
$ rpki-client -vvf rpkica.twnic.tw/rpki/KANRAYS/1/061E60E9FDA5A25EDC961572A4CBA8C539D780AF.mft
File: 061E60E9FDA5A25EDC961572A4CBA8C539D780AF.mft (raw, json)
Hash identifier: hCo1h6DwKZP4Y6mh51t77lO9qitbyQTeVl3hOU/VzZA=
Subject key identifier: 5A:12:79:13:B6:29:3B:AA:57:70:B0:E9:A2:26:92:BA:A8:92:AB:FD
Authority key identifier: 06:1E:60:E9:FD:A5:A2:5E:DC:96:15:72:A4:CB:A8:C5:39:D7:80:AF
Certificate issuer: /CN=061E60E9FDA5A25EDC961572A4CBA8C539D780AF
Certificate serial: 5EB4E4AF99530ED5C290A18DABA84334F8940264
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/3/061E60E9FDA5A25EDC961572A4CBA8C539D780AF.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/KANRAYS/1/061E60E9FDA5A25EDC961572A4CBA8C539D780AF.mft
Manifest number: 6C
Signing time: Wed 29 Jul 2026 07:06:02 +0000
Manifest this update: Wed 29 Jul 2026 07:01:02 +0000
Manifest next update: Thu 30 Jul 2026 08:23:02 +0000
Files and hashes: 1: 3135312e3135382e32362e302f32332d3234203d3e203138303434.roa (hash: QIY0glYph3b8eEZZ9jaZ9XB3vhAySFJ+wbIUL9Lsf2o=)
2: 061E60E9FDA5A25EDC961572A4CBA8C539D780AF.crl (hash: lk8aL8oD95tIHzZbYIZccfTP++JSJtyC1e0wTDCLBSU=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/KANRAYS/1/061E60E9FDA5A25EDC961572A4CBA8C539D780AF.crl
rsync://rpkica.twnic.tw/rpki/KANRAYS/1/061E60E9FDA5A25EDC961572A4CBA8C539D780AF.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/3/061E60E9FDA5A25EDC961572A4CBA8C539D780AF.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 05:35:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:b4:e4:af:99:53:0e:d5:c2:90:a1:8d:ab:a8:43:34:f8:94:02:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061E60E9FDA5A25EDC961572A4CBA8C539D780AF
Validity
Not Before: Jul 29 07:01:02 2026 GMT
Not After : Jul 30 08:23:02 2026 GMT
Subject: CN=5A127913B6293BAA5770B0E9A22692BAA892ABFD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e0:a0:a6:e8:fc:bb:d4:54:8f:6d:0c:66:c7:
52:d5:7b:81:52:64:24:6e:7a:62:03:9e:cd:b3:2b:
87:b6:e8:40:10:cc:c1:24:f3:be:5c:c9:17:d4:01:
d3:ca:3a:93:2c:c3:7e:a4:82:3a:d8:38:e4:4d:0f:
0f:5f:57:19:8e:d9:66:6f:9c:6f:72:0d:6a:9c:fe:
ed:b5:de:ee:c1:1c:40:42:7e:a2:47:89:21:9a:af:
c3:21:df:84:bd:27:46:c2:f2:a3:ce:79:09:05:6e:
69:7e:da:4e:2b:cd:3a:d8:80:e3:f6:d4:ee:77:d4:
2b:cf:a5:a7:e4:3a:07:e0:82:67:e4:4d:98:29:9c:
7a:3a:e8:4a:4b:b9:e4:f9:48:51:a4:5e:b4:42:5c:
f3:5c:bd:1d:be:a7:18:eb:23:cb:bf:ba:f2:2b:0c:
7c:85:a4:b8:0c:42:e0:77:a6:c1:ae:d8:8a:90:0d:
f2:4d:85:c6:7e:13:66:aa:23:32:56:3a:47:d3:d7:
fe:e7:85:e2:28:eb:07:e2:ea:a1:48:a9:bb:85:ed:
c5:d9:11:9b:b0:a2:61:f6:b9:2a:04:f3:e8:b0:31:
7b:b4:6b:12:ab:7a:4f:1b:41:ef:43:8d:06:2c:cc:
11:d0:da:79:b9:3b:58:46:80:e8:5b:8a:b4:44:f7:
b8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:12:79:13:B6:29:3B:AA:57:70:B0:E9:A2:26:92:BA:A8:92:AB:FD
X509v3 Authority Key Identifier:
keyid:06:1E:60:E9:FD:A5:A2:5E:DC:96:15:72:A4:CB:A8:C5:39:D7:80:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/KANRAYS/1/061E60E9FDA5A25EDC961572A4CBA8C539D780AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/061E60E9FDA5A25EDC961572A4CBA8C539D780AF.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KANRAYS/1/061E60E9FDA5A25EDC961572A4CBA8C539D780AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:80:95:60:8c:d1:7d:a1:74:0e:0a:5f:13:ea:1c:20:6a:0a:
4c:b1:0e:95:eb:2b:dc:78:54:48:cd:15:71:ae:a0:33:57:bc:
c8:2b:21:4e:92:90:5c:be:a8:3d:ff:6e:81:2d:5e:c7:dd:f0:
44:ad:94:bc:6e:3c:80:9c:82:a5:e2:65:6a:18:1f:c4:24:38:
a5:c4:6a:eb:15:95:f1:8a:72:51:22:be:b3:0d:6c:c2:ba:c2:
ed:15:c1:18:a9:62:21:23:67:88:6b:ce:b5:8c:d5:81:ac:64:
bf:6f:c9:14:da:76:c9:05:ff:09:bd:b2:16:3d:92:09:17:7c:
1f:a8:c1:49:fd:cc:64:00:a0:0b:57:83:ba:e2:7c:aa:9f:57:
b5:68:d7:29:ea:4d:0f:69:a2:3e:04:c1:d9:a5:5c:98:0f:20:
3a:4b:b1:02:c6:8a:40:ed:4e:b5:83:2a:5a:6a:c2:f7:ab:35:
90:0c:12:07:71:ad:df:3e:8d:25:5e:fe:c5:d0:ac:bb:64:dc:
3d:20:dd:47:a0:7e:43:38:c8:55:95:4c:bf:2a:71:3f:e5:d0:
72:96:ed:25:76:be:05:c9:47:ee:13:a0:e2:34:26:9f:c9:24:
39:fc:66:a1:52:73:aa:8c:dd:d9:1e:87:de:a2:50:d8:cb:ff:
49:ce:df:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:03:52 2026 by rpki-client