
$ rpki-client -vvf rpkica.twnic.tw/rpki/NSS/0/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.mft
File: 9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.mft (raw, json)
Hash identifier: kaF20ubGXOx7koOwQreo9LEx0EbIMHHZyFJ10/edt0s=
Subject key identifier: A0:37:66:7D:5E:58:F2:26:A9:6E:50:1D:AB:4F:67:97:B1:49:26:B4
Authority key identifier: 9E:13:5A:CA:9B:3B:7E:42:3F:6A:6E:49:C9:22:E7:C9:FF:9D:04:3E
Certificate issuer: /CN=9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E
Certificate serial: 391D96557B1C3F6CB74904D6CDAEDDF88E2719C2
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/NSS/0/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.mft
Manifest number: 33
Signing time: Tue 16 Jun 2026 20:05:50 +0000
Manifest this update: Tue 16 Jun 2026 20:00:50 +0000
Manifest next update: Wed 17 Jun 2026 21:20:50 +0000
Files and hashes: 1: 9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.crl (hash: IR2PCBVHXexTrkRJe5Cu3+QFAD9qGABolxj4FiUemHc=)
2: 323430333a663363303a3a2f33322d3332203d3e20313331363236.roa (hash: U+TwGMruloppvfph33ur/zLTpQNWHiQ2kQh2YCvkqAQ=)
3: 3130332e3131382e32342e302f32322d3234203d3e20313331363236.roa (hash: 7ZYOaD4BiHJMT5uylYeAq6oBkT9jOAeVwRTnZzrlVB0=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/NSS/0/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.crl
rsync://rpkica.twnic.tw/rpki/NSS/0/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 18:58:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:1d:96:55:7b:1c:3f:6c:b7:49:04:d6:cd:ae:dd:f8:8e:27:19:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E
Validity
Not Before: Jun 16 20:00:50 2026 GMT
Not After : Jun 17 21:20:50 2026 GMT
Subject: CN=A037667D5E58F226A96E501DAB4F6797B14926B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:4d:a1:ee:b1:cf:37:11:57:01:76:03:6c:c4:
af:63:c0:4b:4b:23:2b:1c:4c:c9:91:54:c7:97:ec:
68:4a:16:43:1a:b2:0b:74:a6:c2:b9:3f:6d:42:bf:
1c:3f:a0:6f:83:1d:2a:53:87:84:d1:42:b5:9a:3c:
bb:b6:77:49:24:a5:49:9d:c0:3e:dc:3a:0f:aa:5d:
60:ec:2e:84:23:30:4f:7f:bb:57:e6:a0:1a:5b:4c:
ee:74:8a:05:a7:a9:1b:02:aa:80:a0:0a:27:c8:d3:
2f:88:13:7d:9d:20:8e:ba:20:6e:00:92:d8:5d:08:
0a:a2:ed:dc:ea:dd:dc:1b:95:cb:01:5c:87:cd:31:
ff:14:f4:e6:a7:e2:d6:37:3a:ea:2c:1d:ad:9c:fd:
0b:af:d8:64:30:61:a5:f6:77:5a:cb:57:d4:47:87:
58:11:a6:d5:c0:8f:f3:2c:eb:58:33:28:6a:62:1d:
fe:1b:cf:fa:21:a8:26:d2:08:e7:36:29:aa:57:3d:
45:e3:a9:e0:b5:57:2e:5d:3a:e9:f6:6c:0e:64:cc:
cb:87:b1:96:6e:0e:5e:6b:40:79:09:91:6f:8c:6f:
63:1e:22:19:c0:e6:5e:bd:54:8c:37:ff:35:ea:6a:
a5:63:0d:7e:1c:33:89:14:bc:83:d8:42:dd:3a:3b:
13:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:37:66:7D:5E:58:F2:26:A9:6E:50:1D:AB:4F:67:97:B1:49:26:B4
X509v3 Authority Key Identifier:
keyid:9E:13:5A:CA:9B:3B:7E:42:3F:6A:6E:49:C9:22:E7:C9:FF:9D:04:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/NSS/0/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NSS/0/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:31:34:5f:dc:4b:22:e0:43:d0:1f:bb:a4:b1:4b:42:21:ce:
25:9d:18:3b:7b:9d:6f:0a:af:ab:7f:57:92:9a:55:c6:36:7e:
87:4c:87:17:6a:43:b2:25:90:71:5b:1f:e0:df:a1:87:8a:55:
84:c1:13:48:38:97:ea:45:e9:52:36:54:bb:c9:01:01:38:b3:
c1:3b:06:e9:b8:1d:62:ee:24:df:e5:ea:0d:51:bf:47:75:e7:
65:9a:45:a1:68:c0:39:4b:d0:56:d4:46:e9:2c:11:f2:eb:65:
72:7e:90:c5:83:ba:32:fd:3a:32:12:43:23:7e:f5:b5:e7:5a:
50:60:b2:ed:8a:73:cf:84:16:2d:44:79:a6:13:a8:54:39:ae:
c7:ff:0b:da:3d:69:83:b5:c3:97:82:fe:68:40:b5:0e:d7:8a:
15:2e:d7:17:60:0a:aa:90:9e:3c:ee:33:8c:7d:f3:39:09:65:
37:d3:d3:92:e9:6c:58:72:88:b5:46:12:39:c4:53:20:e8:bc:
a2:c1:ac:e9:29:d4:6f:04:4a:db:2d:02:4f:d2:cf:7a:41:b8:
22:58:d7:54:57:ae:26:28:84:94:c9:4f:15:88:57:65:2b:a2:
54:8a:2d:3a:82:b2:81:30:c9:6d:ae:d7:f8:7d:ff:2c:e7:fb:
0f:97:27:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:37:13 2026 by rpki-client