
$ rpki-client -vvvf rpkica.twnic.tw/rpki/NARL/0/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.mft
File: 9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.mft (raw, json)
Hash identifier: 63zPUFoO7b8e3wsAtjXKZq6BDLTm8GAxNzZmJGK7wx0=
Subject key identifier: 8D:D8:23:A8:F1:90:59:64:E6:06:5C:2D:5E:FF:AB:D8:F7:8A:40:D2
Authority key identifier: 9D:85:BB:8D:93:00:6D:35:86:E2:8D:0D:66:12:CA:FA:CC:8E:A6:C1
Certificate issuer: /CN=9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1
Certificate serial: 4EB9D65AE222B07D4562840CA770853C3131B374
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/NARL/0/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.mft
Manifest number: C1
Signing time: Wed 23 Sep 2026 05:51:44 +0000
Manifest this update: Wed 23 Sep 2026 05:46:44 +0000
Manifest next update: Thu 24 Sep 2026 08:42:44 +0000
Files and hashes: 1: 323030313a6531303a3a2f33322d3634203d3e2037353339.roa (hash: YSlCSDgV7ONwXR8qLUKp0gub/ohO6L6glqkIRmUnSSI=)
2: 323030313a343530303a313030303a3a2f34302d3634203d3e2037353339.roa (hash: aCon7ihkrSQu1jOrSasXY8xC7tkNYvzzB6OK08dUqns=)
3: 3231312e37392e34382e302f32302d3234203d3e2037353339.roa (hash: I5PmO4GML9TmcQR3Fe6NQsOfRlP4bey95QSbpiOHW9g=)
4: 323030313a6531303a356330313a3a2f34382d3438203d3e203138343134.roa (hash: 4pWru8F46B69pO9HUzxMVehxyDkhe3ADb762Yq2SiNM=)
5: 9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.crl (hash: csfGN0M1LmQ807fF8N6rlS+M4m79FsA0PBGItYEgJiY=)
6: 3230332e3134352e3139322e302f32312d3234203d3e203138343236.roa (hash: gNPPk70chubQg8rvqCFhjNMJr/GwTZPy8GKS/JxLGtk=)
7: 323030313a6335383a3a2f33322d3634203d3e2037353339.roa (hash: KHGZSCyTjAFf8gkceCez8q0dI7RMF2GjBnOSsXKo2tY=)
8: 3130332e3132342e37322e302f32322d3234203d3e2037353339.roa (hash: /oWUtrivyYYR3xINxuZfk4J46KekrLAODBaoBbnjf6g=)
9: 3230332e3134352e3230382e302f32302d3234203d3e2037353339.roa (hash: TkgRJDcSEgq7NjOc3j8nZRABpENJrXFx+4WnsRFtzh4=)
10: 3230332e3134352e3230302e302f32312d3234203d3e2037353339.roa (hash: jxkAJdAcKZ8RSCBcISH4Y4rq8GCUJiutzooENkFUhIc=)
11: 3130332e3136302e3232302e302f32332d3234203d3e2037353339.roa (hash: C3OJeu7QwWAZKqQNtD3rtSGZubdl01iTngU6YcVIGgI=)
12: 3231312e37332e36342e302f31392d3234203d3e2037353339.roa (hash: 2F7wVvWL/EB7PGkj0VVEyWuWlBMkBD3Mrsqa9Y9SivA=)
13: 3231312e37332e38362e302f32342d3234203d3e203138343134.roa (hash: RcN4dOIBTFqY1G5jI8viPt6e6PNTMt4L6CpBX1XlPOU=)
14: 323030313a343530303a3a2f33322d3634203d3e203138313833.roa (hash: PMzGY0PfcdsGzBMtdtqJG5vua06dScgAEtiVBZ8oJwQ=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/NARL/0/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.crl
rsync://rpkica.twnic.tw/rpki/NARL/0/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 08:30:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:b9:d6:5a:e2:22:b0:7d:45:62:84:0c:a7:70:85:3c:31:31:b3:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1
Validity
Not Before: Sep 23 05:46:44 2026 GMT
Not After : Sep 24 08:42:44 2026 GMT
Subject: CN=8DD823A8F1905964E6065C2D5EFFABD8F78A40D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:45:c8:fa:cf:9a:bb:78:6e:91:d2:65:71:4d:
24:0c:0d:ba:55:57:25:5c:ac:4f:75:71:bd:8c:46:
48:b6:c3:ab:de:1a:53:63:b2:60:34:13:20:98:01:
5e:53:a8:81:ac:7f:f4:a8:ec:85:93:09:28:cb:ba:
11:e5:23:49:c9:04:90:37:a2:28:2f:a4:e8:1c:ef:
70:16:87:09:95:52:07:f4:dc:1e:ab:d9:7b:10:cf:
d8:a2:56:56:22:2d:00:e9:d7:15:3f:a4:f8:bd:2b:
55:32:86:55:40:cc:33:ca:c0:86:9e:50:a2:ca:86:
