
$ rpki-client -vvvf rpkica.twnic.tw/rpki/FUYU/0/0C164CEABA2AC58B2541F90471E09C21EF4702B0.mft
File: 0C164CEABA2AC58B2541F90471E09C21EF4702B0.mft (raw, json)
Hash identifier: Qz/PL9qb75+wD8UHJDhqokckg/h7w4I0/SHMzi3zO6o=
Subject key identifier: 03:26:A0:CE:64:85:D6:0E:CA:BC:62:AC:B3:F8:86:90:20:DE:75:2A
Authority key identifier: 0C:16:4C:EA:BA:2A:C5:8B:25:41:F9:04:71:E0:9C:21:EF:47:02:B0
Certificate issuer: /CN=0C164CEABA2AC58B2541F90471E09C21EF4702B0
Certificate serial: 5711BE8ADBE3DE97BF201AC17A843AFED70E85D7
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0C164CEABA2AC58B2541F90471E09C21EF4702B0.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/FUYU/0/0C164CEABA2AC58B2541F90471E09C21EF4702B0.mft
Manifest number: C8
Signing time: Sun 04 Oct 2026 02:43:57 +0000
Manifest this update: Sun 04 Oct 2026 02:38:57 +0000
Manifest next update: Mon 05 Oct 2026 05:19:57 +0000
Files and hashes: 1: 323430313a383161303a3a2f33322d3438203d3e20313530373731.roa (hash: UYauj6esIPONycclDfRTMnJdkzoUqQLqRW/YAz5ewVM=)
2: 0C164CEABA2AC58B2541F90471E09C21EF4702B0.crl (hash: wkk4UMzyLVuLIzY+PhknqXuV1aq3JT7HX9jM8NfTRTU=)
3: 3130332e3134392e36362e302f32332d3234203d3e203633393036.roa (hash: tOf0kgvSG1JSwiSPt6z+JJGg2IrtV5GqaZBh4oxlhc0=)
4: 323430313a383161303a3a2f33322d3438203d3e203633393036.roa (hash: Ju4DqHvSFIioLMuTjNEvnpdvtmCTfOVdOTTLP/H3etk=)
5: 3130332e3134392e36362e302f32332d3234203d3e20313530373731.roa (hash: 61SEE1lVWOa3Byy8Z3scSOngbxTzmAhiuLpZkGS6vgg=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/FUYU/0/0C164CEABA2AC58B2541F90471E09C21EF4702B0.crl
rsync://rpkica.twnic.tw/rpki/FUYU/0/0C164CEABA2AC58B2541F90471E09C21EF4702B0.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0C164CEABA2AC58B2541F90471E09C21EF4702B0.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Oct 2026 05:19:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:11:be:8a:db:e3:de:97:bf:20:1a:c1:7a:84:3a:fe:d7:0e:85:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0C164CEABA2AC58B2541F90471E09C21EF4702B0
Validity
Not Before: Oct 4 02:38:57 2026 GMT
Not After : Oct 5 05:19:57 2026 GMT
Subject: CN=0326A0CE6485D60ECABC62ACB3F8869020DE752A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:92:cf:f0:3d:9b:f5:cd:3d:ed:65:19:c5:c8:
5a:e1:7e:26:26:4a:aa:fb:21:7b:f7:81:83:a6:3e:
ff:c1:7d:87:67:fd:ce:ce:0c:5f:21:d0:ed:d9:0b:
a5:50:27:74:92:fe:55:aa:46:d2:17:83:39:32:fa:
9a:07:13:2f:e0:1c:72:9c:b1:72:83:52:71:d3:92:
28:ad:7a:bf:0e:dd:fc:84:f8:f4:f1:0a:8d:65:d4:
89:16:b1:d5:47:20:78:1c:11:94:fb:a4:49:33:0b:
1d:4d:f0:61:af:d2:54:cc:11:72:a1:05:f5:f7:24:
ef:48:e0:93:fb:c0:16:bf:5c:e9:77:f1:fd:04:12:
63:c7:9d:19:ad:14:7f:0d:37:bd:ea:70:e2:f5:b5:
ca:32:2f:81:3e:58:47:81:54:ed:7d:73:ba:d3:74:
c4:84:8a:0d:16:d0:e5:0b:55:c9:3d:8e:a8:53:3e:
b3:f2:53:d1:d6:68:bb:44:86:7a:9f:90:b8:2f:8d:
b7:97:43:a9:1a:9c:d3:35:7b:3d:30:82:0c:b0:31:
76:15:fb:a0:55:22:c9:2a:c8:52:79:09:53:93:1e:
ba:6f:3e:10:e5:81:a6:7e:cf:56:f4:af:3c:7a:4c:
ee:df:cb:3b:a5:f0:72:d0:0b:f2:de:64:95:14:42:
cf:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:26:A0:CE:64:85:D6:0E:CA:BC:62:AC:B3:F8:86:90:20:DE:75:2A
X509v3 Authority Key Identifier:
keyid:0C:16:4C:EA:BA:2A:C5:8B:25:41:F9:04:71:E0:9C:21:EF:47:02:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/FUYU/0/0C164CEABA2AC58B2541F90471E09C21EF4702B0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0C164CEABA2AC58B2541F90471E09C21EF4702B0.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/FUYU/0/0C164CEABA2AC58B2541F90471E09C21EF4702B0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:bf:b0:27:ac:76:29:d8:b8:95:ed:52:28:91:e8:7c:c5:f9:
8c:34:ac:c0:c9:43:5d:2c:11:b5:fa:fc:76:38:ee:55:fb:8c:
93:f6:02:fc:07:19:d3:f6:72:83:b2:88:9b:d7:e4:65:5c:43:
30:7e:92:47:20:17:52:6f:10:90:fb:6c:44:fe:a8:03:3b:9e:
46:f4:1f:63:3e:90:ef:83:3c:20:3a:a9:cf:d1:8a:13:1b:b1:
39:90:cf:c5:b0:1a:31:d9:e1:cb:15:dd:bf:e0:24:e2:00:96:
77:52:5f:0e:41:41:bb:1f:e9:ff:36:63:af:b5:46:d3:17:bf:
1e:e6:7f:8f:6f:42:2b:fe:3b:22:9e:ac:e5:ce:9f:23:1a:d5:
52:13:94:7e:8e:66:7c:56:2f:6b:82:04:3f:91:df:48:76:83:
da:04:1c:4d:c6:3f:b0:22:48:35:dc:af:e8:35:9f:07:aa:92:
a8:a0:2b:c1:40:f9:f7:e6:d8:8a:ba:ae:21:6b:db:56:58:f1:
36:0e:ab:8a:d8:75:c4:67:23:5f:fe:c5:00:c6:4a:9e:e1:10:
65:72:66:40:e2:b3:d7:06:39:27:9d:df:ce:6f:99:eb:b9:1a:
f1:71:b6:05:18:e8:f0:88:bb:0c:f0:30:bf:ba:46:4e:be:d4:
46:84:f7:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 18:00:17 2026 by rpki-client