
$ rpki-client -vvvf rpkica.twnic.tw/rpki/PNI/0/9F4621BE2CEB15DD74809D52692588598490FABF.mft
File: 9F4621BE2CEB15DD74809D52692588598490FABF.mft (raw, json)
Hash identifier: TThhQuqr5OtcetZIwmNweZWVdicC1Id/zwkLR+3V77s=
Subject key identifier: 98:6A:77:29:10:82:31:69:02:A8:01:47:96:F3:D5:90:0B:C8:56:84
Authority key identifier: 9F:46:21:BE:2C:EB:15:DD:74:80:9D:52:69:25:88:59:84:90:FA:BF
Certificate issuer: /CN=9F4621BE2CEB15DD74809D52692588598490FABF
Certificate serial: 48002781F5999991E65884D5C074F79A75E0C4AC
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9F4621BE2CEB15DD74809D52692588598490FABF.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/PNI/0/9F4621BE2CEB15DD74809D52692588598490FABF.mft
Manifest number: D7
Signing time: Sat 03 Oct 2026 13:40:12 +0000
Manifest this update: Sat 03 Oct 2026 13:35:12 +0000
Manifest next update: Sun 04 Oct 2026 16:04:12 +0000
Files and hashes: 1: 3230322e3134382e3232322e302f32332d3332203d3e20313331363432.roa (hash: QSozWjihGPRSxS1l+02abUaaKtc4iDRAVQB/oWLei3c=)
2: 3130332e32332e3130382e302f32332d3332203d3e203138313738.roa (hash: UFS/Hr7FRpvvD37ViC5Fa6JcMEvAh98z7iSjnL//iSs=)
3: 3231312e37362e3137362e302f32332d3332203d3e20313331363432.roa (hash: Neacdwz6usPvpnxdcJO7WdPsbmwrbKBYPAqd9PXlS3o=)
4: 3130332e32332e3130382e302f32332d3332203d3e20313331363432.roa (hash: /zyY4xHrRSNJrzW1F2W6rj36r/peZFfh4+++ESxgZwc=)
5: 3130332e3134382e37322e302f32332d3332203d3e20313331363432.roa (hash: OLaMU17HmXpsMBlzaeBhODO2N7nOliRaF32TUtfckJg=)
6: 9F4621BE2CEB15DD74809D52692588598490FABF.crl (hash: MG0SRyiydQa/0ukMiLtkIWGj0vSCUUuzuz7CkhvkCs4=)
7: 3130332e3133372e3234362e302f32332d3332203d3e20313331363432.roa (hash: taJQRTDQ90UxXadAvWM0GS41DZC0w4SutBUxh10g3Ls=)
8: 3130332e32332e3130382e302f32332d3332203d3e20313532363131.roa (hash: T1ghJeZqoDyoS6h4+88UDs/OcvRqZ8RuQoLYvkNX8NQ=)
9: 3130332e3135372e34322e302f32332d3332203d3e20313331363432.roa (hash: spfGeWFJdUeuEjJPQ+8MnYaXyZJ0WumSmDpey5VZQ7o=)
10: 3130332e3133372e36322e302f32332d3332203d3e20313331363432.roa (hash: Om14eoHT5IhomeKnYkvjKpVL1HxviUxm8BBB1REH3/4=)
11: 323430353a636463303a3a2f33322d313234203d3e20313331363432.roa (hash: B+rZIPiEbFPdUxH0aia2ffpZrMmBBOdtjQ5TGrFZI/g=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/PNI/0/9F4621BE2CEB15DD74809D52692588598490FABF.crl
rsync://rpkica.twnic.tw/rpki/PNI/0/9F4621BE2CEB15DD74809D52692588598490FABF.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9F4621BE2CEB15DD74809D52692588598490FABF.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 04:17:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:00:27:81:f5:99:99:91:e6:58:84:d5:c0:74:f7:9a:75:e0:c4:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9F4621BE2CEB15DD74809D52692588598490FABF
