
$ rpki-client -vvvf rpkica.twnic.tw/rpki/HEALTHNET/0/4D7FACF5E4861DAF455F31BCAEBB761339B8145F.mft
File: 4D7FACF5E4861DAF455F31BCAEBB761339B8145F.mft (raw, json)
Hash identifier: 5TV2VjUpXN5ug1Ip1b+jk++9G3WuX3s12D0wc/inyeY=
Subject key identifier: 1B:2C:4F:D9:47:56:52:AC:44:27:E9:B2:CB:32:18:F2:66:0F:20:64
Authority key identifier: 4D:7F:AC:F5:E4:86:1D:AF:45:5F:31:BC:AE:BB:76:13:39:B8:14:5F
Certificate issuer: /CN=4D7FACF5E4861DAF455F31BCAEBB761339B8145F
Certificate serial: 3EDF6D2F99FAEBD506F077A3DBB8FEFC71BAD33B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4D7FACF5E4861DAF455F31BCAEBB761339B8145F.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/HEALTHNET/0/4D7FACF5E4861DAF455F31BCAEBB761339B8145F.mft
Manifest number: C1
Signing time: Fri 02 Oct 2026 05:30:12 +0000
Manifest this update: Fri 02 Oct 2026 05:25:12 +0000
Manifest next update: Sat 03 Oct 2026 06:45:12 +0000
Files and hashes: 1: 3230332e36352e302e302f31372d3137203d3e2034373832.roa (hash: aPv3bOG1weQWYPDGkDtRVOrTNA4jAzlE7y9bBkzaAf8=)
2: 4D7FACF5E4861DAF455F31BCAEBB761339B8145F.crl (hash: eHC6AZJYmCQiTuPhSIakV7TrfqjhKLDy8BSfp7ObjRM=)
3: 3230332e36352e3132382e302f31392d3139203d3e2034373832.roa (hash: mjDMiNdATFHdMEjP66ppJ/Z0/1InOOtWemdYwazOi5A=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/HEALTHNET/0/4D7FACF5E4861DAF455F31BCAEBB761339B8145F.crl
rsync://rpkica.twnic.tw/rpki/HEALTHNET/0/4D7FACF5E4861DAF455F31BCAEBB761339B8145F.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4D7FACF5E4861DAF455F31BCAEBB761339B8145F.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 06:45:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:df:6d:2f:99:fa:eb:d5:06:f0:77:a3:db:b8:fe:fc:71:ba:d3:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4D7FACF5E4861DAF455F31BCAEBB761339B8145F
Validity
Not Before: Oct 2 05:25:12 2026 GMT
Not After : Oct 3 06:45:12 2026 GMT
Subject: CN=1B2C4FD9475652AC4427E9B2CB3218F2660F2064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:af:70:e9:2e:82:01:50:a1:56:8d:2b:bf:7d:
aa:51:17:26:16:10:52:30:1c:85:c4:ae:cd:33:87:
e5:37:c3:27:74:aa:7b:16:84:6a:3a:40:eb:3c:51:
5a:ae:0e:11:fc:18:75:70:2f:c2:13:6e:ae:8d:41:
f9:1f:c2:9a:4d:3e:63:6c:4e:b7:ca:35:1c:a9:f6:
1f:5a:1a:3c:14:1b:3a:37:ae:63:e6:4b:9a:f0:63:
ca:bb:e4:e0:1d:bc:d6:3a:45:cc:b6:76:28:47:17:
6e:b6:28:b1:50:c5:62:80:7d:d5:f7:66:d2:5e:72:
72:44:99:f4:81:0c:d8:bf:12:5a:6c:42:63:36:cf:
3f:c5:d9:4d:60:4f:1a:e4:f2:4a:c3:f8:93:e3:bb:
e1:7a:59:5c:5c:19:60:4b:43:86:96:c2:a2:49:90:
ba:9a:eb:b4:1e:5e:40:92:0d:d9:28:ed:e2:86:7d:
ad:4b:ed:e2:fd:6c:fa:a8:7a:cb:f8:ae:b4:08:d0:
a1:8c:91:75:df:43:51:5f:cd:7f:19:78:06:07:b7:
4f:56:99:5c:e2:b7:85:f1:9f:d1:41:ee:3a:54:be:
2b:b4:d1:3c:9a:a7:4a:38:66:7c:0d:a4:e1:5a:7a:
f7:2d:43:70:25:12:15:fa:62:9f:62:4d:fb:55:9e:
b2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:2C:4F:D9:47:56:52:AC:44:27:E9:B2:CB:32:18:F2:66:0F:20:64
X509v3 Authority Key Identifier:
keyid:4D:7F:AC:F5:E4:86:1D:AF:45:5F:31:BC:AE:BB:76:13:39:B8:14:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/HEALTHNET/0/4D7FACF5E4861DAF455F31BCAEBB761339B8145F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4D7FACF5E4861DAF455F31BCAEBB761339B8145F.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HEALTHNET/0/4D7FACF5E4861DAF455F31BCAEBB761339B8145F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:b1:b4:1f:ae:3f:8e:7e:3c:0b:3b:2c:d5:57:f6:32:c8:dd:
cd:04:1e:de:e3:f5:51:b8:3f:3c:be:be:5c:ff:37:08:bf:db:
e4:81:06:a4:9e:16:0a:85:2d:23:bb:1d:e6:b4:95:80:88:a8:
a3:33:24:e0:18:54:89:ea:05:63:54:64:5b:d5:6b:9d:cd:58:
6b:47:ce:33:b3:8c:5a:a0:20:75:07:fb:d5:34:01:f6:ec:f0:
f0:af:20:aa:aa:3b:1a:16:59:e9:77:54:91:1f:d6:92:4f:8b:
58:ae:86:75:ff:d1:f0:74:26:e9:a1:2d:2e:90:f0:f4:bc:e2:
0e:fd:77:5e:29:8d:96:56:ff:2e:10:78:ee:20:72:8d:a4:cb:
0a:bb:e7:94:02:d6:c7:1a:52:42:fc:dd:1f:71:a4:79:ab:7f:
73:e0:fa:60:50:2b:58:55:60:83:81:9e:e3:78:10:74:48:ca:
98:3f:cb:7f:27:9c:d1:ff:fb:19:8b:0b:85:6f:05:0d:19:e0:
e8:16:db:d1:13:7d:bf:8a:69:6c:79:6b:d9:38:5c:48:89:d6:
20:43:95:2f:fa:97:14:1e:7a:49:2d:c9:63:08:e8:de:2e:7c:
cc:a7:a6:87:d5:57:03:83:9c:a9:07:30:42:4c:1f:e6:2d:83:
5c:ff:6b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 16:22:22 2026 by rpki-client