
$ rpki-client -vvf rpkica.twnic.tw/rpki/BRICKSINC/0/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.mft
File: AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.mft (raw, json)
Hash identifier: s2u6HKAn+KUKV4mB6ejF4FStID0BXxjl3Lq7Vfs99aI=
Subject key identifier: AE:A6:A2:9D:A1:34:3C:D9:14:93:AC:11:99:64:C1:27:1B:53:89:7E
Authority key identifier: AB:38:88:A4:E1:63:E2:BC:E7:6E:A9:86:E3:C3:F2:FD:DE:D8:8E:1B
Certificate issuer: /CN=AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B
Certificate serial: 7017A6959F8BDA3C7CCB91F88185FBA8846394B6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.mft
Manifest number: 30
Signing time: Fri 12 Jun 2026 12:56:46 +0000
Manifest this update: Fri 12 Jun 2026 12:51:46 +0000
Manifest next update: Sat 13 Jun 2026 16:55:46 +0000
Files and hashes: 1: AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.crl (hash: keqkie+TLR3NiHHVffC1lKOPcHC3xAsSByd8uplEaCk=)
2: 323430303a633965303a3a2f33322d3438203d3e20313334383233.roa (hash: tWF65JRIBYKnWmqjJzuJTpKo/cPf/CgMxXepVjUbTSQ=)
3: 3230322e352e31302e302f32332d3332203d3e20313331363537.roa (hash: zCUned2k9nVUaWCk/pD8/VUXQUBPTJnpl6eX7zZ2e9s=)
4: 323430303a633965303a3a2f33322d3438203d3e20313331363537.roa (hash: upFELCP3DHkRWuwf+Xm0sVZKdOzGkDLBh+WiG2O5joQ=)
5: 3130332e35312e39302e302f32332d3332203d3e20313334383233.roa (hash: tH36wJqzGsCI/o8hR/0a7GCLOKwO8H/LX8RVs1GWaks=)
6: 3130332e35312e39302e302f32332d3332203d3e20313331363537.roa (hash: 6/l/GHeRi+L26SSSmyoeIRzt/9QvcP9wUHNuiJTW0HI=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.crl
rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 16:55:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:17:a6:95:9f:8b:da:3c:7c:cb:91:f8:81:85:fb:a8:84:63:94:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B
Validity
Not Before: Jun 12 12:51:46 2026 GMT
Not After : Jun 13 16:55:46 2026 GMT
Subject: CN=AEA6A29DA1343CD91493AC119964C1271B53897E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:07:b0:e4:f9:d6:3b:3d:89:7c:d6:b8:6b:e5:
65:8e:80:db:13:4a:f8:01:ea:06:76:0c:5d:dd:90:
1e:11:da:6a:57:b7:eb:2f:0e:c3:aa:1a:03:fa:d6:
18:49:6f:aa:16:62:3b:cc:fe:d3:21:7a:3f:a4:cb:
7a:01:1f:ed:6c:cb:18:06:00:df:cc:35:63:b7:1c:
6c:25:f3:e4:a4:bf:39:c8:36:8b:c2:cb:e7:7b:31:
15:28:8f:e5:dd:c0:01:0e:44:f6:13:c0:b2:cf:41:
ae:11:b7:30:61:80:e2:cf:46:2f:4c:c0:2c:91:93:
46:60:c2:74:6d:03:a8:c6:82:b3:41:38:d7:31:6a:
45:0f:01:45:25:e1:5b:8d:18:37:85:15:5c:79:4d:
f3:9f:b3:99:e5:ef:94:6d:60:2e:65:45:46:0e:74:
91:4e:d2:12:14:7f:c3:4e:b3:db:e7:b2:8b:13:9f:
5f:aa:6d:be:48:21:19:a1:39:11:ba:a8:15:ad:c6:
56:e3:76:8f:e1:3e:0d:b0:60:71:fe:87:c0:8c:93:
7c:60:1d:53:47:20:5b:a1:bf:c5:af:47:17:78:aa:
2f:b9:f0:9a:a0:07:e8:d2:c8:a9:32:22:7c:91:cd:
3a:26:05:57:c9:0a:7f:db:2c:f7:8f:1d:b3:2d:08:
0c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:A6:A2:9D:A1:34:3C:D9:14:93:AC:11:99:64:C1:27:1B:53:89:7E
X509v3 Authority Key Identifier:
keyid:AB:38:88:A4:E1:63:E2:BC:E7:6E:A9:86:E3:C3:F2:FD:DE:D8:8E:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:da:92:dd:08:75:fc:72:37:d5:67:84:40:7f:90:ef:01:33:
ac:c1:38:e0:1c:f8:1c:50:72:6f:83:e7:bf:92:06:42:02:c8:
48:0d:3e:e0:12:d7:46:cd:67:e3:c8:41:27:de:2b:a3:b7:1b:
27:03:fd:8c:d9:4e:ad:4d:17:ee:69:14:0b:81:11:ba:70:b7:
74:9d:d5:f5:b6:69:13:c8:6c:09:08:4a:95:90:79:de:8c:ed:
4e:d4:cd:48:95:3c:e5:6d:64:43:fb:7e:64:b6:58:ef:9d:e9:
2a:2f:8f:3c:4d:ff:f6:06:55:e9:4e:fa:91:4e:27:c1:d7:31:
86:00:08:45:5e:fa:2a:08:c5:0b:cc:a9:17:4e:26:b1:09:aa:
ce:77:29:9b:3a:a0:0a:20:29:21:61:6c:9c:d0:5b:f0:48:f3:
6f:08:f7:f0:9a:ad:59:66:8c:f4:98:58:39:be:2e:34:b1:37:
f8:94:df:45:df:5e:db:55:07:ae:04:29:7e:ae:27:56:75:4d:
82:22:0b:86:bf:1a:d1:2a:d9:1b:68:02:bc:76:08:72:89:d2:
91:34:aa:31:dc:5d:ef:d4:76:66:56:4f:3c:0c:f1:bf:5f:da:
9a:7d:94:d4:f2:c0:1b:62:7a:ca:ac:27:5f:db:cb:db:31:ca:
7b:2e:f3:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:18:04 2026 by rpki-client