
$ rpki-client -vvvf rpkica.twnic.tw/rpki/NARL/0/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.mft
File: 9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.mft (raw, json)
Hash identifier: 2t5S+LxRzlBtlQ3UsEpxfGzyR37+uQOOFxREXmechPs=
Subject key identifier: 4A:0D:C4:FF:1D:4A:73:42:2C:69:F7:05:76:37:CF:65:51:1F:B7:AB
Authority key identifier: 9D:85:BB:8D:93:00:6D:35:86:E2:8D:0D:66:12:CA:FA:CC:8E:A6:C1
Certificate issuer: /CN=9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1
Certificate serial: 5470F3B9E7B9D50A2EEBF72BA688C517901A06AF
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/NARL/0/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.mft
Manifest number: D1
Signing time: Mon 05 Oct 2026 14:54:34 +0000
Manifest this update: Mon 05 Oct 2026 14:49:34 +0000
Manifest next update: Tue 06 Oct 2026 16:10:34 +0000
Files and hashes: 1: 3230332e3134352e3230382e302f32302d3234203d3e2037353339.roa (hash: TkgRJDcSEgq7NjOc3j8nZRABpENJrXFx+4WnsRFtzh4=)
2: 323030313a343530303a3a2f33322d3634203d3e203138313833.roa (hash: PMzGY0PfcdsGzBMtdtqJG5vua06dScgAEtiVBZ8oJwQ=)
3: 3230332e3134352e3139322e302f32312d3234203d3e203138343236.roa (hash: gNPPk70chubQg8rvqCFhjNMJr/GwTZPy8GKS/JxLGtk=)
4: 323030313a6531303a356330313a3a2f34382d3438203d3e203138343134.roa (hash: 4pWru8F46B69pO9HUzxMVehxyDkhe3ADb762Yq2SiNM=)
5: 3230332e3134352e3230302e302f32312d3234203d3e2037353339.roa (hash: jxkAJdAcKZ8RSCBcISH4Y4rq8GCUJiutzooENkFUhIc=)
6: 3130332e3132342e37322e302f32322d3234203d3e2037353339.roa (hash: /oWUtrivyYYR3xINxuZfk4J46KekrLAODBaoBbnjf6g=)
7: 9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.crl (hash: DNVjFVoaLfHZ4d6/Vxro1rVXXL4Z6HsSBt7l4mrywtI=)
8: 323030313a343530303a313030303a3a2f34302d3634203d3e2037353339.roa (hash: aCon7ihkrSQu1jOrSasXY8xC7tkNYvzzB6OK08dUqns=)
9: 323030313a6531303a3a2f33322d3634203d3e2037353339.roa (hash: YSlCSDgV7ONwXR8qLUKp0gub/ohO6L6glqkIRmUnSSI=)
10: 3231312e37332e38362e302f32342d3234203d3e203138343134.roa (hash: RcN4dOIBTFqY1G5jI8viPt6e6PNTMt4L6CpBX1XlPOU=)
11: 3231312e37392e34382e302f32302d3234203d3e2037353339.roa (hash: I5PmO4GML9TmcQR3Fe6NQsOfRlP4bey95QSbpiOHW9g=)
12: 3130332e3136302e3232302e302f32332d3234203d3e2037353339.roa (hash: C3OJeu7QwWAZKqQNtD3rtSGZubdl01iTngU6YcVIGgI=)
13: 323030313a6335383a3a2f33322d3634203d3e2037353339.roa (hash: KHGZSCyTjAFf8gkceCez8q0dI7RMF2GjBnOSsXKo2tY=)
14: 3231312e37332e36342e302f31392d3234203d3e2037353339.roa (hash: 2F7wVvWL/EB7PGkj0VVEyWuWlBMkBD3Mrsqa9Y9SivA=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/NARL/0/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.crl
