
$ rpki-client -vvvf rpkica.twnic.tw/rpki/NSS/0/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.mft
File: 9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.mft (raw, json)
Hash identifier: 4MZcDr/q8T+sbSRsXmtlpvmffVcuxiKfIjOIuwYfZkk=
Subject key identifier: 7F:10:7E:12:A2:3A:75:67:B2:F6:BA:E8:C8:92:A1:2E:6D:55:FA:35
Authority key identifier: 9E:13:5A:CA:9B:3B:7E:42:3F:6A:6E:49:C9:22:E7:C9:FF:9D:04:3E
Certificate issuer: /CN=9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E
Certificate serial: 76E4336F192DBB80888A0BDA236F747CDCC91E1F
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/NSS/0/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.mft
Manifest number: B9
Signing time: Fri 25 Sep 2026 12:22:59 +0000
Manifest this update: Fri 25 Sep 2026 12:17:59 +0000
Manifest next update: Sat 26 Sep 2026 15:06:59 +0000
Files and hashes: 1: 3130332e3131382e32342e302f32322d3234203d3e20313331363236.roa (hash: 7ZYOaD4BiHJMT5uylYeAq6oBkT9jOAeVwRTnZzrlVB0=)
2: 323430333a663363303a3a2f33322d3332203d3e20313331363236.roa (hash: U+TwGMruloppvfph33ur/zLTpQNWHiQ2kQh2YCvkqAQ=)
3: 9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.crl (hash: MXpxkGEXUD5WZ92dWPVKSRC3Qw/SwTmHlUCB5ctpfGQ=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/NSS/0/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.crl
rsync://rpkica.twnic.tw/rpki/NSS/0/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 26 Sep 2026 15:06:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:e4:33:6f:19:2d:bb:80:88:8a:0b:da:23:6f:74:7c:dc:c9:1e:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E
Validity
Not Before: Sep 25 12:17:59 2026 GMT
Not After : Sep 26 15:06:59 2026 GMT
Subject: CN=7F107E12A23A7567B2F6BAE8C892A12E6D55FA35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1e:cd:6b:9e:7d:13:a9:83:da:f7:e1:d3:04:
a7:a0:54:62:19:9c:9e:68:66:b9:b2:d9:78:8e:c6:
01:41:d6:8f:0d:5a:43:a8:25:c2:c4:ae:13:83:29:
57:f9:ab:0e:c8:4c:e0:a6:5c:04:95:77:62:37:2f:
1e:18:f0:fb:4c:8b:38:df:85:b4:8a:6e:8b:a1:3b:
da:d9:f8:66:8f:c7:23:be:c6:0f:84:c5:a3:9f:90:
11:c6:a2:2a:d3:e3:4d:bf:d3:15:58:c6:6b:e5:2b:
4b:cd:5b:5a:5f:b4:46:b6:2d:ba:03:38:1a:1b:25:
63:aa:93:5b:92:b4:68:7a:37:16:c5:b9:8b:f3:15:
00:ec:51:f2:92:65:8f:1e:db:12:d9:33:4a:55:97:
5a:23:1a:40:89:00:ef:a2:58:ad:3f:7d:f0:07:a2:
42:6f:68:e0:48:f1:e6:9c:4f:7e:8d:af:94:20:11:
66:26:c7:13:cb:5e:a7:43:6c:50:fe:de:85:9a:08:
8f:77:b7:75:e5:ed:46:bb:d0:86:7d:fd:69:32:7c:
04:f8:43:19:c8:aa:bb:fb:4e:92:60:83:cc:4e:73:
10:fc:52:8d:d6:89:c3:a9:bc:01:89:3a:64:c1:7d:
ff:6d:44:a4:52:a9:3c:b4:8b:06:17:21:46:d4:d4:
0f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:10:7E:12:A2:3A:75:67:B2:F6:BA:E8:C8:92:A1:2E:6D:55:FA:35
X509v3 Authority Key Identifier:
keyid:9E:13:5A:CA:9B:3B:7E:42:3F:6A:6E:49:C9:22:E7:C9:FF:9D:04:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/NSS/0/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NSS/0/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:4b:9a:33:53:97:d3:98:87:70:61:7b:6d:6b:74:47:4c:4a:
0e:c6:ed:f9:06:03:82:2f:07:60:0b:62:be:5b:dd:8c:7b:4c:
9e:2e:50:33:4f:91:07:a9:e5:cc:d0:6c:86:13:f1:26:fd:56:
3b:07:7f:5e:0d:58:e6:b1:27:b3:ac:c6:17:5d:27:af:a5:eb:
48:11:b6:b3:cb:bd:ce:23:d2:3a:a2:98:c2:d4:d5:ce:f0:45:
06:60:b4:1f:1a:34:05:a4:d4:2d:dd:9c:b2:cf:a4:86:e3:cd:
3a:44:f0:b6:fd:10:86:c4:85:ec:49:0f:f1:f7:9a:19:f0:fd:
e6:8f:00:f9:69:78:43:6a:49:83:d1:16:f4:69:4d:6d:80:5f:
eb:1c:38:b5:1a:9c:f2:96:da:46:59:9a:39:f9:8c:14:38:f1:
4d:8e:aa:61:9b:d6:26:87:55:2f:7b:99:09:fb:b6:7d:92:fa:
60:6b:5d:b4:24:95:79:64:a9:d7:f6:7f:69:42:8d:6e:e2:8a:
18:b6:80:0b:0e:c3:a3:16:3c:ab:ec:fb:eb:98:da:89:cf:2f:
b7:d6:8e:7b:e1:b5:88:6e:20:15:b1:10:2d:c1:40:aa:1c:73:
b2:d0:b6:05:4d:89:be:1d:77:4f:b0:8f:e7:57:62:50:fa:ef:
42:3d:ca:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:26:25 2026 by rpki-client