
$ rpki-client -vvf rpkica.twnic.tw/rpki/ETIME/0/60DF11AF99914DE6BE9FA9FC357DA624FB09A782.mft
File: 60DF11AF99914DE6BE9FA9FC357DA624FB09A782.mft (raw, json)
Hash identifier: tXrnwjOGqjI66AHr/aPLtYmoRBV8QvBOSSIJ+hF7lrw=
Subject key identifier: 8E:B0:2F:D5:0C:AF:3E:38:70:28:5C:35:2D:A2:2A:E3:44:80:8F:4D
Authority key identifier: 60:DF:11:AF:99:91:4D:E6:BE:9F:A9:FC:35:7D:A6:24:FB:09:A7:82
Certificate issuer: /CN=60DF11AF99914DE6BE9FA9FC357DA624FB09A782
Certificate serial: 52530E2C0008A6A038D41F1AB5DC3B13324BCF72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60DF11AF99914DE6BE9FA9FC357DA624FB09A782.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/ETIME/0/60DF11AF99914DE6BE9FA9FC357DA624FB09A782.mft
Manifest number: 34
Signing time: Fri 12 Jun 2026 20:58:06 +0000
Manifest this update: Fri 12 Jun 2026 20:53:06 +0000
Manifest next update: Sat 13 Jun 2026 23:47:06 +0000
Files and hashes: 1: 3130332e3135382e3232382e302f32332d3234203d3e20313334383233.roa (hash: DqWqI7QKyLevd3P8uVl5JKPNPOWQfU6GCWPgrPGrGbU=)
2: 3130332e3135382e3232382e302f32332d3234203d3e20313331313531.roa (hash: JMHd5OxzysIcZM3XC770NhHz5R1MfZGIE6Db7xvSS4g=)
3: 3130332e3232372e3232362e302f32332d3234203d3e203338303432.roa (hash: ff5S7OEmM//n6GU4K964/uiKkS6MgGcigh6CQDM5Nu4=)
4: 3130332e3135382e3232392e302f32342d3234203d3e20323032313738.roa (hash: 36VbKnSGpgcdcCiZk8qKilZQbhaGmPl28tkFxSGT1yg=)
5: 3130332e3232372e3232372e302f32342d3234203d3e203436353539.roa (hash: PexZ5/ttIlxxzCl8DT6JrqWQ7DlW6W8Ek+MtGNVEoCI=)
6: 60DF11AF99914DE6BE9FA9FC357DA624FB09A782.crl (hash: Ht1cteuMQ0O7iBKL3Et86h6nZ6X5eYdUnU9g+NiP4mM=)
7: 3130332e3135382e3232382e302f32332d3234203d3e203338303432.roa (hash: ESFw0aIs2H2WE3n5vMYD8DiRXzpjyIx6BH09Jb/uPSA=)
8: 3130332e3232372e3232362e302f32342d3234203d3e20313438393936.roa (hash: jTOUh86WcVTFs/4H0jRDiOylI1e3Cfw5Tggw5E2CXt4=)
9: 3130332e3232372e3232362e302f32332d3234203d3e20313334383233.roa (hash: VgELE2Z0+fZSqQX80y/ZKahTNsQCGSrMSvntHyntpVk=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/ETIME/0/60DF11AF99914DE6BE9FA9FC357DA624FB09A782.crl
rsync://rpkica.twnic.tw/rpki/ETIME/0/60DF11AF99914DE6BE9FA9FC357DA624FB09A782.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60DF11AF99914DE6BE9FA9FC357DA624FB09A782.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 23:47:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:53:0e:2c:00:08:a6:a0:38:d4:1f:1a:b5:dc:3b:13:32:4b:cf:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60DF11AF99914DE6BE9FA9FC357DA624FB09A782
