
$ rpki-client -vvf rpkica.twnic.tw/rpki/HEALTHNET/0/4D7FACF5E4861DAF455F31BCAEBB761339B8145F.mft
File: 4D7FACF5E4861DAF455F31BCAEBB761339B8145F.mft (raw, json)
Hash identifier: 6YGdkeLgTvnaqwqFm9KXSpW1asKCLEzPfuca6S/jgTI=
Subject key identifier: FE:76:6C:B2:85:1B:2B:FA:08:C3:3C:CC:71:AC:A4:0E:1E:11:43:64
Authority key identifier: 4D:7F:AC:F5:E4:86:1D:AF:45:5F:31:BC:AE:BB:76:13:39:B8:14:5F
Certificate issuer: /CN=4D7FACF5E4861DAF455F31BCAEBB761339B8145F
Certificate serial: 206DA418D77A7C3E74B3012AFDD5A3E936C10E7D
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4D7FACF5E4861DAF455F31BCAEBB761339B8145F.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/HEALTHNET/0/4D7FACF5E4861DAF455F31BCAEBB761339B8145F.mft
Manifest number: 05
Signing time: Wed 13 May 2026 05:17:03 +0000
Manifest this update: Wed 13 May 2026 05:12:03 +0000
Manifest next update: Thu 14 May 2026 07:21:03 +0000
Files and hashes: 1: 3230332e36352e302e302f31372d3137203d3e2034373832.roa (hash: aPv3bOG1weQWYPDGkDtRVOrTNA4jAzlE7y9bBkzaAf8=)
2: 4D7FACF5E4861DAF455F31BCAEBB761339B8145F.crl (hash: g2BlrDC268+UB3mGpilt8skisLfIXjFZr0YEjzYh074=)
3: 3230332e36352e3132382e302f31392d3139203d3e2034373832.roa (hash: mjDMiNdATFHdMEjP66ppJ/Z0/1InOOtWemdYwazOi5A=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/HEALTHNET/0/4D7FACF5E4861DAF455F31BCAEBB761339B8145F.crl
rsync://rpkica.twnic.tw/rpki/HEALTHNET/0/4D7FACF5E4861DAF455F31BCAEBB761339B8145F.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4D7FACF5E4861DAF455F31BCAEBB761339B8145F.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 07:21:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:6d:a4:18:d7:7a:7c:3e:74:b3:01:2a:fd:d5:a3:e9:36:c1:0e:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4D7FACF5E4861DAF455F31BCAEBB761339B8145F
Validity
Not Before: May 13 05:12:03 2026 GMT
Not After : May 14 07:21:03 2026 GMT
Subject: CN=FE766CB2851B2BFA08C33CCC71ACA40E1E114364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5f:69:87:c0:b3:1f:d4:62:aa:7c:55:a5:94:
5f:66:0a:2f:cc:82:22:91:05:ba:3c:7d:0f:07:6b:
ca:eb:0a:07:06:7d:e0:43:5f:f8:78:c9:f5:8b:7b:
b3:6b:f7:f4:93:d4:ea:c1:96:13:89:b0:93:83:a5:
ba:65:f5:41:05:96:7e:c0:92:c9:67:c6:a3:3a:cf:
9a:8a:e1:5c:83:11:5e:4f:00:1c:d5:4f:bb:47:64:
a8:c0:54:1b:b7:97:f3:33:41:2c:04:6c:e5:c4:8b:
83:09:0f:fd:5c:93:71:71:46:03:96:d8:75:ee:65:
4e:45:55:e1:9e:b5:3c:aa:59:f8:9d:07:cc:6e:b0:
d9:bf:6a:05:d4:23:56:0b:a9:12:06:2a:e2:65:26:
74:29:44:2a:5b:f6:89:7e:71:db:14:4f:f1:6e:35:
ed:05:00:d8:8d:a4:9a:a9:e5:00:01:3f:01:e6:9a:
46:cc:ae:1e:ea:73:91:dd:ee:2f:a2:a8:a1:05:f9:
04:40:21:e6:aa:1c:87:84:18:28:d0:3d:1f:29:c9:
34:47:a5:cb:cc:7a:82:5d:30:0d:98:c2:0b:3b:49:
f0:b7:9d:0e:76:23:e2:b0:50:21:0d:4c:49:cb:69:
ca:f4:78:5a:1b:c6:42:61:5c:d1:e3:11:7b:0e:98:
af:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:76:6C:B2:85:1B:2B:FA:08:C3:3C:CC:71:AC:A4:0E:1E:11:43:64
X509v3 Authority Key Identifier:
keyid:4D:7F:AC:F5:E4:86:1D:AF:45:5F:31:BC:AE:BB:76:13:39:B8:14:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/HEALTHNET/0/4D7FACF5E4861DAF455F31BCAEBB761339B8145F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4D7FACF5E4861DAF455F31BCAEBB761339B8145F.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HEALTHNET/0/4D7FACF5E4861DAF455F31BCAEBB761339B8145F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:21:37:a3:78:08:c0:10:af:fa:a7:43:b5:c9:24:d4:49:d6:
a6:64:ec:87:73:77:c3:26:4a:1d:39:19:1c:ff:38:d5:c1:ea:
57:cc:0d:74:de:e6:88:ef:ed:fa:71:3e:61:b7:07:f2:db:89:
0b:54:53:da:b1:da:87:b5:c2:2f:23:52:68:5a:28:dd:f3:af:
77:8e:a9:f3:ab:f5:83:15:03:23:ef:3a:a4:6a:82:33:e3:ed:
fe:74:84:4a:56:0c:62:ee:16:95:2b:d8:2b:84:84:81:78:7f:
58:37:00:61:47:16:93:1e:f1:a2:b8:ce:d8:6f:08:c5:27:a7:
48:74:4a:32:68:5f:b8:ff:66:bd:05:fd:95:f8:3d:bc:7b:54:
33:c1:fe:4a:48:96:f9:0a:db:1d:a1:b1:18:8e:59:e0:d3:a7:
af:bd:6a:d6:3c:91:f9:66:c4:7b:01:82:ea:51:de:88:2c:43:
43:c0:3e:05:1f:dd:f3:68:f4:94:db:28:fe:63:39:6c:9f:97:
2a:c3:0e:bc:d3:5d:33:0a:18:49:ba:aa:5c:80:74:91:0a:71:
23:84:ee:5d:c2:fa:71:94:82:79:01:78:3b:c9:11:f3:a5:a9:
f1:e1:bd:23:10:38:aa:38:b5:54:c6:8d:0b:39:7a:96:f3:95:
6e:21:cd:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:33:08 2026 by rpki-client