
$ rpki-client -vvvf rpkica.twnic.tw/rpki/NCIC/0/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.mft
File: CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.mft (raw, json)
Hash identifier: +tkl/rmdih1OpFUHS4FAy0iae7fq6wdOP+vZh4wH/do=
Subject key identifier: D8:F7:76:D8:9A:B8:A1:82:46:8C:22:62:BF:B7:16:54:BF:AA:03:03
Authority key identifier: CC:F8:5F:9A:12:4E:B3:15:FA:6F:5A:1B:38:23:7B:2C:B4:74:E7:FB
Certificate issuer: /CN=CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB
Certificate serial: 419BF3F2A37F36B3DB309C00FC2459F7E87FD22C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/NCIC/0/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.mft
Manifest number: 020A
Signing time: Thu 24 Sep 2026 13:30:01 +0000
Manifest this update: Thu 24 Sep 2026 13:25:01 +0000
Manifest next update: Fri 25 Sep 2026 15:46:01 +0000
Files and hashes: 1: AS18049.roa (hash: CHLtc29780Zk5kFwqAQd4YWTHebbB+RFrMUGxKh+qnw=)
2: AS19551.roa (hash: NqDBh2SwFJNCXvyM4fdyGB5+g5TbMBdh1359FDzfzQc=)
3: AS4780.roa (hash: 3doOsQ1lci/dcBoeewBHKS8r9uA8xibHfuoP96wZU8k=)
4: CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.crl (hash: aWQvc0i2QHq+5+TyA373QXRlYqAiVVtdEDUiKY1vcuQ=)
5: AS11414.roa (hash: /ePkCrs3DaRoZJICyZAdXEF+H1abAEoJZm3/5hVJZu8=)
6: AS133747.roa (hash: UA5Xs30l4LOlm4EwBh45qzx8kKGjg7O+/U1/foDvFn8=)
7: AS131611.roa (hash: ko9FhlszY3420faGuuU4/JGNBNv5/jbJ5CsCPl0TfYY=)
8: AS36408.roa (hash: 3/RDp6OTIW9h4O6g21hV+ZaJnhOxvBTj9REIGMwOjjY=)
9: AS131602.roa (hash: dTjUrkwNYrVQmyrRQE/ow0qhjKQ9yJEMFLOf/weghPE=)
10: AS38851.roa (hash: kbwsddvnXmcim3cT6O4xcv/Tch3fR0ae1nrqo1CdGqU=)
11: AS23675.roa (hash: T3XNdefS4QO6hVP89rl2glxMhtRx+vWwJEbbNcJHo7U=)
12: AS198949.roa (hash: mNdswjy8yMrd3rwD+wOE+aOIgteATLVc5SE3jiYK6qU=)
13: AS9674.roa (hash: 0Rfkg57sQC52J1ZooDsndEjKqKJFwHoIjjU3JL58ooo=)
14: AS54994.roa (hash: RsnzFTqm2XU0nw52sFhW7iKQqUPc3QS9+04ejWe/r5E=)
15: AS131586.roa (hash: LDiRnfHcJQoPn8iKqzaYdPXYHjyt2l+woQXcmbfjLaM=)
16: AS131597.roa (hash: D4GAxqyk51rR4YDa8aoQIQFiV2ERQ9HcnJ3dyV6ukFw=)
17: AS140079.roa (hash: WQgZ8Cm2P4KoEMGTkGD/G/c6uZqkXiyuAe4JGHQ0o0c=)
18: AS9922.roa (hash: TLPvn/desxVF2+80H45wFLAveMbDROKTieBWGq2H5p4=)
19: AS18419.roa (hash: hT4armiSj71OZsLPFaFbsBU4VgdeP0hnmGBnvyxlOHk=)
20: AS136543.roa (hash: RWXawWfvf0DRJJfNkWgX4D2JbT4AUoTW2TGEwl6lqV8=)
21: AS131584.roa (hash: Zowu4aBqdpKFsDUWh2EJdhNU8lOOnhsRMn9By90Ywqo=)
22: AS131627.roa (hash: mlbdIRqRf55MypXj2cJGVvp1JuSSUEhhghB7KrhM6cs=)
23: AS9919.roa (hash: JwfQn1hUSvt65Led9JO3jmgx3jNJ4soXXV2HBjCYjzg=)
