
$ rpki-client -vvf rpkica.twnic.tw/rpki/NSS/0/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.mft
File: 9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.mft (raw, json)
Hash identifier: izMnVZZMlBZ16sNyvBttpa0A5svCvu9FUCS9Kx04SzU=
Subject key identifier: 68:B3:10:68:AD:E0:5E:50:15:A8:52:47:3A:DA:10:C7:F6:E5:4F:E6
Authority key identifier: 9E:13:5A:CA:9B:3B:7E:42:3F:6A:6E:49:C9:22:E7:C9:FF:9D:04:3E
Certificate issuer: /CN=9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E
Certificate serial: 4C62D5C0F937D80FF36F97250E2F2AF76F9543B2
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/NSS/0/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.mft
Manifest number: 05
Signing time: Wed 13 May 2026 06:47:27 +0000
Manifest this update: Wed 13 May 2026 06:42:27 +0000
Manifest next update: Thu 14 May 2026 08:48:27 +0000
Files and hashes: 1: 9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.crl (hash: Zb78YRVezgai4VNVO3qn1BpsUgrkvg0mdZK+yQvT2yI=)
2: 3130332e3131382e32342e302f32322d3234203d3e20313331363236.roa (hash: 7ZYOaD4BiHJMT5uylYeAq6oBkT9jOAeVwRTnZzrlVB0=)
3: 323430333a663363303a3a2f33322d3332203d3e20313331363236.roa (hash: U+TwGMruloppvfph33ur/zLTpQNWHiQ2kQh2YCvkqAQ=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/NSS/0/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.crl
rsync://rpkica.twnic.tw/rpki/NSS/0/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 08:48:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:62:d5:c0:f9:37:d8:0f:f3:6f:97:25:0e:2f:2a:f7:6f:95:43:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E
Validity
Not Before: May 13 06:42:27 2026 GMT
Not After : May 14 08:48:27 2026 GMT
Subject: CN=68B31068ADE05E5015A852473ADA10C7F6E54FE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ee:f2:9d:5b:2e:79:3e:51:d9:aa:46:d1:60:
8a:2b:a0:5c:61:dd:40:b3:79:b5:05:93:fd:7b:14:
95:64:ae:0a:04:bd:4f:e4:e5:2b:ae:40:7d:12:e9:
60:fc:ed:1e:23:d5:58:5f:d5:87:00:db:33:fa:f2:
0d:2a:42:73:9b:05:1f:35:d7:ae:88:ed:84:41:31:
11:72:e0:7e:b4:87:2b:42:f5:ce:ab:76:32:91:33:
ee:86:e3:5c:5e:86:a1:ef:3d:8c:cc:dd:e1:f9:d1:
83:1b:f6:69:6c:70:f1:9c:fb:7b:e2:1f:70:bd:e5:
33:7d:85:8e:1b:f3:f6:b5:63:13:74:fa:0a:e1:c4:
e6:19:7a:26:40:b7:1d:d5:51:00:d1:0e:db:5e:15:
7c:96:d2:c4:60:c0:dc:1d:16:7e:21:8c:90:f2:f1:
fb:bf:16:32:83:f0:03:f5:09:65:32:9b:78:7c:b0:
c3:5e:b2:9d:96:d2:30:c9:e7:03:2c:83:2a:7f:e8:
4c:a7:b3:29:f0:25:68:47:95:ff:eb:23:8a:a1:c5:
a2:70:9f:eb:5b:fc:c9:e1:22:7a:55:41:2b:72:d5:
72:50:3e:84:49:e8:8d:e5:43:54:c9:9f:d4:4c:03:
24:59:68:66:00:46:65:5d:50:cf:5a:c9:f5:e5:29:
86:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B3:10:68:AD:E0:5E:50:15:A8:52:47:3A:DA:10:C7:F6:E5:4F:E6
X509v3 Authority Key Identifier:
keyid:9E:13:5A:CA:9B:3B:7E:42:3F:6A:6E:49:C9:22:E7:C9:FF:9D:04:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/NSS/0/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NSS/0/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:0f:cf:ae:92:7a:ee:5e:78:0a:cc:d1:0f:ae:b2:ff:09:83:
c7:20:cb:ce:99:18:d4:5c:42:3b:dc:6b:8e:3f:a0:2e:24:75:
0f:ab:45:00:69:22:40:d0:fc:3b:70:47:78:93:01:e5:a5:bf:
e7:01:29:8e:3b:4d:fc:13:d8:89:b1:90:4b:76:62:85:fe:b4:
0d:da:30:91:b6:72:22:99:12:44:6a:19:9e:d9:6a:3a:38:40:
cf:90:f0:f6:f7:71:21:9f:1d:aa:e8:2f:40:b3:0b:49:68:90:
1e:5e:a8:c1:03:8c:eb:3f:8c:54:b9:a2:e7:45:42:3f:a4:e0:
fd:2f:a1:22:31:bb:61:26:78:0e:99:0f:8e:73:3d:ce:4d:18:
b9:78:66:1b:ef:48:d4:03:ed:bc:4f:5c:4b:3f:b1:10:a7:bb:
b9:9d:dc:c2:20:15:94:fb:dc:d1:77:c9:f3:f7:dc:9e:25:2d:
6f:5e:3f:5e:66:e6:c9:e4:24:93:91:05:ed:b3:ac:ab:8b:67:
cc:6b:1d:47:7e:aa:e5:25:2b:58:6b:f9:80:2e:9b:1e:38:62:
80:22:d1:5f:1a:cc:ed:53:40:a3:13:70:36:80:7b:c6:da:9b:
6b:ac:a9:fc:79:24:cd:c0:b4:a0:96:8e:ac:5b:4b:13:4d:53:
13:b5:75:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:36:10 2026 by rpki-client