
$ rpki-client -vvf rpkica.twnic.tw/rpki/DONGFONG/1/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.mft
File: 65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.mft (raw, json)
Hash identifier: RNK1uMWqh7OXWB1tvEaAxkglb0GHLO0vy8Lu9b4IxEI=
Subject key identifier: 3B:1C:85:C2:35:63:3F:1A:07:0D:84:8D:CF:A8:C8:4C:21:6B:14:86
Authority key identifier: 65:E9:4C:77:89:AD:A7:E5:F5:40:FD:BE:95:82:D8:EA:7A:A4:6A:94
Certificate issuer: /CN=65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94
Certificate serial: 78D3E420B538BF73483ED781DE382E52D5037109
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/DONGFONG/1/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.mft
Manifest number: 14
Signing time: Fri 15 May 2026 10:46:46 +0000
Manifest this update: Fri 15 May 2026 10:41:46 +0000
Manifest next update: Sat 16 May 2026 13:48:46 +0000
Files and hashes: 1: 3135392e3131372e36342e302f31392d3234203d3e203138303436.roa (hash: BnOw5LV6cVAcgowH1P0wBRFgURzOj7EomMXHxAWHT28=)
2: 65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.crl (hash: Dec2u+36XqN/eKxCEPS13sHm5z0V8Y1kgBx2KsgW+dY=)
3: 3135392e3131372e38342e302f32342d3234203d3e203138303436.roa (hash: k6/jJKCg7k9igf9mXdOBVLZ2L1gd68NXx+o3im+bxhY=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/DONGFONG/1/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.crl
rsync://rpkica.twnic.tw/rpki/DONGFONG/1/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 16 May 2026 13:48:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:d3:e4:20:b5:38:bf:73:48:3e:d7:81:de:38:2e:52:d5:03:71:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94
Validity
Not Before: May 15 10:41:46 2026 GMT
Not After : May 16 13:48:46 2026 GMT
Subject: CN=3B1C85C235633F1A070D848DCFA8C84C216B1486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d0:2b:4b:ea:02:18:62:a9:ef:54:4d:cf:e2:
11:b0:d5:9c:6f:ef:c5:c3:f1:5a:66:35:43:3b:0b:
a7:4e:82:6d:36:1c:7f:19:ff:35:33:a8:22:bc:52:
87:96:00:0c:35:47:42:57:11:85:dc:ad:14:d7:c6:
39:2b:f2:92:18:eb:c4:0a:bc:ca:4d:44:44:01:15:
66:81:c3:ee:49:97:85:8c:41:d4:0d:6b:ba:ed:e9:
bf:ab:e6:c3:72:79:4b:e2:ac:15:81:9a:0a:40:aa:
1f:6b:93:fa:eb:de:46:c1:98:34:02:6d:e6:2a:2e:
32:20:41:f2:c4:ae:cd:8c:55:1e:8f:a5:b3:9b:50:
5d:a8:91:1a:e9:57:a0:29:da:e5:50:4f:6a:03:1b:
6c:b0:f2:3f:14:0e:97:83:1d:43:54:31:ff:cf:2d:
97:4a:68:60:d7:3a:ca:2e:24:99:f1:3a:93:27:fb:
32:ff:a7:06:8a:2c:14:fd:81:4e:1e:42:06:c2:66:
5f:6f:77:ab:a1:f3:49:f2:8c:94:f2:4b:c0:b9:fe:
fc:f5:ab:d0:09:96:e3:9a:df:de:bd:a1:be:16:5a:
ff:27:a9:7b:3e:b9:94:88:a6:1b:6b:e4:55:fa:c2:
d2:73:5e:ff:79:0e:01:aa:9e:5b:a9:cc:70:c7:a8:
ca:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:1C:85:C2:35:63:3F:1A:07:0D:84:8D:CF:A8:C8:4C:21:6B:14:86
X509v3 Authority Key Identifier:
