
$ rpki-client -vvf rpkica.twnic.tw/rpki/CATHDD/0/21DBFD1921121F730C614C0DE6212CD6949CD5AF.mft
File: 21DBFD1921121F730C614C0DE6212CD6949CD5AF.mft (raw, json)
Hash identifier: MHe4sHoQdrTfuNFPmeInwm+KZ+diXVpb67/ANgb2aP0=
Subject key identifier: B1:DA:00:DC:93:14:B2:55:11:7C:70:C8:C4:24:60:02:87:DA:4A:10
Authority key identifier: 21:DB:FD:19:21:12:1F:73:0C:61:4C:0D:E6:21:2C:D6:94:9C:D5:AF
Certificate issuer: /CN=21DBFD1921121F730C614C0DE6212CD6949CD5AF
Certificate serial: 0C66A9E6457B2C77051D57A271DF0FFEE6A0347D
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/21DBFD1921121F730C614C0DE6212CD6949CD5AF.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CATHDD/0/21DBFD1921121F730C614C0DE6212CD6949CD5AF.mft
Manifest number: 85
Signing time: Sat 15 Aug 2026 02:34:07 +0000
Manifest this update: Sat 15 Aug 2026 02:29:07 +0000
Manifest next update: Sun 16 Aug 2026 06:12:07 +0000
Files and hashes: 1: 323430313a636436303a3a2f34302d3430203d3e20323134303330.roa (hash: 780V3DLt+Fe7Fs8V4ULwUWJozzo56xPXySO9+JGJ2W8=)
2: 21DBFD1921121F730C614C0DE6212CD6949CD5AF.crl (hash: IYPgvUy1saySFKdRrKegV2twnTdA5MwM0yP7dTxXtBA=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/CATHDD/0/21DBFD1921121F730C614C0DE6212CD6949CD5AF.crl
rsync://rpkica.twnic.tw/rpki/CATHDD/0/21DBFD1921121F730C614C0DE6212CD6949CD5AF.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/21DBFD1921121F730C614C0DE6212CD6949CD5AF.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 16 Aug 2026 03:24:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:66:a9:e6:45:7b:2c:77:05:1d:57:a2:71:df:0f:fe:e6:a0:34:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21DBFD1921121F730C614C0DE6212CD6949CD5AF
Validity
Not Before: Aug 15 02:29:07 2026 GMT
Not After : Aug 16 06:12:07 2026 GMT
Subject: CN=B1DA00DC9314B255117C70C8C424600287DA4A10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c7:0a:8e:77:64:b4:68:5d:3d:b8:12:a1:8c:
07:49:ba:e4:21:95:e6:e0:ed:3e:85:39:cd:c0:fd:
2e:10:71:11:f8:13:79:e5:4a:ac:9b:d4:18:e7:57:
b8:15:25:64:a5:39:da:6b:ce:a5:ea:10:02:a7:13:
a3:8f:26:25:20:6b:e0:17:9d:8b:cf:93:2a:28:70:
b7:2b:11:93:b5:13:d9:dc:81:34:6a:7c:88:40:a9:
f8:b0:54:a5:03:34:40:38:9e:d1:0f:66:a1:60:54:
df:0e:fe:65:24:f4:df:55:b7:e5:0f:25:5a:a1:4b:
fd:74:42:fc:23:a8:f0:1b:f1:1b:db:7b:cc:35:5b:
99:9d:62:9f:51:63:a3:cd:ce:56:69:2e:bf:e0:69:
50:be:22:98:53:11:0a:ad:08:f3:22:a9:ad:e7:f3:
d8:66:1e:f5:59:8e:5d:27:2d:9b:f8:94:97:e1:04:
f3:6b:bd:8b:4a:dc:b7:06:24:9d:57:bf:9a:16:ad:
9c:da:f7:18:c5:2a:1f:d7:a0:70:f9:b3:02:02:0f:
d4:24:3f:9c:ee:fa:bf:79:c6:86:f4:2f:b0:f3:5b:
20:8c:4e:4f:c7:0c:ca:1f:85:c7:86:c3:73:c3:f6:
2e:f7:76:2e:be:80:08:83:fe:80:81:93:eb:7e:31:
00:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:DA:00:DC:93:14:B2:55:11:7C:70:C8:C4:24:60:02:87:DA:4A:10
X509v3 Authority Key Identifier:
keyid:21:DB:FD:19:21:12:1F:73:0C:61:4C:0D:E6:21:2C:D6:94:9C:D5:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CATHDD/0/21DBFD1921121F730C614C0DE6212CD6949CD5AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/21DBFD1921121F730C614C0DE6212CD6949CD5AF.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CATHDD/0/21DBFD1921121F730C614C0DE6212CD6949CD5AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:b3:d2:be:4c:83:c7:35:01:77:20:78:bb:cd:00:72:0d:05:
4a:5b:97:4b:b2:4a:71:9f:0e:e1:b5:46:e3:19:c6:94:f3:cf:
92:f8:c5:9c:81:6e:fa:5a:23:0a:27:bc:94:e3:a2:d5:eb:55:
e9:c0:f7:ac:84:90:b3:b1:a2:ee:4b:ec:6a:46:7d:6a:06:3d:
b9:24:63:4b:b9:a2:16:71:00:7e:57:9a:fc:5d:f4:e6:95:48:
ef:6d:70:58:54:91:24:a9:fe:82:f9:30:69:79:99:69:0d:13:
97:c6:c6:97:18:72:c3:29:15:9b:26:e8:94:a5:fe:78:d2:d7:
cf:14:14:70:ec:b6:7f:fb:95:73:3f:5a:de:bc:a9:33:e0:47:
84:14:d1:ef:91:37:29:d6:63:ba:b9:9a:8a:5c:ec:b6:80:66:
a7:09:64:2d:ec:83:57:41:65:3b:39:d0:82:1d:88:e6:5d:ab:
c8:15:02:12:9e:a7:c3:f8:96:49:9e:fa:2c:ce:79:9a:12:cd:
1d:cb:ea:7b:65:2f:1d:73:b0:43:c2:91:bc:91:e2:85:1f:11:
e6:5d:80:06:f4:d7:0b:82:04:86:e9:5f:4b:a2:2c:99:3b:bb:
eb:9e:77:f1:b5:21:96:05:fd:2d:1d:f6:e9:12:ed:a3:fa:8b:
e0:28:2e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:20:52 2026 by rpki-client