
$ rpki-client -vvf rpkica.twnic.tw/rpki/CENTROID/0/8B6578CFFA2564370C947633B4222B38FBE04787.mft
File: 8B6578CFFA2564370C947633B4222B38FBE04787.mft (raw, json)
Hash identifier: yxMBt7dV8G8j58MaRg3Hq3cO6Jb5DqgkwMoRuEyLDCQ=
Subject key identifier: A6:C8:75:E0:4C:CB:3A:A8:96:88:DA:57:FC:F4:96:F8:BD:72:E5:2B
Authority key identifier: 8B:65:78:CF:FA:25:64:37:0C:94:76:33:B4:22:2B:38:FB:E0:47:87
Certificate issuer: /CN=8B6578CFFA2564370C947633B4222B38FBE04787
Certificate serial: 2FEB4252E36C2F731B573770412ACC65A43FC38C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8B6578CFFA2564370C947633B4222B38FBE04787.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CENTROID/0/8B6578CFFA2564370C947633B4222B38FBE04787.mft
Manifest number: 86
Signing time: Fri 14 Aug 2026 12:56:48 +0000
Manifest this update: Fri 14 Aug 2026 12:51:48 +0000
Manifest next update: Sat 15 Aug 2026 15:35:48 +0000
Files and hashes: 1: 3130332e3130342e3135302e302f32342d3234203d3e20313335323933.roa (hash: h1zDSRZ3TRJlhR+U4wVbJzjHTzTePNMp3oBDSC21x4k=)
2: 3130332e3130342e3134382e302f32332d3332203d3e20313331363137.roa (hash: ptYVo8fcmKCNY0SB5M4EFl0tfitQ5lFpdJDuUwWLs1E=)
3: 3130332e3130342e3134392e302f32342d3332203d3e20313331363137.roa (hash: OZwQnvVk4yetwjei/3UcgDl7U/wG9KFLqEYavrhzVlI=)
4: 3130332e3130342e3134382e302f32332d3332203d3e20313338343135.roa (hash: iG/RKgeK0WnHEYeyY7HDeBCF1wwyNY/516KS8KYs4xI=)
5: 3130332e3130342e3134382e302f32342d3332203d3e20313331363137.roa (hash: 3HCjGtrVeXk0xOR0uuHBiqXc7pJZ9osCCcWRgAc2u0I=)
6: 3130332e3130342e3135312e302f32342d3234203d3e20313331363138.roa (hash: XPIZKI0b+STshE1jyzyv6vzwTCkp1FigGgVTYDae6lY=)
7: 3130332e3130342e3135312e302f32342d3234203d3e20313530323838.roa (hash: OVmj6wqpCDoCVGv/wnIQ7J+KG2IP7XidmU+Gbdn+nyQ=)
8: 8B6578CFFA2564370C947633B4222B38FBE04787.crl (hash: l9fOiXUpiOXlSeDoePn9RGLeCnRFcjHRaRtzSAonZlE=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/CENTROID/0/8B6578CFFA2564370C947633B4222B38FBE04787.crl
rsync://rpkica.twnic.tw/rpki/CENTROID/0/8B6578CFFA2564370C947633B4222B38FBE04787.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8B6578CFFA2564370C947633B4222B38FBE04787.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 15 Aug 2026 15:35:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:eb:42:52:e3:6c:2f:73:1b:57:37:70:41:2a:cc:65:a4:3f:c3:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8B6578CFFA2564370C947633B4222B38FBE04787
Validity
Not Before: Aug 14 12:51:48 2026 GMT
Not After : Aug 15 15:35:48 2026 GMT
Subject: CN=A6C875E04CCB3AA89688DA57FCF496F8BD72E52B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ba:6d:3d:db:f6:fe:d0:f7:e2:bd:de:e2:57:
3f:02:ea:ba:d1:8d:19:43:b9:8a:1d:e6:9b:9a:07:
de:84:57:b8:e5:23:7c:48:e6:f0:0e:d1:34:71:42:
f2:cc:6b:ac:2f:b3:04:b8:d7:d1:7b:cb:fb:14:98:
c7:ad:01:4f:2d:35:ca:80:26:e6:ad:89:c4:0a:3e:
74:60:ec:58:9b:cf:aa:45:90:ba:60:ce:3e:db:57:
84:44:54:3b:a5:e8:cd:89:b3:6e:db:88:d9:ee:ec:
de:c0:97:32:c8:82:75:fc:f2:c3:93:63:a1:e4:a5:
59:83:8b:e1:2c:04:9f:4e:70:06:09:fd:4c:24:79:
3c:60:f6:27:43:92:a9:f1:79:1c:7e:a6:b6:0e:04:
92:09:b1:93:de:50:74:77:73:84:85:71:06:43:15:
93:1c:38:a8:61:08:4f:51:1d:69:d5:f1:af:37:64:
d8:91:02:87:a0:e6:1a:2a:0e:b6:81:49:27:e0:54:
40:da:af:68:c1:82:66:21:07:53:25:ee:ac:cd:e7:
42:62:46:18:f3:34:5f:c8:64:c5:6d:a0:00:cd:e0:
37:89:b4:04:a3:d4:03:a9:22:9c:dd:21:f4:71:23:
8f:f5:4a:aa:c9:4f:68:fa:62:2e:7b:37:8a:51:2e:
aa:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:C8:75:E0:4C:CB:3A:A8:96:88:DA:57:FC:F4:96:F8:BD:72:E5:2B
X509v3 Authority Key Identifier:
keyid:8B:65:78:CF:FA:25:64:37:0C:94:76:33:B4:22:2B:38:FB:E0:47:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CENTROID/0/8B6578CFFA2564370C947633B4222B38FBE04787.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8B6578CFFA2564370C947633B4222B38FBE04787.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CENTROID/0/8B6578CFFA2564370C947633B4222B38FBE04787.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:92:4e:1e:03:02:93:3b:b6:6f:04:73:4c:d9:25:ad:02:07:
8d:84:08:5c:f3:2c:ba:8a:c2:13:d2:5c:40:09:dc:aa:4e:56:
60:4c:b7:a4:eb:a8:e5:10:76:14:93:8c:87:bb:7d:3f:a7:1f:
a0:d7:ea:af:3d:c8:97:c5:07:ee:a1:79:91:d5:da:03:eb:83:
af:ab:65:c3:3f:fb:94:1d:5b:ef:fd:e5:0d:26:4b:0b:46:ee:
9f:7c:96:44:77:4d:89:23:32:3e:10:7b:b3:c9:82:a0:f8:2e:
8c:ab:22:c3:63:ac:70:c5:56:eb:5c:0d:c5:25:f8:77:1a:20:
ff:55:f0:92:33:02:cb:da:26:86:0a:2b:54:70:0d:91:2e:5c:
3c:04:69:1b:dc:83:46:fc:a0:c8:58:8a:36:9b:cf:86:35:86:
03:83:e3:19:19:4a:82:c9:c6:53:f0:aa:77:89:e1:09:9e:c8:
d8:84:8e:c7:01:3c:51:0b:6c:3c:e1:34:b4:a5:33:4f:02:8b:
0a:09:11:f1:35:c4:10:7c:b5:0c:28:cc:1e:59:9d:7a:00:d7:
45:13:18:74:06:ac:ea:a1:e9:1c:47:5d:b7:51:87:5c:20:09:
b6:ea:1b:30:65:e2:6e:7f:fb:d0:46:99:10:55:40:d1:04:9d:
04:d2:0b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:37:48 2026 by rpki-client