Validity
Not Before: Oct 3 13:35:12 2026 GMT
Not After : Oct 4 16:04:12 2026 GMT
Subject: CN=986A77291082316902A8014796F3D5900BC85684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0d:93:eb:91:fe:d5:f2:4d:53:7f:00:ce:87:
ad:ba:f9:ab:7c:f5:d9:17:c1:a1:d3:af:46:96:ff:
4b:32:65:43:74:71:69:88:e9:2f:ce:12:27:78:eb:
51:a1:cf:f8:ec:95:dc:7d:e9:a6:90:85:3b:b7:19:
fb:6a:b0:ff:49:30:e5:a3:36:82:f6:4f:a2:05:34:
90:29:fe:eb:dc:8b:4e:c9:10:13:2e:17:f6:f7:af:
ab:86:cc:ed:ee:64:0e:b2:15:fb:4c:02:0e:b8:9a:
34:27:50:3c:60:9e:23:6a:b4:54:4b:43:5a:05:4c:
d9:e2:21:a3:ef:a4:dd:f2:a0:84:ce:82:b6:ac:f8:
b9:41:9d:57:be:47:43:fd:a2:2f:43:39:1c:6c:c8:
b2:62:57:d7:87:99:0a:15:67:a5:99:9b:5b:85:a3:
7c:74:e7:45:ae:ad:27:cf:55:7e:bb:b0:f8:8e:3f:
92:5a:bf:2f:64:fc:6c:2c:10:08:07:0b:07:f5:b1:
a4:18:94:6b:d7:de:30:a0:c9:1d:9e:16:86:4b:99:
93:d5:89:6b:29:be:07:4f:d7:5d:93:ba:fb:cd:03:
1b:a2:b8:61:56:f3:ba:04:17:a9:2c:f2:7e:1e:ca:
ce:fc:e7:59:07:d3:3f:ed:c3:c6:b2:7c:d3:6a:77:
46:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:6A:77:29:10:82:31:69:02:A8:01:47:96:F3:D5:90:0B:C8:56:84
X509v3 Authority Key Identifier:
keyid:9F:46:21:BE:2C:EB:15:DD:74:80:9D:52:69:25:88:59:84:90:FA:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/PNI/0/9F4621BE2CEB15DD74809D52692588598490FABF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9F4621BE2CEB15DD74809D52692588598490FABF.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PNI/0/9F4621BE2CEB15DD74809D52692588598490FABF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:56:4e:b7:be:ce:64:29:0e:45:e6:0d:f4:7d:1d:ef:ba:d1:
10:fa:0a:9e:82:8d:5e:a6:42:5a:fd:c7:bb:bc:86:6b:e9:4a:
67:47:70:4c:32:0c:9a:5d:1f:9b:00:64:54:ca:5d:5f:e6:5f:
02:93:a1:49:3b:00:b4:1a:83:f6:c0:21:11:1c:66:75:ab:e5:
1b:33:86:d0:06:49:e6:13:25:38:32:a2:2c:6a:bc:25:6a:8b:
6f:e5:39:9d:77:8f:81:d9:ff:c4:a6:b8:54:1a:ef:22:5c:71:
d2:20:b4:85:ea:61:97:04:81:7f:22:f7:e1:f3:b2:3c:2b:4c:
e8:f9:c5:d9:0c:48:3d:d4:b8:d4:2b:7d:9c:08:5d:33:98:57:
7e:4e:77:7f:09:60:97:d4:be:41:27:68:79:91:e7:63:ae:66:
25:96:07:b0:6b:61:c9:70:c2:62:b0:de:ee:88:93:af:b6:25:
b8:30:c1:7b:25:e8:50:a6:39:e0:8d:c1:88:dc:d7:fa:49:3c:
63:9d:19:c1:3b:28:ba:a1:c3:ba:30:df:e0:23:d3:cb:c1:2c:
eb:95:cf:ae:b5:7e:e6:db:1e:12:5a:f8:48:d0:8f:71:ac:2a:
f1:7b:5a:e3:d7:a4:0a:23:31:89:0d:5c:99:6b:7f:ff:85:fc:
6e:78:4c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 19:33:34 2026 by rpki-client