
$ rpki-client -vvf rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.mft
File: 0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.mft (raw, json)
Hash identifier: FFW00vS41DBe9weOWKvoGH1KVp2brM8oJml7Upcey38=
Subject key identifier: 50:9E:EA:12:04:B6:FE:70:CD:D3:3A:36:1D:09:25:07:45:C8:D9:FE
Authority key identifier: 0F:6B:34:27:CD:40:3D:E7:0D:97:CD:DC:AF:A0:BD:BC:16:6C:3E:78
Certificate issuer: /CN=0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78
Certificate serial: 2DB0C41643DAE7CE8463D8CE886842715B1EC746
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 04:00:00 +0000
Manifest this update: Tue 12 May 2026 03:55:00 +0000
Manifest next update: Wed 13 May 2026 07:58:00 +0000
Files and hashes: 1: 323430323a343365303a3230313a3a2f34382d3634203d3e20323136313938.roa (hash: j7P2rYuZrn8hZPV0CeIdB1Ff1unc7rLG1cgPDTKwPHg=)
2: 323430323a343365303a31303a3a2f34342d3438203d3e20313532363132.roa (hash: p7t7q5v8s8Z1DS3+G2q2YpsSjGO/X/2pPMzddgQKZBM=)
3: 323430323a343365303a656565653a3a2f34382d3634203d3e203138303430.roa (hash: 6oEzbEUbwWVxil5FL4o7ldZcZdzNFDbPy4bkIGRV9mQ=)
4: 323430323a343365303a31303a3a2f34342d3634203d3e20313532363132.roa (hash: lDz21sk+HjJvsKfvooG9B77bRHOXmfNNesRAHR9pwbs=)
5: 323430323a343365303a3130303a3a2f34382d3634203d3e203138303430.roa (hash: h32LALHVFknnmyMLJLFj12rWAKQawmJYg4CLOH4T2X4=)
6: 323430323a343365303a3a2f34342d3438203d3e203138303430.roa (hash: HLcVT5kUZhLvP/tOPNWlz6SlLrHZ0S1z1+6DTRLbPqE=)
7: 323430323a343365303a393030303a3a2f34382d3634203d3e20323136313938.roa (hash: NGp60z3Cs5J1MqqhHfuGriiby6iLCjVSyzM4a3MR+jI=)
8: 323430323a343365303a313030303a3a2f34382d3634203d3e20323136313938.roa (hash: p1wQzMBLmsIKpEW18NY4WEs+pi2+pqeuDI2eHNDdFeU=)
9: 323430323a343365303a3330313a3a2f34382d3634203d3e20313532363132.roa (hash: 05+WKbQh6sstRH+yIl8/yofc8QcUG3HK5qslmx7kBo8=)
10: 0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.crl (hash: q2mtx+6JmgaMILjoP5/pHTSL6Ap1UyHLvkIo/6HU0/o=)
11: 323430323a343365303a3230323a3a2f34382d3634203d3e20323136313938.roa (hash: xy3LIoWre1+mMyvT9VOx/ZHRWCAr+PwFxmupLTWd54U=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.crl
rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 02:30:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:b0:c4:16:43:da:e7:ce:84:63:d8:ce:88:68:42:71:5b:1e:c7:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78
Validity
Not Before: May 12 03:55:00 2026 GMT
Not After : May 13 07:58:00 2026 GMT
Subject: CN=509EEA1204B6FE70CDD33A361D09250745C8D9FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ac:54:45:e0:cf:06:45:76:37:20:3c:75:1d:
a2:68:71:66:02:3f:7a:ee:1c:0e:b8:1b:bd:d7:e9:
6a:94:64:c3:e7:1d:23:89:50:ba:13:64:6c:98:3c:
74:6f:60:68:61:9b:39:91:7c:56:29:6a:3e:0a:67:
bf:11:91:07:56:e8:58:6f:4f:6a:5d:3f:81:dd:58:
95:89:c9:e2:9b:54:80:0f:f9:30:54:b7:c1:63:2d:
0e:30:da:91:a0:72:57:77:b7:1d:03:8c:1f:3d:cd:
12:79:72:5d:ce:63:a9:ac:96:08:84:e4:c3:02:8e:
3a:6f:53:8e:eb:59:d3:c8:88:54:16:bd:22:06:f5:
4d:6a:94:32:be:d6:af:c0:45:02:a1:f9:24:81:22:
3f:83:1d:5b:86:4b:f6:e7:6e:39:86:bd:c0:75:02:
4c:27:fa:4b:13:98:ca:2d:2f:27:6b:ec:22:e0:fb:
44:2b:36:7f:ce:93:53:1f:91:9e:51:2f:36:9b:68:
72:4a:07:02:1f:5c:6a:3a:9a:56:9c:d9:42:87:fa:
c5:b5:6e:b0:d8:5e:42:5a:b5:2a:3f:c2:65:3a:f6:
1d:89:52:d8:96:5b:1e:6b:da:1e:3d:04:f8:22:ff:
21:65:68:18:2f:68:c6:1b:99:5d:45:1a:69:36:7e:
1f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:9E:EA:12:04:B6:FE:70:CD:D3:3A:36:1D:09:25:07:45:C8:D9:FE
X509v3 Authority Key Identifier:
keyid:0F:6B:34:27:CD:40:3D:E7:0D:97:CD:DC:AF:A0:BD:BC:16:6C:3E:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:ef:89:a9:87:93:13:d2:45:39:1e:41:90:5a:75:8c:15:a3:
d8:07:2d:01:86:92:45:aa:eb:94:ad:23:f5:0f:e4:47:a9:5d:
61:4f:b1:04:36:cc:0e:f8:88:18:d4:29:78:8f:e0:d0:0d:0f:
22:ad:c3:ea:8b:93:3e:b4:f4:e2:84:2f:9b:77:a1:d1:1b:c3:
6c:7d:6b:0a:68:9a:3a:37:f2:5a:2c:f6:a6:b2:b3:a8:ab:d4:
9e:67:1c:e7:e2:f3:e7:40:f1:99:e1:fe:6c:d5:a6:7e:56:43:
83:a6:5a:01:19:69:43:9d:d5:26:15:23:2b:4a:ce:24:0a:4a:
6d:c8:a5:29:ce:72:1f:26:e4:a8:53:6e:e5:ca:02:f7:09:b3:
e8:a5:03:e7:2c:d9:26:5e:f0:0c:13:a4:92:74:68:8c:30:4a:
b5:18:52:07:8d:e6:9c:8b:48:99:4c:34:4f:ec:54:97:47:df:
2f:b7:07:24:f3:f9:ff:b2:51:94:3c:46:31:c6:3c:c6:cd:c3:
e9:b4:68:8e:60:9a:5a:a3:da:c9:5b:19:da:d0:2d:99:9d:f6:
f8:d6:b0:33:e5:79:bc:fc:87:2b:fb:73:35:3e:02:63:09:68:
4c:29:d0:ab:4e:95:5d:85:10:be:d8:db:bb:f2:e5:2f:fd:4c:
99:10:04:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:45:37 2026 by rpki-client