
$ rpki-client -vvvf rpkica.twnic.tw/rpki/ONMORE/0/6A61ECA674DC36015EC7BC2F6FCBD515983759DA.mft
File: 6A61ECA674DC36015EC7BC2F6FCBD515983759DA.mft (raw, json)
Hash identifier: a2tBL8UJfNdKN4M0E/GsAD9G59tlAMDSRSIeUbI/GvE=
Subject key identifier: 7A:C7:95:31:69:6A:69:04:5D:37:56:31:B5:A5:24:BA:82:BC:51:74
Authority key identifier: 6A:61:EC:A6:74:DC:36:01:5E:C7:BC:2F:6F:CB:D5:15:98:37:59:DA
Certificate issuer: /CN=6A61ECA674DC36015EC7BC2F6FCBD515983759DA
Certificate serial: 518E11827B6AABD9F5D06564AB664A5442E12F87
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6A61ECA674DC36015EC7BC2F6FCBD515983759DA.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/ONMORE/0/6A61ECA674DC36015EC7BC2F6FCBD515983759DA.mft
Manifest number: B0
Signing time: Sun 20 Sep 2026 08:09:04 +0000
Manifest this update: Sun 20 Sep 2026 08:04:04 +0000
Manifest next update: Mon 21 Sep 2026 09:24:04 +0000
Files and hashes: 1: 6A61ECA674DC36015EC7BC2F6FCBD515983759DA.crl (hash: 3SqMFyQCSjSwXEHdeu+JE6RVMIG5GiCppBUDit9GHNw=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/ONMORE/0/6A61ECA674DC36015EC7BC2F6FCBD515983759DA.crl
rsync://rpkica.twnic.tw/rpki/ONMORE/0/6A61ECA674DC36015EC7BC2F6FCBD515983759DA.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6A61ECA674DC36015EC7BC2F6FCBD515983759DA.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 21 Sep 2026 09:24:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:8e:11:82:7b:6a:ab:d9:f5:d0:65:64:ab:66:4a:54:42:e1:2f:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6A61ECA674DC36015EC7BC2F6FCBD515983759DA
Validity
Not Before: Sep 20 08:04:04 2026 GMT
Not After : Sep 21 09:24:04 2026 GMT
Subject: CN=7AC79531696A69045D375631B5A524BA82BC5174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0e:7b:04:a9:ac:a4:da:5a:b0:d3:34:0f:30:
b3:68:10:8e:2c:f6:ff:35:a9:55:bc:81:98:3a:36:
f8:b5:24:10:6f:3f:57:ba:01:41:33:da:08:3a:5a:
bb:99:55:54:85:3c:81:d7:0f:c1:e7:84:2e:75:49:
f5:aa:20:7d:ab:fe:c7:8c:9e:e0:13:77:a5:cc:d5:
61:e4:1e:ad:7f:6e:d3:30:fd:de:01:b9:58:7b:64:
e1:c9:6d:2b:9a:e6:65:6c:da:19:57:82:61:39:fd:
88:ed:82:bf:22:49:ee:7e:64:71:21:98:2a:0e:27:
52:0b:e7:8a:f0:8c:4e:88:a8:6f:a1:82:b6:3d:63:
13:2e:89:66:ca:5b:8e:bc:4f:4c:52:eb:f0:d6:72:
4a:d3:be:a5:84:f4:61:50:39:74:c7:2a:de:4d:f2:
cf:93:50:6d:fa:9e:1e:6d:7b:b9:2e:8b:ef:c1:d9:
c0:6e:e1:3d:c0:25:a7:b3:83:bc:09:62:17:a5:20:
f0:65:93:55:c3:48:a3:a4:f5:96:32:ab:c8:55:c8:
4a:d2:6f:d3:f2:46:02:13:64:33:55:2a:d4:1d:af:
96:1d:bf:c7:d7:da:5a:c0:be:23:b2:24:0b:28:b3:
cf:e3:2d:bf:2e:cd:39:89:fc:6d:4f:42:37:2a:89:
0e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:C7:95:31:69:6A:69:04:5D:37:56:31:B5:A5:24:BA:82:BC:51:74
X509v3 Authority Key Identifier:
keyid:6A:61:EC:A6:74:DC:36:01:5E:C7:BC:2F:6F:CB:D5:15:98:37:59:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/ONMORE/0/6A61ECA674DC36015EC7BC2F6FCBD515983759DA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6A61ECA674DC36015EC7BC2F6FCBD515983759DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ONMORE/0/6A61ECA674DC36015EC7BC2F6FCBD515983759DA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:31:80:57:ab:32:3d:20:80:10:0e:2b:38:cf:3d:33:9a:99:
fa:2e:56:ac:f8:3c:6a:f4:bf:82:c9:04:c8:93:77:db:e0:1d:
5a:94:53:79:4f:be:fd:27:51:82:56:86:e6:88:de:67:99:a9:
6b:c6:4b:f1:a8:7a:bf:86:53:81:9c:d6:74:0a:e8:db:15:a9:
ca:3a:01:a7:c8:24:7f:07:52:5c:3a:95:a0:d9:a1:6f:97:e5:
81:85:89:07:a8:8e:58:26:78:e2:71:2e:ff:c5:15:ab:00:76:
c1:25:72:07:c9:b6:d5:ce:4a:26:cf:31:d7:45:7c:ff:0d:10:
2e:9a:6c:5a:59:63:bc:8f:c1:7b:21:11:8d:4d:28:3c:8c:83:
f7:65:bb:f1:2e:b4:9a:44:a0:c1:bd:df:83:64:ab:b4:1e:85:
cf:89:37:ca:ab:63:b0:15:28:0f:fc:8c:1a:8a:bc:1b:20:44:
10:4b:82:44:07:2e:d1:2c:32:57:55:8e:2b:a0:db:cf:b1:cf:
67:66:1a:38:4a:cb:2d:97:b0:38:eb:04:18:cb:83:52:f2:ff:
4a:cd:db:13:23:66:1d:a7:97:e8:ed:8a:a8:da:ef:aa:cc:69:
a1:be:8e:ee:64:e7:dd:bd:2a:43:7a:db:2d:5f:f6:3c:3b:0b:
8b:96:e4:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 05:14:29 2026 by rpki-client