
$ rpki-client -vvvf rpkica.twnic.tw/rpki/ETIME/0/60DF11AF99914DE6BE9FA9FC357DA624FB09A782.mft
File: 60DF11AF99914DE6BE9FA9FC357DA624FB09A782.mft (raw, json)
Hash identifier: oF6hwMUb947PD6q3HiF3XbaFtswPjxKAq4GUqEpr9ss=
Subject key identifier: 5F:F8:12:00:81:8C:A9:49:67:C8:F3:61:E0:0E:35:A7:E0:E8:EF:9F
Authority key identifier: 60:DF:11:AF:99:91:4D:E6:BE:9F:A9:FC:35:7D:A6:24:FB:09:A7:82
Certificate issuer: /CN=60DF11AF99914DE6BE9FA9FC357DA624FB09A782
Certificate serial: 79BB6CF6640F90AD9DF669FF21C2CADA2420A534
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60DF11AF99914DE6BE9FA9FC357DA624FB09A782.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/ETIME/0/60DF11AF99914DE6BE9FA9FC357DA624FB09A782.mft
Manifest number: BA
Signing time: Mon 21 Sep 2026 03:45:41 +0000
Manifest this update: Mon 21 Sep 2026 03:40:41 +0000
Manifest next update: Tue 22 Sep 2026 05:21:41 +0000
Files and hashes: 1: 3130332e3232372e3232362e302f32342d3234203d3e20313438393936.roa (hash: jTOUh86WcVTFs/4H0jRDiOylI1e3Cfw5Tggw5E2CXt4=)
2: 3130332e3232372e3232362e302f32332d3234203d3e20313334383233.roa (hash: VgELE2Z0+fZSqQX80y/ZKahTNsQCGSrMSvntHyntpVk=)
3: 3130332e3135382e3232382e302f32332d3234203d3e20313331313531.roa (hash: JMHd5OxzysIcZM3XC770NhHz5R1MfZGIE6Db7xvSS4g=)
4: 3130332e3232372e3232372e302f32342d3234203d3e203436353539.roa (hash: PexZ5/ttIlxxzCl8DT6JrqWQ7DlW6W8Ek+MtGNVEoCI=)
5: 3130332e3135382e3232392e302f32342d3234203d3e20323032313738.roa (hash: 36VbKnSGpgcdcCiZk8qKilZQbhaGmPl28tkFxSGT1yg=)
6: 3130332e3232372e3232362e302f32332d3234203d3e203338303432.roa (hash: ff5S7OEmM//n6GU4K964/uiKkS6MgGcigh6CQDM5Nu4=)
7: 3130332e3135382e3232382e302f32332d3234203d3e20313334383233.roa (hash: DqWqI7QKyLevd3P8uVl5JKPNPOWQfU6GCWPgrPGrGbU=)
8: 3130332e3135382e3232382e302f32332d3234203d3e203338303432.roa (hash: ESFw0aIs2H2WE3n5vMYD8DiRXzpjyIx6BH09Jb/uPSA=)
9: 60DF11AF99914DE6BE9FA9FC357DA624FB09A782.crl (hash: QEZbJG40Hfxv19cxhajdIvVPkMyxLQ582FJXhgverh4=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/ETIME/0/60DF11AF99914DE6BE9FA9FC357DA624FB09A782.crl
rsync://rpkica.twnic.tw/rpki/ETIME/0/60DF11AF99914DE6BE9FA9FC357DA624FB09A782.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60DF11AF99914DE6BE9FA9FC357DA624FB09A782.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 03:47:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:bb:6c:f6:64:0f:90:ad:9d:f6:69:ff:21:c2:ca:da:24:20:a5:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60DF11AF99914DE6BE9FA9FC357DA624FB09A782
Validity
Not Before: Sep 21 03:40:41 2026 GMT
Not After : Sep 22 05:21:41 2026 GMT
Subject: CN=5FF81200818CA94967C8F361E00E35A7E0E8EF9F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7d:41:e2:f7:6e:23:31:38:6e:de:22:a9:34:
38:1b:42:5b:71:b5:72:c5:ed:0e:05:36:23:d1:85:
ca:42:4e:77:e4:59:f2:fa:bb:60:be:21:d2:98:68:
77:45:6c:9d:44:51:3c:cd:de:0c:77:d3:89:6c:a3:
a9:f3:47:6a:d4:80:39:18:3d:43:5f:fb:2c:c0:3e:
14:23:58:f5:7c:cf:a0:f2:cf:3b:0f:2e:99:53:f6:
d6:98:9c:20:c1:06:32:d1:15:4c:e2:22:50:be:aa:
3d:4a:e3:51:c2:0a:ef:14:89:1d:2f:3e:6c:15:b3:
58:ad:26:d4:93:99:e0:bd:13:df:a4:a9:bd:e7:2d:
05:fc:6e:a8:57:53:7f:12:df:af:7e:7b:c1:7d:da:
94:68:b7:60:c6:20:76:88:f6:8a:3f:8a:6d:9f:4e:
74:3b:bc:09:36:78:85:86:79:e4:ea:0c:aa:31:1e:
56:e4:37:ab:ca:4a:6b:fb:9d:f0:51:79:12:b2:56:
