
$ rpki-client -vvf rpkica.twnic.tw/rpki/KANRAYS/1/061E60E9FDA5A25EDC961572A4CBA8C539D780AF.mft
File: 061E60E9FDA5A25EDC961572A4CBA8C539D780AF.mft (raw, json)
Hash identifier: koxV8UrG+kmfmJzPZ/IUPsxM73d5b94pzaZZ3LbTiKc=
Subject key identifier: 15:A7:5E:FA:D1:B3:7C:B7:33:F4:7E:A5:E8:E2:AF:CF:EE:96:6C:BB
Authority key identifier: 06:1E:60:E9:FD:A5:A2:5E:DC:96:15:72:A4:CB:A8:C5:39:D7:80:AF
Certificate issuer: /CN=061E60E9FDA5A25EDC961572A4CBA8C539D780AF
Certificate serial: 4C9FDD46908DBABDF0D9C3BCF18F443A04EF503E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/3/061E60E9FDA5A25EDC961572A4CBA8C539D780AF.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/KANRAYS/1/061E60E9FDA5A25EDC961572A4CBA8C539D780AF.mft
Manifest number: 65
Signing time: Fri 24 Jul 2026 05:27:39 +0000
Manifest this update: Fri 24 Jul 2026 05:22:39 +0000
Manifest next update: Sat 25 Jul 2026 06:10:39 +0000
Files and hashes: 1: 061E60E9FDA5A25EDC961572A4CBA8C539D780AF.crl (hash: i8tBIZtAtoAueWCcKnAJc1BlCVZIUf1HbLTMugj1uik=)
2: 3135312e3135382e32362e302f32332d3234203d3e203138303434.roa (hash: QIY0glYph3b8eEZZ9jaZ9XB3vhAySFJ+wbIUL9Lsf2o=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/KANRAYS/1/061E60E9FDA5A25EDC961572A4CBA8C539D780AF.crl
rsync://rpkica.twnic.tw/rpki/KANRAYS/1/061E60E9FDA5A25EDC961572A4CBA8C539D780AF.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/3/061E60E9FDA5A25EDC961572A4CBA8C539D780AF.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 03:55:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:9f:dd:46:90:8d:ba:bd:f0:d9:c3:bc:f1:8f:44:3a:04:ef:50:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061E60E9FDA5A25EDC961572A4CBA8C539D780AF
Validity
Not Before: Jul 24 05:22:39 2026 GMT
Not After : Jul 25 06:10:39 2026 GMT
Subject: CN=15A75EFAD1B37CB733F47EA5E8E2AFCFEE966CBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:64:9f:c5:0b:99:d7:b4:26:78:6c:fe:44:af:
2f:c0:28:cc:16:19:bc:e0:ed:d4:5f:5c:38:3c:3f:
8e:8b:16:d9:7c:c6:63:b7:73:55:57:10:21:cb:ff:
bb:15:7c:58:84:4f:81:5f:b9:00:9c:7b:45:52:1b:
52:a6:a6:f7:be:43:07:94:17:49:8a:a4:a3:c6:96:
22:9e:cf:c8:ac:c5:82:9c:01:ae:7e:84:eb:2b:a9:
f1:48:aa:b7:98:f5:25:7c:36:69:a2:ba:60:63:47:
40:dd:09:9c:ac:b8:bd:65:c1:53:f8:88:1c:12:d5:
08:e0:ce:73:58:2d:b8:6b:68:07:29:e3:69:5e:48:
5f:57:34:8e:1f:2c:15:16:95:a3:2d:94:7f:44:c4:
70:8d:53:4d:52:54:93:f0:e6:2d:89:d9:35:fa:48:
aa:2a:54:a3:4d:d6:ad:a1:5e:68:d2:2f:be:c5:21:
37:88:b1:f7:02:c0:bc:c2:d5:2b:cc:a7:74:d1:b2:
3e:45:49:d3:f3:e3:6f:f9:42:c7:36:1c:0b:47:fc:
c8:00:40:69:01:05:88:8e:7b:f2:6f:f5:c2:3b:b6:
e6:15:93:bc:ab:57:c3:47:4f:03:51:ee:5f:53:9d:
78:bd:80:4d:76:08:a8:0f:8f:a6:8a:28:27:66:be:
1e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:A7:5E:FA:D1:B3:7C:B7:33:F4:7E:A5:E8:E2:AF:CF:EE:96:6C:BB
X509v3 Authority Key Identifier:
keyid:06:1E:60:E9:FD:A5:A2:5E:DC:96:15:72:A4:CB:A8:C5:39:D7:80:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/KANRAYS/1/061E60E9FDA5A25EDC961572A4CBA8C539D780AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/061E60E9FDA5A25EDC961572A4CBA8C539D780AF.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KANRAYS/1/061E60E9FDA5A25EDC961572A4CBA8C539D780AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:a8:e3:ef:a6:0e:ba:37:5b:ba:d8:34:c4:cd:18:a4:82:48:
bd:96:ec:e7:94:e8:15:cd:f5:6b:c2:57:61:e9:75:8b:f6:fd:
15:e8:73:f9:39:13:14:c4:e4:9c:d9:2c:68:ec:9b:c7:d0:f5:
51:47:78:ae:0a:de:74:55:64:3a:13:95:d5:e8:bb:2a:5e:ab:
44:27:81:c3:25:04:72:22:4d:3a:76:46:93:ad:59:e8:52:5d:
45:f2:1b:5f:73:41:d2:49:cf:d6:f7:c5:62:95:1e:08:3e:ce:
00:42:e7:63:ee:bd:38:93:ad:11:83:ef:61:97:72:48:eb:f9:
6a:c5:89:a8:71:c4:04:2b:79:69:82:f8:4b:6f:da:09:aa:29:
0c:3e:93:02:b2:a2:4d:30:49:5d:94:4c:e5:19:03:6f:08:51:
d0:76:f1:5c:1c:d5:03:f3:e1:00:ea:ad:2a:1c:98:4d:06:e3:
2d:8f:ed:87:64:60:68:96:db:be:f5:79:5c:03:9e:10:09:f0:
7f:a8:1a:5f:e2:7e:a6:b3:d0:a4:ce:ac:2c:c7:6a:4b:33:c2:
88:dd:18:ec:0c:18:ad:21:b1:50:1d:f1:47:41:1b:3b:6e:6b:
73:fd:a2:bb:89:ee:95:90:b5:8b:8c:b4:a7:7d:a4:63:8e:ca:
e6:32:42:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:47:19 2026 by rpki-client