
$ rpki-client -vvf rpkica.twnic.tw/rpki/FISC/0/C37A5ED1C020CA592473CC7CB260EE969E0CD03C.mft
File: C37A5ED1C020CA592473CC7CB260EE969E0CD03C.mft (raw, json)
Hash identifier: 0twZEMxoItheRNbJIOJUIQMD0cGkQ5n/IhpPHIgLAN0=
Subject key identifier: 21:E5:B0:7E:7F:1E:EE:20:D0:68:F2:27:B6:67:9C:F7:0E:B0:71:EE
Authority key identifier: C3:7A:5E:D1:C0:20:CA:59:24:73:CC:7C:B2:60:EE:96:9E:0C:D0:3C
Certificate issuer: /CN=C37A5ED1C020CA592473CC7CB260EE969E0CD03C
Certificate serial: 439C5062E1B41DE1F684A13BF97D7CD603387D3F
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C37A5ED1C020CA592473CC7CB260EE969E0CD03C.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/FISC/0/C37A5ED1C020CA592473CC7CB260EE969E0CD03C.mft
Manifest number: 48
Signing time: Tue 30 Jun 2026 11:53:48 +0000
Manifest this update: Tue 30 Jun 2026 11:48:48 +0000
Manifest next update: Wed 01 Jul 2026 15:42:48 +0000
Files and hashes: 1: 3130332e3232392e3133342e302f32342d3234203d3e20313331353838.roa (hash: bvBQkdkU1PbJqUeD3+FD4aQK8feEjVMVOpN1NeMxeW0=)
2: C37A5ED1C020CA592473CC7CB260EE969E0CD03C.crl (hash: KOeDIJBLd2mH1hXLdgb8ElyQPHm119CuQ2v3Ax8+Wn0=)
3: 3130332e3232392e3133322e302f32342d3234203d3e20313331353838.roa (hash: bNbeesUI9NGScwyfWf3u19UFeOX2O9GH5Y/KbW8f6PQ=)
4: 3130332e3232392e3133352e302f32342d3234203d3e20313331353838.roa (hash: L+UhXooP+QDzxg/7f1iFae2tMtapq6u+1T0q0qdCkq8=)
5: 323430303a653438303a3a2f33322d3438203d3e20313331353838.roa (hash: LyZCNP1sBcgV+faqZCRBGCYTfZzPSOWOa44ZubZUvBM=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/FISC/0/C37A5ED1C020CA592473CC7CB260EE969E0CD03C.crl
rsync://rpkica.twnic.tw/rpki/FISC/0/C37A5ED1C020CA592473CC7CB260EE969E0CD03C.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C37A5ED1C020CA592473CC7CB260EE969E0CD03C.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Jul 2026 14:08:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:9c:50:62:e1:b4:1d:e1:f6:84:a1:3b:f9:7d:7c:d6:03:38:7d:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C37A5ED1C020CA592473CC7CB260EE969E0CD03C
Validity
Not Before: Jun 30 11:48:48 2026 GMT
Not After : Jul 1 15:42:48 2026 GMT
Subject: CN=21E5B07E7F1EEE20D068F227B6679CF70EB071EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:f3:94:04:c9:35:df:18:f9:94:a7:c2:d5:03:
ea:23:47:5e:cd:23:19:d0:eb:71:54:ec:9c:0d:f3:
3d:31:3a:b4:6b:9b:a7:90:72:7e:fc:6f:cb:86:97:
ec:fa:a5:1d:90:bd:cf:2d:f3:39:c3:81:3b:b4:56:
28:c5:2e:88:90:94:27:f3:9e:79:da:cf:e3:2c:3b:
1d:dc:69:be:5c:f4:8c:69:a3:17:dd:1e:56:d2:24:
f5:d7:24:32:9f:a8:cc:ec:f5:7a:54:a7:46:cf:f8:
20:b1:99:7f:02:8a:99:98:4f:0b:f5:14:e4:38:75:
8a:f4:bf:f5:9b:9f:e4:1d:e0:c9:1b:06:29:dd:90:
61:a6:92:04:15:70:d8:27:d5:5f:dd:c2:c0:a8:e1:
c9:5b:ac:60:aa:e7:62:ed:b7:2d:c6:b1:51:eb:b6:
fe:c5:77:e1:f3:cc:51:89:f0:2b:06:83:82:36:a0:
20:21:ee:9f:11:5c:05:69:46:b8:fb:2f:33:0c:74:
30:c4:97:ea:f1:d8:4b:7a:d1:c7:e3:f9:37:05:9d:
1d:12:16:b3:f1:4b:a3:78:67:d2:b3:9e:b1:df:a8:
48:e9:ef:3f:f4:5e:9b:df:6d:d2:76:eb:ef:65:7c:
3e:3e:a2:70:af:12:da:35:57:82:98:34:19:02:e7:
52:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E5:B0:7E:7F:1E:EE:20:D0:68:F2:27:B6:67:9C:F7:0E:B0:71:EE
