
$ rpki-client -vvvf rpkica.twnic.tw/rpki/BRICKSINC/0/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.mft
File: AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.mft (raw, json)
Hash identifier: jAoG92BF0TJe37ZcUMjg3WISSEE/ewmGkuSCYW15SDs=
Subject key identifier: C9:4D:3F:D6:72:74:BE:61:05:E3:C3:5C:B2:68:23:4E:BC:E4:52:B4
Authority key identifier: AB:38:88:A4:E1:63:E2:BC:E7:6E:A9:86:E3:C3:F2:FD:DE:D8:8E:1B
Certificate issuer: /CN=AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B
Certificate serial: 6697EEA8298D261BCCDDEADCB4E0743727C4FF7C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.mft
Manifest number: BF
Signing time: Tue 22 Sep 2026 07:30:15 +0000
Manifest this update: Tue 22 Sep 2026 07:25:15 +0000
Manifest next update: Wed 23 Sep 2026 11:00:15 +0000
Files and hashes: 1: 3130332e35312e39302e302f32332d3332203d3e20313334383233.roa (hash: tH36wJqzGsCI/o8hR/0a7GCLOKwO8H/LX8RVs1GWaks=)
2: 3230322e352e31302e302f32342d3234203d3e20313937353337.roa (hash: uvBAHIGsfVOPKEPiUlrDJflai1mxkNu/0gJ+oj7/pBE=)
3: 3230322e352e31302e302f32332d3233203d3e20313331363330.roa (hash: 0owoHP+vPpEdJ28e7p434+yQ6TztrvINieYa1Uziwec=)
4: 3130332e35312e39302e302f32332d3332203d3e20313331363537.roa (hash: 6/l/GHeRi+L26SSSmyoeIRzt/9QvcP9wUHNuiJTW0HI=)
5: 3230322e352e31312e302f32342d3234203d3e20323136313338.roa (hash: AWD+zuYzrNaUxcfv/56OBONbGf7IKDXjS7DxuJrGBYg=)
6: 323430303a633965303a3a2f33322d3438203d3e20313331363537.roa (hash: upFELCP3DHkRWuwf+Xm0sVZKdOzGkDLBh+WiG2O5joQ=)
7: 3230322e352e31312e302f32342d3234203d3e20323032373336.roa (hash: VH7i1Rmx/vnrLlet6gZkD22nYR0ayb436EnYjZJQzNA=)
8: 3230322e352e31302e302f32332d3332203d3e20313331363537.roa (hash: zCUned2k9nVUaWCk/pD8/VUXQUBPTJnpl6eX7zZ2e9s=)
9: 3230322e352e31302e302f32342d3234203d3e20323136313338.roa (hash: elBageucsQOSTptkEXsGAPEabTfNUu/5ZP88JzEAJHU=)
10: 323430303a633965303a3a2f33322d3438203d3e20313334383233.roa (hash: tWF65JRIBYKnWmqjJzuJTpKo/cPf/CgMxXepVjUbTSQ=)
11: 3230322e352e31302e302f32342d3234203d3e20323032373336.roa (hash: QJ5gRwlwOk90NIqbTeKQ9YIL40s99qTaJ8zlmXypSM4=)
12: AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.crl (hash: hDIgxYi2qcW9zZjsp9y1RLSdAI0iFzatJoYhgqqfKeY=)
13: 3230322e352e31312e302f32342d3234203d3e20313937353337.roa (hash: /asmOvtxTVfejsQzCQN9JAzbwce/1zKDLT1mSL+cbv8=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.crl
rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 22:16:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:97:ee:a8:29:8d:26:1b:cc:dd:ea:dc:b4:e0:74:37:27:c4:ff:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B
Validity
Not Before: Sep 22 07:25:15 2026 GMT
Not After : Sep 23 11:00:15 2026 GMT
Subject: CN=C94D3FD67274BE6105E3C35CB268234EBCE452B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:16:43:e6:e0:d9:00:30:0b:c9:4d:4d:a3:da:
14:04:d1:43:88:59:54:1d:cc:3e:a2:08:bd:d3:97:
d9:a1:44:fd:b5:16:22:f6:bd:e4:c1:8e:26:42:28:
9f:91:7e:e0:c5:e2:42:65:fc:1e:f7:fb:67:c6:42:
75:c1:c8:52:b3:e3:4e:dc:46:61:0a:3f:25:c4:05:
2a:c0:b8:d1:23:7a:9e:9a:b9:3d:89:b8:fb:8d:19:
95:b8:74:27:74:6e:17:2c:63:3c:14:be:12:c1:b1:
2b:a6:69:e5:db:b7:a9:05:b2:4f:eb:a4:32:4c:6e:
43:1d:76:e3:4a:dd:e7:b9:aa:bd:da:5e:46:98:d1:
a6:cd:e7:c8:b2:e3:e2:fe:b4:4e:cf:25:63:0e:c2:
bf:30:21:aa:9d:7a:fb:f1:51:60:78:71:60:64:53:
42:37:a6:fb:35:21:1a:44:d4:4d:d4:23:3c:61:32:
33:f1:a0:d5:b0:d2:54:be:73:8c:8d:61:b6:b5:5f:
5a:e2:be:aa:f6:de:74:81:2f:f7:d2:5b:be:78:c0:
cb:d3:a9:a3:39:01:8f:b8:ea:61:f6:3d:9a:62:ed:
47:ff:be:54:5d:30:6d:df:13:80:96:ef:2b:54:97:
ed:cd:3a:e2:1d:02:d5:07:f1:ce:f3:9c:0a:9b:0c:
64:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:4D:3F:D6:72:74:BE:61:05:E3:C3:5C:B2:68:23:4E:BC:E4:52:B4
X509v3 Authority Key Identifier:
keyid:AB:38:88:A4:E1:63:E2:BC:E7:6E:A9:86:E3:C3:F2:FD:DE:D8:8E:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:f9:7c:02:5a:f2:a8:4f:e7:28:a5:6b:01:18:f8:a2:2f:02:
98:58:98:25:14:85:c7:34:95:08:1c:45:6a:a0:1d:0f:b8:ef:
6e:9b:b1:52:9f:d7:ad:a0:ce:a3:ba:a6:28:63:09:ca:93:2c:
43:59:a6:ae:67:d2:cf:c8:30:ac:e6:83:fa:11:94:bb:1f:e1:
47:14:6b:54:52:59:1c:4c:24:86:d3:ba:b8:e3:01:c2:ad:90:
14:a6:e4:3e:d3:3c:39:54:60:5c:b4:86:a1:6e:49:46:be:19:
a3:02:7d:71:6f:65:31:c6:61:63:8c:3d:88:9e:48:0d:4e:5a:
1f:a5:53:07:79:33:72:cc:b5:f3:b4:d8:69:2e:46:c4:60:49:
b4:e9:61:c5:fd:0f:9b:34:98:05:ab:7b:a0:89:9d:a3:5d:d7:
ac:01:d4:5e:26:2e:2a:a8:6d:44:cf:a2:dd:06:f1:68:82:9f:
29:a9:6c:66:ea:1b:b9:69:a6:5d:3e:b4:6b:4c:11:06:3b:73:
0b:fc:46:51:95:ba:62:17:77:dd:d6:74:97:1e:98:25:3f:cd:
a9:c4:13:6e:b9:c6:c4:87:50:eb:4c:eb:76:28:0d:19:2d:17:
ff:5d:2b:db:a7:12:f2:ea:e6:43:db:30:3f:a4:61:ef:57:df:
bc:ab:86:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:32:22 2026 by rpki-client