
$ rpki-client -vvf rpkica.twnic.tw/rpki/FET/0/71FA20FC269CE9805B2C67E59B357AA684246D10.mft
File: 71FA20FC269CE9805B2C67E59B357AA684246D10.mft (raw, json)
Hash identifier: zzcyKfasc2CETnZnJQ5JcKvrOuhaA98u1TThG9dLKmY=
Subject key identifier: 23:D5:4A:72:CA:08:45:B2:C0:23:4D:A1:57:68:D9:C6:AD:CB:C2:B2
Authority key identifier: 71:FA:20:FC:26:9C:E9:80:5B:2C:67:E5:9B:35:7A:A6:84:24:6D:10
Certificate issuer: /CN=71FA20FC269CE9805B2C67E59B357AA684246D10
Certificate serial: 2CDB2F3F06A73AE066D00C538C1332007C26BECD
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/71FA20FC269CE9805B2C67E59B357AA684246D10.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/FET/0/71FA20FC269CE9805B2C67E59B357AA684246D10.mft
Manifest number: 01B0
Signing time: Fri 14 Aug 2026 19:42:52 +0000
Manifest this update: Fri 14 Aug 2026 19:37:52 +0000
Manifest next update: Sat 15 Aug 2026 22:33:52 +0000
Files and hashes: 1: AS9919.roa (hash: XvIMv9kxsNaAOImGZtlHRNfWn3viV4RoHWAwuaE5UV4=)
2: AS9415.roa (hash: mKFpD5bUU8702FNsEGf/NSEUs3naus85mS1aXRB/EDM=)
3: AS131601.roa (hash: GCaWtJY9VQL7/LVgzoKj6m7VZWgszoRurN0mGVKVBrM=)
4: AS7482.roa (hash: bDpHLcVeEJ1yrwmPoAV0hOhONRWieRc4Sv7FCsbg4ec=)
5: AS17709.roa (hash: mrpVzxZoxTygt2G+v0bD2ByN8qMV6ZAjQeyWiztjUws=)
6: AS22787.roa (hash: VUbSGazcGTcucPhizMbOyCoMALleK0c8ipJJWzpgI7M=)
7: 71FA20FC269CE9805B2C67E59B357AA684246D10.crl (hash: hJKkHW4GTGXN7L6gsT4mVYjfzBGszP73Dfwa2FTq3ME=)
8: AS18412.roa (hash: CE2zw8LAItHpE4fA47F43M9ZwSlBSQoJHpZ88RXQUI0=)
9: AS7539.roa (hash: lUFNDzGgGVAFEbEBGwiSfQup6Zafx2OuCvROzt5cEzs=)
10: AS131627.roa (hash: ibdv4KczlUiHuqdxTA5BtcOtsysjG6n663UL3tXWjXQ=)
11: AS9311.roa (hash: mHZvaMCozjD7f6DphdBIPuH3dfs0ge2AQcsBDnwptRU=)
12: AS18419.roa (hash: ZCSuzYNR48mOflulSwJ+VbxIrexVtbA8N4ku0JnE5MM=)
13: AS16625.roa (hash: Uw6g+hlQZIZrMW4fK84JNXmuicKWw9wXXtylpvc6Qa4=)
14: AS24154.roa (hash: 5d9AJsUf5IXX9W/gHPHz7U8Ox7RZTat1L8/CNPchahE=)
15: AS131584.roa (hash: 8KFDdQZFyVcMY2+NIJkef5bzRNRq/PwHNYJrezzuxZg=)
16: AS131602.roa (hash: bFVVVflXDjtPSgbd2kGD0xptDyu1BbSWXOBLoCefftU=)
17: AS38843.roa (hash: jM7g2m0zCuiB1qlWCZch8/MFHF41yFm0b+Reg/rCla4=)
18: AS4780.roa (hash: MIMTo66cIQpFqSlUp6grdxwZBb1uOWWFJFxhbAsHX8U=)
19: AS18049.roa (hash: Bei2X31oyp7s9F9iVIOorTxmFiMUb3zaPgCFCKPZfMc=)
20: AS131597.roa (hash: LsG9a5v2Mc0qNEqxwITDrgC+BMD5jh+oaM6a/pv0ARQ=)
21: AS9922.roa (hash: IvaQKEdOvWYDileFvmUMVBKXp3pAONy0KannjnRzngo=)
22: AS9674.roa (hash: 9C5K47ndgW2seC4+CPiDYPqScyiQy8GU6bq7cU4Eugk=)
23: AS131591.roa (hash: 2WVqmdm4VP88IWBjb6Gi5Fnp5mAxh+ckRSMyNK+QUJ4=)
24: AS131142.roa (hash: tweFci1Q2ZNgrPegbCYB4DWzZuIQBECyL1mmHV6V+D4=)
25: AS24155.roa (hash: B6Wt7WZNXH4dszSEhiREgWBhCZgaFDS2V1pAm4aHp10=)
26: AS1131591.roa (hash: IauF2vAXzqx5+FLJ2cLeMJ1xdIINB1w640Q7FBxzL1w=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/FET/0/71FA20FC269CE9805B2C67E59B357AA684246D10.crl
