
$ rpki-client -vvvf rpkica.twnic.tw/rpki/ETIME/0/60DF11AF99914DE6BE9FA9FC357DA624FB09A782.mft
File: 60DF11AF99914DE6BE9FA9FC357DA624FB09A782.mft (raw, json)
Hash identifier: OfKwXfJnKSgB2U7oTPyLmyb371tkWNJnRefrcxtbzvg=
Subject key identifier: 57:A2:7A:EF:6A:66:E5:71:65:81:9D:E8:60:26:9C:03:14:7A:73:D0
Authority key identifier: 60:DF:11:AF:99:91:4D:E6:BE:9F:A9:FC:35:7D:A6:24:FB:09:A7:82
Certificate issuer: /CN=60DF11AF99914DE6BE9FA9FC357DA624FB09A782
Certificate serial: 1AD62BE30CDBE923E9E5B4FDBEA0CDA216D2C8E9
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60DF11AF99914DE6BE9FA9FC357DA624FB09A782.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/ETIME/0/60DF11AF99914DE6BE9FA9FC357DA624FB09A782.mft
Manifest number: BE
Signing time: Thu 24 Sep 2026 03:41:21 +0000
Manifest this update: Thu 24 Sep 2026 03:36:21 +0000
Manifest next update: Fri 25 Sep 2026 07:30:21 +0000
Files and hashes: 1: 3130332e3232372e3232362e302f32342d3234203d3e20313438393936.roa (hash: jTOUh86WcVTFs/4H0jRDiOylI1e3Cfw5Tggw5E2CXt4=)
2: 3130332e3135382e3232392e302f32342d3234203d3e20323032313738.roa (hash: 36VbKnSGpgcdcCiZk8qKilZQbhaGmPl28tkFxSGT1yg=)
3: 3130332e3232372e3232362e302f32332d3234203d3e203338303432.roa (hash: ff5S7OEmM//n6GU4K964/uiKkS6MgGcigh6CQDM5Nu4=)
4: 60DF11AF99914DE6BE9FA9FC357DA624FB09A782.crl (hash: KHpNdkTk8QuaIrFd+7iBEJvHPpDiu5WV/Q/zEZ6ruXA=)
5: 3130332e3232372e3232362e302f32332d3234203d3e20313334383233.roa (hash: VgELE2Z0+fZSqQX80y/ZKahTNsQCGSrMSvntHyntpVk=)
6: 3130332e3135382e3232382e302f32332d3234203d3e203338303432.roa (hash: ESFw0aIs2H2WE3n5vMYD8DiRXzpjyIx6BH09Jb/uPSA=)
7: 3130332e3135382e3232382e302f32332d3234203d3e20313334383233.roa (hash: DqWqI7QKyLevd3P8uVl5JKPNPOWQfU6GCWPgrPGrGbU=)
8: 3130332e3135382e3232382e302f32332d3234203d3e20313331313531.roa (hash: JMHd5OxzysIcZM3XC770NhHz5R1MfZGIE6Db7xvSS4g=)
9: 3130332e3232372e3232372e302f32342d3234203d3e203436353539.roa (hash: PexZ5/ttIlxxzCl8DT6JrqWQ7DlW6W8Ek+MtGNVEoCI=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/ETIME/0/60DF11AF99914DE6BE9FA9FC357DA624FB09A782.crl
rsync://rpkica.twnic.tw/rpki/ETIME/0/60DF11AF99914DE6BE9FA9FC357DA624FB09A782.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60DF11AF99914DE6BE9FA9FC357DA624FB09A782.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 02:19:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:d6:2b:e3:0c:db:e9:23:e9:e5:b4:fd:be:a0:cd:a2:16:d2:c8:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60DF11AF99914DE6BE9FA9FC357DA624FB09A782
