
$ rpki-client -vvf rpkica.twnic.tw/rpki/ASNET/0/9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.mft
File: 9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.mft (raw, json)
Hash identifier: B+PTqs9RMgij5A4gVvv1edqGNMFR3tiZEi6U+nqQAHA=
Subject key identifier: DC:2C:F8:69:62:FF:C4:D7:32:48:0E:F0:F7:4C:C8:D1:E0:C4:C9:5A
Authority key identifier: 98:32:A7:E4:CF:45:72:9E:DC:D3:68:1D:01:46:E1:ED:3A:4A:40:C3
Certificate issuer: /CN=9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3
Certificate serial: 1E62BF497A216EA93AF1627C05922B8A3AC5D15C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/ASNET/0/9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.mft
Manifest number: 35
Signing time: Sat 13 Jun 2026 03:28:52 +0000
Manifest this update: Sat 13 Jun 2026 03:23:52 +0000
Manifest next update: Sun 14 Jun 2026 06:28:52 +0000
Files and hashes: 1: 323430333a633234303a3a2f33322d3332203d3e2039323634.roa (hash: oe8xOwIqr2mO81l6+e7ZMOIERS2RYBz6q6ygl7MIFms=)
2: 323030313a6330383a666666663a666666663a666666663a666666663a666666613a3830302f3131392d313139203d3e203138323137.roa (hash: LlmnWD7qIwStfYARyzYDm1T1rVnzOKq6b9lEjT/7ewQ=)
3: 3131372e3130332e39362e302f32302d3230203d3e2039323634.roa (hash: QzqhrVUHom/+44097wyR/SgbPwVIpPZtBP2vJQUQT34=)
4: 9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.crl (hash: FgQy6fEJaP6huEHh/Jy3mFFBUwJUzVaLwJO1QKrg7TY=)
5: 3130332e3133302e3235322e302f32322d3234203d3e2039323634.roa (hash: ebYSyc6wu3utGCh3CfyxTzxW7KNMw2xjNw8vV6+J0FQ=)
6: 3230322e3136392e3136302e302f32302d3230203d3e2039323634.roa (hash: sSOmlXcn9YAxBpR7Y/Omip1XRS2+5nTj6dTKOHSNkp4=)
7: 3230322e3134302e3136302e302f31392d3139203d3e2039323634.roa (hash: LA74+HRCy+YQeY35gYYWFZPH2WSKO8OariSVC3JqHzM=)
8: 323030313a6330383a3a2f33322d3332203d3e2039323634.roa (hash: Za2eLedW7Dgj1YKn18rk+zYaiAYcT3aXmTUgI60NrbY=)
9: 3130332e3133302e3235322e302f32322d3232203d3e2039323634.roa (hash: VvHRqWxVEtxPJcjsyJFxfRKVgF0vRJqpYge9SzO33qM=)
10: 323430303a343530303a3a2f33322d3332203d3e2039323634.roa (hash: KHJasWZ7ZRecfk0BbyKR1BgVi3lPmEGN9yAwpdYHKvo=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/ASNET/0/9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.crl
rsync://rpkica.twnic.tw/rpki/ASNET/0/9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 00:20:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:62:bf:49:7a:21:6e:a9:3a:f1:62:7c:05:92:2b:8a:3a:c5:d1:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3
Validity
Not Before: Jun 13 03:23:52 2026 GMT
Not After : Jun 14 06:28:52 2026 GMT
Subject: CN=DC2CF86962FFC4D732480EF0F74CC8D1E0C4C95A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:79:27:b6:12:6e:a8:3c:10:4f:08:55:d7:6d:
d9:ac:c9:04:4d:07:0b:54:87:45:0e:5d:a0:72:04:
67:4b:f0:69:c0:a5:31:51:5c:2c:5e:dc:37:ed:70:
7e:e9:1e:c1:9b:84:fc:ab:56:e4:d6:fd:d3:59:4a:
57:74:7d:cf:76:49:55:34:e3:e5:a6:4c:67:f2:e9:
06:a1:54:81:0e:d6:aa:e2:6d:00:66:11:75:2a:a5:
4e:2e:b4:49:15:3e:2e:25:c0:5d:9f:18:5a:b7:a0:
11:e7:cb:a2:92:17:98:b6:29:54:dd:bb:18:e8:be:
68:40:ec:bf:d6:a8:0f:d4:76:8e:dd:0c:bc:33:13:
2e:09:38:f1:17:a0:57:98:b5:d6:df:22:ed:00:29:
f9:d4:40:61:84:8e:08:0c:61:61:92:fb:80:66:81:
59:c2:04:7b:92:cf:13:b8:24:95:46:ef:32:a5:bc:
d2:e1:5a:3d:e1:30:4f:92:5a:ed:2e:12:91:b3:e2:
79:8a:ff:55:05:8a:42:da:32:0c:98:52:e6:c7:ec:
4f:3f:b3:5d:43:37:4f:84:b1:af:5c:1b:1a:2a:df:
5a:62:16:be:f3:db:46:ec:dc:b4:59:bb:28:08:45:
56:07:59:79:50:30:ac:e7:e9:1b:a9:90:a3:29:27:
81:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:2C:F8:69:62:FF:C4:D7:32:48:0E:F0:F7:4C:C8:D1:E0:C4:C9:5A
X509v3 Authority Key Identifier:
keyid:98:32:A7:E4:CF:45:72:9E:DC:D3:68:1D:01:46:E1:ED:3A:4A:40:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/ASNET/0/9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ASNET/0/9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:8b:71:15:d6:66:c3:b8:35:b7:70:a7:4e:0e:76:aa:8c:db:
53:52:03:c6:4f:f8:b4:26:0c:38:6e:2c:14:0f:1b:9f:38:5d:
26:a8:b1:d4:7e:89:c8:0a:db:94:33:61:25:81:06:e7:05:35:
8c:0a:f8:52:bb:60:bb:4a:f2:4a:c6:af:f6:23:a4:66:4e:13:
fd:74:83:02:cb:b2:90:8c:be:ba:83:d4:c1:eb:68:6d:37:0a:
ac:0b:6f:78:01:3b:8f:31:3a:26:52:d4:6f:40:21:07:66:28:
76:c5:40:37:d6:c5:4a:a4:b6:e3:a4:da:fa:f4:fb:d0:71:18:
03:1c:7d:db:b5:b0:f5:5a:b3:16:2a:86:64:2a:a4:10:1b:a7:
8b:74:17:65:32:ad:7b:d1:89:12:4c:83:d0:c2:60:95:cc:be:
cd:33:31:d3:f2:57:b1:3b:86:82:85:26:af:fc:f4:b1:a4:f4:
6c:85:d6:b1:d5:f9:6c:df:1d:ce:1c:59:d9:2f:0e:16:5f:14:
b1:97:eb:4b:0c:91:54:19:05:28:cf:7c:e0:a1:01:b7:15:f7:
09:40:2c:b3:f5:75:a4:2a:0c:e5:fc:09:76:1d:32:21:33:ff:
55:38:3c:88:fe:79:4a:f7:bc:47:9c:5c:f8:28:b4:ff:ad:ee:
cc:76:bc:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:03:22 2026 by rpki-client