rsync://rpkica.twnic.tw/rpki/FET/0/71FA20FC269CE9805B2C67E59B357AA684246D10.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/71FA20FC269CE9805B2C67E59B357AA684246D10.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 15 Aug 2026 22:33:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:db:2f:3f:06:a7:3a:e0:66:d0:0c:53:8c:13:32:00:7c:26:be:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71FA20FC269CE9805B2C67E59B357AA684246D10
Validity
Not Before: Aug 14 19:37:52 2026 GMT
Not After : Aug 15 22:33:52 2026 GMT
Subject: CN=23D54A72CA0845B2C0234DA15768D9C6ADCBC2B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3d:f9:d4:81:38:23:23:51:d8:0f:27:4d:10:
d0:56:13:1d:2b:9c:63:02:9b:1b:c4:ed:73:97:af:
1a:6e:21:f7:1f:94:98:a7:5b:1c:6a:83:f8:f0:4b:
38:c3:01:2c:24:24:c7:40:de:c5:7a:9d:45:40:79:
f7:84:da:d5:2c:67:01:a9:ca:03:e2:4d:d9:ac:6c:
4a:3f:fe:2e:a8:e2:08:76:b6:94:cb:b0:fd:23:6c:
8b:60:96:d5:8f:6c:92:0b:c9:8f:d3:71:95:23:a7:
36:fe:f1:dc:1c:64:b7:a0:e8:94:85:a9:f4:1c:94:
bf:97:92:69:77:94:5f:49:c3:48:14:a3:8d:a4:96:
29:bb:df:1e:ae:57:d7:cd:ac:af:db:d3:08:3c:f4:
65:ea:85:35:66:fd:35:be:ec:ab:f1:b7:3b:b0:b5:
6e:cc:3e:97:bd:cc:fc:70:18:33:52:85:4d:25:61:
41:4e:1f:e9:ee:b8:88:ea:66:2b:e8:4c:31:45:55:
57:45:91:97:70:1b:50:c7:a9:35:59:f4:b2:10:71:
89:ef:37:8c:38:32:0c:93:c3:39:e8:1d:7a:c6:f0:
36:02:13:70:fa:01:eb:b5:f1:cd:e3:9c:ac:99:6b:
e9:bb:46:5f:b4:61:28:6c:25:72:df:9d:cd:9d:33:
db:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:D5:4A:72:CA:08:45:B2:C0:23:4D:A1:57:68:D9:C6:AD:CB:C2:B2
X509v3 Authority Key Identifier:
keyid:71:FA:20:FC:26:9C:E9:80:5B:2C:67:E5:9B:35:7A:A6:84:24:6D:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/FET/0/71FA20FC269CE9805B2C67E59B357AA684246D10.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/71FA20FC269CE9805B2C67E59B357AA684246D10.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/FET/0/71FA20FC269CE9805B2C67E59B357AA684246D10.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:7d:76:88:fa:7f:35:9d:ab:33:c5:60:5b:51:4f:46:d2:74:
b7:d6:fc:7f:bd:b0:0e:df:4e:de:fa:0c:f7:a7:08:9f:b2:bf:
1a:18:67:af:5d:6f:f3:a1:1c:0f:c9:a6:12:19:bc:42:f9:f2:
ed:e5:23:48:05:ea:34:7d:a6:85:eb:57:0e:1c:89:fd:bf:cc:
72:cd:4f:5b:c7:08:df:cc:af:d8:b5:09:dd:90:f0:c9:8a:6b:
3b:7b:5e:24:8f:08:34:85:6c:3c:f4:ab:36:30:d9:3c:dc:59:
a6:97:f9:aa:4d:c4:e3:1a:29:e8:a6:9a:1e:3b:e2:9f:6e:dc:
ce:46:2c:c9:bf:b1:b6:98:24:57:e0:67:f9:d6:f7:f3:05:54:
42:eb:78:7f:2f:46:47:bf:ff:1b:b2:21:71:d2:74:a8:ff:d7:
98:fa:c6:7b:94:4f:d8:53:bc:81:75:c9:9a:53:43:8a:c5:45:
64:70:5e:04:d4:9a:21:e4:96:e0:6f:a0:e0:fc:4d:db:77:08:
10:9d:3c:8b:20:68:e6:c3:9b:eb:1b:7d:5a:fa:17:91:11:24:
b2:6b:6e:26:de:86:6b:1b:0c:13:f3:2c:3c:ec:bf:6f:5e:e6:
ec:0b:93:04:d0:23:d4:ce:b3:bf:3d:f0:eb:26:e1:eb:66:d0:
b4:20:81:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:22:23 2026 by rpki-client