
$ rpki-client -vvvf rpkica.twnic.tw/rpki/DAFU/0/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.mft
File: 9D0F6D536F053C3BB5233E68E0636F8A6FADA460.mft (raw, json)
Hash identifier: KmEF5JJQNw/1Zoj2omlKjjPQ1AYuTpYMTewxGhZL6K0=
Subject key identifier: AC:25:84:E6:93:61:43:4F:BB:2E:76:D8:DA:9C:43:FA:72:53:CC:72
Authority key identifier: 9D:0F:6D:53:6F:05:3C:3B:B5:23:3E:68:E0:63:6F:8A:6F:AD:A4:60
Certificate issuer: /CN=9D0F6D536F053C3BB5233E68E0636F8A6FADA460
Certificate serial: 28B9BA340A0478BA1AAEF0E9BF080BF944AA16
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/DAFU/0/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.mft
Manifest number: B6
Signing time: Sun 20 Sep 2026 20:44:19 +0000
Manifest this update: Sun 20 Sep 2026 20:39:19 +0000
Manifest next update: Tue 22 Sep 2026 00:05:19 +0000
Files and hashes: 1: 9D0F6D536F053C3BB5233E68E0636F8A6FADA460.crl (hash: duh3u3G/o0yvRCNc/+HsB80PswgHh6Y5h+jwy+HCqSM=)
2: 3231302e312e3233342e302f32342d3332203d3e20313331363537.roa (hash: pYVK17zAbMWT4djhepdkPZ+a4SmhzlWvmNCdXixNe1Y=)
3: 3231302e312e3233342e302f32342d3332203d3e20313334383233.roa (hash: dFGbPuZUVl9n4NEFbEpxmNgTeCxq+xPVEQs+VbBbgw8=)
4: 3231302e312e3233352e302f32342d3332203d3e20313334383233.roa (hash: 1dxx2UnOoxxG5IvdlSa/CJUvxkuNs3hW+sxUCu3CP4M=)
5: 3231302e312e3233342e302f32332d3332203d3e20313334383233.roa (hash: HWI5VQZaFjKYV+LScUBkUhCoJacVyotR7e1ayxfccA8=)
6: 3231302e312e3233342e302f32332d3332203d3e20313331363537.roa (hash: XhpQ+C1tVRKngGZ94cXlaeW9/WXKoL5qCwvg98P9HFY=)
7: 3231302e312e3233352e302f32342d3332203d3e20313331363537.roa (hash: RLXRr3oaU8tfZv8c58D+ZW+I4V/4m7eEXGAKJ8n/Gpk=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/DAFU/0/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.crl
rsync://rpkica.twnic.tw/rpki/DAFU/0/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 21 Sep 2026 08:58:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:b9:ba:34:0a:04:78:ba:1a:ae:f0:e9:bf:08:0b:f9:44:aa:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9D0F6D536F053C3BB5233E68E0636F8A6FADA460
Validity
Not Before: Sep 20 20:39:19 2026 GMT
Not After : Sep 22 00:05:19 2026 GMT
Subject: CN=AC2584E69361434FBB2E76D8DA9C43FA7253CC72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3e:78:62:e7:e2:52:13:45:3b:fe:65:17:1d:
5f:0f:dd:66:bc:87:be:8d:0b:48:06:b5:8b:2a:94:
8a:e8:8e:b5:4b:65:b1:5c:e3:8c:29:47:d3:8d:3d:
d5:dd:ab:2b:45:c2:33:e7:df:5a:f8:54:f5:d4:90:
48:05:88:3c:0d:f6:70:fe:59:e2:9c:5f:91:35:5f:
76:c8:24:89:ca:af:84:dd:02:d2:35:90:c0:81:f1:
f0:03:37:13:02:c1:47:f2:8b:23:81:8d:29:75:ad:
d4:e8:54:ba:ec:e2:a7:6a:ad:0e:3f:d5:66:0d:3c:
3f:fc:94:a0:77:66:bc:93:62:db:32:1e:dc:23:1c:
ea:06:bf:e2:0b:3a:62:a2:0f:7c:62:f0:16:92:76:
48:aa:4c:c6:fa:9a:32:9e:17:73:ed:cf:32:c6:5e:
32:93:24:23:8b:18:ba:52:d6:e0:ba:50:28:82:ba:
32:2a:1e:81:4b:5e:8e:00:1a:78:4c:b9:18:83:df:
8a:3b:27:72:96:26:0d:77:b2:f2:83:40:40:bd:1e:
fe:fe:f2:6f:55:a8:c7:9c:94:f9:74:bc:a7:93:c6:
2c:90:df:45:1b:e9:77:9e:15:3a:42:fe:4f:f7:d6:
2b:d3:55:35:a3:90:74:95:60:c8:4a:05:60:fe:25:
f6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:25:84:E6:93:61:43:4F:BB:2E:76:D8:DA:9C:43:FA:72:53:CC:72
X509v3 Authority Key Identifier:
keyid:9D:0F:6D:53:6F:05:3C:3B:B5:23:3E:68:E0:63:6F:8A:6F:AD:A4:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/DAFU/0/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DAFU/0/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:05:77:ea:9b:93:74:4c:19:45:95:b2:9c:48:52:82:4c:1b:
e6:46:ba:19:99:ab:4c:9e:f9:be:d9:2b:93:c2:99:a7:22:36:
31:f8:4b:0d:ea:ab:89:01:c0:56:dc:78:c1:05:a8:8f:86:c1:
09:45:fc:73:58:7a:1c:57:aa:c8:05:49:8b:d6:45:82:df:fa:
7c:31:83:32:68:c5:af:16:0c:6e:a2:1a:e7:b3:36:8d:26:5e:
48:04:24:46:3c:df:67:5f:13:16:d9:58:27:94:af:e0:cb:79:
99:28:33:24:b5:ee:af:0e:e1:61:57:d6:e7:fe:84:ad:88:34:
a0:18:f1:48:9f:03:7a:a3:c4:99:1b:63:77:1e:11:62:03:1a:
57:8c:fd:af:af:4b:18:d7:f2:40:98:5d:27:b0:42:54:a4:8b:
43:db:aa:d7:57:ff:60:ed:32:7d:ce:62:2f:9b:64:c9:b4:2c:
4b:3a:e1:84:da:fc:00:d3:83:a6:51:32:e1:cf:42:aa:41:c8:
0a:20:23:62:f9:f8:0c:22:20:6c:c7:23:7e:c8:ca:20:02:ad:
bf:0b:12:43:f9:71:eb:e6:94:f4:51:a5:c9:6b:18:be:05:81:
5f:37:35:c7:f8:3b:ef:df:5f:49:7c:a9:6a:3f:ed:1d:c6:12:
e5:08:7b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 03:23:19 2026 by rpki-client