
$ rpki-client -vvf rpkica.twnic.tw/rpki/KKH/0/FB752D6E1A89A824BE6E04852D1F505F01ED185B.mft
File: FB752D6E1A89A824BE6E04852D1F505F01ED185B.mft (raw, json)
Hash identifier: LKzVz1jnUPV/LBm4BBYXkPYMb09OlhYLl9yVi1YSBFc=
Subject key identifier: 64:C4:33:FE:1E:BB:9F:2C:A2:99:E8:83:E9:DE:42:BB:F4:61:08:4A
Authority key identifier: FB:75:2D:6E:1A:89:A8:24:BE:6E:04:85:2D:1F:50:5F:01:ED:18:5B
Certificate issuer: /CN=FB752D6E1A89A824BE6E04852D1F505F01ED185B
Certificate serial: 2321191D07109B923D29A9AC85087ABDB252A95A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/FB752D6E1A89A824BE6E04852D1F505F01ED185B.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/KKH/0/FB752D6E1A89A824BE6E04852D1F505F01ED185B.mft
Manifest number: 30
Signing time: Mon 15 Jun 2026 07:04:55 +0000
Manifest this update: Mon 15 Jun 2026 06:59:55 +0000
Manifest next update: Tue 16 Jun 2026 07:31:55 +0000
Files and hashes: 1: 323430313a653736303a3a2f33322d3438203d3e20313331363435.roa (hash: 8YC3WhfA/JwpTpT4EA1dLfSVRzAraHz3m65LBo1nSas=)
2: FB752D6E1A89A824BE6E04852D1F505F01ED185B.crl (hash: WzP6fTvN9EbiWCZXbyTT2vWhvh5DZlQgD1o+NOHOhoE=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/KKH/0/FB752D6E1A89A824BE6E04852D1F505F01ED185B.crl
rsync://rpkica.twnic.tw/rpki/KKH/0/FB752D6E1A89A824BE6E04852D1F505F01ED185B.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/FB752D6E1A89A824BE6E04852D1F505F01ED185B.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 16 Jun 2026 07:31:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:21:19:1d:07:10:9b:92:3d:29:a9:ac:85:08:7a:bd:b2:52:a9:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB752D6E1A89A824BE6E04852D1F505F01ED185B
Validity
Not Before: Jun 15 06:59:55 2026 GMT
Not After : Jun 16 07:31:55 2026 GMT
Subject: CN=64C433FE1EBB9F2CA299E883E9DE42BBF461084A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:58:71:5b:5d:74:4c:87:79:f0:14:fc:e0:cb:
2e:da:30:bb:9e:03:63:f0:a5:0a:1d:9b:d7:58:f0:
83:50:c0:bd:98:09:73:10:47:c2:52:13:e4:db:e0:
50:cb:e1:28:84:8f:b6:f9:24:f7:17:14:7e:49:60:
24:d8:c5:6e:10:c8:3b:f9:fc:aa:91:53:9b:89:e1:
cf:76:79:ec:3b:98:82:59:26:bc:0f:2d:89:66:fa:
91:04:0f:1c:ed:4d:57:58:2d:f7:05:b5:71:76:3c:
d1:65:13:73:53:4e:7f:a2:9b:7f:cc:49:36:18:91:
e7:2e:3a:f1:ec:35:91:86:16:05:3b:c9:38:6f:bc:
a6:f2:7a:b9:ef:0d:54:6f:71:c7:da:cb:bb:07:eb:
2a:86:94:ba:e5:d8:a6:c5:d0:e8:07:db:65:14:a2:
b6:a0:2b:61:12:2b:29:82:73:77:fd:ba:81:e8:89:
e0:7f:88:f6:75:d3:ad:13:a1:a2:b1:ed:9f:c7:e9:
f0:ff:57:71:d6:c6:66:10:c0:a0:62:53:a1:0e:fa:
cc:35:d0:e5:39:3a:dd:c1:dc:90:05:5f:c8:82:c9:
d4:26:08:c3:d0:83:7a:66:6b:17:bf:bc:aa:79:a1:
df:e3:26:21:c8:c3:51:2f:b1:ac:cf:d6:4a:df:06:
96:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:C4:33:FE:1E:BB:9F:2C:A2:99:E8:83:E9:DE:42:BB:F4:61:08:4A
X509v3 Authority Key Identifier:
