
$ rpki-client -vvf rpkica.twnic.tw/rpki/KKIS/1/0DC906EAC8AFA16F54C8F9EF9ECCB9A2B90B5B1B.mft
File: 0DC906EAC8AFA16F54C8F9EF9ECCB9A2B90B5B1B.mft (raw, json)
Hash identifier: 0b7O64TUdlpPAsEh+QP/wrf2u0qWQqJp9WRE0dqKXFo=
Subject key identifier: E9:32:76:69:3C:34:69:90:88:81:26:20:D5:3B:CC:78:3D:4F:E9:82
Authority key identifier: 0D:C9:06:EA:C8:AF:A1:6F:54:C8:F9:EF:9E:CC:B9:A2:B9:0B:5B:1B
Certificate issuer: /CN=0DC906EAC8AFA16F54C8F9EF9ECCB9A2B90B5B1B
Certificate serial: 573AAD18ABE0A847628682E6565383107C6B6A83
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/0DC906EAC8AFA16F54C8F9EF9ECCB9A2B90B5B1B.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/KKIS/1/0DC906EAC8AFA16F54C8F9EF9ECCB9A2B90B5B1B.mft
Manifest number: 44
Signing time: Mon 29 Jun 2026 17:32:09 +0000
Manifest this update: Mon 29 Jun 2026 17:27:09 +0000
Manifest next update: Tue 30 Jun 2026 20:22:09 +0000
Files and hashes: 1: 3136312e3234382e3133322e302f32332d3234203d3e20313331363435.roa (hash: zTyEt/E/NAPbMASFWkS4yWV2xmBH0gl0BW2wGqKTvmQ=)
2: 0DC906EAC8AFA16F54C8F9EF9ECCB9A2B90B5B1B.crl (hash: mUbRe4yPyP1laaWwMdnWDqh/vQE8LtsYiR2cuuxQ3RE=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/KKIS/1/0DC906EAC8AFA16F54C8F9EF9ECCB9A2B90B5B1B.crl
rsync://rpkica.twnic.tw/rpki/KKIS/1/0DC906EAC8AFA16F54C8F9EF9ECCB9A2B90B5B1B.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/0DC906EAC8AFA16F54C8F9EF9ECCB9A2B90B5B1B.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 20:22:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:3a:ad:18:ab:e0:a8:47:62:86:82:e6:56:53:83:10:7c:6b:6a:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0DC906EAC8AFA16F54C8F9EF9ECCB9A2B90B5B1B
Validity
Not Before: Jun 29 17:27:09 2026 GMT
Not After : Jun 30 20:22:09 2026 GMT
Subject: CN=E93276693C34699088812620D53BCC783D4FE982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2c:d8:73:03:e8:a9:2f:80:a4:e7:c0:8a:91:
96:96:a0:25:cd:c9:d1:df:a6:69:d8:a9:b4:cb:e6:
3c:23:79:06:50:03:31:69:1c:22:5b:e3:29:a0:aa:
99:d7:3a:1a:04:37:1a:6f:53:45:ff:10:8e:e4:98:
93:ac:c4:94:91:e3:d8:23:18:ed:9a:61:af:91:62:
1d:44:2b:f8:17:c4:1d:26:66:47:0b:1b:05:4a:52:
19:44:48:0e:46:d6:7b:58:f1:2b:7c:d4:44:c2:15:
a9:fc:be:05:35:64:0e:48:87:d7:ad:bd:70:2b:02:
41:d8:4a:63:31:9e:50:bc:86:1b:31:39:e3:13:1d:
cd:db:4b:64:8c:fc:df:61:68:72:6b:09:d6:0f:e3:
f1:ed:5b:de:70:44:3b:4d:bb:1d:1f:49:58:68:68:
2c:6e:d8:c5:7b:29:77:5b:2a:31:80:74:9c:b1:6b:
d2:38:d9:f8:7c:bc:35:0f:85:c9:76:8a:69:8f:45:
22:cc:a1:97:b7:3c:e9:fc:f8:78:2e:43:20:05:3a:
45:4f:cb:d9:69:ef:a1:23:76:74:1a:8e:4c:47:2e:
03:0b:d6:5e:4f:94:35:da:94:e1:eb:be:da:c0:f7:
90:32:20:54:f1:83:ce:36:43:43:24:b6:b5:62:a3:
8a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:32:76:69:3C:34:69:90:88:81:26:20:D5:3B:CC:78:3D:4F:E9:82
X509v3 Authority Key Identifier:
