
$ rpki-client -vvf rpkica.twnic.tw/rpki/NARL/0/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.mft
File: 9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.mft (raw, json)
Hash identifier: Ziha5A5HVA9oxW8w9GtUurEgsKQQIMdesGpPbxwAxWA=
Subject key identifier: CE:97:9D:BC:17:0E:72:64:3A:42:32:B7:4C:D4:35:3F:6D:32:A9:38
Authority key identifier: 9D:85:BB:8D:93:00:6D:35:86:E2:8D:0D:66:12:CA:FA:CC:8E:A6:C1
Certificate issuer: /CN=9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1
Certificate serial: 3D84D69A4CFE0E8A8650EDB4EFA2D675003AEC07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/NARL/0/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.mft
Manifest number: 76
Signing time: Tue 28 Jul 2026 14:59:14 +0000
Manifest this update: Tue 28 Jul 2026 14:54:14 +0000
Manifest next update: Wed 29 Jul 2026 18:17:14 +0000
Files and hashes: 1: 323030313a6335383a3a2f33322d3634203d3e2037353339.roa (hash: KHGZSCyTjAFf8gkceCez8q0dI7RMF2GjBnOSsXKo2tY=)
2: 323030313a343530303a313030303a3a2f34302d3634203d3e2037353339.roa (hash: aCon7ihkrSQu1jOrSasXY8xC7tkNYvzzB6OK08dUqns=)
3: 323030313a6531303a3a2f33322d3634203d3e2037353339.roa (hash: YSlCSDgV7ONwXR8qLUKp0gub/ohO6L6glqkIRmUnSSI=)
4: 9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.crl (hash: DIzZ52DMHJZL/6lfNY3CXr6WOG++KyyiKcc4TkTyGnU=)
5: 3230332e3134352e3230302e302f32312d3234203d3e2037353339.roa (hash: jxkAJdAcKZ8RSCBcISH4Y4rq8GCUJiutzooENkFUhIc=)
6: 3130332e3132342e37322e302f32322d3234203d3e2037353339.roa (hash: /oWUtrivyYYR3xINxuZfk4J46KekrLAODBaoBbnjf6g=)
7: 323030313a343530303a3a2f33322d3634203d3e203138313833.roa (hash: PMzGY0PfcdsGzBMtdtqJG5vua06dScgAEtiVBZ8oJwQ=)
8: 3231312e37332e38362e302f32342d3234203d3e203138343134.roa (hash: RcN4dOIBTFqY1G5jI8viPt6e6PNTMt4L6CpBX1XlPOU=)
9: 3230332e3134352e3230382e302f32302d3234203d3e2037353339.roa (hash: TkgRJDcSEgq7NjOc3j8nZRABpENJrXFx+4WnsRFtzh4=)
10: 323030313a6531303a356330313a3a2f34382d3438203d3e203138343134.roa (hash: 4pWru8F46B69pO9HUzxMVehxyDkhe3ADb762Yq2SiNM=)
11: 3230332e3134352e3139322e302f32312d3234203d3e203138343236.roa (hash: gNPPk70chubQg8rvqCFhjNMJr/GwTZPy8GKS/JxLGtk=)
12: 3231312e37392e34382e302f32302d3234203d3e2037353339.roa (hash: I5PmO4GML9TmcQR3Fe6NQsOfRlP4bey95QSbpiOHW9g=)
13: 3231312e37332e36342e302f31392d3234203d3e2037353339.roa (hash: 2F7wVvWL/EB7PGkj0VVEyWuWlBMkBD3Mrsqa9Y9SivA=)
14: 3130332e3136302e3232302e302f32332d3234203d3e2037353339.roa (hash: C3OJeu7QwWAZKqQNtD3rtSGZubdl01iTngU6YcVIGgI=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/NARL/0/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.crl
rsync://rpkica.twnic.tw/rpki/NARL/0/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 07:22:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:84:d6:9a:4c:fe:0e:8a:86:50:ed:b4:ef:a2:d6:75:00:3a:ec:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1
Validity
Not Before: Jul 28 14:54:14 2026 GMT
Not After : Jul 29 18:17:14 2026 GMT
Subject: CN=CE979DBC170E72643A4232B74CD4353F6D32A938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f8:b0:c1:a8:5c:85:24:a7:4e:81:84:10:89:
4c:08:3e:a3:e6:d9:6d:02:c3:ac:28:43:a7:18:45:
6d:49:c6:71:2d:9f:c2:44:e8:18:d9:96:50:5a:01:
1f:d6:c7:04:fb:b3:91:aa:ed:df:78:44:a2:de:ad:
d0:02:29:c8:54:61:d4:52:7e:42:8d:08:6c:a2:07:
15:be:70:e9:3f:c0:15:d7:9b:2a:19:d3:3b:2f:cc:
ac:7a:0f:4c:03:0b:2b:35:29:ad:ef:58:a8:18:18:
c0:c9:7d:d7:52:67:a9:55:63:01:6b:77:be:d3:3e:
