
$ rpki-client -vvf rpkica.twnic.tw/rpki/AOTERNET/1/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.mft
File: DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.mft (raw, json)
Hash identifier: CMjwLPIIwsnaDCgfaJzdWLuFHVeeDzoAq0/eDpRaHko=
Subject key identifier: 18:A6:FB:E4:DB:1E:96:08:E6:50:70:AF:55:9D:BC:8F:8D:03:09:A3
Authority key identifier: DB:E0:6A:5F:C5:A5:E2:89:AC:EB:48:7B:50:C5:EC:D3:B6:DE:23:4C
Certificate issuer: /CN=DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C
Certificate serial: 0FFEC694374231DDDF5345339F855E2F9F77D613
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/AOTERNET/1/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.mft
Manifest number: 3B
Signing time: Sat 13 Jun 2026 13:20:08 +0000
Manifest this update: Sat 13 Jun 2026 13:15:08 +0000
Manifest next update: Sun 14 Jun 2026 16:17:08 +0000
Files and hashes: 1: 3134342e37392e3233362e302f32332d3234203d3e203138303430.roa (hash: mOpy66eNRndunzE6G06U+/veEB8DXbUp/i9Rna0dvIY=)
2: 3134342e37392e3233372e302f32342d3234203d3e20313532363132.roa (hash: aqUYGYZZ4SIzEA/BLO0DH4FickVrqbLzNS8KzmVfkyA=)
3: 3134342e37392e3233372e302f32342d3332203d3e20313532363132.roa (hash: y2jSoNJLs5+nwOx7mIkDPFacP932HoFtwivGyzUzSlg=)
4: DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.crl (hash: tmIMf4bqrZjcnn9pON8V5hHOyWoV3XHWLEuT44hgvVo=)
5: 3134342e37392e3233362e302f32342d3332203d3e203138303430.roa (hash: 1FIFjMBcizShdvw6u5phvDGtZhnMBusqAuzpJLq+G90=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/AOTERNET/1/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.crl
rsync://rpkica.twnic.tw/rpki/AOTERNET/1/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 22:38:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:fe:c6:94:37:42:31:dd:df:53:45:33:9f:85:5e:2f:9f:77:d6:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C
Validity
Not Before: Jun 13 13:15:08 2026 GMT
Not After : Jun 14 16:17:08 2026 GMT
Subject: CN=18A6FBE4DB1E9608E65070AF559DBC8F8D0309A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3c:e2:8c:6e:c8:95:26:f3:2d:fe:ba:1c:d2:
f7:ba:97:7c:fa:a4:a6:89:4c:03:9f:b5:ea:92:00:
80:da:9a:6c:27:38:91:a6:c3:33:08:92:21:0a:20:
4f:d1:79:c5:9b:76:65:f7:b1:7c:06:fa:be:98:87:
ca:83:0f:50:06:bd:3e:8d:69:2e:f7:32:df:85:84:
72:b4:ad:9f:b3:da:cb:a5:01:d1:80:d2:a6:f6:35:
f5:25:f9:5c:65:09:6f:58:f9:b9:60:e0:14:c8:04:
77:e2:23:de:17:fd:d6:8c:95:d3:c9:3e:d6:fe:7c:
63:fd:c5:f9:9a:f0:73:5b:ef:4e:6f:57:89:0e:23:
75:67:3d:16:01:6d:f8:d4:76:f2:fc:5f:a0:6d:65:
c7:03:12:15:d6:e7:23:57:a1:1a:26:ec:82:35:50:
f9:23:70:57:d3:6d:f0:a7:77:e9:4f:c4:df:f1:cf:
c1:ab:56:98:4a:a2:8b:e5:8b:98:fd:30:2a:07:47:
8d:2b:d3:f9:07:0e:29:bf:e7:66:ad:26:76:43:f6:
45:ef:1c:8a:f9:1d:51:98:9c:48:75:9c:0b:c4:a6:
68:aa:78:01:39:21:6a:49:9e:39:0a:3b:66:46:b5:
15:b3:7f:f9:fc:17:d9:b0:ab:21:d2:15:de:d2:54:
fa:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:A6:FB:E4:DB:1E:96:08:E6:50:70:AF:55:9D:BC:8F:8D:03:09:A3
X509v3 Authority Key Identifier:
keyid:DB:E0:6A:5F:C5:A5:E2:89:AC:EB:48:7B:50:C5:EC:D3:B6:DE:23:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/AOTERNET/1/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/AOTERNET/1/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:2a:d5:d0:6b:96:db:f9:79:37:19:55:4d:c6:d3:6c:7b:16:
a6:3a:de:42:51:8c:b6:d9:ca:ef:5b:9e:22:dc:ce:bc:08:a9:
f5:f0:db:f7:a9:f4:ad:17:8b:c1:4e:cd:a3:78:44:da:d2:3c:
48:48:74:b7:03:39:09:05:25:1a:63:b8:50:3b:d4:da:48:bb:
f5:d0:ae:83:dc:87:c7:59:91:b5:01:ad:12:92:0c:f5:94:6e:
21:85:71:2d:9c:a5:80:c5:5b:8d:ae:6e:53:73:17:b6:2a:15:
d3:cd:4d:a5:ee:fe:70:37:55:16:26:46:f1:8f:8d:c3:d2:e8:
7c:f3:a4:16:36:14:77:b6:91:ea:3b:cd:7b:d5:05:39:1e:a9:
af:df:cd:12:f4:bf:1d:e8:1c:f5:86:18:ff:3a:c9:73:1d:96:
b1:ed:79:c9:72:98:d0:ce:22:6d:74:1c:df:8d:a3:1f:c1:70:
88:e0:b6:86:9c:f9:9a:5a:bd:29:b5:6c:cc:65:60:ed:c1:df:
48:7f:ba:83:41:4a:22:6c:60:4d:3b:6f:ba:9c:46:c9:d8:6b:
ae:d6:b0:a0:66:92:fd:5c:04:d8:8f:49:18:04:84:8c:b4:61:
f6:5b:45:b7:10:03:96:65:14:77:0d:d8:dc:2c:06:58:ea:59:
c4:8a:1a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:54:50 2026 by rpki-client