
$ rpki-client -vvf rpkica.twnic.tw/rpki/PPTECH/0/C999B8723445B4125EE5DBE81A6066BA1C38037B.mft
File: C999B8723445B4125EE5DBE81A6066BA1C38037B.mft (raw, json)
Hash identifier: G6opHkEFaZKmBoapjB/ug/bawbeG8huLrxeDI9Z45zw=
Subject key identifier: 98:87:D1:D0:B8:81:A0:48:D2:FA:0E:11:9B:BA:57:29:F3:34:2C:D7
Authority key identifier: C9:99:B8:72:34:45:B4:12:5E:E5:DB:E8:1A:60:66:BA:1C:38:03:7B
Certificate issuer: /CN=C999B8723445B4125EE5DBE81A6066BA1C38037B
Certificate serial: 0A9D594EAC8AC051A561AC7C89C5810186353286
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C999B8723445B4125EE5DBE81A6066BA1C38037B.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/PPTECH/0/C999B8723445B4125EE5DBE81A6066BA1C38037B.mft
Manifest number: 05
Signing time: Wed 13 May 2026 05:12:02 +0000
Manifest this update: Wed 13 May 2026 05:07:02 +0000
Manifest next update: Thu 14 May 2026 05:32:02 +0000
Files and hashes: 1: C999B8723445B4125EE5DBE81A6066BA1C38037B.crl (hash: K0ZPxvVlfyfyCn9+yzJ7TLaH4yaDr73hQwgPu9DGOuk=)
2: 3230332e31382e3135362e302f32332d3234203d3e20313334383233.roa (hash: no5UAwdRO4kjNGxbvYPZEaL3l8LMfiO9W7UwW9zvqIc=)
3: 3230332e31382e3135362e302f32332d3234203d3e20313532363137.roa (hash: M9aoM6gw7bRmaDPFcfOHzvO0XW597LcSAb+GMFBXN0s=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/PPTECH/0/C999B8723445B4125EE5DBE81A6066BA1C38037B.crl
rsync://rpkica.twnic.tw/rpki/PPTECH/0/C999B8723445B4125EE5DBE81A6066BA1C38037B.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C999B8723445B4125EE5DBE81A6066BA1C38037B.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 05:32:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:9d:59:4e:ac:8a:c0:51:a5:61:ac:7c:89:c5:81:01:86:35:32:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C999B8723445B4125EE5DBE81A6066BA1C38037B
Validity
Not Before: May 13 05:07:02 2026 GMT
Not After : May 14 05:32:02 2026 GMT
Subject: CN=9887D1D0B881A048D2FA0E119BBA5729F3342CD7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5c:56:0f:ef:fb:79:01:18:06:87:42:15:3f:
2b:8e:50:9b:db:c4:76:6e:95:80:bc:bb:d0:71:c9:
87:8b:d4:e4:fa:88:51:bd:29:47:2b:fd:50:31:99:
fc:76:cc:93:16:94:a9:71:2a:b3:27:2e:de:20:e1:
6d:92:d2:eb:7d:63:15:f8:8e:35:7a:d8:a5:29:ee:
11:00:9d:8d:6b:e1:df:a9:32:fa:b6:d1:69:65:82:
66:2f:dc:a6:c8:84:6b:8b:f0:43:b6:5d:e0:d6:14:
ec:ea:bb:c6:83:09:ff:04:32:30:a2:a3:bc:66:e2:
a1:51:89:69:90:d2:6f:3b:00:06:29:de:14:24:84:
67:fd:30:da:af:78:25:f6:a1:f4:68:0c:b9:d7:bb:
bc:ef:b6:c2:56:22:8a:56:f9:72:0c:5f:b0:6e:b9:
cc:a0:70:07:40:0b:c7:8c:84:03:ab:ff:17:8b:4e:
79:41:93:cc:3d:ea:20:24:73:38:6b:19:b6:18:6c:
9d:fa:8c:77:37:7f:f3:89:e2:b7:6c:74:52:e0:f7:
7e:34:cd:5c:99:f4:54:29:8d:4a:67:24:c5:bd:3a:
8f:20:71:78:51:34:75:6c:72:e2:a7:c2:09:36:56:
c8:a6:52:6d:48:2d:4d:71:5a:f1:ee:53:59:b1:57:
44:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:87:D1:D0:B8:81:A0:48:D2:FA:0E:11:9B:BA:57:29:F3:34:2C:D7
X509v3 Authority Key Identifier:
keyid:C9:99:B8:72:34:45:B4:12:5E:E5:DB:E8:1A:60:66:BA:1C:38:03:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/PPTECH/0/C999B8723445B4125EE5DBE81A6066BA1C38037B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C999B8723445B4125EE5DBE81A6066BA1C38037B.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PPTECH/0/C999B8723445B4125EE5DBE81A6066BA1C38037B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:a7:ff:05:51:49:20:9c:fe:d7:0c:f3:67:41:fa:1b:0a:af:
9c:05:59:4d:93:98:5e:3f:38:30:a8:18:68:8f:dc:6c:7f:60:
15:c8:bf:a1:1f:fe:dc:e1:4a:cc:ca:21:99:df:08:1b:38:3b:
b8:3e:ba:ae:fb:90:83:44:fb:b1:1e:9f:88:70:59:04:6b:bb:
3f:1b:e1:86:9e:3e:30:b2:3d:ae:9e:17:73:aa:ba:b8:c5:94:
ec:59:e8:29:6f:82:ef:0a:ed:72:a6:92:c6:ba:2c:a2:a3:06:
bc:0d:e8:41:09:fa:8d:46:13:d5:bc:bf:d9:93:9b:af:a0:e8:
5f:b8:e2:1a:fa:b6:c5:4f:60:e9:57:4c:04:20:ae:fb:bc:ec:
f6:32:e8:70:92:e9:89:7e:9b:99:92:c4:4d:e0:ee:ec:d3:62:
42:80:e5:a2:4b:11:dd:27:df:0d:2b:83:57:34:fb:cf:f1:4f:
02:83:d4:94:bc:1b:96:fb:3f:99:6c:3d:f0:7f:f4:98:6a:06:
be:6e:e9:d3:30:3e:34:7c:65:f3:a2:9c:d9:6d:72:fa:2a:4d:
5a:a4:07:6e:6e:ec:0e:00:89:05:26:63:b3:6a:0f:35:c7:19:
95:42:fc:72:b5:e6:40:e8:96:8d:10:9f:25:b0:17:7d:8f:b1:
3f:30:ab:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:36:33 2026 by rpki-client