
$ rpki-client -vvf rpkica.twnic.tw/rpki/PNI/0/9F4621BE2CEB15DD74809D52692588598490FABF.mft
File: 9F4621BE2CEB15DD74809D52692588598490FABF.mft (raw, json)
Hash identifier: uEdiXI+4jvWpEuEN3414GAMhYUy6qro+Or8a7UWZ5CQ=
Subject key identifier: F6:DC:0E:C8:AD:55:68:D0:8F:B8:A5:C0:03:FC:23:6D:AA:8B:18:24
Authority key identifier: 9F:46:21:BE:2C:EB:15:DD:74:80:9D:52:69:25:88:59:84:90:FA:BF
Certificate issuer: /CN=9F4621BE2CEB15DD74809D52692588598490FABF
Certificate serial: 541E6904C1F0D34602E230BDC543FA00432BBE68
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9F4621BE2CEB15DD74809D52692588598490FABF.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/PNI/0/9F4621BE2CEB15DD74809D52692588598490FABF.mft
Manifest number: 87
Signing time: Fri 14 Aug 2026 13:31:56 +0000
Manifest this update: Fri 14 Aug 2026 13:26:56 +0000
Manifest next update: Sat 15 Aug 2026 17:06:56 +0000
Files and hashes: 1: 323430353a636463303a3a2f33322d313234203d3e20313331363432.roa (hash: B+rZIPiEbFPdUxH0aia2ffpZrMmBBOdtjQ5TGrFZI/g=)
2: 3130332e3134382e37322e302f32332d3332203d3e20313331363432.roa (hash: OLaMU17HmXpsMBlzaeBhODO2N7nOliRaF32TUtfckJg=)
3: 3231312e37362e3137362e302f32332d3332203d3e20313331363432.roa (hash: Neacdwz6usPvpnxdcJO7WdPsbmwrbKBYPAqd9PXlS3o=)
4: 3130332e3135372e34322e302f32332d3332203d3e20323033353438.roa (hash: nYR+Ml8lrCk7Dl21maH1wtxMxSe7KjzyLwH7FozLC7o=)
5: 9F4621BE2CEB15DD74809D52692588598490FABF.crl (hash: h31Gp57NohEjqN0/onCv8hd1PODzvQ5GMrjnmgh18Cg=)
6: 3130332e3133372e3234362e302f32332d3332203d3e20313331363432.roa (hash: taJQRTDQ90UxXadAvWM0GS41DZC0w4SutBUxh10g3Ls=)
7: 3230322e3134382e3232322e302f32332d3332203d3e20313331363432.roa (hash: QSozWjihGPRSxS1l+02abUaaKtc4iDRAVQB/oWLei3c=)
8: 3130332e3133372e36322e302f32332d3332203d3e20313331363432.roa (hash: Om14eoHT5IhomeKnYkvjKpVL1HxviUxm8BBB1REH3/4=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/PNI/0/9F4621BE2CEB15DD74809D52692588598490FABF.crl
rsync://rpkica.twnic.tw/rpki/PNI/0/9F4621BE2CEB15DD74809D52692588598490FABF.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9F4621BE2CEB15DD74809D52692588598490FABF.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 15 Aug 2026 17:06:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:1e:69:04:c1:f0:d3:46:02:e2:30:bd:c5:43:fa:00:43:2b:be:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9F4621BE2CEB15DD74809D52692588598490FABF
Validity
Not Before: Aug 14 13:26:56 2026 GMT
Not After : Aug 15 17:06:56 2026 GMT
Subject: CN=F6DC0EC8AD5568D08FB8A5C003FC236DAA8B1824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:df:98:3b:f3:a1:90:4f:49:47:5b:bf:46:84:
b9:8d:75:41:96:ff:20:93:4b:32:10:32:d9:bc:25:
47:09:7b:a7:32:e3:81:90:58:bc:4e:03:74:4c:41:
c3:1e:da:93:15:d9:ed:5f:31:24:23:6a:32:18:5a:
e3:7b:b2:38:be:92:18:71:74:2c:f4:b5:d4:81:08:
83:d9:c3:88:2c:ce:6a:04:1c:82:53:72:da:ca:40:
3d:54:74:f9:08:54:8e:fd:ff:3a:93:1e:96:db:b8:
a4:30:c6:5f:c7:22:7b:ec:c3:64:80:ca:ae:26:e9:
02:f9:bd:24:ef:51:ae:d5:83:ac:57:73:bc:5c:79:
5d:0e:81:2d:e2:e1:87:b8:14:50:be:6d:39:9b:28:
df:ef:fa:bf:2a:36:9d:a0:15:85:2f:bf:bd:35:b1:
21:75:11:6d:67:13:7b:d1:40:32:75:24:4f:7d:0c:
44:ce:b1:1d:94:b0:81:ee:39:41:5c:0b:f6:8e:c9:
13:f7:dd:e3:9d:49:32:7e:d0:4e:ef:9d:84:28:d4:
4f:ab:dc:d5:c3:68:cf:50:b0:e9:9d:91:fc:19:86:
7a:4c:14:43:62:1a:7d:c3:e0:2e:42:cf:1b:17:7d:
43:cd:cf:f6:c6:28:39:20:7d:a1:94:a6:fb:64:6e:
ef:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:DC:0E:C8:AD:55:68:D0:8F:B8:A5:C0:03:FC:23:6D:AA:8B:18:24
X509v3 Authority Key Identifier:
keyid:9F:46:21:BE:2C:EB:15:DD:74:80:9D:52:69:25:88:59:84:90:FA:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/PNI/0/9F4621BE2CEB15DD74809D52692588598490FABF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9F4621BE2CEB15DD74809D52692588598490FABF.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PNI/0/9F4621BE2CEB15DD74809D52692588598490FABF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:aa:f2:b3:59:54:dd:52:5b:f5:11:5d:e7:ed:25:07:72:e1:
fb:ea:8e:6c:9e:f9:6b:08:b0:ca:5c:b7:f8:05:d8:ff:43:60:
d3:1b:42:81:1e:32:8f:67:b8:aa:a5:64:c5:87:40:fc:41:e9:
2f:61:9a:4c:fe:a6:79:56:1e:7b:96:c3:2b:fa:9e:4a:21:ec:
5d:f6:d6:ba:b0:97:b0:83:6e:90:0e:c5:93:52:47:6f:5b:f6:
0e:76:f5:41:77:12:d0:c0:c8:c6:bd:79:32:ad:cb:8b:85:7d:
9b:e7:14:ca:dd:1b:9a:a0:1c:9a:fd:90:e9:81:25:8e:21:51:
f5:d7:d7:e2:90:1c:8c:1c:48:1e:80:1e:60:3a:5f:2e:8f:63:
77:5a:bf:a8:aa:fe:3c:56:f2:4f:cc:18:8f:f9:c9:39:88:65:
26:bb:16:2c:60:72:fc:02:60:16:16:77:73:b5:ec:5c:ee:30:
9b:b6:b9:51:19:46:98:b5:e7:78:d4:71:15:e4:96:70:58:43:
14:29:85:40:f8:76:4e:c2:4d:9f:14:fb:06:74:95:99:61:95:
a4:5f:f6:7f:7d:39:a3:7f:fc:2e:63:54:f0:6e:b7:df:3a:31:
b5:30:e3:2e:dc:bc:cf:0e:a3:f1:81:cb:fb:c5:39:ce:57:8e:
b3:6c:3d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:21:39 2026 by rpki-client