
$ rpki-client -vvf rpkica.twnic.tw/rpki/MCK/0/9C6C404D96BB112984EB14C46BE0526514B6BFBF.mft
File: 9C6C404D96BB112984EB14C46BE0526514B6BFBF.mft (raw, json)
Hash identifier: BfcDMEA6B0vLZWeLYTdr2VBhuhtAPFkhiDX2gNBToLw=
Subject key identifier: 78:A3:12:3A:5D:75:9E:69:C7:FE:64:CC:7C:C4:2A:A2:5F:15:3B:FB
Authority key identifier: 9C:6C:40:4D:96:BB:11:29:84:EB:14:C4:6B:E0:52:65:14:B6:BF:BF
Certificate issuer: /CN=9C6C404D96BB112984EB14C46BE0526514B6BFBF
Certificate serial: 0568BA19D6C4BF2D8831A1F9CB704C6BFC8A6F9F
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9C6C404D96BB112984EB14C46BE0526514B6BFBF.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/MCK/0/9C6C404D96BB112984EB14C46BE0526514B6BFBF.mft
Manifest number: 6A
Signing time: Tue 28 Jul 2026 16:09:23 +0000
Manifest this update: Tue 28 Jul 2026 16:04:23 +0000
Manifest next update: Wed 29 Jul 2026 19:27:23 +0000
Files and hashes: 1: 9C6C404D96BB112984EB14C46BE0526514B6BFBF.crl (hash: OI7SeCOnB8bUHacj926xYRC6wvS//TiboTQChu7Vzwc=)
2: 3130332e3134382e36382e302f32332d3234203d3e20313331363138.roa (hash: BACFnkZaw8ZPpbq3IkwDxSxDzFcQk+Vm9o3aE8Vt++E=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/MCK/0/9C6C404D96BB112984EB14C46BE0526514B6BFBF.crl
rsync://rpkica.twnic.tw/rpki/MCK/0/9C6C404D96BB112984EB14C46BE0526514B6BFBF.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9C6C404D96BB112984EB14C46BE0526514B6BFBF.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 07:22:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:68:ba:19:d6:c4:bf:2d:88:31:a1:f9:cb:70:4c:6b:fc:8a:6f:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9C6C404D96BB112984EB14C46BE0526514B6BFBF
Validity
Not Before: Jul 28 16:04:23 2026 GMT
Not After : Jul 29 19:27:23 2026 GMT
Subject: CN=78A3123A5D759E69C7FE64CC7CC42AA25F153BFB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:1f:d3:4b:47:12:f0:c4:3b:29:37:88:8d:0b:
bb:b7:d8:fb:b1:1c:ab:c7:33:49:39:42:42:d3:73:
aa:0d:58:38:4f:ed:0a:20:94:ea:64:2c:94:df:d2:
e5:c5:37:b6:9b:4b:0e:65:a6:fc:09:2c:14:b7:4a:
50:56:4b:5a:e7:14:85:9b:f1:6a:19:b9:06:ec:1e:
ba:39:fc:fb:07:13:37:bd:7b:4b:60:df:fb:a6:db:
f8:af:13:47:28:ff:9a:ce:d5:3a:58:ed:b7:c0:1b:
d9:db:a8:c6:85:1d:90:83:19:fd:8f:cc:07:78:12:
db:e1:7d:ac:ed:b9:be:45:e7:76:35:b0:a3:2c:a1:
9a:9d:0e:7a:47:ff:82:59:fc:a5:9d:76:d6:d2:8f:
86:4a:8d:99:ae:b1:80:25:89:f8:4f:ac:b6:80:2d:
1f:1d:53:8d:15:7a:0f:bf:39:e9:30:9c:38:f1:59:
51:57:87:63:93:ba:b5:13:44:2b:4f:ed:eb:1a:fe:
4c:f6:2e:ca:91:a3:1e:26:83:0f:3c:8f:f3:4e:1f:
c8:3f:2c:af:4e:03:4a:e8:de:ed:93:09:0d:2b:85:
bc:34:66:d8:86:c1:17:ad:46:4d:22:71:71:16:12:
3a:6b:67:cb:c7:54:66:e6:47:41:ba:7c:8c:de:9f:
43:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:A3:12:3A:5D:75:9E:69:C7:FE:64:CC:7C:C4:2A:A2:5F:15:3B:FB
X509v3 Authority Key Identifier:
keyid:9C:6C:40:4D:96:BB:11:29:84:EB:14:C4:6B:E0:52:65:14:B6:BF:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/MCK/0/9C6C404D96BB112984EB14C46BE0526514B6BFBF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9C6C404D96BB112984EB14C46BE0526514B6BFBF.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MCK/0/9C6C404D96BB112984EB14C46BE0526514B6BFBF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:30:16:49:ce:4e:3f:fe:e0:4d:d5:28:25:e9:1a:59:92:b4:
b8:b6:2e:5f:c4:c1:f1:65:32:ff:dc:48:9a:b5:59:e9:4d:ce:
4c:0b:54:7c:aa:2c:4b:50:08:6f:54:69:00:39:3e:c2:33:db:
c6:c6:47:9b:08:95:7f:d8:51:e5:ab:2b:e4:56:20:de:83:d7:
a0:5e:71:07:21:1f:8e:a0:14:cd:ce:77:45:db:ea:f5:7a:73:
7a:8d:aa:6d:86:36:ef:a3:79:d9:27:4d:a0:06:23:92:29:b5:
00:fe:dc:8e:93:b8:f4:07:a8:a6:45:69:fe:e0:64:fd:d6:6e:
aa:7f:3f:8f:dd:b4:f4:2f:60:af:3e:7e:e8:8c:9f:37:79:a3:
87:e4:2d:3c:19:bd:0a:c1:61:20:fe:8e:63:fb:54:66:b6:0d:
78:5e:eb:9a:50:54:6b:5d:f7:bf:c0:22:d5:7f:70:4a:a2:ec:
2b:4b:67:c3:41:0e:9a:7b:e4:f2:9a:89:46:56:71:8d:67:fd:
24:a0:35:f0:3e:96:a3:8f:b0:21:66:09:67:2a:8c:0e:a8:bf:
ec:1c:75:c0:c3:fa:7b:49:c6:59:a3:34:7d:12:9b:84:21:7d:
e2:74:0d:c6:12:30:f8:14:a7:58:b8:06:4d:d3:a3:0f:f2:3d:
61:9a:77:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:21:53 2026 by rpki-client