2f:60:bf:87:b9:0e:8c:1e:4b:a9:79:be:e5:19:d5:
ce:3e:32:68:0c:94:00:e7:1a:5f:56:11:a8:9d:4a:
19:aa:ad:83:74:ca:34:be:63:33:26:f0:11:b9:82:
7a:e3:fb:dc:df:80:13:31:94:3d:ef:76:02:eb:7e:
83:61:e1:dd:72:97:9a:0c:2f:40:81:99:b9:30:7d:
d5:10:60:10:57:a2:d0:cf:13:7f:3c:a3:7c:1c:5a:
9d:06:57:cf:73:6f:0e:f6:a2:b7:61:15:55:60:24:
a2:67:5d:fb:72:62:12:58:e7:dc:95:8b:54:b5:22:
c8:81:0b:cb:5e:b1:0f:33:ad:cc:8e:ee:32:25:38:
ff:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:97:9D:BC:17:0E:72:64:3A:42:32:B7:4C:D4:35:3F:6D:32:A9:38
X509v3 Authority Key Identifier:
keyid:9D:85:BB:8D:93:00:6D:35:86:E2:8D:0D:66:12:CA:FA:CC:8E:A6:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/NARL/0/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NARL/0/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:43:ce:cf:d8:32:cd:e8:29:80:49:68:7b:80:cc:ad:a4:fc:
af:5d:b9:b0:80:ac:65:89:5f:ad:c4:c6:87:33:b8:0e:05:f6:
a7:e3:f1:1c:b3:69:40:5a:85:64:0a:3f:d2:66:54:72:d9:a2:
d4:76:8e:35:b3:d8:96:2b:09:16:65:58:a2:f1:a8:e0:1a:65:
0b:ff:c8:08:98:da:95:7e:d4:f7:32:fc:08:d4:dc:31:f1:78:
11:fc:8f:33:0c:98:4d:27:23:9a:93:d9:37:01:37:d6:c8:50:
32:53:e8:04:4b:fb:5a:97:6b:51:26:60:a0:f7:78:79:b5:0d:
06:e4:e2:05:f7:91:36:b3:e7:57:5f:ff:af:73:9b:4c:78:84:
45:4a:e3:3b:c1:5d:40:12:a3:24:dc:f3:a9:7b:7c:84:b0:7f:
db:24:d9:9e:a9:66:ec:b2:7c:44:2a:ee:1c:1c:4e:e0:72:f6:
30:0c:56:88:9e:a1:c3:0b:b8:9f:c5:1d:9f:0f:d6:c2:fc:4a:
9f:cd:4a:9f:54:52:06:ad:05:11:c9:71:7f:72:4e:2f:80:4c:
20:9a:46:e2:e9:87:9e:27:b0:88:41:22:14:06:d8:08:0d:73:
3d:a2:eb:e1:fa:fd:68:97:2a:6a:78:8d:bc:90:52:16:7b:9e:
13:c0:75:e6
-----BEGIN CERTIFICATE-----
MIIE4DCCA8igAwIBAgIUPYTWmkz+DoqGUO2076LWdQA67AcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUQ4NUJCOEQ5MzAwNkQzNTg2RTI4RDBENjYxMkNBRkFD
QzhFQTZDMTAeFw0yNjA3MjgxNDU0MTRaFw0yNjA3MjkxODE3MTRaMDMxMTAvBgNV
BAMTKENFOTc5REJDMTcwRTcyNjQzQTQyMzJCNzRDRDQzNTNGNkQzMkE5MzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl+LDBqFyFJKdOgYQQiUwIPqPm
2W0Cw6woQ6cYRW1JxnEtn8JE6BjZllBaAR/WxwT7s5Gq7d94RKLerdACKchUYdRS
fkKNCGyiBxW+cOk/wBXXmyoZ0zsvzKx6D0wDCys1Ka3vWKgYGMDJfddSZ6lVYwFr
d77TPi9gv4e5DoweS6l5vuUZ1c4+MmgMlADnGl9WEaidShmqrYN0yjS+YzMm8BG5
gnrj+9zfgBMxlD3vdgLrfoNh4d1yl5oML0CBmbkwfdUQYBBXotDPE388o3wcWp0G
V89zbw72ordhFVVgJKJnXftyYhJY59yVi1S1IsiBC8tesQ8zrcyO7jIlOP9hAgMB
AAGjggHqMIIB5jAdBgNVHQ4EFgQUzpedvBcOcmQ6QjK3TNQ1P20yqTgwHwYDVR0j
BBgwFoAUnYW7jZMAbTWG4o0NZhLK+syOpsEwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud
HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTkFSTC8w
LzlEODVCQjhEOTMwMDZEMzU4NkUyOEQwRDY2MTJDQUZBQ0M4RUE2QzEuY3JsMG8G
CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu
dHcvcnBraS9UV05JQ0NBLzEvOUQ4NUJCOEQ5MzAwNkQzNTg2RTI4RDBENjYxMkNB
RkFDQzhFQTZDMS5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu
YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05BUkwvMC85RDg1QkI4RDkzMDA2RDM1
ODZFMjhEMEQ2NjEyQ0FGQUNDOEVBNkMxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG
AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIEPOz9gyzegpgElo
e4DMraT8r125sICsZYlfrcTGhzO4DgX2p+PxHLNpQFqFZAo/0mZUctmi1HaONbPY
lisJFmVYovGo4BplC//ICJjalX7U9zL8CNTcMfF4EfyPMwyYTScjmpPZNwE31shQ
MlPoBEv7WpdrUSZgoPd4ebUNBuTiBfeRNrPnV1//r3ObTHiERUrjO8FdQBKjJNzz
qXt8hLB/2yTZnqlm7LJ8RCruHBxO4HL2MAxWiJ6hwwu4n8Udnw/WwvxKn81Kn1RS
Bq0FEclxf3JOL4BMIJpG4umHniewiEEiFAbYCA1zPaLr4fr9aJcqaniNvJBSFnue
E8B15g==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:37:52 2026 by rpki-client