
$ rpki-client -vvf rpkica.twnic.tw/rpki/CSPTEK/0/8F1212A19454D2A49786359CAC45368F821417D6.mft
File: 8F1212A19454D2A49786359CAC45368F821417D6.mft (raw, json)
Hash identifier: JUSLD3R60mBUekTsrUBrrsHavE8koqm87oTlNgqb75g=
Subject key identifier: 54:53:70:6B:FD:7D:21:20:FE:9E:83:BE:8F:D8:5B:54:36:69:29:8A
Authority key identifier: 8F:12:12:A1:94:54:D2:A4:97:86:35:9C:AC:45:36:8F:82:14:17:D6
Certificate issuer: /CN=8F1212A19454D2A49786359CAC45368F821417D6
Certificate serial: 7E9B9D7B05CACADBA25ECBF8BA7A218891D83286
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8F1212A19454D2A49786359CAC45368F821417D6.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CSPTEK/0/8F1212A19454D2A49786359CAC45368F821417D6.mft
Manifest number: 2F
Signing time: Fri 12 Jun 2026 20:58:05 +0000
Manifest this update: Fri 12 Jun 2026 20:53:05 +0000
Manifest next update: Sat 13 Jun 2026 22:32:05 +0000
Files and hashes: 1: 323430363a643763303a3a2f33322d3438203d3e203338303038.roa (hash: uMtY/GmVL72No2RBdo9smGFIzi+iIhlXKaPRp7r/VTo=)
2: 323430363a643763303a3a2f33322d3438203d3e203338383339.roa (hash: Z694/6d2G+L3RUACrnL4ZOBmDtfn2t+JQdVIPZHPNRw=)
3: 3130332e3135392e3137362e302f32332d3234203d3e203338383339.roa (hash: fgIPz4pRjg9MozWHN5C9tmdzsbKi6XEfF4wUaKsvsnA=)
4: 8F1212A19454D2A49786359CAC45368F821417D6.crl (hash: 2O211B552sA9fTDyStM9ec1y4yF2NnU1zk9NR+UsulA=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/CSPTEK/0/8F1212A19454D2A49786359CAC45368F821417D6.crl
rsync://rpkica.twnic.tw/rpki/CSPTEK/0/8F1212A19454D2A49786359CAC45368F821417D6.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8F1212A19454D2A49786359CAC45368F821417D6.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 22:32:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:9b:9d:7b:05:ca:ca:db:a2:5e:cb:f8:ba:7a:21:88:91:d8:32:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8F1212A19454D2A49786359CAC45368F821417D6
Validity
Not Before: Jun 12 20:53:05 2026 GMT
Not After : Jun 13 22:32:05 2026 GMT
Subject: CN=5453706BFD7D2120FE9E83BE8FD85B543669298A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9c:c2:6e:bb:5b:67:ef:a8:8a:01:ba:69:d0:
fd:1f:f1:4a:7d:df:e5:85:46:b6:19:4c:16:cf:a1:
85:97:df:8b:7b:4d:2a:2e:1a:7d:2c:36:b3:ad:ee:
dd:76:35:91:ac:50:51:f1:7a:63:37:00:ae:28:df:
36:56:64:fc:8f:43:b8:f8:17:18:fd:65:c2:32:22:
8d:87:2c:c1:46:5f:72:d3:1f:62:e6:41:b9:9c:57:
3a:6a:19:ff:1d:fb:cc:2e:89:0f:95:d9:50:16:e0:
cc:51:49:b9:6b:a7:a0:f9:4f:50:79:08:27:a5:90:
ec:04:ea:5d:09:86:9b:c5:25:99:4e:21:db:62:fb:
53:fa:fc:9f:8a:f3:97:40:1a:df:40:cb:58:92:c9:
08:a3:62:a9:43:00:c0:fc:5c:27:a7:dc:01:4e:d7:
da:a2:54:96:bb:17:0e:0b:40:4f:ec:cc:54:9a:92:
2a:35:40:9b:e9:2b:34:6b:3d:f0:ab:bf:32:e2:f6:
49:c1:f8:50:bb:bd:04:73:9b:95:a1:2f:47:c3:fe:
35:65:da:9a:70:89:43:e1:b7:f0:7c:b9:1c:58:bc:
90:d9:3f:1b:96:22:a2:c2:f6:cb:70:3a:34:c5:42:
04:fe:ae:ee:9d:fb:28:1f:5a:34:57:f9:18:bc:f8:
1d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:53:70:6B:FD:7D:21:20:FE:9E:83:BE:8F:D8:5B:54:36:69:29:8A
X509v3 Authority Key Identifier:
keyid:8F:12:12:A1:94:54:D2:A4:97:86:35:9C:AC:45:36:8F:82:14:17:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CSPTEK/0/8F1212A19454D2A49786359CAC45368F821417D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8F1212A19454D2A49786359CAC45368F821417D6.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CSPTEK/0/8F1212A19454D2A49786359CAC45368F821417D6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:94:f8:7c:75:ef:04:c5:67:21:4e:4f:8a:20:88:31:07:0b:
25:05:fa:c5:3d:15:44:31:40:a2:19:69:22:5e:46:fb:9d:98:
e5:24:1c:2c:cd:fb:4b:41:94:c2:84:bc:6a:67:e0:ee:58:12:
23:33:26:30:02:c2:e1:de:ba:70:54:7b:8f:12:23:96:58:eb:
c5:e4:c5:d6:32:c9:5e:68:da:40:88:7d:66:c1:e7:c1:5e:91:
e1:d5:2f:86:22:e3:a9:3f:39:24:09:0f:3c:6e:fe:10:cd:d5:
52:27:6c:99:79:86:c6:13:c2:f6:4e:b8:14:8a:27:b8:f0:5e:
5b:bf:62:05:2a:8f:42:4e:ae:18:00:f6:92:50:31:8d:14:22:
16:47:e3:7d:43:69:c0:8c:5b:6a:53:82:98:cd:4c:ed:ad:1e:
f5:65:9b:53:19:29:c6:21:19:5a:2e:0f:c1:b6:29:94:eb:4f:
00:ce:4d:51:72:6a:86:f5:9b:29:2b:b6:d7:3a:04:ce:6b:de:
9f:73:49:7e:1a:47:92:5e:c4:7f:03:42:7e:15:1c:04:7a:5f:
d1:6c:f9:9d:c8:43:f9:11:cf:a7:9a:3a:f0:5b:9b:1e:89:0e:
7e:64:bc:dd:e7:e4:13:d8:0d:25:c8:8a:14:cc:e6:a9:0f:22:
21:28:ce:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 12:55:14 2026 by rpki-client