
$ rpki-client -vvf rpkica.twnic.tw/rpki/NUNLINE/0/90CC65194573D100A9A5ECAD83FF235C91E49F84.mft
File: 90CC65194573D100A9A5ECAD83FF235C91E49F84.mft (raw, json)
Hash identifier: kAmhmvL4LJkEqEBLkdbcogah2ysUeRjLGwjgcTE3838=
Subject key identifier: 1A:98:A9:5C:83:71:D1:86:0A:A8:F1:44:3D:54:F2:7C:27:B1:CD:CC
Authority key identifier: 90:CC:65:19:45:73:D1:00:A9:A5:EC:AD:83:FF:23:5C:91:E4:9F:84
Certificate issuer: /CN=90CC65194573D100A9A5ECAD83FF235C91E49F84
Certificate serial: 585C53B9AD49EFAEA3A195EFAA408D62C3978F78
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/90CC65194573D100A9A5ECAD83FF235C91E49F84.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/NUNLINE/0/90CC65194573D100A9A5ECAD83FF235C91E49F84.mft
Manifest number: 2D
Signing time: Fri 12 Jun 2026 16:07:14 +0000
Manifest this update: Fri 12 Jun 2026 16:02:14 +0000
Manifest next update: Sat 13 Jun 2026 18:45:14 +0000
Files and hashes: 1: 90CC65194573D100A9A5ECAD83FF235C91E49F84.crl (hash: 3piLgj8uz6NnOZL3UviO7sc3XLtSlOIIYl5mDMqPk1A=)
2: 3230332e3137352e3130342e302f32332d3234203d3e20313530373535.roa (hash: YbtbNsPkQYRd3JYxoqhXztojoklcb1dDBNFr1Ga338o=)
3: 323430313a346536303a3a2f33322d3438203d3e20313530373535.roa (hash: wDLEMecsHR0Z6XE3oU5zld/TCGNqqJB7doxlMS3kCag=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/NUNLINE/0/90CC65194573D100A9A5ECAD83FF235C91E49F84.crl
rsync://rpkica.twnic.tw/rpki/NUNLINE/0/90CC65194573D100A9A5ECAD83FF235C91E49F84.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/90CC65194573D100A9A5ECAD83FF235C91E49F84.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 18:45:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:5c:53:b9:ad:49:ef:ae:a3:a1:95:ef:aa:40:8d:62:c3:97:8f:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90CC65194573D100A9A5ECAD83FF235C91E49F84
Validity
Not Before: Jun 12 16:02:14 2026 GMT
Not After : Jun 13 18:45:14 2026 GMT
Subject: CN=1A98A95C8371D1860AA8F1443D54F27C27B1CDCC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:78:f6:d1:c5:d8:ed:98:88:6e:31:0d:02:e9:
26:ca:c2:b7:c2:e0:f2:d6:f1:4f:65:26:b5:d9:b8:
d5:35:8d:ae:67:9f:35:c1:55:a7:73:fe:13:62:77:
42:8b:28:89:e6:77:05:80:eb:ca:43:30:3e:fe:18:
fe:ba:32:40:24:fd:d4:42:23:bc:0d:e0:ea:18:14:
7c:7f:51:18:26:68:0e:ab:2a:3c:8b:f8:f4:ff:88:
37:3b:24:68:28:01:cd:59:07:fb:d4:17:3e:46:2c:
36:bd:f9:8c:47:21:ea:61:79:9a:0c:14:72:fb:aa:
85:94:c0:eb:18:ba:ad:9b:4c:ab:7a:9a:86:ff:8c:
cd:7d:9f:f3:91:13:70:ba:fc:dc:6d:ba:32:a1:b0:
a8:4f:ef:d1:65:c1:d6:ba:a3:77:47:cd:bb:a8:08:
fd:5c:36:b2:a9:2b:1a:73:df:8b:f0:2d:dd:b5:c3:
4a:2f:73:26:79:19:44:97:12:90:1c:8f:0d:91:20:
9b:44:32:c7:f7:0c:56:5c:4d:88:09:13:6b:3a:00:
00:d8:17:dd:06:83:ae:64:c3:7f:78:29:10:ce:7e:
db:40:db:f4:0b:31:c2:ad:0c:d3:73:3b:63:58:09:
35:4c:ae:a0:2c:f8:5f:1a:4b:39:a1:75:e9:7a:ff:
85:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:98:A9:5C:83:71:D1:86:0A:A8:F1:44:3D:54:F2:7C:27:B1:CD:CC
X509v3 Authority Key Identifier:
keyid:90:CC:65:19:45:73:D1:00:A9:A5:EC:AD:83:FF:23:5C:91:E4:9F:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/NUNLINE/0/90CC65194573D100A9A5ECAD83FF235C91E49F84.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/90CC65194573D100A9A5ECAD83FF235C91E49F84.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NUNLINE/0/90CC65194573D100A9A5ECAD83FF235C91E49F84.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:0c:e7:40:59:45:48:d9:03:1c:7d:a8:37:e7:d6:16:18:d1:
4f:2d:1f:fa:38:a1:01:c2:87:98:57:9e:c0:d3:d1:c7:88:54:
a1:f9:c6:82:86:81:46:c9:70:71:69:ea:ee:6e:3a:2c:65:4f:
9e:81:79:e3:e1:a2:64:bd:5c:c3:46:b2:03:cc:7f:1b:d3:46:
ca:98:30:bf:28:2b:5f:1e:82:22:b4:11:79:e7:51:8a:3d:69:
53:16:1e:11:48:15:1e:5a:ac:26:4d:6c:da:6a:5b:3c:94:fb:
97:24:8b:52:b8:3d:9f:d0:03:31:93:d0:e8:1c:48:50:a3:7e:
a7:de:8c:eb:17:dd:f8:f9:14:f7:29:dd:df:32:b2:86:8f:77:
8e:b4:3f:36:96:89:8d:7c:2a:d4:fe:19:91:1f:ac:6b:75:6b:
6d:b2:3d:92:ba:43:70:d8:a0:1c:9a:be:ca:56:9d:de:ac:33:
49:41:71:61:5d:33:73:16:6f:b4:e3:d6:ac:fb:63:c0:05:d9:
d9:b6:4c:33:68:6c:00:1c:bd:49:9d:11:40:9c:77:96:66:36:
a8:4d:67:dc:62:84:e4:d8:f1:ea:d8:b8:35:c3:41:34:01:72:
18:f6:7b:d3:16:83:4d:6d:34:77:ec:0c:9a:7a:bd:a4:cb:47:
f2:97:91:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:17:10 2026 by rpki-client