
$ rpki-client -vvvf rpkica.twnic.tw/rpki/ASNET/0/9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.mft
File: 9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.mft (raw, json)
Hash identifier: JJxjCdCz0R9+0fMQPiyJmR6p1epU8Rjk9tcPi17KXro=
Subject key identifier: 99:CA:81:59:CC:2F:E7:ED:5A:8F:F8:73:4D:B0:F5:89:89:EA:C5:0B
Authority key identifier: 98:32:A7:E4:CF:45:72:9E:DC:D3:68:1D:01:46:E1:ED:3A:4A:40:C3
Certificate issuer: /CN=9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3
Certificate serial: 694E3C26465F03590CFC715D0CD1D257B473921E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/ASNET/0/9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.mft
Manifest number: BD
Signing time: Mon 21 Sep 2026 09:21:47 +0000
Manifest this update: Mon 21 Sep 2026 09:16:47 +0000
Manifest next update: Tue 22 Sep 2026 12:11:47 +0000
Files and hashes: 1: 3131372e3130332e39362e302f32302d3234203d3e2039323634.roa (hash: Vz+iPjPrCRTsSbl4PPjr0Om5Rv5u55bMs7yaivZ6Tqs=)
2: 323030313a6330383a3a2f33322d3332203d3e2039323634.roa (hash: Za2eLedW7Dgj1YKn18rk+zYaiAYcT3aXmTUgI60NrbY=)
3: 3230322e3134302e3136302e302f31392d3139203d3e2039323634.roa (hash: LA74+HRCy+YQeY35gYYWFZPH2WSKO8OariSVC3JqHzM=)
4: 3230322e3134302e3136302e302f31392d3234203d3e2039323634.roa (hash: 5ggubjSM1VSLiOYCCBhiOsPeTG2KFEdIp+IiWRBa4p4=)
5: 3131372e3130332e39362e302f32302d3230203d3e2039323634.roa (hash: QzqhrVUHom/+44097wyR/SgbPwVIpPZtBP2vJQUQT34=)
6: 3130332e3133302e3235322e302f32322d3232203d3e2039323634.roa (hash: VvHRqWxVEtxPJcjsyJFxfRKVgF0vRJqpYge9SzO33qM=)
7: 3130332e3133302e3235322e302f32322d3234203d3e2039323634.roa (hash: ebYSyc6wu3utGCh3CfyxTzxW7KNMw2xjNw8vV6+J0FQ=)
8: 323030313a6330383a666666663a666666663a666666663a666666663a666666613a3830302f3131392d313139203d3e203138323137.roa (hash: LlmnWD7qIwStfYARyzYDm1T1rVnzOKq6b9lEjT/7ewQ=)
9: 323430333a633234303a3a2f33322d3332203d3e2039323634.roa (hash: oe8xOwIqr2mO81l6+e7ZMOIERS2RYBz6q6ygl7MIFms=)
10: 323430303a343530303a3a2f33322d3332203d3e2039323634.roa (hash: KHJasWZ7ZRecfk0BbyKR1BgVi3lPmEGN9yAwpdYHKvo=)
11: 9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.crl (hash: Jm716KHf2IvTPolKtJdG2nJkVj8N4ZwZfUo3QjGh57k=)
12: 3230322e3136392e3136302e302f32302d3234203d3e2039323634.roa (hash: 3m8qS9U+2LPDJ7QuVh7aTQg8dEjL/xHKCWDBqQM3axg=)
13: 3230322e3136392e3136302e302f32302d3230203d3e2039323634.roa (hash: sSOmlXcn9YAxBpR7Y/Omip1XRS2+5nTj6dTKOHSNkp4=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/ASNET/0/9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.crl
