
$ rpki-client -vvf rpkica.twnic.tw/rpki/NTCCATV/0/B621735E324046FFFC1DD75D4ED8815E08CD25AE.mft
File: B621735E324046FFFC1DD75D4ED8815E08CD25AE.mft (raw, json)
Hash identifier: 6I4S5ZnH/1hl40zell6QXOXuNYLad/hoK4OgZISxMCk=
Subject key identifier: 68:F6:E3:BD:AC:A1:E7:6B:76:03:89:35:A5:6A:89:A5:14:17:3A:78
Authority key identifier: B6:21:73:5E:32:40:46:FF:FC:1D:D7:5D:4E:D8:81:5E:08:CD:25:AE
Certificate issuer: /CN=B621735E324046FFFC1DD75D4ED8815E08CD25AE
Certificate serial: 3C6452DB24D5EF45AB750CA9F52C258AD91BEF57
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B621735E324046FFFC1DD75D4ED8815E08CD25AE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/NTCCATV/0/B621735E324046FFFC1DD75D4ED8815E08CD25AE.mft
Manifest number: 6B
Signing time: Thu 23 Jul 2026 16:48:15 +0000
Manifest this update: Thu 23 Jul 2026 16:43:15 +0000
Manifest next update: Fri 24 Jul 2026 19:25:15 +0000
Files and hashes: 1: B621735E324046FFFC1DD75D4ED8815E08CD25AE.crl (hash: Zx/yTIxa3/uUkaI4yUEsBB0C87KJSYd7zaCzdHYqZ+Q=)
2: 34332e3232372e32362e302f32332d3233203d3e203338383531.roa (hash: C2usZixthQiIE+xeQ3sCGdfoDlrvv1uF2zFJ8tVVXIc=)
3: 34332e3232372e32342e302f32322d3232203d3e203338383531.roa (hash: Jc0taR/H4saYaDAoJgE+9UiKJq1S+bCLyLdRp8kMM8s=)
4: 3130332e3133312e3137322e302f32322d3234203d3e203338383531.roa (hash: gJf9DLGPPpkcFmCRmCzChYMvtlZ7ty7+aorHZQ0RXhY=)
5: 34332e3232372e32352e302f32342d3234203d3e203338383531.roa (hash: AVukq4MJYvCGIAziMbV6ZV4Pe3c02PVGzfhBcKVubb8=)
6: 34332e3232372e32342e302f32332d3233203d3e203338383531.roa (hash: sZR2upIjgJ8ucZv/gsPF7tQAoIHfXdof9Y1BIEmdMEk=)
7: 3130332e3133312e3137322e302f32322d3232203d3e203338383531.roa (hash: wAf5rAvxkIVF2EmVrtaklm33SqKTtuxnUU+SmUZADj8=)
8: 3130332e34362e3138382e302f32332d3233203d3e203338383531.roa (hash: mG1ga13lp7MgEJvmiHGi6aFGInKwqgg1PecqbqqFlqE=)
9: 3130332e34362e3139302e302f32332d3233203d3e203338383531.roa (hash: s3NIqrucGxxXoVh7k9P2N6l5jBGUlMpH1t4x77/+R9g=)
10: 3130332e34362e3138382e302f32322d3232203d3e203338383531.roa (hash: IGUXagfNdDGbcIwOiNJB2WILqRSYaabubVYlRzK02WU=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/NTCCATV/0/B621735E324046FFFC1DD75D4ED8815E08CD25AE.crl
rsync://rpkica.twnic.tw/rpki/NTCCATV/0/B621735E324046FFFC1DD75D4ED8815E08CD25AE.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B621735E324046FFFC1DD75D4ED8815E08CD25AE.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 19:25:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:64:52:db:24:d5:ef:45:ab:75:0c:a9:f5:2c:25:8a:d9:1b:ef:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B621735E324046FFFC1DD75D4ED8815E08CD25AE
