
$ rpki-client -vvvf rpkica.twnic.tw/rpki/SKIPTECH/0/B67E34D8538AB361BC35DAA6BB862938B7074CF5.mft
File: B67E34D8538AB361BC35DAA6BB862938B7074CF5.mft (raw, json)
Hash identifier: 6NuSpKrNT1N6SpICNZMTl/I7UFsQznDJ5V6H9wuEld8=
Subject key identifier: F3:02:DB:AB:66:D0:43:1C:31:D2:81:F6:41:D9:07:ED:2A:71:2E:1E
Authority key identifier: B6:7E:34:D8:53:8A:B3:61:BC:35:DA:A6:BB:86:29:38:B7:07:4C:F5
Certificate issuer: /CN=B67E34D8538AB361BC35DAA6BB862938B7074CF5
Certificate serial: 40AD14C8F50206A1F61D15F7D43BF7C9CB5758E4
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B67E34D8538AB361BC35DAA6BB862938B7074CF5.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SKIPTECH/0/B67E34D8538AB361BC35DAA6BB862938B7074CF5.mft
Manifest number: C2
Signing time: Sat 26 Sep 2026 00:54:50 +0000
Manifest this update: Sat 26 Sep 2026 00:49:50 +0000
Manifest next update: Sun 27 Sep 2026 03:28:50 +0000
Files and hashes: 1: B67E34D8538AB361BC35DAA6BB862938B7074CF5.crl (hash: jZSH7I3pCQlzHCfT0fddickpR2kcih9zqrgt9+hkLtc=)
2: 3130332e3139362e3137342e302f32342d3234203d3e203136353039.roa (hash: Dv1Q4leGE6kpJfjI6WE621Cdw3t/wZRnaFyh95us4y4=)
3: 3130332e3139362e3137352e302f32342d3234203d3e203134363138.roa (hash: QwUrML5S6jNxsB3io4kL1Ytp6STUV1YCdv/C5aoN7kE=)
4: 3130332e3139362e3137342e302f32342d3234203d3e203134363138.roa (hash: vqv/tco05EE2Tq97tYFApFy46z3NMsSGExTjlwsvQo0=)
5: 3130332e3139362e3137352e302f32342d3234203d3e203136353039.roa (hash: T7QapEwKqLSVFLH1exkEhjBPxu0cGVP3piAhRdv+dCs=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/SKIPTECH/0/B67E34D8538AB361BC35DAA6BB862938B7074CF5.crl
rsync://rpkica.twnic.tw/rpki/SKIPTECH/0/B67E34D8538AB361BC35DAA6BB862938B7074CF5.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B67E34D8538AB361BC35DAA6BB862938B7074CF5.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 03:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:ad:14:c8:f5:02:06:a1:f6:1d:15:f7:d4:3b:f7:c9:cb:57:58:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B67E34D8538AB361BC35DAA6BB862938B7074CF5
Validity
Not Before: Sep 26 00:49:50 2026 GMT
Not After : Sep 27 03:28:50 2026 GMT
Subject: CN=F302DBAB66D0431C31D281F641D907ED2A712E1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9e:87:d1:86:de:f3:4d:1a:b0:22:74:ef:e3:
de:a0:3c:52:3d:80:1c:0d:84:78:be:b4:0f:6e:ff:
b3:09:e4:36:ec:14:cf:f4:2f:cd:2c:dc:14:10:fa:
7e:4e:0f:b3:95:1b:0b:62:15:1f:af:19:59:72:62:
bb:10:28:f7:39:c9:c5:5c:5e:3b:32:28:56:2f:28:
52:32:f5:54:39:bb:98:97:b0:85:a9:3f:c9:4c:9e:
0f:21:b2:31:00:8a:b5:ef:c0:42:57:0e:c2:f1:41:
7f:1f:64:c8:9b:10:05:19:c1:bb:78:76:d7:49:03:
fb:b5:15:2c:bd:f4:22:4b:36:a7:4d:43:d7:f6:63:
95:80:f9:3d:17:ab:06:70:fd:94:3a:a5:ba:71:60:
7c:47:0f:80:54:8b:ab:23:d1:94:5f:2c:86:bd:7c:
e0:00:52:82:2e:d6:f0:61:44:61:86:04:59:51:16:
d2:1d:46:42:53:90:59:c4:63:66:19:ad:24:86:f8:
4b:cf:30:ce:b4:44:06:13:bd:7e:30:7c:15:6a:ab:
c5:f7:ad:ac:c7:8d:0a:8b:1b:63:c0:0d:96:81:f6:
5b:ab:d5:21:bb:7a:4a:c2:e1:c8:da:df:9d:e1:19:
4c:04:8d:df:67:50:92:c0:c1:4e:db:6a:99:b8:5d:
d4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:02:DB:AB:66:D0:43:1C:31:D2:81:F6:41:D9:07:ED:2A:71:2E:1E
X509v3 Authority Key Identifier:
keyid:B6:7E:34:D8:53:8A:B3:61:BC:35:DA:A6:BB:86:29:38:B7:07:4C:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SKIPTECH/0/B67E34D8538AB361BC35DAA6BB862938B7074CF5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B67E34D8538AB361BC35DAA6BB862938B7074CF5.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SKIPTECH/0/B67E34D8538AB361BC35DAA6BB862938B7074CF5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:bc:3e:94:ee:0e:00:bd:a7:2a:0d:01:0c:6b:4d:07:4c:4c:
34:2d:1e:ec:38:f7:37:1d:c8:30:bf:1e:e3:61:a5:64:a3:8f:
12:6c:e8:7b:05:93:22:f1:b9:00:97:ce:38:de:f0:68:59:84:
67:dd:c5:ac:af:6f:36:c8:e7:ad:8a:57:c8:e3:4b:ca:4b:3d:
e2:d9:65:7d:5a:df:5d:46:b2:cb:88:f8:dd:0f:7e:76:65:05:
84:84:e9:93:6d:bd:b0:63:53:14:4f:26:e6:1c:94:83:f6:6d:
16:53:99:85:b7:7a:cb:a1:b4:96:fb:38:20:cb:f7:1a:ed:46:
ce:d5:da:6b:7d:4d:0b:25:a5:d6:92:4f:13:4f:a1:54:48:da:
b4:63:6f:6e:f2:35:5b:8c:43:61:55:c9:e3:dd:8c:9b:65:06:
77:f1:45:52:41:aa:b1:d6:4b:ba:7f:94:87:a2:05:af:2f:8e:
4c:db:3f:36:e5:7e:4f:f1:8d:46:59:72:50:ff:cb:bd:07:10:
9a:f7:9b:08:24:13:4d:b3:4a:5c:a2:b4:ad:45:a7:ef:7c:26:
58:12:79:d0:da:3c:36:ad:94:c7:04:1d:dd:3a:3b:28:0b:b5:
4a:3a:f5:5c:31:8c:76:1b:ba:a0:f7:7e:93:2b:3e:96:e8:0c:
75:7a:c6:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:53:28 2026 by rpki-client