keyid:65:E9:4C:77:89:AD:A7:E5:F5:40:FD:BE:95:82:D8:EA:7A:A4:6A:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/DONGFONG/1/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DONGFONG/1/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:1b:6b:96:ae:63:1a:ce:33:44:db:16:09:2e:21:64:b5:eb:
b2:a7:19:a0:90:b6:99:6c:8d:fa:c0:d2:8a:60:c7:3b:f6:dc:
9e:3e:87:ce:42:0c:b6:7e:bb:68:80:28:fb:21:13:4e:8f:ed:
09:f9:32:dc:73:e7:1f:58:e9:06:a5:65:c2:19:e8:4f:80:06:
d8:0a:de:8e:b6:53:02:b3:c2:11:1e:c2:b6:8a:45:1b:d2:65:
15:f2:0d:04:a5:a5:92:b5:50:24:bc:8c:8f:69:6a:c9:ea:bb:
2a:80:e6:b3:e2:28:71:75:fc:4f:31:83:72:4d:8f:53:ea:44:
ac:a7:1a:b9:96:ea:0c:1c:0e:b8:27:e9:15:30:fa:30:af:0b:
bc:54:13:fa:1c:68:25:20:b0:d9:55:24:5d:c2:f1:e8:dc:56:
16:d6:8b:f7:26:97:c1:a3:e7:1b:78:df:00:52:cc:2f:1b:08:
37:b8:ce:2b:51:31:e7:6e:83:d9:bf:e6:e3:ab:15:62:1c:67:
fc:04:e5:e3:c2:13:13:e0:b2:60:c8:f0:3d:b0:91:79:8f:11:
86:6d:b3:58:66:4c:46:5b:7d:6d:09:37:93:93:71:71:f9:5b:
8a:12:18:cc:6c:94:d9:da:43:59:15:9b:69:72:b7:95:32:1d:
db:04:4a:f9
-----BEGIN CERTIFICATE-----
MIIE6DCCA9CgAwIBAgIUeNPkILU4v3NIPteB3jguUtUDcQkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjVFOTRDNzc4OUFEQTdFNUY1NDBGREJFOTU4MkQ4RUE3
QUE0NkE5NDAeFw0yNjA1MTUxMDQxNDZaFw0yNjA1MTYxMzQ4NDZaMDMxMTAvBgNV
BAMTKDNCMUM4NUMyMzU2MzNGMUEwNzBEODQ4RENGQThDODRDMjE2QjE0ODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF0CtL6gIYYqnvVE3P4hGw1Zxv
78XD8VpmNUM7C6dOgm02HH8Z/zUzqCK8UoeWAAw1R0JXEYXcrRTXxjkr8pIY68QK
vMpNREQBFWaBw+5Jl4WMQdQNa7rt6b+r5sNyeUvirBWBmgpAqh9rk/rr3kbBmDQC
beYqLjIgQfLErs2MVR6PpbObUF2okRrpV6Ap2uVQT2oDG2yw8j8UDpeDHUNUMf/P
LZdKaGDXOsouJJnxOpMn+zL/pwaKLBT9gU4eQgbCZl9vd6uh80nyjJTyS8C5/vz1
q9AJluOa3969ob4WWv8nqXs+uZSIphtr5FX6wtJzXv95DgGqnlupzHDHqMrjAgMB
AAGjggHyMIIB7jAdBgNVHQ4EFgQUOxyFwjVjPxoHDYSNz6jITCFrFIYwHwYDVR0j
BBgwFoAUZelMd4mtp+X1QP2+lYLY6nqkapQwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud
HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRE9OR0ZP
TkcvMS82NUU5NEM3Nzg5QURBN0U1RjU0MEZEQkU5NTgyRDhFQTdBQTQ2QTk0LmNy
bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3
bmljLnR3L3Jwa2kvVFdOSUNDQS8wLzY1RTk0Qzc3ODlBREE3RTVGNTQwRkRCRTk1
ODJEOEVBN0FBNDZBOTQuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU
cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9ET05HRk9ORy8xLzY1RTk0Qzc3
ODlBREE3RTVGNTQwRkRCRTk1ODJEOEVBN0FBNDZBOTQubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBSG2uW
rmMazjNE2xYJLiFkteuypxmgkLaZbI36wNKKYMc79tyePofOQgy2frtogCj7IRNO
j+0J+TLcc+cfWOkGpWXCGehPgAbYCt6OtlMCs8IRHsK2ikUb0mUV8g0EpaWStVAk
vIyPaWrJ6rsqgOaz4ihxdfxPMYNyTY9T6kSspxq5luoMHA64J+kVMPowrwu8VBP6
HGglILDZVSRdwvHo3FYW1ov3JpfBo+cbeN8AUswvGwg3uM4rUTHnboPZv+bjqxVi
HGf8BOXjwhMT4LJgyPA9sJF5jxGGbbNYZkxGW31tCTeTk3Fx+VuKEhjMbJTZ2kNZ
FZtpcreVMh3bBEr5
-----END CERTIFICATE-----
Generated at Sat May 16 04:50:12 2026 by rpki-client