
$ rpki-client -vvvf rpkica.twnic.tw/rpki/ITRINET/0/0AEFBFCC5266222C8453FE5B468C367C095C8F67.mft
File: 0AEFBFCC5266222C8453FE5B468C367C095C8F67.mft (raw, json)
Hash identifier: RPz9fz4ENoH0lut3e9bBtoMEewFOKxEIW0vHGdfDMqA=
Subject key identifier: 1D:6E:7A:4A:A1:42:9C:3A:33:77:80:5B:E7:E6:FB:D1:CC:38:74:69
Authority key identifier: 0A:EF:BF:CC:52:66:22:2C:84:53:FE:5B:46:8C:36:7C:09:5C:8F:67
Certificate issuer: /CN=0AEFBFCC5266222C8453FE5B468C367C095C8F67
Certificate serial: 5B3DE6A0980A8C3555968560B0A9234A18C26AB0
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0AEFBFCC5266222C8453FE5B468C367C095C8F67.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/ITRINET/0/0AEFBFCC5266222C8453FE5B468C367C095C8F67.mft
Manifest number: B3
Signing time: Tue 22 Sep 2026 00:33:11 +0000
Manifest this update: Tue 22 Sep 2026 00:28:11 +0000
Manifest next update: Wed 23 Sep 2026 00:58:11 +0000
Files and hashes: 1: 0AEFBFCC5266222C8453FE5B468C367C095C8F67.crl (hash: w6Qze725ji6WmpfyEMvuBLPB4vtwYZpLVwi2vd8VX8U=)
2: 36312e36312e3234302e302f32302d3234203d3e203138343232.roa (hash: OENg2dUxKfNMtI2u30bsu1HnbjPScDlxxKzl3KfntJg=)
3: 323030313a6564383a3a2f33322d3536203d3e203138343232.roa (hash: Xt2JiIyAeWDi9a4QRWUHvmXeXOlqKybS5a3x4Jwl6ss=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/ITRINET/0/0AEFBFCC5266222C8453FE5B468C367C095C8F67.crl
rsync://rpkica.twnic.tw/rpki/ITRINET/0/0AEFBFCC5266222C8453FE5B468C367C095C8F67.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0AEFBFCC5266222C8453FE5B468C367C095C8F67.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 23 Sep 2026 00:58:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:3d:e6:a0:98:0a:8c:35:55:96:85:60:b0:a9:23:4a:18:c2:6a:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0AEFBFCC5266222C8453FE5B468C367C095C8F67
Validity
Not Before: Sep 22 00:28:11 2026 GMT
Not After : Sep 23 00:58:11 2026 GMT
Subject: CN=1D6E7A4AA1429C3A3377805BE7E6FBD1CC387469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c3:be:61:f8:71:75:b8:04:1f:cf:61:83:59:
f2:14:16:36:e6:69:77:40:c4:ec:f7:dc:3e:e6:40:
2b:14:56:c0:08:71:92:02:20:c5:bd:20:58:58:0d:
a1:39:15:fa:16:85:0b:ea:1f:6d:a1:79:cb:ce:ba:
5c:89:6f:29:2e:24:49:3d:66:d5:54:5e:58:f7:cd:
90:94:a1:66:84:fe:fc:24:58:c0:9a:b6:7f:b2:69:
0c:56:2a:70:b7:08:fa:e5:61:77:bc:dc:20:fa:0a:
89:44:16:00:d7:59:fb:75:3f:36:9c:6b:30:2b:f9:
0f:5c:58:80:9d:23:f9:14:c1:9a:39:43:95:44:0e:
d0:b2:45:70:77:42:8f:cf:9e:53:03:a2:6d:7c:9e:
aa:e2:f8:ae:30:f1:37:7e:0c:07:bb:31:af:5d:ae:
e1:be:aa:e7:0b:46:37:f9:77:61:c4:b7:d0:7e:df:
47:92:ea:bc:f1:6c:ca:fc:cc:45:2e:e6:f8:a0:c6:
e1:1a:00:80:6a:86:75:7f:5d:32:18:0e:97:35:8b:
f9:bb:dc:56:96:12:d5:7c:54:51:b8:ec:76:73:91:
7b:90:25:50:7b:69:7e:6f:24:24:13:3d:35:c4:30:
8d:89:07:c1:02:51:08:4f:f1:aa:4a:d7:12:d4:a8:
67:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:6E:7A:4A:A1:42:9C:3A:33:77:80:5B:E7:E6:FB:D1:CC:38:74:69
X509v3 Authority Key Identifier:
keyid:0A:EF:BF:CC:52:66:22:2C:84:53:FE:5B:46:8C:36:7C:09:5C:8F:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/ITRINET/0/0AEFBFCC5266222C8453FE5B468C367C095C8F67.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0AEFBFCC5266222C8453FE5B468C367C095C8F67.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ITRINET/0/0AEFBFCC5266222C8453FE5B468C367C095C8F67.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:5d:d2:85:48:b8:18:66:3a:a3:a6:a8:fd:af:2a:0a:0d:7d:
29:8a:bb:7d:f7:9a:a0:cf:de:dd:72:30:c7:cf:be:30:61:fa:
14:6a:d1:88:3b:54:97:36:d8:21:fb:8a:58:d1:36:7c:65:e4:
d2:98:c8:37:0a:bb:a6:16:d1:ae:db:0d:d2:33:cc:01:4c:ca:
1e:e6:18:22:79:b0:2a:cc:a9:4f:13:3a:33:13:1d:d9:fe:18:
5a:a4:25:db:9b:af:8a:88:df:66:29:d8:cf:91:9b:0d:f7:35:
32:f3:ec:e3:55:a8:6f:91:5d:9a:1a:84:5e:80:b1:bc:aa:a1:
c5:ef:4e:55:a5:a2:93:b4:72:84:52:bf:82:c4:e3:62:51:b4:
b1:f6:21:59:d2:14:e0:36:0d:30:7b:94:3b:d4:07:6c:e6:b3:
fb:9e:22:87:35:96:6c:f2:b0:4e:a6:ac:3b:aa:0e:bc:76:fc:
15:af:3b:95:4f:6c:51:75:80:5f:01:42:57:74:50:ca:d7:b1:
f7:58:d3:ce:4c:d1:16:b3:88:43:f3:cd:78:71:82:ec:00:2b:
32:45:92:42:a4:9e:93:ec:f1:7d:f6:d8:ef:5e:3b:43:01:b9:
b7:e7:38:17:d3:c9:d9:45:c7:f0:94:7a:30:3b:cc:37:f3:12:
6e:7a:47:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:01:23 2026 by rpki-client