
$ rpki-client -vvf rpkica.twnic.tw/rpki/ETIME/0/60DF11AF99914DE6BE9FA9FC357DA624FB09A782.mft
File: 60DF11AF99914DE6BE9FA9FC357DA624FB09A782.mft (raw, json)
Hash identifier: 2LwFt8DeOsNE4pcbTefPGDhmpi0klp2u8ecQybAF7cg=
Subject key identifier: 10:87:60:98:70:61:35:6A:27:CE:F0:D0:09:92:2C:D7:1E:59:28:85
Authority key identifier: 60:DF:11:AF:99:91:4D:E6:BE:9F:A9:FC:35:7D:A6:24:FB:09:A7:82
Certificate issuer: /CN=60DF11AF99914DE6BE9FA9FC357DA624FB09A782
Certificate serial: 3A534C9F86874B4217BF995EF8A196491512B211
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60DF11AF99914DE6BE9FA9FC357DA624FB09A782.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/ETIME/0/60DF11AF99914DE6BE9FA9FC357DA624FB09A782.mft
Manifest number: 71
Signing time: Tue 28 Jul 2026 19:34:46 +0000
Manifest this update: Tue 28 Jul 2026 19:29:46 +0000
Manifest next update: Wed 29 Jul 2026 22:45:46 +0000
Files and hashes: 1: 3130332e3135382e3232382e302f32332d3234203d3e203338303432.roa (hash: ESFw0aIs2H2WE3n5vMYD8DiRXzpjyIx6BH09Jb/uPSA=)
2: 3130332e3135382e3232392e302f32342d3234203d3e20323032313738.roa (hash: 36VbKnSGpgcdcCiZk8qKilZQbhaGmPl28tkFxSGT1yg=)
3: 3130332e3232372e3232362e302f32332d3234203d3e203338303432.roa (hash: ff5S7OEmM//n6GU4K964/uiKkS6MgGcigh6CQDM5Nu4=)
4: 3130332e3232372e3232372e302f32342d3234203d3e203436353539.roa (hash: PexZ5/ttIlxxzCl8DT6JrqWQ7DlW6W8Ek+MtGNVEoCI=)
5: 60DF11AF99914DE6BE9FA9FC357DA624FB09A782.crl (hash: RkDbKOjQSGfyDUqDPJrM5YgfFyBcnFug8SjbPUxKxes=)
6: 3130332e3232372e3232362e302f32332d3234203d3e20313334383233.roa (hash: VgELE2Z0+fZSqQX80y/ZKahTNsQCGSrMSvntHyntpVk=)
7: 3130332e3232372e3232362e302f32342d3234203d3e20313438393936.roa (hash: jTOUh86WcVTFs/4H0jRDiOylI1e3Cfw5Tggw5E2CXt4=)
8: 3130332e3135382e3232382e302f32332d3234203d3e20313331313531.roa (hash: JMHd5OxzysIcZM3XC770NhHz5R1MfZGIE6Db7xvSS4g=)
9: 3130332e3135382e3232382e302f32332d3234203d3e20313334383233.roa (hash: DqWqI7QKyLevd3P8uVl5JKPNPOWQfU6GCWPgrPGrGbU=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/ETIME/0/60DF11AF99914DE6BE9FA9FC357DA624FB09A782.crl
rsync://rpkica.twnic.tw/rpki/ETIME/0/60DF11AF99914DE6BE9FA9FC357DA624FB09A782.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60DF11AF99914DE6BE9FA9FC357DA624FB09A782.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 07:22:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:53:4c:9f:86:87:4b:42:17:bf:99:5e:f8:a1:96:49:15:12:b2:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60DF11AF99914DE6BE9FA9FC357DA624FB09A782
Validity
Not Before: Jul 28 19:29:46 2026 GMT
Not After : Jul 29 22:45:46 2026 GMT
Subject: CN=108760987061356A27CEF0D009922CD71E592885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:41:d9:5d:60:43:48:56:ae:f4:6e:e8:9e:67:
33:7c:e7:16:6b:9c:a3:43:e8:13:e1:40:96:ee:30:
39:e4:54:1f:b7:21:f4:31:c7:53:5a:e6:5c:a5:b7:
50:bd:3c:75:9a:a7:85:b6:c9:09:65:eb:66:92:bd:
36:fa:94:f7:e3:34:f0:f3:5f:fc:0c:72:b8:df:73:
cf:74:4a:11:59:70:0e:36:53:a9:3d:b2:ce:ac:42:
d4:9a:46:89:f4:91:40:bb:db:20:6a:9a:b2:2a:ec:
ea:8c:50:76:16:f3:8d:f6:d3:ea:16:74:1c:af:d7:
3f:ec:bd:59:88:57:48:8e:c6:9e:93:ef:86:62:fc:
ea:aa:43:f6:bc:3f:ad:c9:0c:1a:f5:0d:fb:db:8a:
cb:27:4b:9c:b1:5e:ee:7f:aa:ca:ca:30:6a:16:ff:
4b:9b:f9:ce:e3:eb:f8:16:f2:54:27:26:58:d7:67:
60:52:a8:71:56:b3:89:d7:fa:d6:59:df:57:e1:10:
