
$ rpki-client -vvf rpkica.twnic.tw/rpki/CLARK/0/9B5DA40B0F23621450755917A456431F689EB049.mft
File: 9B5DA40B0F23621450755917A456431F689EB049.mft (raw, json)
Hash identifier: kmKaOheHwcswLVkQ06fxRlqkeDNk0/uorZTev8raagE=
Subject key identifier: C3:9D:BA:5A:B3:29:B7:7A:07:A8:C9:89:00:63:49:2E:D6:E1:B2:1C
Authority key identifier: 9B:5D:A4:0B:0F:23:62:14:50:75:59:17:A4:56:43:1F:68:9E:B0:49
Certificate issuer: /CN=9B5DA40B0F23621450755917A456431F689EB049
Certificate serial: 580A24B1783D7D6894D1930FA5099E24EDEA4F5B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9B5DA40B0F23621450755917A456431F689EB049.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CLARK/0/9B5DA40B0F23621450755917A456431F689EB049.mft
Manifest number: 65
Signing time: Thu 23 Jul 2026 12:42:26 +0000
Manifest this update: Thu 23 Jul 2026 12:37:26 +0000
Manifest next update: Fri 24 Jul 2026 15:20:26 +0000
Files and hashes: 1: 9B5DA40B0F23621450755917A456431F689EB049.crl (hash: dmqV1XLvHlFkp4FA9kONmn9rQNsbZyp8Y2ONKNOw+Jg=)
2: 323430303a663432303a3a2f33322d3634203d3e203633393130.roa (hash: nHJZCc2ObG/YAr0XIyCnCXOkUDdTdP47YAnSTHpOSa4=)
3: 3130332e3133302e3233362e302f32332d3234203d3e203633393130.roa (hash: 8S5OsugAwixeQ8Ag9hxeeLoX3QQmkvW+iKjWp7BvVWA=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/CLARK/0/9B5DA40B0F23621450755917A456431F689EB049.crl
rsync://rpkica.twnic.tw/rpki/CLARK/0/9B5DA40B0F23621450755917A456431F689EB049.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9B5DA40B0F23621450755917A456431F689EB049.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 15:20:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:0a:24:b1:78:3d:7d:68:94:d1:93:0f:a5:09:9e:24:ed:ea:4f:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B5DA40B0F23621450755917A456431F689EB049
Validity
Not Before: Jul 23 12:37:26 2026 GMT
Not After : Jul 24 15:20:26 2026 GMT
Subject: CN=C39DBA5AB329B77A07A8C9890063492ED6E1B21C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5c:53:14:66:1e:ee:0f:97:c1:3b:a9:4d:f8:
61:85:3d:7c:e4:6e:86:75:14:a7:1b:e8:21:65:ab:
75:ad:a5:a3:79:47:de:5d:21:49:58:b7:4b:41:1f:
3d:40:5c:78:7a:52:c1:99:de:65:8e:ad:da:6c:ea:
d4:a3:62:54:b1:5e:4f:69:3d:38:57:ff:fb:33:29:
88:5a:8f:0e:fd:35:f7:71:29:02:42:89:17:53:ee:
70:ac:f4:f8:34:df:67:49:7d:f2:2e:da:16:4a:fa:
a2:60:cc:46:fe:c5:fb:01:48:10:91:97:2e:6f:34:
bb:4b:75:55:77:bc:1a:6e:3d:43:db:ef:b7:b5:aa:
5a:f4:1c:08:00:b8:70:a6:df:cf:9e:f5:be:ff:38:
e1:dc:49:22:a6:49:87:f4:b8:7e:94:8d:a0:a9:29:
c4:df:4f:dc:db:de:90:97:0f:76:42:81:5a:ab:5d:
69:e5:ee:75:1a:39:72:78:a0:78:5e:d5:5a:34:ce:
6a:b9:15:2c:81:5a:f4:19:62:6b:ab:c5:61:99:46:
4b:ff:8d:76:cd:be:d2:af:61:ee:35:71:21:44:a2:
5e:d7:10:4c:51:16:dd:f4:4f:c1:cc:06:73:7b:67:
d6:19:eb:9d:15:15:7d:9c:04:03:45:61:00:1f:1c:
e2:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:9D:BA:5A:B3:29:B7:7A:07:A8:C9:89:00:63:49:2E:D6:E1:B2:1C
X509v3 Authority Key Identifier:
keyid:9B:5D:A4:0B:0F:23:62:14:50:75:59:17:A4:56:43:1F:68:9E:B0:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CLARK/0/9B5DA40B0F23621450755917A456431F689EB049.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9B5DA40B0F23621450755917A456431F689EB049.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CLARK/0/9B5DA40B0F23621450755917A456431F689EB049.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:ec:42:ad:cc:36:a6:8b:04:99:1d:67:15:e1:d9:f7:ca:63:
39:49:51:68:1b:28:05:a4:2a:ad:7d:c2:46:09:5c:22:86:0f:
4f:2e:4b:4b:19:38:d9:68:8c:57:46:ff:f1:9d:b3:0d:d8:27:
2a:8a:55:80:6b:38:5c:1f:56:a7:01:b5:3b:60:b5:26:6c:3c:
7d:2a:e7:68:81:b6:79:c2:a6:ad:5e:c4:e4:6b:94:14:c1:f4:
33:a5:15:73:ba:cc:42:9d:51:ce:b7:0f:6a:61:89:60:1d:53:
fa:be:87:32:f2:43:08:1d:5b:1a:5b:a8:e1:28:f9:de:4d:0b:
34:a1:53:9b:64:97:fb:cc:2a:93:a1:3e:6b:83:e5:62:5d:27:
28:2f:aa:8a:37:c1:06:2d:1f:dd:42:0c:f2:ba:6f:85:78:8a:
39:64:e8:87:ff:2d:83:ac:eb:fc:3d:d8:12:1d:e2:8f:a3:c9:
b2:61:80:0b:ce:f9:92:fe:54:37:07:65:46:30:d7:8b:6f:c1:
a4:68:88:d9:6b:81:29:c7:7f:9c:fb:0b:d0:cd:91:33:b8:1c:
db:72:c8:77:1f:fb:4f:ba:4d:18:7b:a0:cf:6b:1b:16:f3:31:
50:a5:ee:e9:dc:db:a2:e4:b7:e8:fa:f4:8f:30:74:5b:c7:37:
7e:a3:a1:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:55:05 2026 by rpki-client