keyid:0D:C9:06:EA:C8:AF:A1:6F:54:C8:F9:EF:9E:CC:B9:A2:B9:0B:5B:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/KKIS/1/0DC906EAC8AFA16F54C8F9EF9ECCB9A2B90B5B1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/0DC906EAC8AFA16F54C8F9EF9ECCB9A2B90B5B1B.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KKIS/1/0DC906EAC8AFA16F54C8F9EF9ECCB9A2B90B5B1B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:9c:9c:3a:06:9f:c3:02:7a:27:55:44:39:60:7d:cf:83:dc:
bf:13:55:28:ca:42:78:34:db:d2:35:69:13:81:1f:e4:23:fa:
db:7b:91:a9:5d:66:4b:ee:b7:41:30:4b:6b:ba:39:31:a7:e0:
a8:b6:b5:73:7c:0f:86:b2:b9:0f:01:34:31:ab:dc:9c:df:9c:
4a:d5:82:38:9f:9d:18:f8:a8:cf:bc:69:15:b3:73:91:ec:72:
5d:76:d8:c3:6c:d0:1f:83:3d:0e:35:e2:40:dd:eb:1b:9c:b0:
9e:d6:1c:67:01:64:63:c9:89:a1:8f:63:93:df:ff:15:90:b8:
36:38:0f:c9:a1:37:d8:52:f4:08:7c:e9:00:b1:40:bf:d4:61:
ca:b2:97:ae:24:dd:3c:b4:61:34:8d:4a:3f:17:d5:24:b8:45:
c0:07:3a:99:17:f7:73:a9:84:68:7a:5c:05:1c:f0:8a:0e:72:
4a:39:1d:bc:71:fc:da:3d:ec:49:2f:54:5a:55:9f:d8:2a:0d:
df:b3:24:ab:b6:aa:ac:54:30:2a:66:31:f3:80:ed:5a:9b:8d:
f8:81:5a:2f:f2:73:c1:56:69:7b:a2:8f:af:67:eb:a8:fe:a5:
8a:57:cf:10:e1:51:9d:43:1e:f7:ed:07:d6:69:9e:4e:7d:f9:
20:1d:3a:ff
-----BEGIN CERTIFICATE-----
MIIE4DCCA8igAwIBAgIUVzqtGKvgqEdihoLmVlODEHxraoMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMERDOTA2RUFDOEFGQTE2RjU0QzhGOUVGOUVDQ0I5QTJC
OTBCNUIxQjAeFw0yNjA2MjkxNzI3MDlaFw0yNjA2MzAyMDIyMDlaMDMxMTAvBgNV
BAMTKEU5MzI3NjY5M0MzNDY5OTA4ODgxMjYyMEQ1M0JDQzc4M0Q0RkU5ODIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChLNhzA+ipL4Ck58CKkZaWoCXN
ydHfpmnYqbTL5jwjeQZQAzFpHCJb4ymgqpnXOhoENxpvU0X/EI7kmJOsxJSR49gj
GO2aYa+RYh1EK/gXxB0mZkcLGwVKUhlESA5G1ntY8St81ETCFan8vgU1ZA5Ih9et
vXArAkHYSmMxnlC8hhsxOeMTHc3bS2SM/N9haHJrCdYP4/HtW95wRDtNux0fSVho
aCxu2MV7KXdbKjGAdJyxa9I42fh8vDUPhcl2immPRSLMoZe3POn8+HguQyAFOkVP
y9lp76EjdnQajkxHLgML1l5PlDXalOHrvtrA95AyIFTxg842Q0MktrVio4rTAgMB
AAGjggHqMIIB5jAdBgNVHQ4EFgQU6TJ2aTw0aZCIgSYg1TvMeD1P6YIwHwYDVR0j
BBgwFoAUDckG6sivoW9UyPnvnsy5orkLWxswDgYDVR0PAQH/BAQDAgeAMGEGA1Ud
HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0tJUy8x
LzBEQzkwNkVBQzhBRkExNkY1NEM4RjlFRjlFQ0NCOUEyQjkwQjVCMUIuY3JsMG8G
CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu
dHcvcnBraS9UV05JQ0NBLzAvMERDOTA2RUFDOEFGQTE2RjU0QzhGOUVGOUVDQ0I5
QTJCOTBCNUIxQi5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu
YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0tLSVMvMS8wREM5MDZFQUM4QUZBMTZG
NTRDOEY5RUY5RUNDQjlBMkI5MEI1QjFCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG
AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb5ycOgafwwJ6J1VE
OWB9z4PcvxNVKMpCeDTb0jVpE4Ef5CP623uRqV1mS+63QTBLa7o5MafgqLa1c3wP
hrK5DwE0MavcnN+cStWCOJ+dGPioz7xpFbNzkexyXXbYw2zQH4M9DjXiQN3rG5yw
ntYcZwFkY8mJoY9jk9//FZC4NjgPyaE32FL0CHzpALFAv9RhyrKXriTdPLRhNI1K
PxfVJLhFwAc6mRf3c6mEaHpcBRzwig5ySjkdvHH82j3sSS9UWlWf2CoN37Mkq7aq
rFQwKmYx84DtWpuN+IFaL/JzwVZpe6KPr2frqP6lilfPEOFRnUMe9+0H1mmeTn35
IB06/w==
-----END CERTIFICATE-----
Generated at Tue Jun 30 13:10:02 2026 by rpki-client