
$ rpki-client -vvvf rpkica.twnic.tw/rpki/DCTV/0/5A4C5723258251A2F22337EC5ABE9F2B1AE2FB4C.mft
File: 5A4C5723258251A2F22337EC5ABE9F2B1AE2FB4C.mft (raw, json)
Hash identifier: 7RbNCEiPPqpLKTy8/jg2sy7yBVv3RqqxG/M+YPVvQuA=
Subject key identifier: 20:0D:31:26:C2:DB:75:98:48:77:D0:AD:E1:E5:EC:47:F1:43:AD:17
Authority key identifier: 5A:4C:57:23:25:82:51:A2:F2:23:37:EC:5A:BE:9F:2B:1A:E2:FB:4C
Certificate issuer: /CN=5A4C5723258251A2F22337EC5ABE9F2B1AE2FB4C
Certificate serial: 2E2080626D0D985F03CC646A299398943EA43168
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5A4C5723258251A2F22337EC5ABE9F2B1AE2FB4C.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/DCTV/0/5A4C5723258251A2F22337EC5ABE9F2B1AE2FB4C.mft
Manifest number: C2
Signing time: Sat 03 Oct 2026 02:16:31 +0000
Manifest this update: Sat 03 Oct 2026 02:11:31 +0000
Manifest next update: Sun 04 Oct 2026 04:14:31 +0000
Files and hashes: 1: 32372e302e3135322e302f32322d3234203d3e20313331363037.roa (hash: DvXwVOOH787nnj2iKzFJiQBBroV8f+Ma+r+Jza0TzM4=)
2: 5A4C5723258251A2F22337EC5ABE9F2B1AE2FB4C.crl (hash: PXvfEkAkNJwy6kiSTXs3lxrBY4y+rhjspWVnzSIt1A4=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/DCTV/0/5A4C5723258251A2F22337EC5ABE9F2B1AE2FB4C.crl
rsync://rpkica.twnic.tw/rpki/DCTV/0/5A4C5723258251A2F22337EC5ABE9F2B1AE2FB4C.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5A4C5723258251A2F22337EC5ABE9F2B1AE2FB4C.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 04:14:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:20:80:62:6d:0d:98:5f:03:cc:64:6a:29:93:98:94:3e:a4:31:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5A4C5723258251A2F22337EC5ABE9F2B1AE2FB4C
Validity
Not Before: Oct 3 02:11:31 2026 GMT
Not After : Oct 4 04:14:31 2026 GMT
Subject: CN=200D3126C2DB75984877D0ADE1E5EC47F143AD17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:7d:be:49:69:77:4d:5f:33:73:c1:85:75:7a:
ee:1a:28:e6:9c:78:3b:94:7b:b6:48:2f:0e:49:14:
47:15:7f:cf:45:59:7b:8e:01:2c:b3:f4:08:ac:11:
0d:ac:6f:52:aa:b9:c6:a9:c9:e4:42:01:be:67:c7:
42:ab:df:5b:34:70:a7:dc:13:4d:65:5a:de:ca:37:
3f:aa:6c:0b:48:6c:e6:05:bb:0d:43:fa:09:ad:cf:
a6:ff:a6:b6:cb:59:4c:b5:47:9f:1f:36:7e:78:ac:
0c:48:c5:dd:d8:35:ef:a2:89:a6:5e:25:2b:bf:fd:
4c:a9:df:67:3a:92:ea:fe:e6:3d:b9:21:8f:c4:8d:
52:ef:ba:ee:08:78:37:42:8d:8e:e3:e0:94:f7:b9:
ec:5d:66:2b:44:ab:18:ab:33:86:fd:34:03:61:8d:
20:b3:6b:db:7f:6c:a5:dd:70:f3:1e:e3:11:a9:1a:
02:73:ec:7b:34:4f:52:bf:8b:23:6e:d6:49:80:78:
20:7d:d2:f1:2a:fd:24:33:bc:ba:43:57:2a:b3:40:
0d:70:51:e8:f5:60:eb:97:06:16:6b:d7:85:36:2b:
45:63:fe:65:cd:d4:12:b6:28:13:6a:a6:68:18:79:
f4:03:67:25:55:6e:b5:55:9c:06:f8:86:83:17:fd:
54:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:0D:31:26:C2:DB:75:98:48:77:D0:AD:E1:E5:EC:47:F1:43:AD:17
X509v3 Authority Key Identifier:
keyid:5A:4C:57:23:25:82:51:A2:F2:23:37:EC:5A:BE:9F:2B:1A:E2:FB:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/DCTV/0/5A4C5723258251A2F22337EC5ABE9F2B1AE2FB4C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5A4C5723258251A2F22337EC5ABE9F2B1AE2FB4C.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DCTV/0/5A4C5723258251A2F22337EC5ABE9F2B1AE2FB4C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:75:fe:44:9b:73:a7:bb:77:48:69:da:13:1a:3a:2e:96:49:
9e:31:91:2b:5a:4a:c3:ee:34:6f:13:fd:28:71:4e:db:93:59:
80:d0:f1:48:a5:43:45:3e:89:ff:c6:bf:dc:27:df:4d:f4:76:
42:47:47:39:de:a7:06:34:40:af:9d:a3:53:44:57:8f:97:c2:
12:49:6a:b9:44:85:61:e8:f0:d7:99:eb:b8:f3:f1:90:b7:e6:
bb:b7:85:4b:7e:53:dd:bd:e7:7a:8c:60:98:aa:53:d8:c9:a8:
a4:9f:19:fc:f9:40:c8:38:58:2e:66:04:b1:60:1a:1a:94:f3:
30:84:1e:7e:34:06:fe:10:47:6d:09:9c:82:c7:05:25:a0:59:
c4:7c:e1:b8:52:2f:ed:b3:df:0f:2d:2b:cb:ee:20:15:b9:24:
43:1b:e2:bd:07:5b:8d:f8:69:73:8e:46:3e:e3:dc:cd:94:c5:
c8:3a:fa:9e:29:c0:37:ec:9c:61:be:94:98:89:44:d5:f4:8e:
65:57:ba:71:49:0c:0d:14:7c:fc:b6:fa:52:fc:f6:d1:a3:a5:
41:94:af:d6:f4:19:e7:a5:23:a5:11:93:62:e3:da:46:13:78:
a7:df:6b:88:e4:71:8a:6c:c5:40:71:92:b7:d2:06:7d:0f:f1:
84:b9:41:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 11:38:40 2026 by rpki-client