
$ rpki-client -vvvf rpkica.twnic.tw/rpki/POWERHOUSE/0/B9401D6D3261C00DECA33618ECF6D9D8CEAA41B7.mft
File: B9401D6D3261C00DECA33618ECF6D9D8CEAA41B7.mft (raw, json)
Hash identifier: 27/xahK1D2dKkC+GvXup+tVlS/FWvjuLrjm1twbEdsQ=
Subject key identifier: DA:97:7C:0E:11:44:49:9A:E1:CB:D5:17:31:C9:46:D2:A1:FA:B8:B5
Authority key identifier: B9:40:1D:6D:32:61:C0:0D:EC:A3:36:18:EC:F6:D9:D8:CE:AA:41:B7
Certificate issuer: /CN=B9401D6D3261C00DECA33618ECF6D9D8CEAA41B7
Certificate serial: 26AEE3A5CD6701FA6A56429E6C0BABC0D2951446
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B9401D6D3261C00DECA33618ECF6D9D8CEAA41B7.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/POWERHOUSE/0/B9401D6D3261C00DECA33618ECF6D9D8CEAA41B7.mft
Manifest number: B7
Signing time: Thu 24 Sep 2026 12:09:42 +0000
Manifest this update: Thu 24 Sep 2026 12:04:42 +0000
Manifest next update: Fri 25 Sep 2026 15:23:42 +0000
Files and hashes: 1: B9401D6D3261C00DECA33618ECF6D9D8CEAA41B7.crl (hash: CZfTIH1rIjK+XBJket67QgfuXHgu3sREfM8T6RhaRJU=)
2: 3136332e36312e36302e302f32332d3234203d3e20313532363232.roa (hash: fCwyscEgrvjXMp337Q3oR9jgOSuagg7YXLxdjlpei1s=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/POWERHOUSE/0/B9401D6D3261C00DECA33618ECF6D9D8CEAA41B7.crl
rsync://rpkica.twnic.tw/rpki/POWERHOUSE/0/B9401D6D3261C00DECA33618ECF6D9D8CEAA41B7.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B9401D6D3261C00DECA33618ECF6D9D8CEAA41B7.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 15:23:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:ae:e3:a5:cd:67:01:fa:6a:56:42:9e:6c:0b:ab:c0:d2:95:14:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B9401D6D3261C00DECA33618ECF6D9D8CEAA41B7
Validity
Not Before: Sep 24 12:04:42 2026 GMT
Not After : Sep 25 15:23:42 2026 GMT
Subject: CN=DA977C0E1144499AE1CBD51731C946D2A1FAB8B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2a:02:45:d0:e5:dd:c5:58:6e:da:7e:e3:c2:
5a:c1:9c:42:fa:34:e5:80:26:60:89:e5:86:db:5f:
96:9d:46:22:2b:a4:0a:55:e4:2b:84:01:13:64:97:
c3:a4:b5:06:6d:8c:d6:27:7d:87:89:3f:57:61:bf:
22:f6:36:b4:c6:57:a1:10:16:10:0b:1d:db:2f:ea:
d9:da:10:f1:2b:52:25:07:df:d0:0a:f7:c4:8c:e2:
a7:14:f9:5f:86:dd:00:a0:cd:d4:46:21:96:60:e2:
62:1f:5e:a7:ab:a5:cb:90:6f:cd:5b:b8:7d:ca:6d:
b8:a8:99:4d:37:3e:d8:31:f2:4e:4d:4a:4d:c0:9d:
5f:75:ef:65:ee:da:fd:a8:fc:87:ed:3d:ee:6f:04:
21:d6:62:50:d7:ce:78:da:74:88:f7:bb:5b:bb:4f:
ac:2d:6e:65:f4:0a:83:07:bc:5c:c9:a7:f6:ac:2f:
64:dd:09:95:cb:de:07:37:07:b9:ab:bc:66:e1:17:
8d:a5:12:30:a8:4e:73:21:85:d7:3f:62:88:99:e7:
21:34:19:2b:00:de:24:72:54:96:41:0d:35:16:f6:
93:ac:dd:ea:7c:ae:0a:77:c7:28:60:26:da:ac:5d:
35:3c:50:f3:ae:d8:43:27:2e:38:9b:82:96:54:79:
e6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:97:7C:0E:11:44:49:9A:E1:CB:D5:17:31:C9:46:D2:A1:FA:B8:B5
X509v3 Authority Key Identifier:
keyid:B9:40:1D:6D:32:61:C0:0D:EC:A3:36:18:EC:F6:D9:D8:CE:AA:41:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/POWERHOUSE/0/B9401D6D3261C00DECA33618ECF6D9D8CEAA41B7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B9401D6D3261C00DECA33618ECF6D9D8CEAA41B7.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/POWERHOUSE/0/B9401D6D3261C00DECA33618ECF6D9D8CEAA41B7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:50:20:6d:85:79:ca:28:8a:cf:ff:e0:2d:46:18:e6:f0:a2:
22:65:2f:56:02:1a:cb:05:bd:a8:13:9f:35:1a:d3:51:e4:e4:
1e:c0:7c:dd:46:0d:a8:ec:84:73:dc:87:f0:23:78:76:e0:c8:
2e:27:68:42:41:13:8d:49:61:b1:f3:d6:d7:55:ac:f1:97:55:
fc:6d:8e:a2:77:e3:a8:32:44:84:6f:c5:61:8e:69:95:07:8e:
f7:21:65:fa:7c:9f:23:88:4a:d7:4b:47:00:a0:11:6f:d2:20:
e9:25:a7:c6:6b:17:39:b4:29:a3:1d:51:8a:41:50:b4:43:8b:
2e:d4:29:79:1e:2d:07:32:39:7b:a8:2e:4c:ff:bd:49:57:dd:
8a:cc:36:3e:25:ec:e6:a5:3d:53:e1:3e:ec:8b:05:e0:0a:9e:
44:57:54:07:78:d9:99:21:87:42:9b:86:ef:9d:25:f1:f5:44:
10:e3:de:62:55:79:da:fa:d7:ed:77:96:08:b1:09:74:59:10:
ac:34:99:5d:e5:29:83:4b:5c:50:5e:8d:e0:18:57:91:a5:f4:
bb:f3:34:36:66:af:0e:b0:a9:f6:97:02:a4:9b:b7:1b:68:f0:
32:7a:00:5c:e0:6d:69:f6:05:c0:3d:99:fc:26:ae:23:fd:13:
76:2a:e0:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 10:51:32 2026 by rpki-client