keyid:FB:75:2D:6E:1A:89:A8:24:BE:6E:04:85:2D:1F:50:5F:01:ED:18:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/KKH/0/FB752D6E1A89A824BE6E04852D1F505F01ED185B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/FB752D6E1A89A824BE6E04852D1F505F01ED185B.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KKH/0/FB752D6E1A89A824BE6E04852D1F505F01ED185B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:8d:59:5e:95:ac:cc:83:19:bd:a3:d0:64:77:4a:15:4a:6e:
79:ce:bc:1a:5d:be:44:86:9d:18:6e:3d:8f:c5:10:76:57:a0:
8f:85:16:66:1b:dc:56:38:04:3e:ca:46:45:41:0c:0d:b6:93:
38:86:80:88:cc:ae:01:28:83:26:b2:57:f0:31:d2:6b:29:7c:
5b:f6:ea:5a:9a:23:0e:e8:49:b5:85:92:a4:7b:35:a5:b1:77:
93:8c:db:c5:ec:87:45:30:a5:c2:1a:9d:01:e0:b1:d2:bb:2e:
7c:12:50:81:54:4f:ea:ef:ff:60:34:dc:df:8a:42:ff:37:76:
d0:7e:ae:d7:fc:9f:05:36:08:88:df:a6:0f:d6:72:cf:e9:b6:
bd:3c:2f:56:74:ea:e8:41:d6:35:23:1d:1c:ba:24:ca:71:69:
43:9e:30:51:04:e2:c1:69:a3:b9:df:16:61:ab:c6:87:59:6f:
72:79:99:d7:45:47:fe:19:c4:d1:4c:57:f7:00:9d:c8:eb:3d:
7a:ff:5f:15:c2:a0:96:a1:85:7d:2d:c3:aa:81:b0:59:7f:c1:
0d:d4:10:31:56:ab:f6:a8:8c:ac:66:59:e5:8a:24:3a:83:cd:
8f:70:c7:81:89:77:b7:bd:67:34:ae:34:0b:0c:54:52:c3:03:
0f:36:15:11
-----BEGIN CERTIFICATE-----
MIIE3jCCA8agAwIBAgIUIyEZHQcQm5I9KamshQh6vbJSqVowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkI3NTJENkUxQTg5QTgyNEJFNkUwNDg1MkQxRjUwNUYw
MUVEMTg1QjAeFw0yNjA2MTUwNjU5NTVaFw0yNjA2MTYwNzMxNTVaMDMxMTAvBgNV
BAMTKDY0QzQzM0ZFMUVCQjlGMkNBMjk5RTg4M0U5REU0MkJCRjQ2MTA4NEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3WHFbXXRMh3nwFPzgyy7aMLue
A2PwpQodm9dY8INQwL2YCXMQR8JSE+Tb4FDL4SiEj7b5JPcXFH5JYCTYxW4QyDv5
/KqRU5uJ4c92eew7mIJZJrwPLYlm+pEEDxztTVdYLfcFtXF2PNFlE3NTTn+im3/M
STYYkecuOvHsNZGGFgU7yThvvKbyernvDVRvccfay7sH6yqGlLrl2KbF0OgH22UU
oragK2ESKymCc3f9uoHoieB/iPZ1060ToaKx7Z/H6fD/V3HWxmYQwKBiU6EO+sw1
0OU5Ot3B3JAFX8iCydQmCMPQg3pmaxe/vKp5od/jJiHIw1EvsazP1krfBpZfAgMB
AAGjggHoMIIB5DAdBgNVHQ4EFgQUZMQz/h67nyyimeiD6d5Cu/RhCEowHwYDVR0j
BBgwFoAU+3UtbhqJqCS+bgSFLR9QXwHtGFswDgYDVR0PAQH/BAQDAgeAMGAGA1Ud
HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0tILzAv
RkI3NTJENkUxQTg5QTgyNEJFNkUwNDg1MkQxRjUwNUYwMUVEMTg1Qi5jcmwwbwYI
KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50
dy9ycGtpL1RXTklDQ0EvMS9GQjc1MkQ2RTFBODlBODI0QkU2RTA0ODUyRDFGNTA1
RjAxRUQxODVCLmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j
Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0tILzAvRkI3NTJENkUxQTg5QTgyNEJF
NkUwNDg1MkQxRjUwNUYwMUVEMTg1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF
BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAKmNWV6VrMyDGb2j0GR3
ShVKbnnOvBpdvkSGnRhuPY/FEHZXoI+FFmYb3FY4BD7KRkVBDA22kziGgIjMrgEo
gyayV/Ax0mspfFv26lqaIw7oSbWFkqR7NaWxd5OM28Xsh0UwpcIanQHgsdK7LnwS
UIFUT+rv/2A03N+KQv83dtB+rtf8nwU2CIjfpg/Wcs/ptr08L1Z06uhB1jUjHRy6
JMpxaUOeMFEE4sFpo7nfFmGrxodZb3J5mddFR/4ZxNFMV/cAncjrPXr/XxXCoJah
hX0tw6qBsFl/wQ3UEDFWq/aojKxmWeWKJDqDzY9wx4GJd7e9ZzSuNAsMVFLDAw82
FRE=
-----END CERTIFICATE-----
Generated at Mon Jun 15 12:44:10 2026 by rpki-client