Validity
Not Before: Jul 23 16:43:15 2026 GMT
Not After : Jul 24 19:25:15 2026 GMT
Subject: CN=68F6E3BDACA1E76B76038935A56A89A514173A78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:45:aa:86:c7:82:de:18:48:02:7b:3a:20:67:
98:b2:86:06:75:64:b2:35:30:25:f9:8a:6d:07:ec:
e1:47:ba:47:a4:e6:5a:31:01:23:c4:93:e7:7f:0a:
67:31:02:36:e0:e7:50:f6:f2:b7:b3:84:45:d5:a2:
ee:ac:a9:65:1a:bc:15:15:84:17:de:32:83:84:2d:
6c:f5:96:6a:7a:12:c7:ee:b8:09:88:5f:99:c1:49:
8c:5f:dd:87:08:cb:0e:fe:41:68:e6:7b:0d:a2:55:
26:0f:12:5a:0b:9e:1c:f7:e5:b4:d8:a8:48:13:2c:
25:4e:a0:de:02:37:3c:89:cf:b1:f2:ad:76:6c:f1:
19:9a:88:2b:88:70:c2:41:0e:bc:c9:b7:e7:ec:21:
86:07:cc:ea:54:b9:88:01:e3:cb:f6:0c:0a:cb:0e:
e3:b3:ea:29:f1:47:be:fc:d0:6d:1c:b6:fc:92:af:
c3:24:73:d4:93:1e:ef:e0:cb:78:ab:33:67:f7:fb:
d6:e2:c8:95:4b:a5:74:07:5b:90:a0:cc:ba:f1:0b:
40:4a:95:78:04:00:06:1f:40:29:77:9f:c3:bb:92:
0c:eb:5d:72:d5:05:6d:35:48:5f:09:ca:1a:da:c0:
9f:e9:b8:0d:a8:3d:9c:1b:a4:c3:c0:bf:5d:3f:60:
2d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:F6:E3:BD:AC:A1:E7:6B:76:03:89:35:A5:6A:89:A5:14:17:3A:78
X509v3 Authority Key Identifier:
keyid:B6:21:73:5E:32:40:46:FF:FC:1D:D7:5D:4E:D8:81:5E:08:CD:25:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/NTCCATV/0/B621735E324046FFFC1DD75D4ED8815E08CD25AE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B621735E324046FFFC1DD75D4ED8815E08CD25AE.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NTCCATV/0/B621735E324046FFFC1DD75D4ED8815E08CD25AE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:61:ff:51:03:97:7f:07:4a:16:c5:f9:dd:26:79:e7:09:f5:
c2:8c:88:43:cd:dc:d3:c8:38:71:77:c5:c9:a7:9d:fe:bf:75:
be:66:25:46:bf:57:07:fb:8b:bc:3b:df:60:4c:5b:9f:fe:09:
06:19:a5:16:b2:53:20:c9:c7:2d:24:bb:ca:46:0a:8e:9a:2f:
63:ad:3e:3b:a1:54:d6:9b:b6:62:75:c2:4a:fe:0b:7e:ff:a5:
9c:ce:cc:00:65:da:68:c9:60:20:39:d8:c0:5d:0f:ea:f2:45:
9d:6f:d6:d3:8b:a4:84:01:1b:88:47:ab:3b:6c:0b:de:fe:44:
d3:80:01:17:26:e4:1c:4a:2a:ec:ee:b9:09:a0:c9:a6:19:bf:
f4:a6:07:c4:73:49:14:75:51:d8:d3:fd:3f:11:a6:ae:59:e3:
5e:c2:0c:2d:bb:36:69:5f:56:aa:fb:91:86:da:d5:6f:e9:7c:
48:94:b3:a4:19:3c:99:03:94:7d:12:74:f3:e3:f5:81:42:06:
06:83:b3:88:69:d0:f8:11:68:eb:5d:3d:f4:18:98:97:35:98:
b2:ac:a1:47:32:8c:c6:d4:de:2f:fc:06:46:62:07:9e:83:60:
dd:84:c4:65:d1:90:b7:bc:24:59:20:1e:0c:7c:d6:eb:77:c2:
03:6c:ef:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:49:57 2026 by rpki-client