af:2b:07:fd:70:63:9a:0b:61:5a:a7:91:f8:de:1d:
41:d3:a3:e1:f4:4e:f1:59:39:a4:5d:97:e3:a1:8b:
49:63:17:1e:5f:2f:6c:f0:f1:20:d7:2d:e7:61:0b:
f6:77:51:fb:c0:aa:01:49:ad:fa:ea:06:f8:69:72:
b8:eb:25:03:43:e6:07:32:bd:0e:75:ee:a5:45:7e:
e9:db:07:ca:2e:d1:33:72:47:30:83:19:8e:6c:7f:
b5:7e:12:ca:ee:78:d2:e3:de:13:3d:03:eb:64:e2:
c5:61:bf:6b:80:99:a2:65:dc:16:bc:ff:76:f2:d7:
35:92:3c:17:16:59:a5:d2:25:6e:e6:76:8c:73:b6:
89:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:D8:23:A8:F1:90:59:64:E6:06:5C:2D:5E:FF:AB:D8:F7:8A:40:D2
X509v3 Authority Key Identifier:
keyid:9D:85:BB:8D:93:00:6D:35:86:E2:8D:0D:66:12:CA:FA:CC:8E:A6:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/NARL/0/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NARL/0/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:06:98:5d:0e:c3:ce:5e:35:e0:d6:c1:2a:25:be:65:c6:2e:
b1:7b:bd:72:18:3f:9b:e2:d8:1e:9f:bc:f4:99:50:d1:2a:98:
45:2a:28:31:35:5f:a0:7c:3a:d1:fd:22:2a:87:1d:b9:7f:52:
44:91:c0:d6:bb:2f:cb:45:9c:29:f1:c2:f0:ca:ff:72:66:f7:
e8:f8:86:45:b6:f0:ec:e0:4b:35:45:ab:a0:31:6f:8a:8b:ac:
af:8a:db:6b:aa:8b:d5:55:20:ab:14:83:ca:7c:e8:3f:51:85:
9e:0a:7c:ab:08:d4:b3:04:02:e9:63:98:d1:90:ca:cd:11:f3:
3d:c4:5c:64:8b:22:ce:63:0c:79:38:a1:2f:6e:75:05:4a:ae:
33:c7:8b:f6:28:47:9c:00:9d:dd:bb:4d:b7:96:59:7e:fc:2a:
71:3b:03:e4:77:e0:03:a6:46:42:50:04:62:c3:ff:83:b2:2b:
1e:94:17:c8:fc:79:7f:fc:59:af:9a:49:76:0a:90:1a:6b:32:
27:55:45:96:da:53:a6:a0:e8:f4:ea:ef:11:52:18:11:9f:f4:
28:5e:49:a3:f3:e6:e4:cf:f4:e6:91:25:1a:76:8e:d4:10:06:
32:07:23:29:bd:60:31:1a:9d:0b:4f:02:f2:6a:d6:c2:79:6c:
e2:c9:ef:4e
-----BEGIN CERTIFICATE-----
MIIE4DCCA8igAwIBAgIUTrnWWuIisH1FYoQMp3CFPDExs3QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUQ4NUJCOEQ5MzAwNkQzNTg2RTI4RDBENjYxMkNBRkFD
QzhFQTZDMTAeFw0yNjA5MjMwNTQ2NDRaFw0yNjA5MjQwODQyNDRaMDMxMTAvBgNV
BAMTKDhERDgyM0E4RjE5MDU5NjRFNjA2NUMyRDVFRkZBQkQ4Rjc4QTQwRDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrRcj6z5q7eG6R0mVxTSQMDbpV
VyVcrE91cb2MRki2w6veGlNjsmA0EyCYAV5TqIGsf/So7IWTCSjLuhHlI0nJBJA3
oigvpOgc73AWhwmVUgf03B6r2XsQz9iiVlYiLQDp1xU/pPi9K1UyhlVAzDPKwIae
UKLKhq8rB/1wY5oLYVqnkfjeHUHTo+H0TvFZOaRdl+Ohi0ljFx5fL2zw8SDXLedh
C/Z3UfvAqgFJrfrqBvhpcrjrJQND5gcyvQ517qVFfunbB8ou0TNyRzCDGY5sf7V+
EsrueNLj3hM9A+tk4sVhv2uAmaJl3Ba8/3by1zWSPBcWWaXSJW7mdoxztol1AgMB
AAGjggHqMIIB5jAdBgNVHQ4EFgQUjdgjqPGQWWTmBlwtXv+r2PeKQNIwHwYDVR0j
BBgwFoAUnYW7jZMAbTWG4o0NZhLK+syOpsEwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud
HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTkFSTC8w
LzlEODVCQjhEOTMwMDZEMzU4NkUyOEQwRDY2MTJDQUZBQ0M4RUE2QzEuY3JsMG8G
CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu
dHcvcnBraS9UV05JQ0NBLzEvOUQ4NUJCOEQ5MzAwNkQzNTg2RTI4RDBENjYxMkNB
RkFDQzhFQTZDMS5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu
YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05BUkwvMC85RDg1QkI4RDkzMDA2RDM1
ODZFMjhEMEQ2NjEyQ0FGQUNDOEVBNkMxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG
AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOAaYXQ7Dzl414NbB
KiW+ZcYusXu9chg/m+LYHp+89JlQ0SqYRSooMTVfoHw60f0iKocduX9SRJHA1rsv
y0WcKfHC8Mr/cmb36PiGRbbw7OBLNUWroDFviousr4rba6qL1VUgqxSDynzoP1GF
ngp8qwjUswQC6WOY0ZDKzRHzPcRcZIsizmMMeTihL251BUquM8eL9ihHnACd3btN
t5ZZfvwqcTsD5HfgA6ZGQlAEYsP/g7IrHpQXyPx5f/xZr5pJdgqQGmsyJ1VFltpT
pqDo9OrvEVIYEZ/0KF5Jo/Pm5M/05pElGnaO1BAGMgcjKb1gMRqdC08C8mrWwnls
4snvTg==
-----END CERTIFICATE-----
Generated at Wed Sep 23 12:44:53 2026 by rpki-client