
$ rpki-client -vvvf rpkica.twnic.tw/rpki/DWINS/0/C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93.mft
File: C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93.mft (raw, json)
Hash identifier: KHGLjUnhg44i5eKw4qmDKsVFQyjh9jeLktgWUk3XF7c=
Subject key identifier: BE:15:01:9B:55:FF:69:74:C1:72:25:B7:B2:8D:23:A2:A2:A7:A0:90
Authority key identifier: C5:DF:31:D9:EE:B5:DA:72:66:8D:58:FB:8D:B0:E7:5E:3A:D7:BF:93
Certificate issuer: /CN=C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93
Certificate serial: 2CAD900788E86DB48D9DDA9C8A72CD58DCE0FB83
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/DWINS/0/C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93.mft
Manifest number: D0
Signing time: Tue 06 Oct 2026 06:16:56 +0000
Manifest this update: Tue 06 Oct 2026 06:11:56 +0000
Manifest next update: Wed 07 Oct 2026 10:03:56 +0000
Files and hashes: 1: 3130332e34332e35302e302f32342d3234203d3e20313338393135.roa (hash: hTEAAzN0PA9rsWlL7Pu0rf3KFazJnBuaWNIwQ+dbKTo=)
2: 34332e3232342e32332e302f32342d3234203d3e20313331363436.roa (hash: 6SGE2td+SruVzE8RTP0oAaYfc3isBgmmTrc/lKGCQhk=)
3: 323430353a346430303a3a2f33322d3438203d3e203137343136.roa (hash: iWtECRpcS2tiVOqsLI6rlO0uvEa9pxsE3Sqh+gwayqA=)
4: 3131322e3231332e34382e302f32302d3234203d3e203137343136.roa (hash: IyZ2uNj2Ed2hbTcxfq9Hoz8oXlcjs1V2+SFVtmy0SAo=)
5: C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93.crl (hash: HOh55sccXMy/Hg5LNaaEcYQc3pWM8KjvruYqVqGSzt8=)
6: 34332e3232342e32302e302f32342d3234203d3e20313338393135.roa (hash: qZ1Xl7P/oCReEcW84jHPinXVKHg48mLqWM57olzhxqo=)
7: 3130332e34332e35312e302f32342d3234203d3e20313338393135.roa (hash: u+A6v4yEBS5cjQ/+f3BzaST8qU+ycUc8ZtzDC1IbS7s=)
8: 3231312e37382e38302e302f32302d3234203d3e203137343136.roa (hash: e5vDwym6b4PG9xQ/2ko8EBKkmz8V822CH9wDw3sAHbo=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/DWINS/0/C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93.crl
rsync://rpkica.twnic.tw/rpki/DWINS/0/C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 07 Oct 2026 02:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:ad:90:07:88:e8:6d:b4:8d:9d:da:9c:8a:72:cd:58:dc:e0:fb:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93
Validity
Not Before: Oct 6 06:11:56 2026 GMT
Not After : Oct 7 10:03:56 2026 GMT
Subject: CN=BE15019B55FF6974C17225B7B28D23A2A2A7A090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b5:8e:07:a0:59:37:6e:f4:50:11:47:2a:60:
91:d1:df:32:b9:d3:97:11:ca:de:0a:49:28:81:83:
7b:a9:80:27:1e:1e:00:f6:19:3f:7a:41:e5:3f:ff:
7b:14:c6:1b:02:a2:f9:16:cf:0d:1d:88:d2:e0:5e:
f4:4b:08:4e:02:11:17:e1:8d:a1:22:96:b1:c9:0a:
68:b6:a6:21:94:30:41:26:02:e8:da:2c:5d:a0:42:
e1:53:b7:28:fa:68:98:a8:b7:a0:3a:b7:de:33:31:
99:70:67:a3:ed:07:be:10:4d:11:b2:55:67:65:37:
74:1a:bc:1b:65:50:22:57:39:6e:3b:a7:19:9f:d4:
9f:11:c2:e7:ec:85:3c:43:12:a6:3d:83:78:cf:7b:
58:ab:32:72:ff:bc:e0:f7:2e:42:f6:4c:58:30:6d:
6e:50:ee:38:0b:9d:e4:1d:3d:79:92:67:d6:42:2c:
a5:97:9a:27:41:4b:eb:36:3f:1c:e8:9d:6c:01:c7:
a5:38:07:a3:06:8f:3b:88:16:42:d5:86:74:cc:18:
dd:90:8c:0d:44:30:81:97:21:19:83:3c:57:37:9a:
f0:fe:9e:7a:00:87:3f:51:71:19:48:77:ac:74:a1:
da:c8:d5:19:f1:17:a1:e6:ae:61:f7:f9:a8:b5:8c:
17:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:15:01:9B:55:FF:69:74:C1:72:25:B7:B2:8D:23:A2:A2:A7:A0:90
X509v3 Authority Key Identifier:
keyid:C5:DF:31:D9:EE:B5:DA:72:66:8D:58:FB:8D:B0:E7:5E:3A:D7:BF:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/DWINS/0/C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DWINS/0/C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:55:8a:42:ff:5a:fc:77:8b:9d:08:19:86:ca:42:b4:48:49:
32:06:c4:31:ef:2f:42:3f:04:df:4e:8d:51:18:0b:5a:84:bf:
9d:ee:d1:9f:8c:76:da:82:ae:92:98:c4:8b:cd:cb:b2:71:fb:
2f:16:76:a0:f7:0c:3a:6b:5c:93:a9:58:36:4a:6b:de:d6:80:
ae:4d:b4:4d:19:f5:14:b9:7b:d3:08:05:97:9b:db:cb:6b:03:
e6:57:3c:67:38:da:bf:82:7b:0e:75:a5:c2:10:d4:76:ee:c7:
6d:fc:51:72:8d:1c:c4:1a:3f:bc:6f:8c:5e:7c:33:14:e8:db:
69:49:81:3f:30:78:5a:30:86:d0:a2:14:1a:d9:02:a6:aa:e7:
46:92:d2:a6:b2:81:74:21:8d:cf:68:60:24:43:89:de:7d:84:
97:75:bb:32:92:99:04:d9:19:4d:ca:dc:5b:65:be:7b:92:a5:
83:75:46:e5:b8:52:66:1b:59:2e:a2:c2:4e:e1:8a:54:ee:f8:
f3:20:df:78:9c:dc:1d:1e:e8:10:4d:62:33:0e:37:4e:42:44:
f6:0f:b3:3d:d5:80:28:f2:d6:92:67:26:e1:75:e9:78:a7:7b:
07:44:61:96:8a:62:a6:1f:f9:94:0a:9e:cc:97:79:d0:fd:ed:
01:f2:f6:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 14:52:04 2026 by rpki-client