X509v3 Authority Key Identifier:
keyid:C3:7A:5E:D1:C0:20:CA:59:24:73:CC:7C:B2:60:EE:96:9E:0C:D0:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/FISC/0/C37A5ED1C020CA592473CC7CB260EE969E0CD03C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C37A5ED1C020CA592473CC7CB260EE969E0CD03C.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/FISC/0/C37A5ED1C020CA592473CC7CB260EE969E0CD03C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:6d:91:04:72:ec:e8:fa:68:9f:f1:93:fd:b4:54:fc:cc:32:
a0:b3:c3:a3:4d:d8:82:99:c2:b5:ad:09:10:f1:e8:3e:21:52:
83:71:ec:91:ba:5b:97:5a:9d:6c:9b:ce:41:3c:7e:c0:54:5c:
c4:3b:36:42:86:b9:16:10:49:81:99:f7:a9:4d:eb:1b:66:61:
ae:8a:8f:82:8b:11:f7:66:7d:53:94:08:2a:37:60:18:34:0b:
5c:ac:92:23:1f:d6:df:c8:77:f1:2f:bf:11:10:99:85:37:31:
06:8b:bb:a5:e7:07:67:01:f9:a1:42:77:30:42:d5:7c:10:49:
75:45:d2:1f:c5:66:d7:80:11:c4:77:f3:74:78:51:13:ab:b9:
69:a5:b2:3d:75:7f:a8:43:9a:55:1c:29:c9:a3:27:32:ac:e7:
a1:0f:81:df:ff:5d:47:5c:c8:e2:43:f1:5c:98:69:3d:0b:83:
ba:de:66:04:39:7f:03:e2:46:68:39:88:5b:d0:43:f5:c0:8c:
91:f6:cc:42:73:e5:3e:42:2c:e5:a3:3a:f2:d6:0a:26:66:41:
b2:de:b2:01:e4:23:de:d9:a7:4b:ff:77:fb:52:82:9e:70:69:
c9:4b:78:6c:29:ea:12:91:da:38:5e:ac:d2:11:a7:f5:ec:0c:
e8:ce:47:c3
-----BEGIN CERTIFICATE-----
MIIE4DCCA8igAwIBAgIUQ5xQYuG0HeH2hKE7+X181gM4fT8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzM3QTVFRDFDMDIwQ0E1OTI0NzNDQzdDQjI2MEVFOTY5
RTBDRDAzQzAeFw0yNjA2MzAxMTQ4NDhaFw0yNjA3MDExNTQyNDhaMDMxMTAvBgNV
BAMTKDIxRTVCMDdFN0YxRUVFMjBEMDY4RjIyN0I2Njc5Q0Y3MEVCMDcxRUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCE85QEyTXfGPmUp8LVA+ojR17N
IxnQ63FU7JwN8z0xOrRrm6eQcn78b8uGl+z6pR2Qvc8t8znDgTu0VijFLoiQlCfz
nnnaz+MsOx3cab5c9IxpoxfdHlbSJPXXJDKfqMzs9XpUp0bP+CCxmX8CipmYTwv1
FOQ4dYr0v/Wbn+Qd4MkbBindkGGmkgQVcNgn1V/dwsCo4clbrGCq52Ltty3GsVHr
tv7Fd+HzzFGJ8CsGg4I2oCAh7p8RXAVpRrj7LzMMdDDEl+rx2Et60cfj+TcFnR0S
FrPxS6N4Z9KznrHfqEjp7z/0XpvfbdJ26+9lfD4+onCvEto1V4KYNBkC51LlAgMB
AAGjggHqMIIB5jAdBgNVHQ4EFgQUIeWwfn8e7iDQaPIntmec9w6wce4wHwYDVR0j
BBgwFoAUw3pe0cAgylkkc8x8smDulp4M0DwwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud
HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRklTQy8w
L0MzN0E1RUQxQzAyMENBNTkyNDczQ0M3Q0IyNjBFRTk2OUUwQ0QwM0MuY3JsMG8G
CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu
dHcvcnBraS9UV05JQ0NBLzEvQzM3QTVFRDFDMDIwQ0E1OTI0NzNDQzdDQjI2MEVF
OTY5RTBDRDAzQy5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu
YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0ZJU0MvMC9DMzdBNUVEMUMwMjBDQTU5
MjQ3M0NDN0NCMjYwRUU5NjlFMENEMDNDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG
AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI22RBHLs6Ppon/GT
/bRU/MwyoLPDo03YgpnCta0JEPHoPiFSg3Hskbpbl1qdbJvOQTx+wFRcxDs2Qoa5
FhBJgZn3qU3rG2ZhroqPgosR92Z9U5QIKjdgGDQLXKySIx/W38h38S+/ERCZhTcx
Bou7pecHZwH5oUJ3MELVfBBJdUXSH8Vm14ARxHfzdHhRE6u5aaWyPXV/qEOaVRwp
yaMnMqznoQ+B3/9dR1zI4kPxXJhpPQuDut5mBDl/A+JGaDmIW9BD9cCMkfbMQnPl
PkIs5aM68tYKJmZBst6yAeQj3tmnS/93+1KCnnBpyUt4bCnqEpHaOF6s0hGn9ewM
6M5Hww==
-----END CERTIFICATE-----
Generated at Tue Jun 30 19:07:28 2026 by rpki-client