rsync://rpkica.twnic.tw/rpki/ASNET/0/9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 03:47:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:4e:3c:26:46:5f:03:59:0c:fc:71:5d:0c:d1:d2:57:b4:73:92:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3
Validity
Not Before: Sep 21 09:16:47 2026 GMT
Not After : Sep 22 12:11:47 2026 GMT
Subject: CN=99CA8159CC2FE7ED5A8FF8734DB0F58989EAC50B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d2:34:7b:20:58:f9:0b:74:88:9f:d4:28:02:
66:45:04:5c:bc:92:43:72:f8:b3:ab:b9:25:ea:b8:
f6:ef:27:ba:ba:ad:6c:f8:c1:05:b8:48:c3:27:bd:
a1:bc:50:61:fd:4f:15:cc:fc:c4:e8:a9:d5:6c:87:
98:75:be:5e:1d:46:f5:69:51:32:80:03:3a:07:97:
b7:9c:41:df:de:86:54:8c:21:2c:eb:0b:fa:de:db:
cd:fa:45:58:a6:03:44:4c:4d:71:d9:ec:e7:a6:54:
08:30:7f:df:39:32:b2:65:7d:dc:29:f5:8a:b4:c9:
6f:4c:1b:13:ee:47:d6:9a:de:92:89:57:3c:d6:f5:
3b:22:08:9f:a2:6d:be:69:3f:13:47:6e:51:c4:b8:
cd:67:0c:14:64:bf:37:0d:c2:d4:94:14:f1:da:c9:
58:71:7c:1f:81:28:7f:75:20:1e:2f:ca:8c:8b:a1:
7e:89:88:98:b8:70:81:bd:22:c6:66:86:23:18:de:
9c:9c:f9:f6:78:f6:70:b0:93:62:1c:8f:5e:29:fb:
b4:a2:f9:56:d2:7c:91:1f:3d:31:1d:85:22:63:f6:
d1:f2:0b:7d:a2:90:40:2c:0c:fb:b2:bc:01:5b:24:
66:4d:e9:ea:43:f5:3e:66:24:b9:25:37:32:74:fe:
1c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:CA:81:59:CC:2F:E7:ED:5A:8F:F8:73:4D:B0:F5:89:89:EA:C5:0B
X509v3 Authority Key Identifier:
keyid:98:32:A7:E4:CF:45:72:9E:DC:D3:68:1D:01:46:E1:ED:3A:4A:40:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/ASNET/0/9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ASNET/0/9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:0f:28:b3:fe:54:49:f7:fb:4d:08:55:45:15:f8:6b:f9:9f:
e7:18:28:7a:00:af:2d:ee:9e:66:2f:42:1f:48:9e:c0:b0:08:
6e:5c:5c:e9:d5:e3:16:b6:10:48:65:ac:67:7b:f6:89:58:d9:
ca:7e:b0:26:7a:49:c9:98:ca:5d:f5:48:b3:a4:a0:16:da:f8:
0e:c5:15:22:f9:3c:ed:f6:11:9b:81:34:e4:67:10:a6:bf:0f:
09:bf:ca:f4:9f:0a:6a:ed:63:d3:fd:73:d2:50:69:29:9a:23:
95:9c:e5:5e:d4:68:5e:48:10:99:8a:d5:89:65:a8:c9:2b:61:
97:69:06:60:5c:6f:b4:4d:86:51:95:62:99:cd:6f:75:b8:10:
f3:28:e9:bf:f3:ce:fc:6c:0a:b7:6d:b1:1c:ce:aa:2a:76:a1:
98:18:5a:67:80:cc:e9:60:23:c7:e1:23:40:b8:73:3d:7e:b8:
81:d5:95:82:73:84:00:54:32:09:f4:3c:34:bd:c3:d6:11:1e:
43:a3:54:12:76:8d:06:4c:2e:cd:40:e0:9f:5a:3a:6a:92:2a:
3b:cf:42:e7:a3:02:47:32:99:fd:b9:cb:2b:fd:2b:bc:ca:99:
cb:9a:96:6e:0e:a0:02:44:51:c8:17:54:53:e6:44:03:64:7a:
ce:f8:81:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:37:44 2026 by rpki-client