24: AS9918.roa (hash: qwPqUMuG1isiHeDJu+TjNCXOlzxE8BXASoJ7f8GuPh4=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/NCIC/0/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.crl
rsync://rpkica.twnic.tw/rpki/NCIC/0/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 15:46:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:9b:f3:f2:a3:7f:36:b3:db:30:9c:00:fc:24:59:f7:e8:7f:d2:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB
Validity
Not Before: Sep 24 13:25:01 2026 GMT
Not After : Sep 25 15:46:01 2026 GMT
Subject: CN=D8F776D89AB8A182468C2262BFB71654BFAA0303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:91:9b:e7:8b:9f:26:87:24:52:e9:e5:72:76:
2a:e5:90:67:fb:ba:4d:0b:0d:8b:3e:41:4b:6f:eb:
24:66:47:da:a7:7d:c2:f7:fe:87:f8:1a:48:bd:8e:
ba:3f:1f:f4:92:f7:e5:ee:3a:10:56:34:82:3b:8d:
19:22:81:ef:2e:f2:ab:e6:f2:48:41:5e:3a:43:34:
bd:b0:fc:79:42:5a:98:e5:e3:1e:b4:86:13:6c:7c:
ed:ce:aa:30:83:b9:ab:76:fd:23:5e:a8:25:88:bd:
54:cd:0a:2f:82:38:5e:e8:40:b7:13:19:cd:51:80:
db:25:19:34:6e:06:5c:9b:4f:84:db:4c:27:97:30:
a6:d0:74:3a:bf:7a:b4:57:29:bc:ed:6d:67:36:03:
86:ef:11:bb:44:e6:fa:cd:0b:aa:18:2e:65:e6:b7:
23:c7:0b:cb:0b:71:e2:d4:3e:79:c4:10:73:16:a4:
30:2b:5e:84:d1:fb:ab:11:45:8b:12:0d:36:12:d2:
c6:b6:b7:eb:ff:23:bd:3d:a8:32:99:18:34:14:1a:
41:52:8c:13:b8:21:fc:c0:6f:2a:06:0c:45:a8:92:
71:79:21:c4:67:17:41:8e:fb:71:3f:4d:d3:9d:b8:
07:aa:19:0a:d8:dc:a8:2c:3f:43:2e:e3:c3:c2:f7:
2a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F7:76:D8:9A:B8:A1:82:46:8C:22:62:BF:B7:16:54:BF:AA:03:03
X509v3 Authority Key Identifier:
keyid:CC:F8:5F:9A:12:4E:B3:15:FA:6F:5A:1B:38:23:7B:2C:B4:74:E7:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/NCIC/0/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NCIC/0/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:27:f8:57:e7:8c:ac:47:3f:60:00:a4:8a:8e:8b:d1:41:d9:
c1:78:9e:85:b2:1d:bb:b3:04:2c:49:43:96:43:70:87:67:fc:
3b:f5:eb:a8:42:c0:5c:d2:97:56:53:98:36:20:e4:ac:06:92:
45:18:55:76:23:ac:cb:4a:23:3d:54:d6:fe:5e:00:f5:7b:d4:
4b:66:d3:85:f8:4f:d2:41:ed:dd:d8:65:ef:ab:ef:c2:9a:6d:
f3:6f:bf:e9:7c:6b:68:2e:8e:88:77:ec:62:37:82:e2:4b:36:
9d:1c:33:fd:56:1e:cb:87:90:76:76:93:4c:a8:56:ef:ef:2a:
13:7a:d3:dd:58:65:28:c2:0b:95:22:91:30:ed:49:4d:31:89:
63:c3:fa:52:19:2a:47:79:08:50:89:e1:3c:3b:0e:b9:12:11:
1d:4b:d3:9d:3e:5c:a6:74:3f:01:ab:2e:aa:33:4c:f3:2e:ed:
8f:e5:4b:6f:8d:50:8c:e2:b6:6c:17:7d:e8:b2:91:d7:c5:49:
89:54:b6:13:e7:f8:5c:9e:d4:b3:5f:3e:e8:38:c7:63:ca:ee:
c5:56:ec:87:02:68:b6:00:ab:96:b6:f0:18:67:e2:f9:2f:ba:
3a:92:ab:97:dd:08:0c:a4:e0:40:c9:7e:4b:22:a6:b4:53:f6:
4d:e0:63:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:36:11 2026 by rpki-client