Validity
Not Before: Jun 12 20:53:06 2026 GMT
Not After : Jun 13 23:47:06 2026 GMT
Subject: CN=8EB02FD50CAF3E3870285C352DA22AE344808F4D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fe:40:7d:f8:82:66:8a:6a:ad:21:27:a2:f2:
9a:b1:0e:8d:08:c2:d5:02:ce:91:20:cc:f7:2c:ae:
cc:b5:f7:c3:1c:75:d4:ed:f5:b9:58:9b:51:9a:cd:
71:7d:ec:63:07:71:db:a4:c3:9b:b9:bb:e6:54:bf:
af:26:8c:56:1e:90:07:20:58:5a:c7:d6:f5:75:a0:
fe:7c:82:cc:5c:26:e5:05:0c:58:09:b5:19:d0:d8:
cc:2b:75:4e:1a:8e:6d:24:dc:f3:5d:0e:b4:56:4e:
a5:58:08:9b:ca:bd:91:5f:d0:f0:a4:6e:a3:c2:9e:
d9:ef:1c:48:ff:59:74:4a:1e:2d:92:ef:86:e5:58:
93:cb:75:e4:5d:87:c9:d4:7d:d4:df:d7:12:0f:13:
a9:f0:9e:d5:05:9a:17:b5:d3:6e:36:7d:88:00:37:
03:de:26:a0:72:95:d1:82:36:6a:c3:ed:6f:cc:08:
2c:fa:e5:b8:22:33:d8:d0:0c:34:a7:e7:04:2c:fb:
85:74:ab:de:18:38:dd:51:c9:17:35:47:e0:57:13:
3d:a0:49:de:7c:7a:e9:8b:4f:91:5a:30:52:bf:5c:
37:83:b5:c7:e3:e2:45:a5:63:80:48:da:e8:3c:7d:
a5:1c:f3:19:0a:a3:e3:7d:35:60:1a:d8:8f:f4:3c:
9f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:B0:2F:D5:0C:AF:3E:38:70:28:5C:35:2D:A2:2A:E3:44:80:8F:4D
X509v3 Authority Key Identifier:
keyid:60:DF:11:AF:99:91:4D:E6:BE:9F:A9:FC:35:7D:A6:24:FB:09:A7:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/ETIME/0/60DF11AF99914DE6BE9FA9FC357DA624FB09A782.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60DF11AF99914DE6BE9FA9FC357DA624FB09A782.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ETIME/0/60DF11AF99914DE6BE9FA9FC357DA624FB09A782.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:96:f5:68:18:f4:69:37:63:74:79:aa:4a:d4:a9:37:4a:c1:
f5:05:f6:b4:9b:ef:7c:50:db:4d:77:52:00:77:6d:1a:33:c5:
11:db:22:fa:66:17:ec:0b:04:5e:da:82:e9:6f:03:99:fa:a5:
b0:e3:26:5c:b7:c9:a2:fa:05:c0:c5:64:77:18:fa:5d:6c:e8:
d0:8d:84:c0:ac:30:c7:67:87:f9:32:bc:27:ff:82:55:ad:38:
5a:19:bb:ae:7f:f9:6e:a6:2a:80:94:4d:9f:56:d1:98:ec:82:
35:27:d3:38:fb:8d:75:40:36:95:e0:6e:ac:a9:9e:ce:12:1d:
65:7c:6f:20:bf:42:3d:74:df:8d:88:9c:a6:4e:df:7b:9e:36:
18:73:2a:55:9f:82:a7:e6:97:4b:8a:2d:9a:a7:84:e6:d2:c4:
9c:eb:e9:f5:48:0c:6f:92:ea:dd:e5:24:cf:10:9b:d6:42:be:
6c:a9:2f:ca:3b:8f:9d:a2:b8:6a:a1:38:dc:49:d9:ef:c4:e8:
92:7b:36:73:43:68:ec:4d:f9:3f:0b:05:18:04:ec:38:7c:47:
eb:ca:9a:20:7b:13:9a:d4:3a:fd:be:48:40:d2:ec:40:b4:cc:
e0:02:da:12:1c:a6:79:73:50:ff:d5:5a:54:45:e7:e6:e4:6c:
d4:31:fd:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:10:32 2026 by rpki-client