
$ rpki-client -vvf rpkica.twnic.tw/rpki/ITRINET/0/0AEFBFCC5266222C8453FE5B468C367C095C8F67.mft
File: 0AEFBFCC5266222C8453FE5B468C367C095C8F67.mft (raw, json)
Hash identifier: 6A9DY3mjQy0rkqo27dBA/vwehnwMDPHRFI4gsPqfVUE=
Subject key identifier: 91:E7:65:13:D1:F0:9A:A7:F6:1A:D1:01:21:C1:19:A7:A5:B1:76:1B
Authority key identifier: 0A:EF:BF:CC:52:66:22:2C:84:53:FE:5B:46:8C:36:7C:09:5C:8F:67
Certificate issuer: /CN=0AEFBFCC5266222C8453FE5B468C367C095C8F67
Certificate serial: 7E9939768E268DA6480A26BEB08C2F95BDB688D8
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0AEFBFCC5266222C8453FE5B468C367C095C8F67.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/ITRINET/0/0AEFBFCC5266222C8453FE5B468C367C095C8F67.mft
Manifest number: 33
Signing time: Wed 17 Jun 2026 08:27:07 +0000
Manifest this update: Wed 17 Jun 2026 08:22:07 +0000
Manifest next update: Thu 18 Jun 2026 12:11:07 +0000
Files and hashes: 1: 36312e36312e3234302e302f32302d3234203d3e203138343232.roa (hash: OENg2dUxKfNMtI2u30bsu1HnbjPScDlxxKzl3KfntJg=)
2: 323030313a6564383a3a2f33322d3536203d3e203138343232.roa (hash: Xt2JiIyAeWDi9a4QRWUHvmXeXOlqKybS5a3x4Jwl6ss=)
3: 0AEFBFCC5266222C8453FE5B468C367C095C8F67.crl (hash: AuP+w6qk8NdR3PE7Th5ugjp5J4qEVKrm9RPQKfzKdQE=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/ITRINET/0/0AEFBFCC5266222C8453FE5B468C367C095C8F67.crl
rsync://rpkica.twnic.tw/rpki/ITRINET/0/0AEFBFCC5266222C8453FE5B468C367C095C8F67.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0AEFBFCC5266222C8453FE5B468C367C095C8F67.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 18:58:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:99:39:76:8e:26:8d:a6:48:0a:26:be:b0:8c:2f:95:bd:b6:88:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0AEFBFCC5266222C8453FE5B468C367C095C8F67
Validity
Not Before: Jun 17 08:22:07 2026 GMT
Not After : Jun 18 12:11:07 2026 GMT
Subject: CN=91E76513D1F09AA7F61AD10121C119A7A5B1761B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:07:75:6e:b5:14:86:7a:2e:74:3e:34:34:b6:
01:17:83:56:be:5d:35:34:97:57:b9:5e:89:89:b6:
99:e8:62:d6:c5:f7:2b:04:f5:d4:47:59:59:59:cd:
e5:93:33:15:c1:25:d5:06:bd:b8:9c:9a:dd:5a:4a:
4d:1a:f2:6c:23:50:f7:35:b3:a1:27:62:77:35:bd:
0d:9d:69:97:55:9d:3c:56:36:33:75:76:22:20:24:
34:29:81:82:d0:6c:0c:a4:cd:c0:12:c1:21:a8:f1:
a4:f3:66:9e:ed:51:ae:11:82:be:29:9c:36:a9:cc:
bc:e9:ab:9f:b4:d1:74:c2:86:09:f4:6c:b8:84:06:
d4:ca:01:e7:b7:14:04:44:84:3b:95:dd:d0:4c:c0:
2c:bc:fd:98:3d:96:ed:a6:e5:77:0b:09:55:71:42:
6b:a5:77:83:97:6b:47:75:d0:07:30:39:66:5a:68:
cb:5f:e6:3f:a5:ed:72:29:9d:b7:01:f5:fb:14:f7:
28:5d:0e:05:33:c1:6d:cb:3d:b9:d0:09:97:07:6d:
39:f8:88:36:21:fb:50:55:7f:bf:a7:be:bd:01:9e:
5c:4a:3a:13:92:9a:d9:8a:1d:32:d9:a4:d7:a4:29:
55:7a:27:2e:61:7c:61:c3:46:5e:f8:87:43:07:ef:
60:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:E7:65:13:D1:F0:9A:A7:F6:1A:D1:01:21:C1:19:A7:A5:B1:76:1B
X509v3 Authority Key Identifier:
keyid:0A:EF:BF:CC:52:66:22:2C:84:53:FE:5B:46:8C:36:7C:09:5C:8F:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/ITRINET/0/0AEFBFCC5266222C8453FE5B468C367C095C8F67.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0AEFBFCC5266222C8453FE5B468C367C095C8F67.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ITRINET/0/0AEFBFCC5266222C8453FE5B468C367C095C8F67.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:f3:31:f7:63:f9:10:6d:58:01:16:90:0d:29:ba:f7:7a:ca:
87:e8:3c:7d:5e:8c:01:e7:a6:42:6b:b8:70:d6:ed:bb:e6:e1:
1c:e7:79:4a:de:ed:51:50:da:c9:70:a0:38:35:60:bd:9d:f5:
5c:f8:c8:b7:f8:48:3f:e9:55:f2:b6:e7:ae:a5:ee:b7:d8:37:
49:da:2c:11:d9:5b:1f:51:13:32:50:05:ac:8d:c1:e2:45:24:
6b:80:5e:f5:67:36:c5:e5:c2:b1:3d:5a:93:41:9e:d6:54:46:
50:6d:77:89:6c:15:03:cd:b6:df:9a:33:2b:b6:1a:11:e8:45:
8b:d1:d7:7f:92:95:df:51:5c:84:98:88:b1:29:27:f1:53:7e:
67:a0:b8:8e:dc:f0:bb:34:e8:a2:ec:87:65:47:94:7f:4a:9c:
d4:db:60:08:8b:01:50:9b:10:d9:3f:b5:a1:18:ca:05:c5:75:
b3:0f:8c:c7:eb:56:96:d7:ef:80:74:87:4e:76:ca:6b:b2:99:
9c:a6:61:81:61:63:d4:5f:7f:7c:af:58:6a:4a:bd:b8:0b:28:
c7:bd:fe:6a:fc:36:c5:ba:22:b0:fc:f0:19:56:da:9e:b7:6d:
67:fd:30:d6:3a:3b:f7:91:b9:65:53:e1:13:a8:93:a3:f1:c9:
6b:ca:05:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:37:14 2026 by rpki-client