
$ rpki-client -vvf rpkica.twnic.tw/rpki/BRICKSINC/0/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.mft
File: AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.mft (raw, json)
Hash identifier: KYT+KkOYrQt5B4ynIQakIJPKyY+lf+BZlGCYziCmics=
Subject key identifier: E8:00:65:11:57:F0:24:4C:0F:5D:AD:A6:3C:2E:AE:35:CE:68:BC:74
Authority key identifier: AB:38:88:A4:E1:63:E2:BC:E7:6E:A9:86:E3:C3:F2:FD:DE:D8:8E:1B
Certificate issuer: /CN=AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B
Certificate serial: 5EE3306B951A6E036EBBEEE07F19A53C151DE2A3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.mft
Manifest number: 6E
Signing time: Tue 28 Jul 2026 19:44:47 +0000
Manifest this update: Tue 28 Jul 2026 19:39:47 +0000
Manifest next update: Wed 29 Jul 2026 20:46:47 +0000
Files and hashes: 1: 323430303a633965303a3a2f33322d3438203d3e20313334383233.roa (hash: tWF65JRIBYKnWmqjJzuJTpKo/cPf/CgMxXepVjUbTSQ=)
2: 3130332e35312e39302e302f32332d3332203d3e20313331363537.roa (hash: 6/l/GHeRi+L26SSSmyoeIRzt/9QvcP9wUHNuiJTW0HI=)
3: 3130332e35312e39302e302f32332d3332203d3e20313334383233.roa (hash: tH36wJqzGsCI/o8hR/0a7GCLOKwO8H/LX8RVs1GWaks=)
4: AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.crl (hash: ACBKpyRRxPFG4Dkr4wX0x2U2Wktq+VvEeLqzH5JEwdc=)
5: 3230322e352e31302e302f32332d3332203d3e20313331363537.roa (hash: zCUned2k9nVUaWCk/pD8/VUXQUBPTJnpl6eX7zZ2e9s=)
6: 323430303a633965303a3a2f33322d3438203d3e20313331363537.roa (hash: upFELCP3DHkRWuwf+Xm0sVZKdOzGkDLBh+WiG2O5joQ=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.crl
rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 20:46:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:e3:30:6b:95:1a:6e:03:6e:bb:ee:e0:7f:19:a5:3c:15:1d:e2:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B
Validity
Not Before: Jul 28 19:39:47 2026 GMT
Not After : Jul 29 20:46:47 2026 GMT
Subject: CN=E800651157F0244C0F5DADA63C2EAE35CE68BC74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:dc:77:a6:76:0f:e8:ad:cf:f6:4c:49:fd:e2:
42:93:aa:d8:4c:47:4e:46:7f:54:b5:7b:db:94:1a:
8e:28:c2:a0:af:32:32:90:e5:e5:ee:7b:2e:2e:87:
69:3d:76:87:c2:2e:89:26:3f:ad:52:c6:97:e6:06:
27:07:c8:0a:55:99:35:b6:49:2e:bd:c0:a1:02:82:
13:b4:d2:6a:18:d2:ba:3f:81:a9:83:46:77:33:0b:
24:4e:53:00:ef:f3:cd:9c:71:5f:b0:d3:a1:04:6c:
e7:f2:a2:32:ff:f7:21:26:af:8c:6b:e1:5e:91:f2:
ec:e6:82:45:6d:a5:91:46:29:dd:9a:3d:16:b9:9c:
58:2e:c4:01:4f:c3:c6:e9:1e:3d:35:0d:a0:03:b6:
0d:bd:59:49:09:b0:29:30:b3:c9:c2:2d:ff:43:02:
c5:c6:9c:fd:43:71:62:81:8d:4e:1a:31:03:40:df:
52:21:8f:56:4a:b6:c3:98:38:85:ca:e7:e7:2b:82:
dc:11:53:f4:80:0a:d8:44:cd:77:6e:78:2b:59:b7:
10:ab:79:e3:76:f7:0e:f2:4c:75:61:99:c0:f4:a7:
2f:e3:44:20:d4:ba:c1:63:6e:fd:fa:dc:25:ed:b3:
cc:0b:58:cf:5f:b4:ec:25:2a:c9:63:d4:4d:08:08:
00:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:00:65:11:57:F0:24:4C:0F:5D:AD:A6:3C:2E:AE:35:CE:68:BC:74
X509v3 Authority Key Identifier:
keyid:AB:38:88:A4:E1:63:E2:BC:E7:6E:A9:86:E3:C3:F2:FD:DE:D8:8E:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:27:3a:dc:25:6f:4e:96:65:7a:89:f1:ac:68:13:a7:5f:eb:
4c:4f:a3:11:03:e9:ff:c9:4c:98:69:9e:94:19:86:32:59:5d:
a6:94:6d:f4:ac:a0:47:40:dc:eb:ed:19:d2:84:79:ab:4b:4e:
51:e3:4c:bf:79:d0:e4:03:8a:83:59:6a:8f:ac:d5:2d:50:d8:
6d:1f:5a:29:07:92:d0:73:a9:8f:34:96:ad:be:13:03:82:2e:
3b:ab:46:cd:cf:96:6a:9e:2f:2f:62:fa:ef:5c:03:6c:c5:72:
7e:bb:44:ab:64:8c:fd:98:44:8b:50:ee:d8:51:c1:4e:55:07:
c6:14:b8:00:83:be:93:79:67:01:e0:c4:1b:f5:33:7c:d7:4e:
e1:08:f7:6d:00:8e:3a:20:f2:9c:0c:88:d8:95:61:dd:3a:c1:
dc:b3:ea:e2:96:f5:90:84:61:9b:f0:5c:6f:27:65:19:20:3f:
c5:5e:78:78:f6:06:65:8f:8f:5d:74:ba:7d:34:e2:bf:b4:2e:
07:7b:bc:34:ed:5e:70:bf:ba:a6:4d:ab:71:f5:55:19:84:f5:
c5:aa:f0:85:7f:c3:6e:b3:bb:64:86:5e:e3:e1:c2:ae:5c:fe:
67:02:68:d4:f6:77:20:e2:ba:94:20:9e:9d:81:e9:50:55:09:
b0:a2:13:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:19:28 2026 by rpki-client