
$ rpki-client -vvf rpkica.twnic.tw/rpki/DONGFONG/0/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.mft
File: B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.mft (raw, json)
Hash identifier: p1dikzxMmArbsJcBgQNvlnMYrkJ7LCqPSIe2JITHq44=
Subject key identifier: B9:CC:38:D8:CA:73:94:C1:14:09:02:40:D1:4F:66:27:3E:52:96:77
Authority key identifier: B4:07:C8:B8:FA:B2:AF:78:5E:44:9F:69:59:A3:43:C1:1F:3C:2F:7D
Certificate issuer: /CN=B407C8B8FAB2AF785E449F6959A343C11F3C2F7D
Certificate serial: 5398743C4C36055F59296BAD07321FFD1FBAC8C1
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/DONGFONG/0/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.mft
Manifest number: 11
Signing time: Wed 13 May 2026 02:21:25 +0000
Manifest this update: Wed 13 May 2026 02:16:25 +0000
Manifest next update: Thu 14 May 2026 03:37:25 +0000
Files and hashes: 1: 3130332e3233342e37362e302f32322d3234203d3e203138303436.roa (hash: YrCtHUqv6m3Qzl36rYUrmmVsWpnVUXUHwX65HZhrRmI=)
2: 36312e36352e3233322e302f32322d3234203d3e203138303436.roa (hash: 4oDLlStFpYWmcHhVH0rDWkfLPTd3MKc2HN4akzyILSg=)
3: 36312e36352e3233362e302f32322d3234203d3e203138303436.roa (hash: rVt6jn0s+ctjCC9zbc3cMEHz3yfZQjGH0puX8gX3+zQ=)
4: B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.crl (hash: qbD2uPZ9FDQ3r0MTpNHbbMMCMxAhbjq1MysDSMWvQss=)
5: 323430313a313738303a313331363a3a2f34382d3536203d3e20313331363131.roa (hash: EyVEKIuSDsU3abS750Haxq/6YfUpoWKjN/hJ7IOd7vA=)
6: 3131362e35302e33322e302f32302d3234203d3e203138303436.roa (hash: LZibNAZn+nBssflpOgfwTQ3pTcbmpuQyETsySkNRzUY=)
7: 3131362e35302e34312e302f32342d3234203d3e203138303436.roa (hash: FWuMIJD8kL6duLcYGMHNJEXNuVAUCl3kGteH4/paG04=)
8: 36312e36352e3232342e302f32312d3234203d3e203138303436.roa (hash: w2jQpkleagjWlo8dAGXSxXIFgAbKDZGiikpvzVunK6o=)
9: 323430313a313738303a3a2f33322d3438203d3e203138303436.roa (hash: 0EFkqKD7ENQj+JBIgZG7N70LecdiL6GqV21vyg7+bY4=)
10: 3135302e3130372e35362e302f32322d3234203d3e203138303436.roa (hash: j4TKKZtnXETI7fmK4gTE3z6+J+BOZ8wy9XuoYkODtNE=)
11: 3130332e3233342e37362e302f32322d3234203d3e203338383531.roa (hash: 5s6AN+2Y6dfxR89CSPIb2iNJHpRbEix7TIPfn85Lhig=)
12: 36312e36352e3234302e302f32302d3234203d3e203338383531.roa (hash: 5xy/K2z2rPvYuOxb1Rs438nXfizUFVoGlYRajsSBm10=)
13: 36312e36352e3232342e302f31392d3234203d3e203138303436.roa (hash: JGQ3yop/vcm2FdY2UjF6jt7SjOXxYwxRnvwb/oHXEkE=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/DONGFONG/0/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.crl
