
$ rpki-client -vvf rpkica.twnic.tw/rpki/NIMBUSCOM/1/9CF6ECD13FB5B2029770871AA6E5796104822624.mft
File: 9CF6ECD13FB5B2029770871AA6E5796104822624.mft (raw, json)
Hash identifier: GIvKI28eu6IRTjHXMmDUahjHbTHegkESycgT/DAAWyc=
Subject key identifier: 04:A0:04:45:95:72:B0:A2:DC:AD:06:7F:8F:F0:B7:31:3D:48:46:9D
Authority key identifier: 9C:F6:EC:D1:3F:B5:B2:02:97:70:87:1A:A6:E5:79:61:04:82:26:24
Certificate issuer: /CN=9CF6ECD13FB5B2029770871AA6E5796104822624
Certificate serial: 54B6FA0F3250CAC865278A05AA4298A15E82BC95
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/9CF6ECD13FB5B2029770871AA6E5796104822624.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/1/9CF6ECD13FB5B2029770871AA6E5796104822624.mft
Manifest number: 35
Signing time: Fri 12 Jun 2026 19:37:56 +0000
Manifest this update: Fri 12 Jun 2026 19:32:56 +0000
Manifest next update: Sat 13 Jun 2026 22:47:56 +0000
Files and hashes: 1: 36342e37382e3136302e302f32302d3234203d3e20313332333639.roa (hash: GgXMTkt2H5e9QQpD/IDwW8cfgE25pbmkynI8XBBMpbg=)
2: 9CF6ECD13FB5B2029770871AA6E5796104822624.crl (hash: ZXL6P2F+MzqFcxj4DV1M9XzodGMZkycPNC+7xmt5WyM=)
3: 36342e37382e3136302e302f32302d3234203d3e203331393732.roa (hash: fJ9O2D8T6TBG/ntIcA3JtcHpPY7Bp1wllKnMj7rLb1A=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/1/9CF6ECD13FB5B2029770871AA6E5796104822624.crl
rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/1/9CF6ECD13FB5B2029770871AA6E5796104822624.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/9CF6ECD13FB5B2029770871AA6E5796104822624.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 22:38:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:b6:fa:0f:32:50:ca:c8:65:27:8a:05:aa:42:98:a1:5e:82:bc:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9CF6ECD13FB5B2029770871AA6E5796104822624
Validity
Not Before: Jun 12 19:32:56 2026 GMT
Not After : Jun 13 22:47:56 2026 GMT
Subject: CN=04A004459572B0A2DCAD067F8FF0B7313D48469D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cc:ed:81:9c:22:e7:c0:03:4a:bc:c6:eb:56:
48:e3:de:d7:9d:ca:f0:68:49:17:ed:c4:d4:bb:87:
2f:53:16:c0:94:07:6c:c4:2d:0d:8c:59:64:3e:30:
cf:f9:27:44:79:64:00:f3:4a:02:43:06:bb:75:e9:
1a:56:89:70:42:c1:54:63:cc:2b:05:b9:52:6a:43:
74:03:ba:de:80:3f:30:b4:65:94:bf:ed:e2:b5:8c:
3a:8d:6c:37:57:28:f3:04:29:5d:a1:6a:f6:d2:a0:
7c:e4:ce:b1:f4:ad:ce:ed:12:88:2d:7f:7b:dc:f5:
3a:ab:e5:2f:04:57:fb:34:4c:dd:11:2d:36:b3:64:
f8:f6:52:59:cf:93:3d:96:df:9b:96:e1:23:20:1f:
82:c2:1c:22:b7:f8:ac:de:df:77:f1:a1:48:03:b8:
cb:d8:cd:c4:ef:50:69:db:5a:80:18:16:4f:ee:08:
54:9c:43:d4:b9:fa:df:b3:1c:cc:89:7c:31:01:21:
6a:ac:e7:3d:15:2d:15:4c:5a:ac:0e:65:16:09:c4:
82:91:c2:1c:6b:b0:91:79:e2:22:38:99:df:97:32:
98:77:b5:c5:c4:ab:03:03:5b:97:f7:97:9a:bf:22:
f9:89:01:94:e2:5f:12:6c:0e:a6:66:4d:29:06:47:
1f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:A0:04:45:95:72:B0:A2:DC:AD:06:7F:8F:F0:B7:31:3D:48:46:9D
X509v3 Authority Key Identifier:
keyid:9C:F6:EC:D1:3F:B5:B2:02:97:70:87:1A:A6:E5:79:61:04:82:26:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/1/9CF6ECD13FB5B2029770871AA6E5796104822624.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/9CF6ECD13FB5B2029770871AA6E5796104822624.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/1/9CF6ECD13FB5B2029770871AA6E5796104822624.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:e2:61:9d:a8:ff:91:6f:18:9b:4d:43:e7:47:f2:3b:fd:86:
42:4e:a9:d8:65:8a:23:e7:34:86:b0:cc:37:60:4a:89:d5:ba:
31:00:cd:cb:51:b8:9f:a9:44:72:85:2b:b4:7d:7f:7c:3b:b5:
f4:cd:97:0d:91:17:6b:92:d3:9c:fb:9b:4f:da:e2:00:4f:f3:
0c:5c:13:4b:e2:27:53:3f:03:a0:f7:0e:0b:9d:06:51:34:62:
7c:1f:d2:ab:18:48:37:21:58:97:d8:70:dc:2d:93:15:39:70:
8b:a8:3c:ab:49:5b:ea:ea:3c:e9:5e:41:59:e0:a0:e4:e4:de:
bf:a8:97:14:65:05:24:26:69:a7:54:88:c6:29:bd:82:92:92:
2d:09:b3:d2:c0:fc:c9:58:53:7b:bc:34:df:c8:97:c6:41:38:
37:a9:ab:0b:9e:3e:16:f2:70:89:bd:5a:3b:fe:59:94:db:af:
e7:23:7f:ad:7f:7f:b2:67:87:d3:02:72:8e:f2:f0:07:ab:0c:
aa:95:0b:28:fe:67:42:5a:1a:34:4f:ec:e1:42:8f:b4:64:e1:
20:65:ee:d4:27:0f:03:ba:12:78:31:04:1d:05:3f:59:69:b8:
b6:39:8b:43:55:ee:3d:1b:02:c3:26:a8:97:15:71:0c:54:1c:
72:34:53:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:10:33 2026 by rpki-client