ea:93:70:b4:2f:3e:08:d3:ac:be:5e:7f:3e:79:84:
00:7b:79:38:c6:e6:72:e5:47:f2:9c:c2:b2:dc:74:
5d:66:e6:e8:16:f1:cd:3d:59:7c:9b:bf:76:18:2f:
34:22:6a:58:e5:e8:78:d1:b3:ce:ce:4f:0f:36:7a:
d5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:87:60:98:70:61:35:6A:27:CE:F0:D0:09:92:2C:D7:1E:59:28:85
X509v3 Authority Key Identifier:
keyid:60:DF:11:AF:99:91:4D:E6:BE:9F:A9:FC:35:7D:A6:24:FB:09:A7:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/ETIME/0/60DF11AF99914DE6BE9FA9FC357DA624FB09A782.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60DF11AF99914DE6BE9FA9FC357DA624FB09A782.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ETIME/0/60DF11AF99914DE6BE9FA9FC357DA624FB09A782.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:b1:4d:ae:ce:7f:ea:cd:67:cf:88:a4:93:b9:d8:58:4b:e3:
50:f3:95:fc:c9:9d:81:99:82:e3:f4:23:11:62:ed:ae:c0:f0:
57:88:94:0c:9d:3e:94:34:a8:42:56:a7:43:1d:be:24:36:3c:
f1:be:db:3b:49:6f:bf:2d:f0:58:b9:83:7c:3b:98:fe:20:a3:
48:9f:6a:ca:0b:aa:6e:7e:8f:2e:e5:4f:4e:fd:d8:5d:28:b2:
64:49:31:f7:57:2b:42:d0:43:a1:94:5e:1c:e8:9c:c3:ff:dd:
93:19:c7:e5:c2:a8:82:a1:50:cd:9c:e3:a6:69:32:b6:54:86:
8e:28:d0:22:97:d9:7f:23:4f:06:17:af:2f:4f:24:de:50:78:
32:aa:88:6f:d0:f0:f5:a8:fd:00:cc:14:77:38:f0:2b:ef:a9:
d9:e9:8b:eb:1e:90:23:1b:dc:bc:4c:1d:81:06:6b:d8:47:0c:
da:dd:e2:c8:50:cd:41:69:26:20:22:41:a9:84:d3:b8:82:f8:
bf:a3:e0:36:a7:eb:6a:c4:78:94:13:50:73:22:03:69:ed:75:
67:28:6f:f7:ba:9e:ee:39:58:f9:f3:7c:c2:df:12:0a:fd:75:
67:3b:69:f2:cc:cc:00:0a:f1:de:9b:a2:fe:f5:79:77:3f:59:
dd:bb:6d:1a
-----BEGIN CERTIFICATE-----
MIIE4jCCA8qgAwIBAgIUOlNMn4aHS0IXv5le+KGWSRUSshEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjBERjExQUY5OTkxNERFNkJFOUZBOUZDMzU3REE2MjRG
QjA5QTc4MjAeFw0yNjA3MjgxOTI5NDZaFw0yNjA3MjkyMjQ1NDZaMDMxMTAvBgNV
BAMTKDEwODc2MDk4NzA2MTM1NkEyN0NFRjBEMDA5OTIyQ0Q3MUU1OTI4ODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeQdldYENIVq70buieZzN85xZr
nKND6BPhQJbuMDnkVB+3IfQxx1Na5lylt1C9PHWap4W2yQll62aSvTb6lPfjNPDz
X/wMcrjfc890ShFZcA42U6k9ss6sQtSaRon0kUC72yBqmrIq7OqMUHYW84320+oW
dByv1z/svVmIV0iOxp6T74Zi/OqqQ/a8P63JDBr1DfvbissnS5yxXu5/qsrKMGoW
/0ub+c7j6/gW8lQnJljXZ2BSqHFWs4nX+tZZ31fhEOqTcLQvPgjTrL5efz55hAB7
eTjG5nLlR/KcwrLcdF1m5ugW8c09WXybv3YYLzQialjl6HjRs87OTw82etWDAgMB
AAGjggHsMIIB6DAdBgNVHQ4EFgQUEIdgmHBhNWonzvDQCZIs1x5ZKIUwHwYDVR0j
BBgwFoAUYN8Rr5mRTea+n6n8NX2mJPsJp4IwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud
HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRVRJTUUv
MC82MERGMTFBRjk5OTE0REU2QkU5RkE5RkMzNTdEQTYyNEZCMDlBNzgyLmNybDBv
BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS8xLzYwREYxMUFGOTk5MTRERTZCRTlGQTlGQzM1N0RB
NjI0RkIwOUE3ODIuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5
bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9FVElNRS8wLzYwREYxMUFGOTk5MTRE
RTZCRTlGQTlGQzM1N0RBNjI0RkIwOUE3ODIubWZ0MBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCpsU2uzn/qzWfP
iKSTudhYS+NQ85X8yZ2BmYLj9CMRYu2uwPBXiJQMnT6UNKhCVqdDHb4kNjzxvts7
SW+/LfBYuYN8O5j+IKNIn2rKC6pufo8u5U9O/dhdKLJkSTH3VytC0EOhlF4c6JzD
/92TGcflwqiCoVDNnOOmaTK2VIaOKNAil9l/I08GF68vTyTeUHgyqohv0PD1qP0A
zBR3OPAr76nZ6YvrHpAjG9y8TB2BBmvYRwza3eLIUM1BaSYgIkGphNO4gvi/o+A2
p+tqxHiUE1BzIgNp7XVnKG/3up7uOVj583zC3xIK/XVnO2nyzMwACvHem6L+9Xl3
P1ndu20a
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:17:27 2026 by rpki-client