Validity
Not Before: Sep 24 03:36:21 2026 GMT
Not After : Sep 25 07:30:21 2026 GMT
Subject: CN=57A27AEF6A66E57165819DE860269C03147A73D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:01:31:db:1d:06:81:90:1d:62:dc:29:4c:10:
74:3a:6e:06:77:14:f9:7e:69:3f:4a:fb:8f:24:99:
6e:7f:20:0f:bd:98:d8:80:da:50:19:e9:09:5e:d2:
95:59:c1:71:88:93:a3:5d:e2:31:8d:41:ea:83:35:
bc:f6:e6:eb:39:3b:9c:e8:b4:1f:f8:db:6e:41:03:
7f:16:42:e3:19:f2:72:7f:cf:f8:57:3f:e3:9d:76:
5f:1f:c1:35:16:aa:55:1a:95:6c:db:34:74:a0:47:
49:31:54:66:4c:ae:68:5f:a5:81:46:05:2d:72:de:
64:43:51:7f:0d:65:a9:f6:f9:f9:1e:f4:f0:6e:1e:
58:62:a8:c7:77:8d:f9:86:8e:d7:29:73:39:54:df:
2b:59:5b:03:b2:77:f9:c0:dc:18:27:ed:83:b7:86:
01:c2:66:ce:90:7b:be:d1:36:f3:63:81:3d:01:0a:
62:28:9c:ed:67:47:dc:4a:98:ef:88:bf:ee:f6:00:
87:6a:8d:c5:81:d3:ef:e3:d1:81:c1:62:ae:04:36:
d0:be:70:bb:1e:8e:66:ce:80:06:80:6b:70:eb:f1:
b0:07:07:6b:fa:04:26:98:31:51:d5:0b:01:95:f5:
f9:ab:fb:e1:dd:07:c7:a0:bf:a7:1c:35:19:39:36:
88:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A2:7A:EF:6A:66:E5:71:65:81:9D:E8:60:26:9C:03:14:7A:73:D0
X509v3 Authority Key Identifier:
keyid:60:DF:11:AF:99:91:4D:E6:BE:9F:A9:FC:35:7D:A6:24:FB:09:A7:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/ETIME/0/60DF11AF99914DE6BE9FA9FC357DA624FB09A782.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60DF11AF99914DE6BE9FA9FC357DA624FB09A782.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ETIME/0/60DF11AF99914DE6BE9FA9FC357DA624FB09A782.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:0a:25:fa:40:8e:33:08:3c:89:e5:f8:dd:0c:6f:79:eb:ef:
fb:cc:10:a0:27:78:46:21:24:07:8b:96:d4:98:e7:fe:1c:b6:
a6:53:de:a1:ba:0c:c7:6a:1e:74:dc:bc:3a:83:2b:49:3b:06:
9c:aa:93:be:9f:0a:d9:dc:61:af:4f:78:91:91:52:f9:9a:75:
7b:2e:0c:9b:6d:92:de:ba:8d:0f:ae:a9:87:d1:68:57:4a:d5:
9f:ca:61:18:dc:e8:9c:a8:df:3e:62:d8:c4:ba:5f:6b:05:23:
c9:1c:ef:cd:be:3b:66:40:e8:ef:0a:71:df:43:8c:2b:bf:ec:
2c:6b:7a:29:83:62:46:ca:59:b9:35:28:0f:be:2f:ed:4f:3f:
cc:5e:ec:de:08:71:6a:b4:fd:73:ea:a5:1e:4e:25:ec:73:b3:
64:ce:51:8c:3d:f8:3b:7e:58:28:57:3e:da:0f:f0:10:40:16:
2f:e9:f7:dc:77:ce:3e:0a:61:e8:d5:0d:09:49:eb:3a:57:d3:
e1:12:4b:9a:11:b0:3d:61:a5:78:dd:73:b4:78:62:52:51:d1:
2e:68:bf:d9:31:b5:e0:63:f0:84:72:f7:38:be:db:ae:d4:d7:
52:e0:38:a1:eb:c1:23:87:6a:4b:30:c4:4c:70:ef:a5:c2:46:
12:16:51:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:11:41 2026 by rpki-client