
$ rpki-client -vvf rpkica.twnic.tw/rpki/CTII/0/96EC32418F5DB7D272132F4F615EEE14EBFCC789.mft
File: 96EC32418F5DB7D272132F4F615EEE14EBFCC789.mft (raw, json)
Hash identifier: /Tm7mUhr/HjwJASvJTS+2fuzowcIWHLifwNzNZFwzYU=
Subject key identifier: 37:DE:9F:D8:44:BD:18:F7:65:F8:2F:37:CC:21:C9:DC:C7:A5:84:A1
Authority key identifier: 96:EC:32:41:8F:5D:B7:D2:72:13:2F:4F:61:5E:EE:14:EB:FC:C7:89
Certificate issuer: /CN=96EC32418F5DB7D272132F4F615EEE14EBFCC789
Certificate serial: 680EF243759C7ACB791A8DE458BEFFE8F2CDDE97
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/96EC32418F5DB7D272132F4F615EEE14EBFCC789.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CTII/0/96EC32418F5DB7D272132F4F615EEE14EBFCC789.mft
Manifest number: 66
Signing time: Thu 23 Jul 2026 07:16:50 +0000
Manifest this update: Thu 23 Jul 2026 07:11:50 +0000
Manifest next update: Fri 24 Jul 2026 09:50:50 +0000
Files and hashes: 1: 3130332e3133302e3234392e302f32342d3234203d3e20393834.roa (hash: Nd+vxwk113iKIVjwRMjJ+fIaoSaKjb89bytlnk2AR6I=)
2: 96EC32418F5DB7D272132F4F615EEE14EBFCC789.crl (hash: 0gJbknoIgTUWEYmwivjidjmIPGedT5S49WQnn8oFUAQ=)
3: 3130332e3133302e3235312e302f32342d3234203d3e20313333393438.roa (hash: GsOYmJWvRu80jQVFqMYosfTSy2X9/h0xqknASB9kz4E=)
4: 3130332e3133302e3235302e302f32342d3234203d3e20313333393438.roa (hash: t6zLUrqLxN1841JGifIZEELL55tSwuOCwFhWjmskA2M=)
5: 3130332e3133302e3234382e302f32342d3234203d3e20313333393438.roa (hash: fD/ucDIm4GlZar7mmOLi7+OafDyoA/X6tjLQrmsYp4Q=)
6: 3130332e3133302e3234392e302f32342d3234203d3e20323033303133.roa (hash: pqABpk3IMEQeCPJ1YCuMzE9VdO7tiwLb3Csx2ef6igs=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/CTII/0/96EC32418F5DB7D272132F4F615EEE14EBFCC789.crl
rsync://rpkica.twnic.tw/rpki/CTII/0/96EC32418F5DB7D272132F4F615EEE14EBFCC789.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/96EC32418F5DB7D272132F4F615EEE14EBFCC789.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 09:50:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:0e:f2:43:75:9c:7a:cb:79:1a:8d:e4:58:be:ff:e8:f2:cd:de:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96EC32418F5DB7D272132F4F615EEE14EBFCC789
Validity
Not Before: Jul 23 07:11:50 2026 GMT
Not After : Jul 24 09:50:50 2026 GMT
Subject: CN=37DE9FD844BD18F765F82F37CC21C9DCC7A584A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f5:6b:1e:71:53:93:10:ea:25:e1:64:b6:21:
0e:87:b3:2d:18:cb:3e:d6:56:49:71:3e:3a:fc:7e:
c1:c3:33:bd:88:6f:0d:4a:43:e9:43:57:14:7d:e7:
2d:65:f0:45:65:78:6a:01:53:f1:26:49:76:2b:ca:
82:d6:4a:d8:7f:1f:f6:ba:a2:04:b8:e3:c7:26:27:
da:ff:3f:9f:e2:4f:54:db:51:e9:69:e3:9a:d1:f1:
45:7b:d8:b2:97:84:ee:90:00:73:84:fe:72:95:65:
7e:05:49:47:72:08:0a:76:c6:b8:f4:9f:f4:41:83:
f3:cd:d1:c8:bc:f7:cf:1c:34:76:2d:c8:4c:f8:6d:
2d:ab:05:3b:52:35:41:a1:89:37:66:02:e7:7a:9c:
07:73:e0:94:e4:83:29:81:87:2d:01:eb:f6:03:ca:
ae:bc:f9:18:36:71:0d:74:d6:db:19:db:23:ef:aa:
e4:21:53:14:7f:29:45:2e:a2:fd:56:28:e7:e3:80:
69:3b:ac:9c:16:2f:3e:cc:43:ea:28:47:07:ff:06:
8d:54:6e:e5:4d:0c:8f:ab:f7:29:1d:fb:e6:02:50:
dd:32:78:a9:e6:2d:1b:07:ef:48:4c:bc:d7:f2:ce:
bb:39:97:7e:43:e7:e8:b3:84:27:c1:e3:83:27:55:
fb:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:DE:9F:D8:44:BD:18:F7:65:F8:2F:37:CC:21:C9:DC:C7:A5:84:A1
X509v3 Authority Key Identifier:
keyid:96:EC:32:41:8F:5D:B7:D2:72:13:2F:4F:61:5E:EE:14:EB:FC:C7:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CTII/0/96EC32418F5DB7D272132F4F615EEE14EBFCC789.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/96EC32418F5DB7D272132F4F615EEE14EBFCC789.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CTII/0/96EC32418F5DB7D272132F4F615EEE14EBFCC789.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:28:9a:37:63:ab:75:ff:18:82:66:31:e7:db:f7:e4:dc:f1:
43:29:be:0c:be:4c:be:cf:29:3c:42:a5:d5:3f:34:e7:55:44:
58:e5:e3:94:e9:05:52:57:82:83:4e:0d:a8:a4:70:08:78:dc:
bc:e2:7c:ec:a8:73:36:8e:b1:fc:7e:ec:89:9b:0a:69:8f:88:
18:73:e5:e1:4e:8a:ae:45:65:8a:26:94:1d:f9:2c:b8:60:c5:
be:a6:c4:0b:bd:99:30:75:9d:01:f4:d7:a6:48:e2:07:f1:ff:
8a:a7:b3:ed:b0:c6:ea:30:c0:dd:b8:5c:55:93:a5:94:9d:94:
fe:64:02:a9:f5:d9:6f:eb:43:45:d2:79:74:44:25:cb:23:7f:
e9:1b:d7:85:8d:51:66:7d:fb:9a:bd:bb:f4:73:0c:96:07:40:
0d:fa:77:ba:1e:27:bf:10:ca:80:66:a1:9d:7f:f9:4e:43:2c:
49:ee:c6:fe:4c:dc:7c:b4:f1:a1:3e:77:83:56:37:19:ab:88:
ae:4f:03:60:d8:a1:c6:b8:37:5a:01:0c:8b:28:f2:a9:09:b3:
50:2b:33:28:7e:8c:1f:cd:e5:18:7a:31:76:cd:5f:28:59:d7:
20:71:8f:c9:be:08:9a:3b:25:8f:3d:b6:81:ac:85:57:7a:9c:
62:9c:48:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:31:35 2026 by rpki-client