bc:e1:03:98:15:77:30:bf:0e:bf:eb:79:58:3d:9b:
0b:d7:fa:5b:3e:bb:0f:d3:d2:20:93:0d:c5:6c:f6:
d0:37:72:22:70:89:72:9f:1a:b8:ff:ce:63:10:b5:
da:c8:3a:1c:4d:7f:e3:71:52:27:d8:3c:c7:3e:7f:
27:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:F8:12:00:81:8C:A9:49:67:C8:F3:61:E0:0E:35:A7:E0:E8:EF:9F
X509v3 Authority Key Identifier:
keyid:60:DF:11:AF:99:91:4D:E6:BE:9F:A9:FC:35:7D:A6:24:FB:09:A7:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/ETIME/0/60DF11AF99914DE6BE9FA9FC357DA624FB09A782.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60DF11AF99914DE6BE9FA9FC357DA624FB09A782.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ETIME/0/60DF11AF99914DE6BE9FA9FC357DA624FB09A782.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:3f:61:50:04:50:f5:99:cc:b9:7c:e0:49:fa:fa:31:60:e9:
f3:ec:ee:dd:a1:2e:a7:f3:99:a5:d4:d4:34:fd:4f:06:d3:bc:
74:84:8c:5c:10:c6:7d:b9:e2:28:06:1a:5b:eb:40:a3:fc:6d:
52:ed:60:ed:17:f4:ea:7c:24:46:71:e0:bd:9f:8e:05:60:cd:
f8:d2:cc:7c:b8:9e:e0:67:9e:d2:a7:64:12:36:49:62:cd:e8:
9d:6a:60:5f:a1:da:b4:a3:01:d6:63:01:3b:6d:6a:95:f6:07:
df:e8:c3:9a:24:0a:98:4a:9a:14:89:01:23:d7:28:91:70:bc:
b4:cb:db:2d:09:2c:c4:4d:d0:e8:74:4f:a6:d8:ec:8d:6d:48:
2f:9d:b8:2e:73:80:7d:58:dc:1a:f2:d0:0e:7a:aa:af:e8:f8:
95:39:c4:f5:e3:2a:4b:5e:3b:de:71:30:7d:3e:23:b3:90:6c:
45:81:68:55:d0:f5:a0:56:32:94:58:ec:a0:d1:6d:2f:c8:2d:
91:b4:b1:81:28:ec:f8:44:96:05:52:42:4c:37:35:7e:2a:92:
8d:45:62:3d:c0:40:3a:b1:a2:f9:ba:6b:06:23:74:62:67:c3:
7a:b1:62:7d:fd:fb:c7:1e:5d:c7:68:7e:0f:4d:d8:2d:38:2a:
3b:7c:07:32
-----BEGIN CERTIFICATE-----
MIIE4jCCA8qgAwIBAgIUebts9mQPkK2d9mn/IcLK2iQgpTQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjBERjExQUY5OTkxNERFNkJFOUZBOUZDMzU3REE2MjRG
QjA5QTc4MjAeFw0yNjA5MjEwMzQwNDFaFw0yNjA5MjIwNTIxNDFaMDMxMTAvBgNV
BAMTKDVGRjgxMjAwODE4Q0E5NDk2N0M4RjM2MUUwMEUzNUE3RTBFOEVGOUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4fUHi924jMThu3iKpNDgbQltx
tXLF7Q4FNiPRhcpCTnfkWfL6u2C+IdKYaHdFbJ1EUTzN3gx304lso6nzR2rUgDkY
PUNf+yzAPhQjWPV8z6DyzzsPLplT9taYnCDBBjLRFUziIlC+qj1K41HCCu8UiR0v
PmwVs1itJtSTmeC9E9+kqb3nLQX8bqhXU38S369+e8F92pRot2DGIHaI9oo/im2f
TnQ7vAk2eIWGeeTqDKoxHlbkN6vKSmv7nfBReRKyVrzhA5gVdzC/Dr/reVg9mwvX
+ls+uw/T0iCTDcVs9tA3ciJwiXKfGrj/zmMQtdrIOhxNf+NxUifYPMc+fyeJAgMB
AAGjggHsMIIB6DAdBgNVHQ4EFgQUX/gSAIGMqUlnyPNh4A41p+Do758wHwYDVR0j
BBgwFoAUYN8Rr5mRTea+n6n8NX2mJPsJp4IwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud
HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRVRJTUUv
MC82MERGMTFBRjk5OTE0REU2QkU5RkE5RkMzNTdEQTYyNEZCMDlBNzgyLmNybDBv
BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS8xLzYwREYxMUFGOTk5MTRERTZCRTlGQTlGQzM1N0RB
NjI0RkIwOUE3ODIuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5
bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9FVElNRS8wLzYwREYxMUFGOTk5MTRE
RTZCRTlGQTlGQzM1N0RBNjI0RkIwOUE3ODIubWZ0MBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQChP2FQBFD1mcy5
fOBJ+voxYOnz7O7doS6n85ml1NQ0/U8G07x0hIxcEMZ9ueIoBhpb60Cj/G1S7WDt
F/TqfCRGceC9n44FYM340sx8uJ7gZ57Sp2QSNklizeidamBfodq0owHWYwE7bWqV
9gff6MOaJAqYSpoUiQEj1yiRcLy0y9stCSzETdDodE+m2OyNbUgvnbguc4B9WNwa
8tAOeqqv6PiVOcT14ypLXjvecTB9PiOzkGxFgWhV0PWgVjKUWOyg0W0vyC2RtLGB
KOz4RJYFUkJMNzV+KpKNRWI9wEA6saL5umsGI3RiZ8N6sWJ9/fvHHl3HaH4PTdgt
OCo7fAcy
-----END CERTIFICATE-----
Generated at Mon Sep 21 22:21:26 2026 by rpki-client