
$ rpki-client -vvf rpkica.twnic.tw/rpki/PPTECH/0/C999B8723445B4125EE5DBE81A6066BA1C38037B.mft
File: C999B8723445B4125EE5DBE81A6066BA1C38037B.mft (raw, json)
Hash identifier: nPBqWEJJwvexbS0Igykn+cfC4/Uwzqdoc1Sx8FFhPek=
Subject key identifier: C6:8E:6D:79:7A:E1:8F:F8:5C:A9:05:DF:70:66:54:03:B9:47:0A:C7
Authority key identifier: C9:99:B8:72:34:45:B4:12:5E:E5:DB:E8:1A:60:66:BA:1C:38:03:7B
Certificate issuer: /CN=C999B8723445B4125EE5DBE81A6066BA1C38037B
Certificate serial: 081785B0F7C0D832A744CDEE055A042F640DD12B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C999B8723445B4125EE5DBE81A6066BA1C38037B.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/PPTECH/0/C999B8723445B4125EE5DBE81A6066BA1C38037B.mft
Manifest number: 2E
Signing time: Fri 12 Jun 2026 22:38:18 +0000
Manifest this update: Fri 12 Jun 2026 22:33:18 +0000
Manifest next update: Sun 14 Jun 2026 01:08:18 +0000
Files and hashes: 1: C999B8723445B4125EE5DBE81A6066BA1C38037B.crl (hash: LfptF02dNJYnt+FmyyJNdMVOAac9X5IXoGSeyF9viek=)
2: 3230332e31382e3135362e302f32332d3234203d3e20313334383233.roa (hash: no5UAwdRO4kjNGxbvYPZEaL3l8LMfiO9W7UwW9zvqIc=)
3: 3230332e31382e3135362e302f32332d3234203d3e20313532363137.roa (hash: M9aoM6gw7bRmaDPFcfOHzvO0XW597LcSAb+GMFBXN0s=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/PPTECH/0/C999B8723445B4125EE5DBE81A6066BA1C38037B.crl
rsync://rpkica.twnic.tw/rpki/PPTECH/0/C999B8723445B4125EE5DBE81A6066BA1C38037B.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C999B8723445B4125EE5DBE81A6066BA1C38037B.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 00:20:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:17:85:b0:f7:c0:d8:32:a7:44:cd:ee:05:5a:04:2f:64:0d:d1:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C999B8723445B4125EE5DBE81A6066BA1C38037B
Validity
Not Before: Jun 12 22:33:18 2026 GMT
Not After : Jun 14 01:08:18 2026 GMT
Subject: CN=C68E6D797AE18FF85CA905DF70665403B9470AC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a0:d0:93:e6:53:0e:d1:ad:6c:55:13:78:a0:
ef:18:de:df:4c:da:60:4d:1b:2b:ba:b1:88:5f:6a:
a5:cc:2d:93:a5:f7:39:7e:57:4f:a5:c0:de:a6:90:
49:7b:99:0d:67:58:61:b8:8d:e9:4a:be:96:f0:61:
32:17:70:1f:1c:81:df:39:03:a1:0b:19:6b:41:8e:
09:14:8b:f5:a5:fc:5a:53:f1:e3:30:51:5a:df:e5:
b8:84:50:b1:21:57:12:00:ca:2c:0d:b5:63:9b:6a:
4f:50:38:65:a6:20:61:15:5e:4e:ad:50:25:2e:24:
8f:0a:ad:4b:16:46:20:1a:0d:87:2b:45:c9:5f:06:
c3:94:dd:b9:ee:a7:a7:d4:a2:e1:3b:01:66:c6:66:
56:b6:3d:13:48:b8:3c:b6:c5:ba:8d:db:39:ef:69:
04:94:39:78:5b:de:67:30:e2:5f:de:e9:b7:1d:8f:
b6:c9:ee:1a:61:26:48:32:6d:3c:4f:8f:85:23:e9:
84:48:39:51:be:1c:36:33:c6:a4:21:02:3c:00:1a:
a6:0f:c5:ea:03:48:66:e3:61:4c:51:b0:9f:53:48:
dc:af:b6:c1:70:9b:80:6c:23:78:d0:bf:3c:69:cc:
2d:49:67:04:74:3a:19:df:ac:41:7a:92:90:08:1a:
8c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:8E:6D:79:7A:E1:8F:F8:5C:A9:05:DF:70:66:54:03:B9:47:0A:C7
X509v3 Authority Key Identifier:
keyid:C9:99:B8:72:34:45:B4:12:5E:E5:DB:E8:1A:60:66:BA:1C:38:03:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/PPTECH/0/C999B8723445B4125EE5DBE81A6066BA1C38037B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C999B8723445B4125EE5DBE81A6066BA1C38037B.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PPTECH/0/C999B8723445B4125EE5DBE81A6066BA1C38037B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:ea:65:0c:8b:0c:f1:b7:e2:6b:e0:05:b0:a4:cf:39:90:49:
32:02:cd:68:67:e7:fb:d8:82:9c:8b:98:b4:6a:49:ae:1c:75:
a3:df:fc:02:b4:89:a0:97:af:5d:57:a2:3e:8a:e0:c3:11:bb:
32:d5:f4:81:80:7f:17:5c:11:94:0d:4d:bc:be:7c:a0:fb:c9:
72:8c:14:d2:6b:b5:cb:e2:78:b2:1d:a5:46:da:cf:db:49:e6:
72:37:c3:dd:40:44:d3:89:27:50:6d:75:1e:6c:ec:fe:fd:5d:
e1:88:8d:b0:01:7c:3c:f1:86:da:ec:44:bd:d6:2d:9b:0e:23:
40:58:ad:89:8c:54:6d:24:b2:4d:86:4d:3d:bd:c6:e9:b1:b1:
d4:38:95:e2:01:34:21:8b:f0:5f:f5:b1:66:4d:e5:c4:9f:5e:
71:2e:b1:d7:c5:f8:0a:3c:c7:bb:91:ba:ec:c6:0a:88:9b:d4:
dd:23:90:3b:73:0f:83:4a:e3:ed:7d:63:a1:9e:2b:4e:30:30:
5c:84:26:76:41:f4:1c:26:8e:a8:10:ab:5f:55:23:f3:61:9a:
3c:03:de:69:06:7f:7a:42:76:12:3c:ee:77:9b:f5:c3:01:54:
d8:e1:a5:27:76:12:69:f7:e8:00:7d:6d:33:37:ab:63:0e:f8:
18:f6:d2:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:03:47 2026 by rpki-client