
$ rpki-client -vvf rpkica.twnic.tw/rpki/KKIS/1/0DC906EAC8AFA16F54C8F9EF9ECCB9A2B90B5B1B.mft
File: 0DC906EAC8AFA16F54C8F9EF9ECCB9A2B90B5B1B.mft (raw, json)
Hash identifier: /VzO/Ticdo6ZgChxVZ46PAoyoaRI7r78MWIGVwZlijc=
Subject key identifier: AB:51:55:15:12:37:DF:7D:BF:F7:6F:63:5C:B5:8C:8D:E0:8E:42:E0
Authority key identifier: 0D:C9:06:EA:C8:AF:A1:6F:54:C8:F9:EF:9E:CC:B9:A2:B9:0B:5B:1B
Certificate issuer: /CN=0DC906EAC8AFA16F54C8F9EF9ECCB9A2B90B5B1B
Certificate serial: 711F1A0C3DF5F86DDF83F1AAFEAEF92AF0018D18
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/0DC906EAC8AFA16F54C8F9EF9ECCB9A2B90B5B1B.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/KKIS/1/0DC906EAC8AFA16F54C8F9EF9ECCB9A2B90B5B1B.mft
Manifest number: 2E
Signing time: Fri 12 Jun 2026 23:48:26 +0000
Manifest this update: Fri 12 Jun 2026 23:43:26 +0000
Manifest next update: Sat 13 Jun 2026 23:56:26 +0000
Files and hashes: 1: 0DC906EAC8AFA16F54C8F9EF9ECCB9A2B90B5B1B.crl (hash: Ftwh8UA+aLgvlb+UeHwwP9PKg3Tu0i4UEH2VFx1lJu4=)
2: 3136312e3234382e3133322e302f32332d3234203d3e20313331363435.roa (hash: zTyEt/E/NAPbMASFWkS4yWV2xmBH0gl0BW2wGqKTvmQ=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/KKIS/1/0DC906EAC8AFA16F54C8F9EF9ECCB9A2B90B5B1B.crl
rsync://rpkica.twnic.tw/rpki/KKIS/1/0DC906EAC8AFA16F54C8F9EF9ECCB9A2B90B5B1B.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/0DC906EAC8AFA16F54C8F9EF9ECCB9A2B90B5B1B.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 23:56:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:1f:1a:0c:3d:f5:f8:6d:df:83:f1:aa:fe:ae:f9:2a:f0:01:8d:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0DC906EAC8AFA16F54C8F9EF9ECCB9A2B90B5B1B
Validity
Not Before: Jun 12 23:43:26 2026 GMT
Not After : Jun 13 23:56:26 2026 GMT
Subject: CN=AB5155151237DF7DBFF76F635CB58C8DE08E42E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:24:7f:c5:77:c5:a5:c3:4a:eb:63:bf:ca:77:
46:d2:99:bd:0f:6a:ee:1f:00:4a:1f:0b:7d:73:53:
3c:e6:cc:e2:c9:4c:43:f9:4a:dd:a0:e9:08:cb:57:
70:5c:1d:75:7a:2c:04:df:04:34:34:2f:48:d4:1a:
db:02:6a:33:9a:76:f8:d6:db:d7:2e:c6:12:1f:2e:
b7:37:39:80:62:e4:d1:a1:ad:5f:6b:f5:60:a9:14:
be:47:ee:b7:69:62:f1:17:67:f7:39:ee:a6:1d:73:
23:49:c8:4c:17:49:f0:58:10:c8:26:fc:e9:e8:8b:
9f:e8:72:c6:9c:b1:64:2a:6a:96:a2:10:5d:7d:f7:
72:c7:49:8f:e5:34:25:a5:cf:ab:c5:c1:e8:70:80:
03:1d:b3:2c:67:6a:52:9b:80:31:30:c7:f5:fc:d7:
a8:ed:c8:b2:1b:0a:cb:3c:ea:1b:46:64:3a:36:23:
e3:c4:c6:4c:78:a3:a5:8e:d4:0e:91:f9:a4:c1:e7:
4a:e7:15:a4:0f:6e:42:31:97:4e:b5:12:f2:d1:21:
72:2f:f1:eb:27:95:e8:d9:f1:03:77:c7:81:d0:e1:
37:1c:3b:d7:8e:6a:e7:51:ae:79:a8:fa:94:b2:78:
4f:50:09:d2:86:16:ec:0f:0d:38:17:23:2f:72:9c:
33:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:51:55:15:12:37:DF:7D:BF:F7:6F:63:5C:B5:8C:8D:E0:8E:42:E0
X509v3 Authority Key Identifier:
keyid:0D:C9:06:EA:C8:AF:A1:6F:54:C8:F9:EF:9E:CC:B9:A2:B9:0B:5B:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/KKIS/1/0DC906EAC8AFA16F54C8F9EF9ECCB9A2B90B5B1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/0DC906EAC8AFA16F54C8F9EF9ECCB9A2B90B5B1B.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KKIS/1/0DC906EAC8AFA16F54C8F9EF9ECCB9A2B90B5B1B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:fa:15:95:be:4c:02:b6:ea:95:2d:45:96:e9:5f:6d:57:ed:
79:38:1a:90:ae:c8:04:8e:38:2c:4d:76:73:c5:4d:5f:59:42:
66:54:83:d0:e2:22:ed:6f:52:e5:d9:10:38:ae:7c:be:77:90:
68:b9:2c:bf:ca:2e:2d:41:77:d2:26:7e:a9:8a:f6:f9:09:e0:
06:c8:77:93:1b:47:df:5e:97:52:b8:a0:fb:99:60:6c:5b:1e:
3e:2e:6d:ee:a7:64:83:c2:a4:d6:6e:8c:40:b1:24:73:e8:39:
cd:97:10:dc:b6:84:2e:36:1b:fe:22:f4:a8:7b:b0:e9:03:f1:
82:07:a5:cb:93:b0:7a:47:97:34:7a:d0:f5:ec:f9:55:c8:c7:
88:12:48:93:ec:74:4f:6e:55:96:ab:75:54:58:3c:7a:63:c2:
e9:d2:23:72:72:9a:60:6e:bb:86:89:31:bb:76:51:ad:0f:ed:
6c:e7:91:bf:57:98:89:a8:66:9b:8d:be:e6:4e:8d:72:75:70:
01:d6:0b:5d:3f:27:f7:27:0f:f5:a4:95:48:c4:87:e9:c0:c3:
78:94:5a:51:4d:43:56:4b:41:75:03:8c:25:50:f7:a3:36:8c:
be:8e:74:9a:0d:13:4c:8d:25:c3:f6:a3:db:20:df:f7:25:18:
18:7a:3a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:53:03 2026 by rpki-client