
$ rpki-client -vvf rpkica.twnic.tw/rpki/KUANGSHIH/0/E069CBFD234F1AB4E540FED5E8E3A16D0F2987A5.mft
File: E069CBFD234F1AB4E540FED5E8E3A16D0F2987A5.mft (raw, json)
Hash identifier: YH3tCpPio2PCHnNxNHPbUQanh1elHGEZtxB8eTyMitM=
Subject key identifier: 12:8E:A5:8F:E5:61:34:23:9A:17:56:AB:49:A8:66:62:E5:C3:3B:6E
Authority key identifier: E0:69:CB:FD:23:4F:1A:B4:E5:40:FE:D5:E8:E3:A1:6D:0F:29:87:A5
Certificate issuer: /CN=E069CBFD234F1AB4E540FED5E8E3A16D0F2987A5
Certificate serial: 341D32D273FA52E63693E4D0F01AE6AF7ACC4D15
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E069CBFD234F1AB4E540FED5E8E3A16D0F2987A5.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/KUANGSHIH/0/E069CBFD234F1AB4E540FED5E8E3A16D0F2987A5.mft
Manifest number: 6C
Signing time: Tue 28 Jul 2026 14:54:12 +0000
Manifest this update: Tue 28 Jul 2026 14:49:12 +0000
Manifest next update: Wed 29 Jul 2026 14:56:12 +0000
Files and hashes: 1: E069CBFD234F1AB4E540FED5E8E3A16D0F2987A5.crl (hash: 6zj+TUc5HcBFwVesefuTBR23gOe4dWJ1WPYzsJKoe2c=)
2: 3130332e3133362e3231302e302f32332d3234203d3e20313334383233.roa (hash: ORlTefciXfs7B8j/V1m0IX5sH4O69987zDEATqKs4Vg=)
3: 3130332e3133362e3231302e302f32332d3234203d3e203137353032.roa (hash: iW1ZLD2xVMVzTgjKNYmVbGt8qDm7cZnk4mm0FDu/bKA=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/KUANGSHIH/0/E069CBFD234F1AB4E540FED5E8E3A16D0F2987A5.crl
rsync://rpkica.twnic.tw/rpki/KUANGSHIH/0/E069CBFD234F1AB4E540FED5E8E3A16D0F2987A5.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E069CBFD234F1AB4E540FED5E8E3A16D0F2987A5.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 14:56:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:1d:32:d2:73:fa:52:e6:36:93:e4:d0:f0:1a:e6:af:7a:cc:4d:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E069CBFD234F1AB4E540FED5E8E3A16D0F2987A5
Validity
Not Before: Jul 28 14:49:12 2026 GMT
Not After : Jul 29 14:56:12 2026 GMT
Subject: CN=128EA58FE56134239A1756AB49A86662E5C33B6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9f:e1:21:15:33:f4:59:d4:d9:e3:bd:6f:5f:
2b:52:8c:80:0f:0b:a2:63:6a:72:7a:31:d6:16:cd:
9f:07:bf:27:4f:0a:58:c7:4a:63:8d:40:c5:8a:41:
98:8e:b2:7c:20:0c:f3:1a:cb:47:8f:79:09:1f:33:
a3:54:e6:d6:5e:58:42:18:04:e9:3f:32:e3:30:0c:
8d:22:e5:0f:19:5e:c8:fe:e0:73:de:13:a7:8c:e3:
bf:62:2e:73:0a:bf:e6:3b:0f:a0:ca:76:a6:58:1c:
5d:56:4c:c9:0e:35:ae:15:08:f2:2f:80:9b:28:04:
7a:9b:4f:8f:6c:79:04:06:fe:3e:84:8d:dc:42:04:
bb:70:44:68:15:af:06:7f:f1:25:ab:d4:ef:36:83:
da:5f:d3:8c:ad:5d:9a:9a:cf:74:6c:3c:04:61:6d:
47:f9:45:bf:7d:b1:32:9a:c1:64:fb:84:e3:de:af:
1e:de:7d:bf:04:cd:fe:8c:ac:d7:be:e3:58:53:11:
ca:39:41:83:dd:20:23:a0:b0:77:91:80:f1:a0:40:
12:74:c6:86:82:ce:40:cd:01:08:d3:ae:ac:0b:2d:
22:02:1c:3b:cc:3b:7e:ba:e5:d6:9d:6e:22:1b:a4:
3c:68:bd:ac:0c:31:58:52:2a:f6:37:bf:e4:a6:d0:
bf:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:8E:A5:8F:E5:61:34:23:9A:17:56:AB:49:A8:66:62:E5:C3:3B:6E
X509v3 Authority Key Identifier:
keyid:E0:69:CB:FD:23:4F:1A:B4:E5:40:FE:D5:E8:E3:A1:6D:0F:29:87:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/KUANGSHIH/0/E069CBFD234F1AB4E540FED5E8E3A16D0F2987A5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E069CBFD234F1AB4E540FED5E8E3A16D0F2987A5.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KUANGSHIH/0/E069CBFD234F1AB4E540FED5E8E3A16D0F2987A5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:58:fb:25:e8:de:af:be:0a:cf:99:54:21:be:2b:76:bc:81:
b1:86:92:16:0e:7f:d3:df:77:7f:8d:53:a7:bc:1f:7c:56:9e:
57:4d:6b:08:8a:08:f8:ce:12:5a:ee:92:50:17:55:77:d9:f4:
34:58:e6:fb:e9:00:a8:b2:d4:58:e5:f7:39:37:8b:1b:e7:d1:
3f:24:4d:fa:e1:4f:fd:c6:be:6a:aa:21:7e:1a:13:2e:10:d9:
96:48:ca:ce:52:36:e3:fe:36:a1:66:3f:bc:eb:37:29:8a:08:
8b:56:84:c2:79:1c:97:eb:c2:bd:b8:1c:46:d3:d6:c0:de:fb:
c2:b5:f9:19:3d:6b:9b:3f:50:3b:ef:60:11:5c:7c:b2:9b:d3:
dc:9e:cc:4d:23:28:bc:24:14:3a:43:ac:02:10:28:bb:4d:2b:
a5:eb:73:a2:38:a7:ad:3a:57:66:5e:aa:ce:6b:4d:34:3f:34:
b7:be:25:65:f8:40:a2:b1:5a:75:78:7e:bc:9b:cb:a6:9a:02:
23:87:db:2e:4e:2d:29:dc:e2:fb:fe:45:d0:fd:47:12:6c:42:
ce:da:a6:eb:6c:ff:68:84:7d:61:73:8b:ba:9a:e6:65:57:f0:
c2:cf:2e:c5:db:a5:59:c1:c9:3e:3b:c7:5f:52:0e:b9:78:bb:
e3:9c:07:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:28:18 2026 by rpki-client