
$ rpki-client -vvvf rpkica.twnic.tw/rpki/TDC/0/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.mft
File: 68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.mft (raw, json)
Hash identifier: QJHfgYYCRR3eQ1ei5o7Z/b4UhI1MRi3NQ/bcT5RcmxM=
Subject key identifier: F3:23:FB:40:32:4B:DA:99:6B:1A:23:E9:DC:F7:8F:8D:3A:8D:A0:80
Authority key identifier: 68:58:4C:D1:C7:EB:08:08:E1:AE:2D:E4:C1:95:CC:E1:32:57:05:F0
Certificate issuer: /CN=68584CD1C7EB0808E1AE2DE4C195CCE1325705F0
Certificate serial: 56B6CC285F8277CA77ADFF36D917070F156D296E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TDC/0/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.mft
Manifest number: B8
Signing time: Thu 24 Sep 2026 15:45:29 +0000
Manifest this update: Thu 24 Sep 2026 15:40:29 +0000
Manifest next update: Fri 25 Sep 2026 18:12:29 +0000
Files and hashes: 1: 323430313a6136303a3a2f33322d3332203d3e203138303431.roa (hash: W1whgs9nNrUE4RVKtECQcAsJLL/TFHZVPsexycz3Kms=)
2: 68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.crl (hash: BJyFCy0O5Zf1JkhL7/HIORKs9Eu+o8G0EIkBGYOwLGI=)
3: 3130332e3232302e3231382e302f32342d3234203d3e20323031323137.roa (hash: F3FkYFiImAK1mdqw1urYor1uavBiRp16+RSqdJSNVyI=)
4: 3130332e3232302e3231382e302f32332d3234203d3e203138303431.roa (hash: BPfCiVG9HhUxKhDsiFl88DZrsgfiJtDmqkpGw4VSQe8=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TDC/0/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.crl
rsync://rpkica.twnic.tw/rpki/TDC/0/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 18:12:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:b6:cc:28:5f:82:77:ca:77:ad:ff:36:d9:17:07:0f:15:6d:29:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68584CD1C7EB0808E1AE2DE4C195CCE1325705F0
Validity
Not Before: Sep 24 15:40:29 2026 GMT
Not After : Sep 25 18:12:29 2026 GMT
Subject: CN=F323FB40324BDA996B1A23E9DCF78F8D3A8DA080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:91:ad:71:5b:22:16:50:00:b7:60:3c:a5:2c:
06:0c:6d:31:80:e3:cc:72:a0:f8:b0:bf:1f:2e:95:
4d:fc:3f:ed:15:09:70:89:cc:00:d3:6b:52:2e:93:
33:eb:45:29:4d:c6:b6:23:64:84:81:94:fc:3d:bd:
40:ff:fd:c1:09:e5:9b:c9:41:90:d9:95:bb:18:91:
60:ac:92:7a:8e:a0:ce:6a:f3:1b:c6:5d:01:c0:2e:
3a:5d:64:3c:ef:e9:fd:49:3b:62:00:09:be:80:a5:
cd:41:57:e8:dc:f4:8d:cd:aa:13:4d:e8:d9:ab:c7:
10:4a:5b:ce:85:64:ac:9a:24:d0:fa:17:6b:8c:99:
4b:b8:68:01:c9:8f:84:69:35:5e:90:bf:99:c1:91:
26:cb:ad:64:5d:c5:99:ea:b3:55:89:6c:77:25:47:
c2:a8:cd:fe:0e:71:aa:a3:aa:a6:5d:18:0c:1b:1c:
17:90:7a:86:f0:ab:6d:07:90:24:8b:75:d5:8b:fb:
9e:41:97:c1:a1:e3:ab:60:4f:36:9a:67:c9:f8:96:
ed:0e:fb:bf:a5:4e:c1:18:f9:68:e2:59:02:fa:2f:
eb:d6:2f:1f:f8:52:6f:5d:59:3c:50:b3:61:c1:49:
10:a8:df:9c:2e:84:61:4b:85:2d:a9:eb:f1:22:1a:
2a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:23:FB:40:32:4B:DA:99:6B:1A:23:E9:DC:F7:8F:8D:3A:8D:A0:80
X509v3 Authority Key Identifier:
keyid:68:58:4C:D1:C7:EB:08:08:E1:AE:2D:E4:C1:95:CC:E1:32:57:05:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TDC/0/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TDC/0/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:56:af:a8:46:47:16:ed:97:65:22:63:d8:ab:f2:01:d2:13:
bd:de:cc:ff:e0:bb:40:54:c7:89:0e:31:5d:9f:0c:0f:81:4f:
58:e1:d8:be:84:1c:22:7c:5e:98:53:6f:b1:ca:2e:54:1b:84:
28:fd:d7:a0:25:0a:47:09:34:d3:34:4f:8f:69:19:11:ed:1d:
b6:c4:8b:6f:83:11:c9:f7:7f:3a:0c:7c:0b:83:13:48:16:db:
ef:7a:80:69:0f:80:a0:b8:a0:e6:db:9b:f7:e0:fc:32:c2:c7:
42:c2:2b:9e:bb:b9:37:b0:61:c1:87:e3:4d:d4:9b:b1:14:4f:
dc:01:41:df:85:ac:ac:de:8a:ab:b5:63:89:8a:1e:25:18:e2:
18:db:8b:bf:9d:9d:36:fe:de:89:b2:df:a0:7d:f6:80:bd:30:
a8:24:9a:5e:af:72:0e:27:c3:b4:5c:84:c3:62:37:5a:d9:f1:
ee:b2:09:fc:df:ee:df:f5:17:12:55:69:ca:33:cb:f4:f0:a6:
cf:0b:ec:9e:47:e2:c6:b5:a1:bf:22:27:16:d9:5c:4b:63:f1:
1f:2b:8d:8f:8d:9a:6f:da:42:c1:bf:4b:3a:cb:8e:a7:db:29:
2f:9c:29:73:2c:7c:cb:60:02:76:23:76:86:02:6e:10:9e:0b:
a2:a0:21:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:21:31 2026 by rpki-client