
$ rpki-client -vvf rpkica.twnic.tw/rpki/CCP1138470/0/30886A5C2BBD980DCAD17065B483FDADE1588115.mft
File: 30886A5C2BBD980DCAD17065B483FDADE1588115.mft (raw, json)
Hash identifier: FXCjH96Cg62wtfrPzFO8eMGVuLsSgSmqv2VmMweNwSE=
Subject key identifier: F2:DB:F9:10:4E:4F:29:23:DE:64:5D:04:F1:14:35:4F:A6:C1:0D:BC
Authority key identifier: 30:88:6A:5C:2B:BD:98:0D:CA:D1:70:65:B4:83:FD:AD:E1:58:81:15
Certificate issuer: /CN=30886A5C2BBD980DCAD17065B483FDADE1588115
Certificate serial: 3ACA3F0E168CE9AD3D3AACD4A616D352786A8778
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/30886A5C2BBD980DCAD17065B483FDADE1588115.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CCP1138470/0/30886A5C2BBD980DCAD17065B483FDADE1588115.mft
Manifest number: 2F
Signing time: Sat 13 Jun 2026 17:55:06 +0000
Manifest this update: Sat 13 Jun 2026 17:50:06 +0000
Manifest next update: Sun 14 Jun 2026 21:27:06 +0000
Files and hashes: 1: 323430303a353036303a3a2f33322d3634203d3e203633383933.roa (hash: BHydVbU3JrPLjHj9vIjP5kSoTesZAdHvlP38+Eg+13A=)
2: 30886A5C2BBD980DCAD17065B483FDADE1588115.crl (hash: kURig9lB/YvKOte8LwttVmC+sj7NhbJYRGgVx/4/asU=)
3: 3130332e3138302e31342e302f32332d3234203d3e203633383933.roa (hash: dIUSmyYxKhCOy30LHVb9g7/r4ZV90ZHq3KAUNhUgfNQ=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/CCP1138470/0/30886A5C2BBD980DCAD17065B483FDADE1588115.crl
rsync://rpkica.twnic.tw/rpki/CCP1138470/0/30886A5C2BBD980DCAD17065B483FDADE1588115.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/30886A5C2BBD980DCAD17065B483FDADE1588115.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 19:52:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:ca:3f:0e:16:8c:e9:ad:3d:3a:ac:d4:a6:16:d3:52:78:6a:87:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30886A5C2BBD980DCAD17065B483FDADE1588115
Validity
Not Before: Jun 13 17:50:06 2026 GMT
Not After : Jun 14 21:27:06 2026 GMT
Subject: CN=F2DBF9104E4F2923DE645D04F114354FA6C10DBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:96:ce:a4:7f:4b:0d:0c:7a:86:a4:be:97:0d:
d3:0d:7f:80:27:6a:c3:78:2c:ec:83:63:c8:22:61:
b0:05:3c:ea:2e:89:de:2a:f4:05:64:4c:e9:1d:64:
f6:4e:27:6a:bc:54:2c:c3:ed:36:31:d0:f6:50:ef:
96:33:72:6f:e3:bb:c1:10:e3:24:1f:fc:f7:2b:2a:
4f:35:b4:2a:b2:5f:8f:bd:8d:cc:b8:b3:70:ad:ca:
22:36:31:ca:b2:b8:c6:4c:0c:c3:4c:6d:54:09:72:
34:a9:6f:31:d6:4d:a4:70:4d:ba:bb:f4:1a:16:5f:
03:8a:a2:bc:36:4e:c1:7d:de:e7:89:f4:02:81:63:
5e:a6:89:df:d3:7c:65:ac:93:f2:f9:cf:1d:9c:b1:
a9:d2:d4:2d:db:a2:be:2a:08:e0:ce:8e:1b:6f:84:
10:99:b4:01:a6:3b:5e:60:10:24:c6:a5:16:e3:d5:
0c:41:8c:22:9a:5d:9b:28:00:a9:ac:2f:ef:57:e7:
56:b7:59:2a:21:29:e3:c5:9c:c6:a3:2f:1f:a0:69:
81:14:93:1b:fc:84:f6:3c:30:40:8b:69:58:bc:eb:
80:bf:24:0f:5f:58:cd:14:88:c6:d6:36:a3:78:81:
7a:49:ff:c1:36:36:5d:af:b9:b2:5d:56:d5:f6:7d:
19:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:DB:F9:10:4E:4F:29:23:DE:64:5D:04:F1:14:35:4F:A6:C1:0D:BC
X509v3 Authority Key Identifier:
keyid:30:88:6A:5C:2B:BD:98:0D:CA:D1:70:65:B4:83:FD:AD:E1:58:81:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CCP1138470/0/30886A5C2BBD980DCAD17065B483FDADE1588115.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/30886A5C2BBD980DCAD17065B483FDADE1588115.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CCP1138470/0/30886A5C2BBD980DCAD17065B483FDADE1588115.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:2a:d1:ad:ee:3b:75:1b:b3:f2:69:3d:b0:a6:28:9c:d5:2b:
fe:c3:63:92:4f:68:f1:0d:87:19:14:e3:ff:6f:c4:ae:85:bd:
52:ac:1f:aa:e1:5a:58:ed:a7:ae:58:96:c5:8c:f0:fe:73:20:
c0:af:10:37:5e:e9:9f:dc:69:ff:2c:a1:5a:32:9f:22:28:7c:
dd:f5:56:54:a4:9a:29:ff:54:11:74:bc:65:21:51:10:26:02:
11:b9:9e:62:8d:7b:e6:52:35:d0:50:80:88:c8:ee:c6:af:a1:
45:7a:10:d7:40:d0:85:b5:bf:80:43:27:c9:63:4d:af:fb:0b:
0b:4d:67:55:3a:5c:73:8d:99:ba:b1:bb:f7:f0:e3:f7:cd:ce:
ab:5b:0f:80:3d:ff:5e:5b:7a:93:38:e3:6c:66:6f:fd:37:ff:
0d:56:9b:01:f4:81:68:67:62:36:73:e2:4e:d7:56:77:ca:21:
e0:96:8f:91:8c:89:7a:8c:d1:a4:9b:01:49:5f:65:9d:82:74:
cb:97:57:9a:85:75:78:5a:33:1f:5a:dd:cf:0d:1d:27:5c:d4:
e5:9e:fa:d4:1f:a1:97:e0:f6:71:23:9d:e1:32:34:29:07:3c:
c7:2b:12:0b:f9:b7:57:b2:a9:ea:b0:21:1c:63:94:dd:2f:a4:
15:c8:c5:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:19:54 2026 by rpki-client