
$ rpki-client -vvvf rpkica.twnic.tw/rpki/NOT_TFN_CO/1/6CFAA0AD4AE8EE0B42091909FA44C7FF31B7465B.mft
File: 6CFAA0AD4AE8EE0B42091909FA44C7FF31B7465B.mft (raw, json)
Hash identifier: bvSAOkkYWmzSZNEUzMq2juoVQ/jaL///jjJqAj+zMjI=
Subject key identifier: A5:75:7C:84:D8:F3:8C:4F:51:4D:58:D0:92:03:12:F8:4A:8C:43:C9
Authority key identifier: 6C:FA:A0:AD:4A:E8:EE:0B:42:09:19:09:FA:44:C7:FF:31:B7:46:5B
Certificate issuer: /CN=6CFAA0AD4AE8EE0B42091909FA44C7FF31B7465B
Certificate serial: 10053C288ED79B0AF5921F4D1B1D85F3FAF72E1A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/6CFAA0AD4AE8EE0B42091909FA44C7FF31B7465B.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/NOT_TFN_CO/1/6CFAA0AD4AE8EE0B42091909FA44C7FF31B7465B.mft
Manifest number: C8
Signing time: Wed 07 Oct 2026 08:37:31 +0000
Manifest this update: Wed 07 Oct 2026 08:32:31 +0000
Manifest next update: Thu 08 Oct 2026 10:53:31 +0000
Files and hashes: 1: 6CFAA0AD4AE8EE0B42091909FA44C7FF31B7465B.crl (hash: 0SvxHVULiU6UUOsf4VOEnW0ogYdjR0boxCb3m3r8E2I=)
2: 3136302e3138372e3130302e302f32332d3234203d3e20313532363138.roa (hash: ReCvGN0RaLIF0GT345qHVTZeOV9Xxm1dcLiUZvQe6oQ=)
3: 3136302e3138372e3130302e302f32332d3234203d3e20313532313739.roa (hash: 2CcgEMkqiT9SKKomSlBmDsKGF4RvxfhpXN/K83M0KAs=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/NOT_TFN_CO/1/6CFAA0AD4AE8EE0B42091909FA44C7FF31B7465B.crl
rsync://rpkica.twnic.tw/rpki/NOT_TFN_CO/1/6CFAA0AD4AE8EE0B42091909FA44C7FF31B7465B.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/6CFAA0AD4AE8EE0B42091909FA44C7FF31B7465B.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 08 Oct 2026 10:53:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:05:3c:28:8e:d7:9b:0a:f5:92:1f:4d:1b:1d:85:f3:fa:f7:2e:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6CFAA0AD4AE8EE0B42091909FA44C7FF31B7465B
Validity
Not Before: Oct 7 08:32:31 2026 GMT
Not After : Oct 8 10:53:31 2026 GMT
Subject: CN=A5757C84D8F38C4F514D58D0920312F84A8C43C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:db:74:2a:31:e0:03:8f:68:12:51:31:74:a2:
c2:92:fc:99:2b:93:b0:d8:72:33:df:63:11:c7:b5:
cf:6a:0f:d1:44:72:fe:a1:e0:af:58:1f:32:b2:8b:
d1:81:d7:f7:92:ae:ad:94:fe:00:8f:31:d2:44:dd:
55:e9:de:93:69:ac:39:96:fa:6d:7f:bf:77:41:ea:
f7:22:0b:79:fb:0f:73:93:44:56:09:25:8b:d6:02:
b5:a9:20:72:e0:cf:99:80:c8:7a:26:e4:5b:3f:71:
b9:2c:c6:53:ef:81:be:26:6f:bb:73:5e:82:d9:65:
31:12:ec:fa:4f:7b:51:75:2d:20:45:15:45:dc:90:
4c:3f:de:ed:a4:ea:27:da:4c:fd:4f:ba:b6:91:80:
48:4b:71:63:bd:27:db:e2:56:9a:f8:47:37:d1:e7:
7b:56:71:1d:94:5d:9d:00:3b:36:e8:29:0e:11:f5:
f8:56:83:41:89:97:3c:45:b2:2f:f3:d5:52:1e:02:
8a:75:6e:b9:7e:1d:a1:16:d1:ec:85:f4:17:1d:b8:
6c:b3:a4:5d:22:5b:a6:f8:9f:16:14:e7:16:31:eb:
86:34:51:38:cb:9a:41:41:33:61:1c:1d:29:0b:9e:
42:f2:35:0b:b4:ba:38:b3:fb:f8:bf:cd:60:0e:92:
3a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:75:7C:84:D8:F3:8C:4F:51:4D:58:D0:92:03:12:F8:4A:8C:43:C9
X509v3 Authority Key Identifier:
keyid:6C:FA:A0:AD:4A:E8:EE:0B:42:09:19:09:FA:44:C7:FF:31:B7:46:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/NOT_TFN_CO/1/6CFAA0AD4AE8EE0B42091909FA44C7FF31B7465B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/6CFAA0AD4AE8EE0B42091909FA44C7FF31B7465B.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NOT_TFN_CO/1/6CFAA0AD4AE8EE0B42091909FA44C7FF31B7465B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:bf:da:b3:45:fb:d1:94:3c:4d:cc:6e:12:9c:3e:39:19:d3:
ff:ed:c5:ba:fc:55:57:f3:6b:f6:ac:23:90:da:e4:c4:a8:1b:
6a:c1:e8:6c:96:2e:79:fb:ce:1c:3c:12:d9:5b:c1:e2:96:45:
e6:1c:be:28:e7:7a:47:af:82:50:e4:70:77:61:b3:e7:a3:e1:
f2:ae:d7:11:31:cc:26:5c:5a:94:a0:76:63:94:08:d5:e7:9c:
df:ec:d6:be:07:be:1a:6b:29:23:54:93:66:d5:76:0d:9c:58:
30:eb:fb:17:e4:59:41:11:8a:40:6e:1e:76:b0:2e:94:44:1f:
01:29:d2:fc:a6:e2:12:43:e7:28:81:fb:db:b8:b5:5a:37:1c:
20:b3:51:ee:49:a5:87:a1:52:ec:57:c4:0a:16:31:fc:da:91:
dd:a0:8e:29:68:f1:cf:ef:5b:de:8c:ca:98:c9:c8:65:78:ba:
24:d9:7b:96:61:e4:3c:4f:e7:1c:9f:da:20:ab:6c:2c:8d:7c:
16:cd:3c:be:d8:2f:15:01:15:58:cb:c6:c6:c0:ee:c8:56:01:
a5:e2:00:45:e5:11:8b:38:fa:43:c9:e6:0c:02:5d:fa:ad:e7:
c7:05:31:f4:b6:e9:aa:46:98:7d:5e:e1:f3:ec:04:c8:ee:a7:
1b:38:39:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 00:48:16 2026 by rpki-client