
$ rpki-client -vvf rpkica.twnic.tw/rpki/TANET/0/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.mft
File: 6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.mft (raw, json)
Hash identifier: hR/CPyiC5zOjJnUUzd3TLDIAJSZuOk/Bs4niv7aRBMU=
Subject key identifier: 0C:7C:86:2D:53:5A:5F:06:49:16:EF:E6:E2:3B:E9:D2:AD:A8:7E:02
Authority key identifier: 6E:9C:32:26:68:2A:EF:A8:D6:7B:8A:C6:08:CC:CF:C8:A0:96:10:CD
Certificate issuer: /CN=6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD
Certificate serial: 12149AE27CBCB92E4AFDD4AE681AA72F530322B4
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TANET/0/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.mft
Manifest number: 020E
Signing time: Tue 30 Jun 2026 06:48:17 +0000
Manifest this update: Tue 30 Jun 2026 06:43:17 +0000
Manifest next update: Wed 01 Jul 2026 08:45:17 +0000
Files and hashes: 1: AS17716.roa (hash: QJfn98q9GCpZwDozPEb7vzDE8pPTD6V7DkN76r6Bpos=)
2: 6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.crl (hash: 65cLeT2Qw0OlgjnINst3FitlU88wILQTQb/aXa1ZUvI=)
3: AS17713.roa (hash: 6THe+d1M9IBbktnCoPGIW1RcAbmuio4tr67tKLdsscQ=)
4: AS17711.roa (hash: HXnFQ1ogZR2j1qGYqwrCTC9+3osb0O4DBAASmnaoNYs=)
5: AS17712.roa (hash: Wg4H8Fi4n92WsVNQZPoPRYKtdvnX3aJz4nbFyuqqLUg=)
6: AS1569.roa (hash: jY4pATt/jGgMLbu/QefPNwktyUJg9b+KBtuPdVhUmTk=)
7: AS18177.roa (hash: fxlV5+GVr2otH1tYq4wDBYNDHzH9J2LM+ShVYw3RZos=)
8: AS18047.roa (hash: J4WakVwJWfyd/jtRhBY0Sn4bIPMH3T7PrME5BAycAxE=)
9: AS131150.roa (hash: Lmloz8LiIV8pjh8sGmz95zyicNGp9fS97nBLBQY/HWc=)
10: AS9916.roa (hash: bJ1r+tyqzjibU4qpONziU5YtkwR5ZUj1zImuxSjlO2M=)
11: AS1659.roa (hash: M7vlJ+pOYnQc6ZvkQ07/yOT39egw6Apz1FV4LHusFGM=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TANET/0/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.crl
rsync://rpkica.twnic.tw/rpki/TANET/0/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Jul 2026 08:45:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:14:9a:e2:7c:bc:b9:2e:4a:fd:d4:ae:68:1a:a7:2f:53:03:22:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD
Validity
Not Before: Jun 30 06:43:17 2026 GMT
Not After : Jul 1 08:45:17 2026 GMT
Subject: CN=0C7C862D535A5F064916EFE6E23BE9D2ADA87E02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c1:01:99:06:7b:2e:cf:6e:c1:39:57:a0:3a:
09:60:22:d3:cf:95:97:74:5b:84:b9:ed:c1:b3:92:
fd:f3:21:fa:c5:2d:26:6d:5f:21:38:ba:c2:04:d7:
f3:ff:c9:9f:1c:8e:0c:83:d0:d4:b1:42:56:12:d8:
c7:f9:ec:a2:e9:6b:d8:73:69:09:c1:07:25:6a:e1:
a8:f1:23:d4:b9:16:0e:11:a9:5a:b4:a4:7d:05:3d:
b5:d1:89:fc:eb:de:5a:77:4b:f4:09:4f:7b:d0:80:
aa:31:0c:47:de:17:20:24:82:6d:03:d5:06:d7:db:
44:0f:ef:5e:ea:a4:5f:e3:4f:95:d0:6d:99:ac:02:
1f:94:87:8c:a1:e5:94:51:b9:2c:e2:d5:1c:3e:45:
27:6e:1a:1a:98:9a:e1:b9:5c:9c:de:6a:12:45:74:
2c:42:a8:12:fa:8d:24:1d:8f:70:bb:8c:95:08:e8:
24:4b:76:74:72:ce:9d:37:a3:5c:5c:8f:df:76:45:
b9:fa:9d:7f:45:b1:d0:77:97:5f:de:73:c9:a8:bf:
80:6c:35:af:89:7f:86:a4:f2:d6:98:e1:6f:08:33:
89:f3:0c:2f:79:c3:d1:30:0d:85:fe:10:64:dd:6e:
44:2d:f1:42:8d:64:06:af:e2:c0:4e:f6:39:2b:c8:
66:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:7C:86:2D:53:5A:5F:06:49:16:EF:E6:E2:3B:E9:D2:AD:A8:7E:02
X509v3 Authority Key Identifier:
keyid:6E:9C:32:26:68:2A:EF:A8:D6:7B:8A:C6:08:CC:CF:C8:A0:96:10:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TANET/0/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TANET/0/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:80:ad:a3:a1:cf:30:4d:e3:cf:2c:e8:28:13:15:ab:d5:5b:
34:b0:b6:06:e8:d9:2b:13:78:8c:8c:60:d2:eb:1f:ef:5e:ed:
49:c0:38:51:e5:a4:8c:96:dc:53:14:f3:e3:5b:c0:74:5a:31:
b0:ff:e9:e8:13:a1:d9:90:5d:11:06:76:2b:05:3f:15:14:67:
70:36:2b:7d:93:ff:c5:56:3f:bf:ae:7d:89:14:f5:0b:92:aa:
db:22:f1:38:16:ce:18:97:c4:33:5a:3a:19:d0:25:44:5d:58:
85:4b:d9:e9:a4:f6:e7:46:fa:17:5b:07:f5:45:13:c5:92:19:
14:df:aa:33:80:e7:3b:cb:d6:f9:1a:35:2e:ec:62:8b:b7:fc:
e0:2c:28:3f:2f:45:e7:d9:80:f1:cb:c5:e2:ea:66:47:9c:20:
61:32:80:05:56:9f:dc:43:cb:51:75:4c:4d:68:03:50:b7:d8:
a3:88:57:8f:45:72:12:0c:13:e7:9e:0a:10:5f:e2:47:d9:41:
cf:ed:57:0f:1b:d9:3b:38:11:61:81:92:05:b0:d6:24:a2:3f:
d3:37:7e:8e:c2:7c:fb:a4:d1:5b:ec:ab:ab:8e:50:75:44:31:
ee:da:3e:87:c4:00:44:0e:3f:9b:b1:86:01:ba:3b:c3:4d:d0:
9a:25:5a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:09:55 2026 by rpki-client