rsync://rpkica.twnic.tw/rpki/DONGFONG/0/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 03:37:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:98:74:3c:4c:36:05:5f:59:29:6b:ad:07:32:1f:fd:1f:ba:c8:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B407C8B8FAB2AF785E449F6959A343C11F3C2F7D
Validity
Not Before: May 13 02:16:25 2026 GMT
Not After : May 14 03:37:25 2026 GMT
Subject: CN=B9CC38D8CA7394C114090240D14F66273E529677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:73:a3:60:a3:f9:96:64:18:26:0b:56:49:40:
76:67:a3:1d:22:30:2c:09:be:de:c3:6f:a3:a0:28:
1e:98:b8:1f:81:7a:fb:29:82:b8:32:ab:d3:0d:11:
d1:9b:f6:c1:5f:2f:71:44:63:00:64:0e:9b:ab:10:
db:11:01:bf:a7:5e:cc:52:23:e8:e3:bf:f5:a3:bf:
ae:df:32:06:d1:65:3b:89:cc:a3:6c:f6:64:8e:65:
c7:c4:cf:6a:03:5d:95:47:90:d7:ec:ab:33:f0:d0:
1d:43:64:8d:f4:4d:cb:b3:1b:cf:66:bb:c2:a0:a8:
7c:8b:9f:81:a7:56:bd:03:41:69:3d:25:2b:2a:17:
b9:9e:96:a4:a6:e6:39:07:4b:1a:95:de:7d:6e:ae:
eb:f4:f1:12:bc:0d:8f:19:14:58:48:2a:09:00:93:
e3:7c:c8:96:09:d2:bd:83:ed:6c:b9:ee:57:34:25:
58:08:83:f0:a6:47:84:a5:5f:51:18:9c:f4:e5:8b:
52:e1:37:39:c0:64:50:5b:91:ae:95:6d:da:20:86:
aa:af:80:02:4d:79:35:f4:96:c8:51:b6:c6:cc:42:
64:5f:55:a2:60:6c:5c:47:8f:2f:1a:8a:3f:ef:06:
6b:f4:42:d3:b3:01:11:b6:a4:ba:9d:51:95:cc:68:
88:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:CC:38:D8:CA:73:94:C1:14:09:02:40:D1:4F:66:27:3E:52:96:77
X509v3 Authority Key Identifier:
keyid:B4:07:C8:B8:FA:B2:AF:78:5E:44:9F:69:59:A3:43:C1:1F:3C:2F:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/DONGFONG/0/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DONGFONG/0/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:89:ff:dd:89:80:08:14:bf:03:bf:2b:aa:b8:ef:80:47:5c:
7a:01:e2:65:91:91:50:f4:2d:a3:ab:65:1c:a6:9f:aa:ba:46:
61:0a:20:5d:e2:50:ee:db:a9:44:4d:73:83:89:d1:57:af:c7:
45:33:de:fa:5d:5f:04:c9:58:1f:5c:20:a2:a9:b4:1e:97:68:
51:82:ab:86:17:ff:92:f2:9f:d7:73:e8:5d:d4:de:9d:c9:7a:
12:d9:d6:8f:6b:55:05:42:75:e0:c4:bc:41:b4:33:d7:20:ea:
32:fa:0b:3b:19:ca:3a:7a:49:19:95:43:9d:5f:24:9f:21:c0:
64:da:d8:b3:4b:2d:89:a1:99:9a:5f:11:4e:3d:c9:da:89:ed:
6f:f4:bf:a4:10:e8:59:68:d1:ae:01:0e:1b:85:69:2c:bd:46:
1e:ee:92:6f:36:7f:84:ab:de:ec:ec:40:8b:6e:28:64:84:44:
e4:0a:c3:cb:33:1d:b5:ee:8a:46:82:01:9a:d8:1b:8a:0f:56:
ef:7f:b8:e7:86:ca:d0:86:37:ca:cc:25:4c:92:ce:ac:4e:9d:
30:5c:8f:27:f3:20:8e:b0:5b:44:e7:85:72:3d:0a:82:62:1c:
52:00:6c:d0:05:2b:2c:ca:c3:42:57:db:8c:df:eb:e0:44:6e:
15:e3:ca:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:33:28 2026 by rpki-client