
$ rpki-client -vvf rpkica.twnic.tw/rpki/DONGFONG/1/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.mft
File: 65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.mft (raw, json)
Hash identifier: gV9J4ScEjP8kXwBi2P5ioSzGKztweVFfs3YvkvyuBoU=
Subject key identifier: 95:B4:97:10:62:E2:DD:46:9E:7E:80:3C:0A:7E:86:89:FD:44:60:24
Authority key identifier: 65:E9:4C:77:89:AD:A7:E5:F5:40:FD:BE:95:82:D8:EA:7A:A4:6A:94
Certificate issuer: /CN=65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94
Certificate serial: 955C69BC6125AAD0D60BABD5F61448ADB0F28D
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/DONGFONG/1/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.mft
Manifest number: 8D
Signing time: Sat 15 Aug 2026 03:09:10 +0000
Manifest this update: Sat 15 Aug 2026 03:04:10 +0000
Manifest next update: Sun 16 Aug 2026 04:44:10 +0000
Files and hashes: 1: 3135392e3131372e36342e302f31392d3234203d3e203138303436.roa (hash: BnOw5LV6cVAcgowH1P0wBRFgURzOj7EomMXHxAWHT28=)
2: 65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.crl (hash: ONZFmW9ebUhZm7T0BwbI3UwiyVknKh/Ks8oxTDKACsg=)
3: 3135392e3131372e38342e302f32342d3234203d3e203138303436.roa (hash: k6/jJKCg7k9igf9mXdOBVLZ2L1gd68NXx+o3im+bxhY=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/DONGFONG/1/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.crl
rsync://rpkica.twnic.tw/rpki/DONGFONG/1/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 16 Aug 2026 02:50:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
95:5c:69:bc:61:25:aa:d0:d6:0b:ab:d5:f6:14:48:ad:b0:f2:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94
Validity
Not Before: Aug 15 03:04:10 2026 GMT
Not After : Aug 16 04:44:10 2026 GMT
Subject: CN=95B4971062E2DD469E7E803C0A7E8689FD446024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2e:9a:72:37:a7:53:d9:6e:af:9e:76:59:89:
08:60:18:41:99:18:31:bd:f6:11:22:57:2d:0b:fb:
7a:51:75:95:0d:77:b1:fd:fc:f7:a6:f8:b0:41:82:
95:8c:7a:c0:89:4c:a9:d9:06:48:15:a5:eb:2b:5b:
1b:aa:96:2d:78:1d:e5:b1:54:bd:79:af:0f:36:fe:
da:3c:22:e5:ee:91:15:2d:07:b0:3c:7c:4d:76:5e:
e7:c4:80:af:2a:af:14:e4:ad:46:20:6e:ac:d0:a8:
1c:8c:85:86:b6:2d:11:3d:bc:26:85:52:b7:40:8c:
be:f5:db:0a:68:38:3e:78:38:75:50:40:ee:ae:ac:
77:e6:18:08:02:1f:9c:65:ce:38:01:59:11:dc:0c:
83:ab:8f:62:3b:a5:c6:a2:98:0a:9e:65:30:bd:e1:
e8:04:1a:04:5c:43:ed:aa:8c:89:51:d6:c6:4b:63:
6f:2e:31:8b:47:09:2f:0d:96:43:12:16:8b:63:3b:
d4:be:f7:b5:6d:6c:dd:8a:3a:2e:b0:c7:d3:e0:63:
54:09:a7:ac:97:b8:a2:88:1e:8a:3a:c8:9c:84:9c:
28:04:f9:1a:a9:7c:c4:20:4d:08:87:46:40:55:1e:
24:59:3b:19:22:d7:a6:4f:f0:82:95:d9:32:ce:af:
23:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B4:97:10:62:E2:DD:46:9E:7E:80:3C:0A:7E:86:89:FD:44:60:24
X509v3 Authority Key Identifier:
keyid:65:E9:4C:77:89:AD:A7:E5:F5:40:FD:BE:95:82:D8:EA:7A:A4:6A:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/DONGFONG/1/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DONGFONG/1/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:1f:36:25:83:ba:0a:d5:23:25:3e:17:1f:1d:ec:ce:f9:a9:
8d:7f:28:8a:4b:69:02:cc:51:1d:a9:f7:08:67:1d:13:a0:a1:
a5:e2:14:4f:9e:b9:ae:1f:4e:41:8b:08:47:cd:bb:59:cf:09:
5e:65:c4:de:12:c2:8d:36:53:1c:bf:81:3e:b9:8c:0e:82:71:
25:46:16:40:f0:61:8b:75:a1:55:2d:ac:a2:99:c9:15:12:f7:
e0:33:57:ad:70:f9:24:c5:e0:38:f5:96:52:74:4a:3c:39:95:
d2:1a:ab:42:e6:92:e7:a0:f1:3a:2f:59:21:6d:22:96:26:d0:
30:6e:f7:bb:f7:dc:16:e3:4d:1d:87:a2:96:fb:9d:88:e2:61:
6c:94:ac:c3:74:84:d4:e1:9b:73:5e:55:82:1b:5e:a2:8c:a5:
cf:b6:d5:d7:05:b1:d7:ef:8d:83:f5:71:cc:c6:84:43:1c:82:
84:b3:16:3c:90:b6:61:67:a3:8f:27:b4:73:4c:b7:5c:58:ed:
78:6c:da:60:89:8e:71:1f:3d:af:7a:57:f8:7b:47:ae:bc:12:
dc:c6:a1:3d:8f:46:7c:9b:1a:d9:b6:6a:f4:97:ad:69:58:9e:
8c:a1:58:84:49:ff:b8:ae:b6:a6:4a:1e:2a:8f:1a:40:d5:4d:
c2:af:07:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 10:16:57 2026 by rpki-client