
$ rpki-client -vvvf rpkica.twnic.tw/rpki/MCK/0/9C6C404D96BB112984EB14C46BE0526514B6BFBF.mft
File: 9C6C404D96BB112984EB14C46BE0526514B6BFBF.mft (raw, json)
Hash identifier: ZheyqEOQqLB6q1dVmrVSbpLO+Hxa/tsePRJvnaxgQqI=
Subject key identifier: D6:C3:BE:30:C5:2B:9C:09:EE:87:85:C1:13:66:0F:96:23:8B:BC:CF
Authority key identifier: 9C:6C:40:4D:96:BB:11:29:84:EB:14:C4:6B:E0:52:65:14:B6:BF:BF
Certificate issuer: /CN=9C6C404D96BB112984EB14C46BE0526514B6BFBF
Certificate serial: 3CBDA1EE0223E68BF43437728080556346DC27C9
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9C6C404D96BB112984EB14C46BE0526514B6BFBF.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/MCK/0/9C6C404D96BB112984EB14C46BE0526514B6BFBF.mft
Manifest number: B8
Signing time: Fri 25 Sep 2026 20:34:06 +0000
Manifest this update: Fri 25 Sep 2026 20:29:06 +0000
Manifest next update: Sat 26 Sep 2026 20:36:06 +0000
Files and hashes: 1: 9C6C404D96BB112984EB14C46BE0526514B6BFBF.crl (hash: hufBKVQVHbVk8U28MZE2ZdxqG6gvPYsWuTHPywTZJEc=)
2: 3130332e3134382e36382e302f32332d3234203d3e20313331363138.roa (hash: BACFnkZaw8ZPpbq3IkwDxSxDzFcQk+Vm9o3aE8Vt++E=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/MCK/0/9C6C404D96BB112984EB14C46BE0526514B6BFBF.crl
rsync://rpkica.twnic.tw/rpki/MCK/0/9C6C404D96BB112984EB14C46BE0526514B6BFBF.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9C6C404D96BB112984EB14C46BE0526514B6BFBF.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 26 Sep 2026 15:15:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:bd:a1:ee:02:23:e6:8b:f4:34:37:72:80:80:55:63:46:dc:27:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9C6C404D96BB112984EB14C46BE0526514B6BFBF
Validity
Not Before: Sep 25 20:29:06 2026 GMT
Not After : Sep 26 20:36:06 2026 GMT
Subject: CN=D6C3BE30C52B9C09EE8785C113660F96238BBCCF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:0d:d4:f9:8c:3e:e9:ec:39:a3:ff:d8:96:23:
bf:b0:ce:75:c8:84:8b:f7:b6:79:07:79:9f:47:13:
a1:ee:18:31:45:a6:9a:12:0b:36:46:41:de:d8:d0:
78:78:94:bf:87:4a:42:70:41:f1:36:2c:88:62:89:
df:80:5e:a1:75:f8:85:f0:e5:2c:0d:9f:e7:70:00:
b4:2f:e1:25:1d:2d:35:17:a1:1a:21:66:bd:f9:15:
80:dd:5d:07:93:5d:dc:fc:b2:0a:66:fb:d6:30:ee:
9a:29:f5:7f:a9:31:cd:03:7e:75:ff:26:aa:d4:83:
c0:15:66:73:36:84:14:46:e8:f3:61:ac:71:56:60:
90:ce:45:2e:5c:a6:77:74:9e:e2:64:1f:e1:82:ea:
24:f8:8d:a1:87:d7:1e:ca:91:5c:6c:2d:aa:8a:16:
92:df:d5:eb:76:7f:fa:12:d3:05:39:c4:7d:b3:be:
01:39:d3:cd:02:ba:bc:04:a2:eb:b4:d3:bc:f2:31:
28:b1:da:33:a1:07:f1:7f:60:2d:d2:d9:67:78:de:
55:f9:49:54:2a:0d:0b:1c:e3:0b:6c:18:a0:1d:2d:
be:46:f0:26:db:93:59:59:c9:db:7f:7e:23:36:21:
5c:b3:dd:cc:e3:d4:50:da:ed:08:76:88:26:e4:64:
28:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:C3:BE:30:C5:2B:9C:09:EE:87:85:C1:13:66:0F:96:23:8B:BC:CF
X509v3 Authority Key Identifier:
keyid:9C:6C:40:4D:96:BB:11:29:84:EB:14:C4:6B:E0:52:65:14:B6:BF:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/MCK/0/9C6C404D96BB112984EB14C46BE0526514B6BFBF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9C6C404D96BB112984EB14C46BE0526514B6BFBF.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MCK/0/9C6C404D96BB112984EB14C46BE0526514B6BFBF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:72:96:24:b4:62:11:28:43:13:d6:b6:86:c1:66:63:06:9a:
42:a2:72:52:4e:0d:54:cb:a6:59:17:11:3b:82:3f:30:d3:73:
e4:d6:9a:5b:bd:54:08:79:32:bd:54:17:09:79:09:1b:79:09:
03:42:e0:03:15:d8:01:55:d6:91:a4:c5:68:42:06:22:78:99:
43:4b:68:be:10:63:d9:4a:ae:e1:b2:f1:65:e5:55:f7:62:23:
8b:83:8b:40:2d:22:7d:22:35:23:b2:d1:33:36:72:86:1e:e7:
7b:ec:a1:83:5a:50:78:dc:90:65:1f:2a:81:17:ba:29:3f:b9:
a8:0d:e6:7d:9c:10:de:08:0e:c3:50:e2:a5:fe:f4:0d:8b:45:
56:79:f7:87:a2:d5:de:5c:08:70:77:91:9e:06:41:c8:f4:43:
89:37:ba:97:b9:bf:c0:55:84:7c:ae:35:49:f6:b6:e6:8d:6d:
ac:b7:a0:ba:a9:04:b3:98:cc:a5:a4:87:82:bd:62:f7:0a:de:
e1:a1:5d:71:2f:b9:ec:84:9c:66:7c:2c:a2:8a:0b:ae:44:47:
78:0b:7e:81:bc:37:39:52:9c:dd:b6:06:c2:7c:49:85:b9:b7:
12:c0:f5:a4:c1:9b:d7:fa:ee:74:e6:dc:44:b8:88:49:b8:11:
4c:2b:59:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 01:48:05 2026 by rpki-client