rsync://rpkica.twnic.tw/rpki/NARL/0/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 06 Oct 2026 09:57:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:70:f3:b9:e7:b9:d5:0a:2e:eb:f7:2b:a6:88:c5:17:90:1a:06:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1
Validity
Not Before: Oct 5 14:49:34 2026 GMT
Not After : Oct 6 16:10:34 2026 GMT
Subject: CN=4A0DC4FF1D4A73422C69F7057637CF65511FB7AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2d:11:31:c6:1c:9d:31:b2:82:d4:b6:c5:fd:
4a:c1:8c:a6:af:69:87:13:c0:d8:c2:95:3f:d4:2e:
cb:88:a5:fc:c5:53:74:8a:66:93:a3:45:7b:0f:af:
91:40:e3:2c:24:1e:0b:fc:02:24:97:08:b0:da:0c:
6c:b0:52:c5:2a:56:12:e5:2a:a3:b3:d0:76:7c:18:
ff:eb:62:05:2c:00:06:d8:3d:d0:a8:b3:7f:04:09:
53:58:5e:05:8b:bb:e2:51:06:15:25:69:be:77:02:
5c:31:d5:85:c0:fa:a6:d3:3f:b9:ed:3e:05:b1:ae:
4d:ec:66:a9:46:49:f2:3f:db:72:1f:01:23:c4:48:
50:4d:b5:52:c3:63:3a:91:b1:76:85:0f:8c:57:ab:
8c:47:14:fa:5a:56:ab:2b:36:09:97:ba:51:0b:59:
61:5a:68:69:31:7b:2c:a1:08:02:e0:d1:81:bb:60:
f2:1f:ca:83:d9:2d:04:79:c4:f6:2b:4e:ec:76:22:
f3:05:3d:7d:06:a6:f0:80:5b:45:78:e4:42:f3:e4:
6c:5d:5b:ab:f2:a4:dc:c4:ee:7d:77:6a:0d:60:a0:
4c:b7:2e:b8:b2:84:31:e3:d6:fe:b6:2f:e1:d2:b5:
28:18:da:5a:7c:8f:ea:2b:6b:a2:f4:42:81:0b:e1:
2d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:0D:C4:FF:1D:4A:73:42:2C:69:F7:05:76:37:CF:65:51:1F:B7:AB
X509v3 Authority Key Identifier:
keyid:9D:85:BB:8D:93:00:6D:35:86:E2:8D:0D:66:12:CA:FA:CC:8E:A6:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/NARL/0/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NARL/0/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:83:f0:3a:d7:c5:63:94:76:24:84:09:bd:08:bc:30:88:09:
88:0e:93:72:4f:db:af:ea:43:1c:ea:06:30:b2:d1:bf:ae:aa:
60:6d:ab:47:e3:42:79:17:1f:62:f1:78:a1:e9:93:ea:c8:9c:
0e:d6:68:91:46:74:34:b1:52:c5:67:d4:d9:87:a6:95:30:a7:
b5:fa:9c:92:02:38:fb:e8:b2:ba:e6:2b:cd:0b:10:d0:76:aa:
4d:3f:89:e4:ea:5a:06:f6:33:65:02:1c:2e:66:07:96:47:b0:
4a:8f:59:6e:10:74:7c:e6:54:b1:20:ef:91:e3:1d:f1:84:5c:
4c:81:1d:22:28:82:ca:8a:39:6f:d2:1b:a9:bc:a6:1b:71:0c:
6e:15:13:52:75:e8:fe:5d:b2:71:02:b9:9d:eb:d9:6d:47:da:
39:ed:e5:48:07:1a:d8:96:d7:50:b5:26:6a:58:9e:bc:9e:66:
f3:4e:cd:d9:70:01:ca:51:e3:3c:fa:c7:af:77:f8:b6:05:86:
a2:2c:32:9c:60:40:5c:72:5e:27:70:0b:a0:04:d2:88:1f:8b:
69:d3:1d:ac:52:cc:1a:db:5b:ad:bb:32:bc:6b:87:b4:13:30:
4b:31:db:8f:7f:80:3a:1c:da:b6:9b:f9:2e:a3:80:00:5e:c9:
14:e5:08:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 01:27:09 2026 by rpki-client