
$ rpki-client -vvvf rpkica.twnic.tw/rpki/TDC/0/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.mft
File: 68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.mft (raw, json)
Hash identifier: v6cgndw8Rw/XEtfnTogB4NwwZG8NTF8m8FxrK2yGKLQ=
Subject key identifier: 4B:8D:78:55:56:FE:33:14:36:0D:3B:C6:69:D8:0C:A8:05:D1:48:B8
Authority key identifier: 68:58:4C:D1:C7:EB:08:08:E1:AE:2D:E4:C1:95:CC:E1:32:57:05:F0
Certificate issuer: /CN=68584CD1C7EB0808E1AE2DE4C195CCE1325705F0
Certificate serial: 047A3853BA664E023F69C157373C475CBB661D21
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TDC/0/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.mft
Manifest number: C6
Signing time: Sun 04 Oct 2026 23:46:00 +0000
Manifest this update: Sun 04 Oct 2026 23:41:00 +0000
Manifest next update: Tue 06 Oct 2026 03:24:00 +0000
Files and hashes: 1: 68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.crl (hash: rmQvNQVcbN0SbELNT5VySfwyrK5XXpaI13l655j34lQ=)
2: 3130332e3232302e3231382e302f32332d3234203d3e203138303431.roa (hash: BPfCiVG9HhUxKhDsiFl88DZrsgfiJtDmqkpGw4VSQe8=)
3: 323430313a6136303a3a2f33322d3332203d3e203138303431.roa (hash: W1whgs9nNrUE4RVKtECQcAsJLL/TFHZVPsexycz3Kms=)
4: 3130332e3232302e3231382e302f32342d3234203d3e20323031323137.roa (hash: F3FkYFiImAK1mdqw1urYor1uavBiRp16+RSqdJSNVyI=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TDC/0/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.crl
rsync://rpkica.twnic.tw/rpki/TDC/0/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Oct 2026 17:19:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:7a:38:53:ba:66:4e:02:3f:69:c1:57:37:3c:47:5c:bb:66:1d:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68584CD1C7EB0808E1AE2DE4C195CCE1325705F0
Validity
Not Before: Oct 4 23:41:00 2026 GMT
Not After : Oct 6 03:24:00 2026 GMT
Subject: CN=4B8D785556FE3314360D3BC669D80CA805D148B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:c9:13:97:40:63:1b:4c:6d:91:de:97:9a:f3:
8a:df:4f:27:c0:64:df:b7:a4:d9:13:f3:66:17:4d:
47:66:41:fc:e3:df:16:0d:38:ef:fc:fa:33:2d:e7:
88:8f:aa:20:59:e6:f8:ae:9e:07:89:ce:ee:8f:5f:
53:0e:cd:5d:1e:88:80:98:90:20:21:cd:c5:32:2f:
f9:98:d8:26:3a:69:3f:51:87:78:56:06:f6:1d:04:
67:c2:74:7b:d1:e5:3c:45:bc:67:f5:76:f9:c1:8f:
ff:b2:3e:f1:f0:10:a4:a8:ea:7e:41:42:e4:6a:ec:
e3:3f:42:78:f7:b3:aa:c0:f9:e2:d2:bd:c4:63:a5:
c5:3d:30:8f:b6:38:2c:ba:1b:95:b2:be:7f:55:b8:
30:89:74:4b:20:df:af:a0:f3:34:d9:35:59:85:b7:
fc:d4:c4:1a:a6:93:a1:3e:37:dd:66:f6:e1:db:55:
e1:e8:7e:20:d7:20:4a:4f:01:58:2e:80:fa:b5:60:
c1:63:5f:2e:92:9e:51:fe:d3:e7:e3:fa:a8:e7:eb:
a2:ba:9e:c7:e8:20:e8:36:c6:f4:ba:3d:5e:98:c1:
98:07:f6:af:fd:a7:96:77:30:5a:9a:3c:77:74:16:
41:1c:93:7c:a1:08:dd:01:a3:de:24:d2:fd:85:9c:
7d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:8D:78:55:56:FE:33:14:36:0D:3B:C6:69:D8:0C:A8:05:D1:48:B8
X509v3 Authority Key Identifier:
keyid:68:58:4C:D1:C7:EB:08:08:E1:AE:2D:E4:C1:95:CC:E1:32:57:05:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TDC/0/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TDC/0/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:5e:0b:ea:5e:bb:92:52:46:84:3d:2c:7c:06:68:9a:e5:f9:
6b:60:44:fb:d8:b9:b8:9b:07:7c:6c:3a:86:52:0f:15:90:7a:
8f:aa:c8:c0:91:b4:49:24:d1:d1:22:9a:71:10:59:4f:02:c6:
17:8d:12:24:9a:48:50:13:30:7e:33:49:70:a6:47:ed:0f:f5:
d0:23:7d:4e:e1:24:96:c9:7a:ac:c9:72:de:a5:5c:a8:ff:b0:
24:93:8d:68:5c:c1:c2:1a:1a:52:c4:5c:c3:84:79:ca:65:30:
79:97:f6:99:5f:e4:52:4f:86:c9:d1:65:4a:c4:ad:d1:d8:c8:
5a:dd:4c:58:5b:6f:d1:1e:6c:7c:41:30:5d:b9:27:19:d6:19:
62:73:9e:3e:c4:d6:94:3a:9c:15:93:61:ea:49:00:f0:f1:a0:
e7:ea:33:8c:2c:fb:de:18:32:e8:42:a0:43:95:8a:b1:b1:6b:
b9:af:02:86:e1:f6:b1:df:c8:fa:54:83:b9:95:a5:b6:f3:10:
d2:b8:60:f8:ba:84:fe:4f:1b:47:aa:b5:c0:7c:97:ae:19:76:
c0:5e:c9:69:a3:e7:a2:1d:1d:34:2b:8e:82:60:87:dd:de:07:
7c:9b:b1:cc:93:27:93:bc:21:af:d0:d1:ef:ee:7e:dd:bb:da:
15:84:82:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 05:17:46 2026 by rpki-client