
$ rpki-client -vvf rpkica.twnic.tw/rpki/GIGABYTE/0/208C9AF2E59EAA30DB13E50969BD866B673DAB68.mft
File: 208C9AF2E59EAA30DB13E50969BD866B673DAB68.mft (raw, json)
Hash identifier: RZGhPgMR0V9TBJnG4YmrvpdC1Ma3GZYHnpfgjAr+8uQ=
Subject key identifier: 9C:30:EE:F0:71:18:3A:58:CF:C0:BD:DB:8A:A1:BA:00:8F:10:A1:9F
Authority key identifier: 20:8C:9A:F2:E5:9E:AA:30:DB:13:E5:09:69:BD:86:6B:67:3D:AB:68
Certificate issuer: /CN=208C9AF2E59EAA30DB13E50969BD866B673DAB68
Certificate serial: 3FBD56B51DA571869EE8DEAD370889B97F350EA1
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/208C9AF2E59EAA30DB13E50969BD866B673DAB68.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/GIGABYTE/0/208C9AF2E59EAA30DB13E50969BD866B673DAB68.mft
Manifest number: 33
Signing time: Tue 16 Jun 2026 20:55:52 +0000
Manifest this update: Tue 16 Jun 2026 20:50:52 +0000
Manifest next update: Thu 18 Jun 2026 00:26:52 +0000
Files and hashes: 1: 208C9AF2E59EAA30DB13E50969BD866B673DAB68.crl (hash: FkfbrRLh07+oK1Mx2CCIqr21XhLcrylLoMLT76yjTrY=)
2: 3130332e3133302e3130302e302f32322d3234203d3e20313331363633.roa (hash: sfnsYqq0KjfihimyfpgsDMNj1nls/Ip5uSoBuI60p1I=)
3: 323430333a623763303a3a2f33322d3332203d3e20313331363633.roa (hash: Mt8YVfAFEz60eNMhlP46Ju7thmG6SaKiJ1M/RQIpa58=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/GIGABYTE/0/208C9AF2E59EAA30DB13E50969BD866B673DAB68.crl
rsync://rpkica.twnic.tw/rpki/GIGABYTE/0/208C9AF2E59EAA30DB13E50969BD866B673DAB68.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/208C9AF2E59EAA30DB13E50969BD866B673DAB68.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 18:58:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:bd:56:b5:1d:a5:71:86:9e:e8:de:ad:37:08:89:b9:7f:35:0e:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=208C9AF2E59EAA30DB13E50969BD866B673DAB68
Validity
Not Before: Jun 16 20:50:52 2026 GMT
Not After : Jun 18 00:26:52 2026 GMT
Subject: CN=9C30EEF071183A58CFC0BDDB8AA1BA008F10A19F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0c:63:af:11:0d:23:96:f9:8e:eb:c2:7a:5a:
2d:a4:07:15:5d:c8:97:a2:96:c1:ee:af:35:12:00:
41:92:2b:b2:86:d6:ef:7d:d7:57:65:26:73:9d:15:
ba:60:cc:6b:a4:94:14:16:db:b9:62:9c:e9:78:82:
7d:1c:9a:1d:d0:39:7c:5b:76:b9:9c:80:2d:96:ae:
fd:a8:77:bc:a7:7c:2a:2f:65:dd:7d:f6:13:03:1b:
4e:05:c4:09:97:d3:68:df:89:db:ec:0e:d5:e7:87:
f1:21:b4:80:50:9e:ad:15:f3:ee:e5:74:ca:c3:4a:
f9:e7:37:28:97:4e:78:72:df:fb:ca:b0:5c:fe:11:
f7:87:d9:a6:be:bb:99:a5:0c:46:bc:02:ac:51:02:
cd:b8:83:9b:d5:ec:f8:44:94:2d:4c:c1:99:98:8d:
e9:5f:51:13:99:f9:61:f1:1e:09:07:00:14:5c:a6:
af:5d:f0:f3:53:da:19:15:24:e7:c3:90:77:d7:35:
0f:0f:a3:f0:8c:d7:2e:47:ad:13:c7:03:3a:18:f4:
1a:61:0e:dd:27:bf:50:8f:90:5b:af:62:49:9f:4d:
da:20:8a:b9:b6:fa:b9:a6:51:39:37:30:4b:2d:be:
a7:51:56:e8:64:0e:2b:84:fa:47:be:d0:72:28:62:
67:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:30:EE:F0:71:18:3A:58:CF:C0:BD:DB:8A:A1:BA:00:8F:10:A1:9F
X509v3 Authority Key Identifier:
keyid:20:8C:9A:F2:E5:9E:AA:30:DB:13:E5:09:69:BD:86:6B:67:3D:AB:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/GIGABYTE/0/208C9AF2E59EAA30DB13E50969BD866B673DAB68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/208C9AF2E59EAA30DB13E50969BD866B673DAB68.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/GIGABYTE/0/208C9AF2E59EAA30DB13E50969BD866B673DAB68.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:11:9e:92:58:7f:ec:d6:ab:2d:47:20:3e:b3:d2:8e:bb:3a:
ba:8c:f2:ff:a2:75:e7:6f:a3:ee:57:26:41:28:d4:23:48:34:
c1:a4:a8:09:81:1f:ae:bf:f4:c8:ce:7c:22:1f:f1:d9:68:fa:
52:b1:71:e2:37:20:ce:a8:76:91:b4:f9:c0:6f:fa:71:29:bc:
ec:7e:1d:87:11:66:58:34:8b:a1:96:a0:66:2d:bd:64:04:28:
2b:7c:7e:ae:d8:3b:51:c2:36:2d:d5:ac:2e:0f:6e:b6:bd:26:
87:ef:24:cd:8c:8c:72:c8:cc:36:da:ee:7a:8f:91:62:dc:56:
a4:e7:54:99:63:1a:b0:d1:b7:e6:47:a1:5a:ea:51:04:c1:c1:
af:df:81:5e:cb:dc:f8:89:68:ac:43:e5:69:1c:e7:29:2a:89:
33:6a:89:f1:8c:0d:7a:51:98:11:9f:54:6c:ea:75:d9:68:3e:
6f:1c:78:00:80:21:58:7a:0a:16:15:74:6f:46:df:5b:5b:2c:
ae:44:6c:cf:99:91:75:50:67:70:1e:32:42:47:47:e3:81:60:
d1:41:55:68:ff:e9:8d:23:c6:a6:46:e6:c6:2c:60:44:6d:93:
11:8f:41:a7:94:2f:40:e4:b1:74:ec:5c:38:56:02:18:34:31:
00:25:67:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:32:00 2026 by rpki-client