
$ rpki-client -vvvf rpkica.twnic.tw/rpki/NUNLINE/0/90CC65194573D100A9A5ECAD83FF235C91E49F84.mft
File: 90CC65194573D100A9A5ECAD83FF235C91E49F84.mft (raw, json)
Hash identifier: DTnMeRentkegDPKWMkWLa8NzGSes43Twy/vb9vUbazc=
Subject key identifier: C6:03:37:7C:4C:E1:95:BE:E6:ED:DE:09:30:1D:D7:68:3D:00:C4:F1
Authority key identifier: 90:CC:65:19:45:73:D1:00:A9:A5:EC:AD:83:FF:23:5C:91:E4:9F:84
Certificate issuer: /CN=90CC65194573D100A9A5ECAD83FF235C91E49F84
Certificate serial: 5566F7A1A8D62A33C0A144823AC96F0271C56F1D
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/90CC65194573D100A9A5ECAD83FF235C91E49F84.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/NUNLINE/0/90CC65194573D100A9A5ECAD83FF235C91E49F84.mft
Manifest number: B7
Signing time: Thu 24 Sep 2026 09:04:17 +0000
Manifest this update: Thu 24 Sep 2026 08:59:17 +0000
Manifest next update: Fri 25 Sep 2026 10:28:17 +0000
Files and hashes: 1: 3230332e3137352e3130342e302f32332d3234203d3e20313530373535.roa (hash: YbtbNsPkQYRd3JYxoqhXztojoklcb1dDBNFr1Ga338o=)
2: 90CC65194573D100A9A5ECAD83FF235C91E49F84.crl (hash: ftIrE04KC5dETezMIh2osng+/eUFydrmJfQpcSSrvp8=)
3: 323430313a346536303a3a2f33322d3438203d3e20313530373535.roa (hash: wDLEMecsHR0Z6XE3oU5zld/TCGNqqJB7doxlMS3kCag=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/NUNLINE/0/90CC65194573D100A9A5ECAD83FF235C91E49F84.crl
rsync://rpkica.twnic.tw/rpki/NUNLINE/0/90CC65194573D100A9A5ECAD83FF235C91E49F84.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/90CC65194573D100A9A5ECAD83FF235C91E49F84.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 10:28:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:66:f7:a1:a8:d6:2a:33:c0:a1:44:82:3a:c9:6f:02:71:c5:6f:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90CC65194573D100A9A5ECAD83FF235C91E49F84
Validity
Not Before: Sep 24 08:59:17 2026 GMT
Not After : Sep 25 10:28:17 2026 GMT
Subject: CN=C603377C4CE195BEE6EDDE09301DD7683D00C4F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:71:8e:1e:2c:66:2f:c5:41:9f:c0:f2:32:bb:
df:2d:e9:ee:f1:d2:10:80:71:d9:fc:3a:3c:d2:c1:
81:10:c9:5b:05:d2:b7:80:cd:d3:08:51:37:2a:b3:
2f:ab:d5:b5:84:9b:d0:f5:92:83:11:aa:ff:a0:45:
9b:5d:43:95:a4:21:5e:d7:b7:f5:0d:d9:4d:c3:e6:
1a:b4:af:a7:a5:b1:25:5e:02:65:26:78:c9:8f:8a:
a2:61:6e:4d:8d:10:79:1b:fc:c6:36:c4:46:23:f9:
eb:40:3a:1a:a9:bf:a2:d7:22:22:2f:eb:34:9e:c6:
16:81:4c:9b:63:52:58:58:ab:e3:51:78:2c:de:a6:
93:90:b4:04:cb:f2:8b:7f:31:0b:5b:cb:f3:b1:79:
cb:2e:03:cc:f0:56:c8:45:5e:8c:93:5f:dc:2b:1a:
67:47:0f:c5:65:78:0a:a2:55:55:0f:46:32:e5:a3:
7b:1d:d7:3b:87:0f:d7:79:7d:7c:fe:da:17:96:d6:
0a:33:d0:55:6c:e4:0d:01:db:5d:ea:0b:c8:f1:a1:
18:ff:50:fc:2b:6b:21:b3:23:f5:7a:79:56:73:a5:
71:ad:ea:8c:da:1d:85:cd:85:57:d8:e1:05:36:44:
e9:b3:11:47:4c:f1:42:b7:1a:62:cf:e2:7a:68:49:
0e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:03:37:7C:4C:E1:95:BE:E6:ED:DE:09:30:1D:D7:68:3D:00:C4:F1
X509v3 Authority Key Identifier:
keyid:90:CC:65:19:45:73:D1:00:A9:A5:EC:AD:83:FF:23:5C:91:E4:9F:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/NUNLINE/0/90CC65194573D100A9A5ECAD83FF235C91E49F84.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/90CC65194573D100A9A5ECAD83FF235C91E49F84.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NUNLINE/0/90CC65194573D100A9A5ECAD83FF235C91E49F84.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:95:90:40:4f:b2:61:ed:7e:39:3d:b7:c7:b2:a3:63:30:02:
d0:d7:28:5f:c5:bf:f8:c8:f3:93:7d:f9:ec:4a:53:6b:b9:6e:
ab:cc:af:f3:82:9d:53:21:25:4f:dc:55:61:57:0b:29:fb:99:
c9:78:e2:71:e7:af:90:5f:4a:f7:5c:48:7b:17:11:73:c8:78:
ce:3d:c9:ad:26:1d:fe:fe:ab:40:d0:de:84:22:98:b3:a9:a4:
74:17:f4:27:11:eb:dc:20:74:26:55:e7:95:0d:ed:17:81:74:
25:e5:54:57:8b:c5:ac:46:f5:ba:a6:d5:93:a2:a7:94:7e:85:
23:78:ba:10:70:37:b7:e7:41:e7:80:72:cf:a6:79:3c:c3:33:
29:0a:24:c7:5c:ce:ae:92:59:5f:a4:cb:f3:e0:ac:08:ca:d2:
ee:63:47:59:72:3e:5b:1a:25:7c:16:73:43:a0:cb:2b:08:82:
d5:91:f6:6b:04:b6:16:1b:7d:61:9a:34:d5:f9:79:99:61:1b:
a1:45:e8:04:60:16:8e:7d:44:7f:16:61:f6:67:d8:84:01:06:
a6:4c:e3:68:d2:fa:3d:be:76:bb:88:2b:9e:6b:f5:00:53:7c:
72:b4:ba:28:c4:a5:b8:3c:c9:4c:03:0b:07:81:09:57:26:91:
af:e8:1e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:57:04 2026 by rpki-client