
$ rpki-client -vvf rpkica.twnic.tw/rpki/NOT_TFN_CO/1/6CFAA0AD4AE8EE0B42091909FA44C7FF31B7465B.mft
File: 6CFAA0AD4AE8EE0B42091909FA44C7FF31B7465B.mft (raw, json)
Hash identifier: FZfVV7gedVK+Suyex3VAdyut4thwIozeICCy446bYIg=
Subject key identifier: 7D:CE:95:BF:6E:AE:9E:61:B9:10:13:EA:9A:87:DF:06:BD:64:49:06
Authority key identifier: 6C:FA:A0:AD:4A:E8:EE:0B:42:09:19:09:FA:44:C7:FF:31:B7:46:5B
Certificate issuer: /CN=6CFAA0AD4AE8EE0B42091909FA44C7FF31B7465B
Certificate serial: 27365BAB833AFA25103042C9CB691C253AEFDDB7
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/6CFAA0AD4AE8EE0B42091909FA44C7FF31B7465B.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/NOT_TFN_CO/1/6CFAA0AD4AE8EE0B42091909FA44C7FF31B7465B.mft
Manifest number: 2F
Signing time: Sat 13 Jun 2026 17:30:05 +0000
Manifest this update: Sat 13 Jun 2026 17:25:05 +0000
Manifest next update: Sun 14 Jun 2026 20:41:05 +0000
Files and hashes: 1: 3136302e3138372e3130302e302f32332d3234203d3e20313532313739.roa (hash: 2CcgEMkqiT9SKKomSlBmDsKGF4RvxfhpXN/K83M0KAs=)
2: 3136302e3138372e3130302e302f32332d3234203d3e20313532363138.roa (hash: ReCvGN0RaLIF0GT345qHVTZeOV9Xxm1dcLiUZvQe6oQ=)
3: 6CFAA0AD4AE8EE0B42091909FA44C7FF31B7465B.crl (hash: RDfNvTqf3bDGpPLqb9mIrB2BWjFBTkVbADNRJ8cAYyM=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/NOT_TFN_CO/1/6CFAA0AD4AE8EE0B42091909FA44C7FF31B7465B.crl
rsync://rpkica.twnic.tw/rpki/NOT_TFN_CO/1/6CFAA0AD4AE8EE0B42091909FA44C7FF31B7465B.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/6CFAA0AD4AE8EE0B42091909FA44C7FF31B7465B.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 17:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:36:5b:ab:83:3a:fa:25:10:30:42:c9:cb:69:1c:25:3a:ef:dd:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6CFAA0AD4AE8EE0B42091909FA44C7FF31B7465B
Validity
Not Before: Jun 13 17:25:05 2026 GMT
Not After : Jun 14 20:41:05 2026 GMT
Subject: CN=7DCE95BF6EAE9E61B91013EA9A87DF06BD644906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5b:2d:af:e7:6e:9b:8a:db:b2:de:b5:17:5b:
46:24:65:62:73:b0:ac:38:79:a1:54:ec:18:78:eb:
e3:4a:82:eb:26:1d:20:a3:31:2c:7c:3d:70:1c:c4:
59:32:fe:bc:a8:4f:4c:5f:f8:53:74:16:b0:d4:9b:
b5:f7:03:c8:bc:b0:14:81:99:8a:de:25:d1:7f:90:
e2:11:ad:a3:ef:3e:ec:71:9d:f8:22:ad:b4:9b:e2:
00:2f:44:ba:b4:51:05:f7:d6:ab:ed:76:18:d7:ce:
7c:32:48:33:95:eb:c2:0b:f6:d9:5f:fc:5f:35:b0:
d5:85:96:30:a7:48:fd:b7:b9:ed:61:05:ed:be:17:
43:8b:d0:bf:e9:0f:e6:b3:99:5a:51:f6:85:c9:7b:
51:4a:5e:2b:fd:87:16:91:79:6c:4f:a1:45:18:1f:
5d:78:36:7b:7a:16:8a:43:3c:d8:88:1b:ab:e3:d1:
07:a4:0a:b0:e5:fa:09:76:07:ba:4b:69:13:ae:4b:
81:e8:d9:da:24:ed:67:15:47:29:54:e6:eb:74:cb:
21:2f:70:9b:7a:09:5e:9e:dd:03:0a:a8:dc:23:2c:
fc:11:59:cb:f0:a3:ff:04:bb:62:cb:e8:75:8d:db:
05:12:80:1a:84:7d:b8:b6:d9:fe:38:d7:aa:c7:e5:
7c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:CE:95:BF:6E:AE:9E:61:B9:10:13:EA:9A:87:DF:06:BD:64:49:06
X509v3 Authority Key Identifier:
keyid:6C:FA:A0:AD:4A:E8:EE:0B:42:09:19:09:FA:44:C7:FF:31:B7:46:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/NOT_TFN_CO/1/6CFAA0AD4AE8EE0B42091909FA44C7FF31B7465B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/6CFAA0AD4AE8EE0B42091909FA44C7FF31B7465B.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NOT_TFN_CO/1/6CFAA0AD4AE8EE0B42091909FA44C7FF31B7465B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:0a:b1:aa:76:af:5e:b5:72:d7:b7:4a:5f:b2:7e:23:95:6d:
3e:32:32:d8:b3:b0:43:31:0e:16:25:7c:f9:60:5d:cc:91:10:
da:a1:fd:5a:55:e5:7c:a4:20:86:c3:31:f1:d7:29:59:45:ea:
1c:9d:29:e4:13:a2:6b:fc:16:48:76:57:0c:6d:ea:6d:ff:9c:
ae:31:8a:4f:fc:34:42:87:58:43:21:78:b6:c8:c8:56:07:10:
20:d3:16:4f:fa:b8:77:fa:77:7b:ff:16:a9:f6:7e:3d:5d:34:
d8:c9:70:36:ad:8a:db:6d:2e:d5:0e:97:e6:f4:1b:2e:5e:ee:
65:95:33:a4:34:88:d8:b9:e4:b9:77:6e:4d:e9:01:4b:91:38:
37:89:2b:5c:a6:b1:ed:59:c4:a9:ce:96:11:9e:49:dc:a4:83:
79:ab:6b:57:0d:ea:62:f1:00:88:d2:bd:bc:7c:7f:82:07:25:
35:04:d0:8a:83:28:fd:c4:ea:d8:56:5f:9c:f6:e1:74:44:ad:
71:b3:78:5b:61:2d:76:97:53:b5:e4:ce:a5:18:65:77:1a:e4:
60:80:ad:46:05:5f:1c:79:e3:bc:bb:c1:41:1a:9c:88:a4:4c:
4c:42:35:56:30:20:76:67:8b:3a:93:99:88:2c:b4:5d:59:61:
87:4d:86:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:50:51 2026 by rpki-client