
$ rpki-client -vvvf rpkica.twnic.tw/rpki/DONGFONG/0/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.mft
File: B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.mft (raw, json)
Hash identifier: ysK9NTOOhLyNm+YQrZAZtEsiJ1QXwFNFf35et1FOML4=
Subject key identifier: B7:1C:D6:F9:7E:94:D2:73:6F:17:A7:47:34:74:07:4E:D8:3F:C3:0A
Authority key identifier: B4:07:C8:B8:FA:B2:AF:78:5E:44:9F:69:59:A3:43:C1:1F:3C:2F:7D
Certificate issuer: /CN=B407C8B8FAB2AF785E449F6959A343C11F3C2F7D
Certificate serial: 65A4F238E55D0C57967D7554F04D6BC933F87EF1
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/DONGFONG/0/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.mft
Manifest number: D7
Signing time: Tue 06 Oct 2026 21:04:12 +0000
Manifest this update: Tue 06 Oct 2026 20:59:12 +0000
Manifest next update: Wed 07 Oct 2026 21:19:12 +0000
Files and hashes: 1: 323430313a313738303a3a2f33322d3438203d3e203138303436.roa (hash: 0EFkqKD7ENQj+JBIgZG7N70LecdiL6GqV21vyg7+bY4=)
2: 36312e36352e3232342e302f31392d3234203d3e203138303436.roa (hash: JGQ3yop/vcm2FdY2UjF6jt7SjOXxYwxRnvwb/oHXEkE=)
3: 323430313a313738303a313331363a3a2f34382d3536203d3e20313331363131.roa (hash: EyVEKIuSDsU3abS750Haxq/6YfUpoWKjN/hJ7IOd7vA=)
4: 3130332e3233342e37362e302f32322d3234203d3e203338383531.roa (hash: 5s6AN+2Y6dfxR89CSPIb2iNJHpRbEix7TIPfn85Lhig=)
5: 36312e36352e3233362e302f32322d3234203d3e203138303436.roa (hash: rVt6jn0s+ctjCC9zbc3cMEHz3yfZQjGH0puX8gX3+zQ=)
6: 3135302e3130372e35362e302f32322d3234203d3e203138303436.roa (hash: j4TKKZtnXETI7fmK4gTE3z6+J+BOZ8wy9XuoYkODtNE=)
7: B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.crl (hash: gzKtIRcf18mGRPnnEZKvToQ/1UqtOQQY7m6CVPkpG4w=)
8: 3131362e35302e33322e302f32302d3234203d3e203138303436.roa (hash: LZibNAZn+nBssflpOgfwTQ3pTcbmpuQyETsySkNRzUY=)
9: 3131362e35302e34312e302f32342d3234203d3e203138303436.roa (hash: FWuMIJD8kL6duLcYGMHNJEXNuVAUCl3kGteH4/paG04=)
10: 3130332e3233342e37362e302f32322d3234203d3e203138303436.roa (hash: YrCtHUqv6m3Qzl36rYUrmmVsWpnVUXUHwX65HZhrRmI=)
11: 36312e36352e3232342e302f32312d3234203d3e203138303436.roa (hash: w2jQpkleagjWlo8dAGXSxXIFgAbKDZGiikpvzVunK6o=)
12: 36312e36352e3233322e302f32322d3234203d3e203138303436.roa (hash: 4oDLlStFpYWmcHhVH0rDWkfLPTd3MKc2HN4akzyILSg=)
13: 36312e36352e3234302e302f32302d3234203d3e203338383531.roa (hash: 5xy/K2z2rPvYuOxb1Rs438nXfizUFVoGlYRajsSBm10=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/DONGFONG/0/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.crl
rsync://rpkica.twnic.tw/rpki/DONGFONG/0/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 07 Oct 2026 19:58:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:a4:f2:38:e5:5d:0c:57:96:7d:75:54:f0:4d:6b:c9:33:f8:7e:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B407C8B8FAB2AF785E449F6959A343C11F3C2F7D
Validity
Not Before: Oct 6 20:59:12 2026 GMT
Not After : Oct 7 21:19:12 2026 GMT
Subject: CN=B71CD6F97E94D2736F17A7473474074ED83FC30A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1d:4e:1f:9f:e9:4d:08:f9:d8:7d:76:04:39:
15:6b:72:74:71:a0:66:a0:a7:55:8a:ca:8f:0a:15:
6b:d2:a4:1b:70:8b:bc:45:91:7d:6d:45:0e:93:88:
a4:1e:3d:8e:55:39:87:8c:93:ed:d8:f2:65:0f:96:
d0:7d:fa:79:bc:15:f4:78:e5:1b:9a:a5:bc:0c:47:
18:38:fe:58:4d:35:c8:1b:2a:36:33:26:9a:0c:0b:
f1:b5:69:ce:5a:f7:94:cc:04:b7:8d:da:4b:e7:e7:
ec:bb:47:30:8b:a9:33:e3:be:74:2f:7e:ef:20:43:
bc:d4:8a:c6:ff:02:71:3c:8d:ae:ee:91:da:dc:e4:
95:34:66:11:60:11:9b:4b:c7:c9:29:92:29:af:bd:
ef:fe:57:79:b9:fc:a0:f5:51:ac:c3:c3:70:93:d2:
35:a2:d2:41:87:be:9d:0b:11:4e:c0:f0:c4:a6:5b:
31:57:ae:ae:a5:dc:d3:3b:61:a5:0c:8f:42:45:55:
95:b5:8e:71:60:1a:ea:7a:94:4e:32:cc:c2:c9:9f:
a2:3a:d5:e0:bd:aa:e6:28:8c:d9:b0:c7:51:a8:0b:
0e:cc:f1:61:dc:bc:30:c1:ce:51:d1:3a:1e:66:ba:
41:6e:c7:3f:e8:45:df:a5:6c:ce:51:0d:1b:e1:6f:
17:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:1C:D6:F9:7E:94:D2:73:6F:17:A7:47:34:74:07:4E:D8:3F:C3:0A
X509v3 Authority Key Identifier:
keyid:B4:07:C8:B8:FA:B2:AF:78:5E:44:9F:69:59:A3:43:C1:1F:3C:2F:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/DONGFONG/0/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DONGFONG/0/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:35:b7:36:62:25:34:93:08:a9:0a:c3:cd:0d:ca:3f:65:08:
2f:6b:1e:47:88:16:fd:81:4f:a9:0f:bb:4e:d5:9b:79:40:c5:
a1:1d:3b:bc:ef:e7:92:d7:28:94:45:8f:57:b3:74:56:f6:f3:
f6:40:7a:0a:03:a1:d2:a8:c9:e7:32:6e:e9:be:0e:7e:c6:54:
3f:cb:1a:e6:1a:a8:29:ba:b1:2f:1f:dc:0b:f3:62:13:8d:55:
df:5e:d7:c3:21:d4:0c:7c:cf:3c:f4:9b:3f:3a:97:ad:84:fd:
9d:50:fe:4a:6e:36:2d:d1:2e:89:f0:67:7f:e2:61:b1:4e:06:
af:18:7a:7e:f8:c2:8a:c9:33:95:86:91:d6:0a:1f:f4:4b:72:
9a:a5:d1:ab:c6:2f:20:98:da:6a:36:80:63:30:42:35:2b:96:
60:fe:50:2b:60:20:d5:50:64:2b:38:d2:a9:21:af:5c:89:c7:
b7:06:36:48:e1:6f:33:ac:81:5f:3a:47:4b:25:48:6f:4a:11:
3d:1c:3a:fe:98:e0:9f:5c:8f:38:ab:3e:73:52:49:e5:1e:57:
9c:1f:9c:a0:08:e3:14:0d:43:9a:dc:e9:3b:ce:56:0e:98:4b:
11:72:43:f9:c2:38:32:45:f6:f9:2c:77:a5:a4:0e:ab:ee:89:
85:2a:4d:30
-----BEGIN CERTIFICATE-----
MIIE6DCCA9CgAwIBAgIUZaTyOOVdDFeWfXVU8E1ryTP4fvEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjQwN0M4QjhGQUIyQUY3ODVFNDQ5RjY5NTlBMzQzQzEx
RjNDMkY3RDAeFw0yNjEwMDYyMDU5MTJaFw0yNjEwMDcyMTE5MTJaMDMxMTAvBgNV
BAMTKEI3MUNENkY5N0U5NEQyNzM2RjE3QTc0NzM0NzQwNzRFRDgzRkMzMEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiHU4fn+lNCPnYfXYEORVrcnRx
oGagp1WKyo8KFWvSpBtwi7xFkX1tRQ6TiKQePY5VOYeMk+3Y8mUPltB9+nm8FfR4
5RuapbwMRxg4/lhNNcgbKjYzJpoMC/G1ac5a95TMBLeN2kvn5+y7RzCLqTPjvnQv
fu8gQ7zUisb/AnE8ja7ukdrc5JU0ZhFgEZtLx8kpkimvve/+V3m5/KD1UazDw3CT
0jWi0kGHvp0LEU7A8MSmWzFXrq6l3NM7YaUMj0JFVZW1jnFgGup6lE4yzMLJn6I6
1eC9quYojNmwx1GoCw7M8WHcvDDBzlHROh5mukFuxz/oRd+lbM5RDRvhbxchAgMB
AAGjggHyMIIB7jAdBgNVHQ4EFgQUtxzW+X6U0nNvF6dHNHQHTtg/wwowHwYDVR0j
BBgwFoAUtAfIuPqyr3heRJ9pWaNDwR88L30wDgYDVR0PAQH/BAQDAgeAMGUGA1Ud
HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRE9OR0ZP
TkcvMC9CNDA3QzhCOEZBQjJBRjc4NUU0NDlGNjk1OUEzNDNDMTFGM0MyRjdELmNy
bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3
bmljLnR3L3Jwa2kvVFdOSUNDQS8xL0I0MDdDOEI4RkFCMkFGNzg1RTQ0OUY2OTU5
QTM0M0MxMUYzQzJGN0QuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU
cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9ET05HRk9ORy8wL0I0MDdDOEI4
RkFCMkFGNzg1RTQ0OUY2OTU5QTM0M0MxMUYzQzJGN0QubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCKNbc2
YiU0kwipCsPNDco/ZQgvax5HiBb9gU+pD7tO1Zt5QMWhHTu87+eS1yiURY9Xs3RW
9vP2QHoKA6HSqMnnMm7pvg5+xlQ/yxrmGqgpurEvH9wL82ITjVXfXtfDIdQMfM88
9Js/OpethP2dUP5KbjYt0S6J8Gd/4mGxTgavGHp++MKKyTOVhpHWCh/0S3KapdGr
xi8gmNpqNoBjMEI1K5Zg/lArYCDVUGQrONKpIa9cice3BjZI4W8zrIFfOkdLJUhv
ShE9HDr+mOCfXI84qz5zUknlHlecH5ygCOMUDUOa3Ok7zlYOmEsRckP5wjgyRfb5
LHelpA6r7omFKk0w
-----END CERTIFICATE-----
Generated at Wed Oct 7 08:12:03 2026 by rpki-client