
$ rpki-client -vvf rpkica.twnic.tw/rpki/MCK/0/9C6C404D96BB112984EB14C46BE0526514B6BFBF.mft
File: 9C6C404D96BB112984EB14C46BE0526514B6BFBF.mft (raw, json)
Hash identifier: okSdv7E/mL3OKk9YKR+ntkPSuy/doLuxzlt+mLkFx+U=
Subject key identifier: 48:01:A3:44:BB:10:87:CE:65:54:DB:FC:CD:D8:B2:42:18:5D:B3:F4
Authority key identifier: 9C:6C:40:4D:96:BB:11:29:84:EB:14:C4:6B:E0:52:65:14:B6:BF:BF
Certificate issuer: /CN=9C6C404D96BB112984EB14C46BE0526514B6BFBF
Certificate serial: 4E4081935CAAE244098E15A542C3278539292063
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9C6C404D96BB112984EB14C46BE0526514B6BFBF.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/MCK/0/9C6C404D96BB112984EB14C46BE0526514B6BFBF.mft
Manifest number: 44
Signing time: Tue 30 Jun 2026 15:34:12 +0000
Manifest this update: Tue 30 Jun 2026 15:29:12 +0000
Manifest next update: Wed 01 Jul 2026 17:13:12 +0000
Files and hashes: 1: 3130332e3134382e36382e302f32332d3234203d3e20313331363138.roa (hash: BACFnkZaw8ZPpbq3IkwDxSxDzFcQk+Vm9o3aE8Vt++E=)
2: 9C6C404D96BB112984EB14C46BE0526514B6BFBF.crl (hash: MbGLXA6q1CPm9SvM68NAXw4q0akbq97pFNLMMZAzyDw=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/MCK/0/9C6C404D96BB112984EB14C46BE0526514B6BFBF.crl
rsync://rpkica.twnic.tw/rpki/MCK/0/9C6C404D96BB112984EB14C46BE0526514B6BFBF.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9C6C404D96BB112984EB14C46BE0526514B6BFBF.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Jul 2026 14:08:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:40:81:93:5c:aa:e2:44:09:8e:15:a5:42:c3:27:85:39:29:20:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9C6C404D96BB112984EB14C46BE0526514B6BFBF
Validity
Not Before: Jun 30 15:29:12 2026 GMT
Not After : Jul 1 17:13:12 2026 GMT
Subject: CN=4801A344BB1087CE6554DBFCCDD8B242185DB3F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7f:d2:4a:69:96:bc:ec:59:ca:bf:74:b1:c3:
33:e0:96:92:44:d6:d9:01:de:ab:b7:b0:03:36:26:
f2:a1:04:59:ad:b0:88:1b:2e:ef:b5:01:f9:0a:df:
64:a3:54:1d:1f:fd:68:11:6a:09:5d:1e:2b:ef:43:
18:75:da:23:67:5e:cb:88:88:cd:0d:91:87:12:15:
72:41:a4:67:16:c6:4f:8c:f0:b5:88:e3:8c:c7:a6:
d4:2d:73:e3:d2:51:b9:84:4c:d2:21:a7:e5:80:8f:
37:c5:c0:95:66:6e:c7:ce:16:90:18:6c:ec:43:73:
07:fc:a2:4c:5a:9e:14:1e:bf:69:e7:03:a9:5c:4e:
15:80:49:ae:ca:c0:43:4a:dd:89:c0:5a:a3:a2:de:
7c:ce:0c:f1:89:8a:8f:ce:e1:53:6f:7b:ed:6d:d8:
60:e2:c4:28:95:35:72:87:ef:28:9a:71:48:04:2f:
36:99:70:28:c9:6c:aa:ab:fc:9e:ce:60:49:48:87:
5c:bf:d7:f0:91:40:54:54:14:a9:2c:b8:97:fb:35:
09:3f:b0:9d:86:72:ba:fe:08:a5:50:99:d1:a4:7a:
27:8d:b9:27:60:2a:9a:2a:0b:d6:ba:d8:8a:c4:a8:
11:b4:4c:0e:05:3a:86:f5:38:3c:23:4d:7f:06:e4:
52:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:01:A3:44:BB:10:87:CE:65:54:DB:FC:CD:D8:B2:42:18:5D:B3:F4
X509v3 Authority Key Identifier:
keyid:9C:6C:40:4D:96:BB:11:29:84:EB:14:C4:6B:E0:52:65:14:B6:BF:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/MCK/0/9C6C404D96BB112984EB14C46BE0526514B6BFBF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9C6C404D96BB112984EB14C46BE0526514B6BFBF.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MCK/0/9C6C404D96BB112984EB14C46BE0526514B6BFBF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:80:cd:39:da:0d:24:e8:e8:b3:39:4e:4a:a5:5b:70:0a:2a:
29:fe:f2:93:d1:da:27:8d:d4:6f:c0:37:cd:08:59:81:04:e5:
0f:9b:d0:5a:c4:bb:af:16:0a:4b:9a:79:92:3f:17:d6:9b:10:
aa:4c:0f:3e:9a:5b:b6:12:9a:4f:0c:26:d7:f2:9e:fe:a1:fe:
7d:8c:29:92:73:af:29:ae:e8:e1:b2:e1:15:a5:a2:ea:72:98:
35:80:97:0d:a5:c9:5b:24:ef:3c:e4:83:88:4b:10:46:ec:c6:
9b:e7:bb:f4:bf:fa:85:4c:12:9c:a5:50:54:18:7a:0e:8c:5e:
78:28:71:01:be:6d:c2:ca:e1:b9:bd:df:5e:de:65:14:e1:a8:
00:cc:74:6b:4a:78:19:bc:ef:2c:d4:ab:15:63:a9:10:70:8d:
ae:19:7f:2d:57:6c:d3:62:fe:9b:11:6f:dd:8b:81:3d:18:18:
43:50:e8:10:ef:17:b8:43:fc:7f:5d:86:a6:e9:fd:2c:bd:b6:
c9:91:46:df:52:d2:d1:a5:10:3c:00:00:2f:66:a3:db:76:0f:
d5:18:7d:3e:71:45:48:29:1c:10:73:8b:3f:28:04:3a:d8:97:
33:90:f7:49:3f:32:76:33:7d:df:e9:eb:96:eb:10:a8:29:f0:
9d:c1:49:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:11:00 2026 by rpki-client