WPnWSLDnf+puPxddsnXKnXgqucIi
cx9J7chdTsNnuuiDT8gE734lBGUzS7U4/QosYCvxkggnJlKI/xKM+6xELOIUtkt5
5HlO9DZrxBU9QuEaelkGHRJmqJ4bRyfJrPl7ImDqWEG8m3pPlR3iK8M2S/8GhEyH
9TXldClZu3Gb6vPq74BgLNuQ5ody6434QefQpSMffp9QMz+v8MT+aME5rTDxhgoi
Q//J9+Wag+2r3LRKhEsFymWZHnrslNZWNCZsbFwL+yNoeWM12Ambrb1ZRveLAgMB
AAGjggHoMIIB5DAdBgNVHQ4EFgQUugALHcI81De72n9T5tYMEUIS0lIwHwYDVR0j
BBgwFoAU+3UtbhqJqCS+bgSFLR9QXwHtGFswDgYDVR0PAQH/BAQDAgeAMGAGA1Ud
HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0tILzAv
RkI3NTJENkUxQTg5QTgyNEJFNkUwNDg1MkQxRjUwNUYwMUVEMTg1Qi5jcmwwbwYI
KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50
dy9ycGtpL1RXTklDQ0EvMS9GQjc1MkQ2RTFBODlBODI0QkU2RTA0ODUyRDFGNTA1
RjAxRUQxODVCLmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j
Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0tILzAvRkI3NTJENkUxQTg5QTgyNEJF
NkUwNDg1MkQxRjUwNUYwMUVEMTg1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF
BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBACwNE8FKFUt+pzc1O57N
uIuoSOAfTcgGBMdY8oepI0KesppIt0Y5dKCKGwDVh+Yjr7FyZuyUWm2GFuSjmGmp
qpiUFcaArs/kdcEo7vNT+w5mB1LkBohgtEhUZGuqc42b/NIY7UrkVS+JUX6wVY7A
neENyfuFXYz68BW9WJTOLP3cBI34/6WaF3mgp3dBMmLX0fF9doWUpvAFcSO0NJ3k
Bwg04g0NDaxvwbPyNgTNNsq3KFvOOuVBVpSWxL25arm/Pw91svis7iaqNNtYcxcZ
jbp+jqC8xESKb5VInikzfYy6vwSDznG8nifaLqBuZR2acN6Jlw2/f0QkF3qW7QnL
XzI=
-----END CERTIFICATE-----
Generated at Sun Oct 4 16:54:04 2026 by rpki-client