
$ rpki-client -vvvf rpkica.twnic.tw/rpki/INFORICH/0/2246FA22721287A616226553235161DB0C06A86A.mft
File: 2246FA22721287A616226553235161DB0C06A86A.mft (raw, json)
Hash identifier: 47K9UrdhBDD30CPW9s/yg9VaXulQN+tWDgg5VmXVGIw=
Subject key identifier: 7B:17:93:62:1E:4B:47:49:7E:7B:0D:8A:9A:AE:9B:52:15:4A:BD:03
Authority key identifier: 22:46:FA:22:72:12:87:A6:16:22:65:53:23:51:61:DB:0C:06:A8:6A
Certificate issuer: /CN=2246FA22721287A616226553235161DB0C06A86A
Certificate serial: 0F4BBB6AE2F441243259D5782F62E15FE0912852
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2246FA22721287A616226553235161DB0C06A86A.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/INFORICH/0/2246FA22721287A616226553235161DB0C06A86A.mft
Manifest number: CA
Signing time: Tue 06 Oct 2026 23:39:46 +0000
Manifest this update: Tue 06 Oct 2026 23:34:46 +0000
Manifest next update: Thu 08 Oct 2026 02:03:46 +0000
Files and hashes: 1: 323430363a336134303a3a2f33322d3634203d3e20313331363737.roa (hash: txtzobgmB7pj9lhrJaa/eqUwxXSWt55r+2LkQvqXKQI=)
2: 323430363a336134303a3a2f33322d3634203d3e20313331363734.roa (hash: aPycp99FDZxI6wcTWaNVHx/VO4tPsOjYk5RvoHKdcds=)
3: 2246FA22721287A616226553235161DB0C06A86A.crl (hash: eJBEmh+ppaOJ62EyEbJGadfqcMLbhwkem2/jF8ZVPtM=)
4: 3130332e3135322e3235322e302f32332d3234203d3e20313331363734.roa (hash: V8i1CNi9KvQygvK2n7ExFbNEN66BfXSX8swl32jKAok=)
5: 3130332e3135322e3235322e302f32332d3234203d3e20313331363737.roa (hash: j0DKnfX1r8mJMrfGr7lsqQ7lvkU8ZyKK4q8km6mT6FE=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/INFORICH/0/2246FA22721287A616226553235161DB0C06A86A.crl
rsync://rpkica.twnic.tw/rpki/INFORICH/0/2246FA22721287A616226553235161DB0C06A86A.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2246FA22721287A616226553235161DB0C06A86A.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 07 Oct 2026 19:58:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:4b:bb:6a:e2:f4:41:24:32:59:d5:78:2f:62:e1:5f:e0:91:28:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2246FA22721287A616226553235161DB0C06A86A
Validity
Not Before: Oct 6 23:34:46 2026 GMT
Not After : Oct 8 02:03:46 2026 GMT
Subject: CN=7B1793621E4B47497E7B0D8A9AAE9B52154ABD03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1a:c8:9c:95:07:79:de:32:b5:47:ef:d6:6a:
a6:6c:c8:98:5a:8b:79:00:40:5b:d1:8d:c0:c5:f7:
86:52:ae:4d:8b:f7:61:39:4c:5d:60:eb:8c:46:b1:
e0:cc:23:0d:10:fc:45:dc:0b:a2:cd:1e:f5:fa:af:
44:41:67:b7:5c:ab:ce:a8:82:10:01:f3:79:32:53:
59:ba:57:12:c5:1c:2b:ee:54:b2:7f:f7:c1:dc:51:
37:7c:eb:51:3a:7a:b1:5f:e0:2c:e2:42:7a:3e:3b:
04:06:02:c5:30:83:fc:e5:ba:59:d8:63:bd:5d:34:
3c:3c:17:da:2b:1d:c2:6e:04:21:bd:83:ed:60:f8:
38:43:c1:2a:23:c0:02:f4:a3:7f:d5:92:89:48:e8:
14:e0:99:9b:5a:ca:61:57:f2:e2:d2:03:6a:89:61:
fc:78:8c:4f:f7:2d:11:0f:2c:fc:5e:16:62:ad:19:
4d:d1:16:b7:4e:0d:81:12:27:72:17:48:73:95:b5:
a8:14:b7:0b:41:56:45:95:30:0d:dc:5c:a1:90:be:
f7:32:28:05:ff:3e:a9:ff:b4:77:d3:7c:bf:48:61:
fb:ef:b5:c9:81:b7:3b:57:a0:28:09:ff:38:6d:75:
01:2a:6a:84:27:be:8a:98:43:f1:ae:9f:8c:4b:bb:
89:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:17:93:62:1E:4B:47:49:7E:7B:0D:8A:9A:AE:9B:52:15:4A:BD:03
X509v3 Authority Key Identifier:
keyid:22:46:FA:22:72:12:87:A6:16:22:65:53:23:51:61:DB:0C:06:A8:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/INFORICH/0/2246FA22721287A616226553235161DB0C06A86A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2246FA22721287A616226553235161DB0C06A86A.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/INFORICH/0/2246FA22721287A616226553235161DB0C06A86A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:88:96:0c:d7:5d:7e:d1:15:30:c7:d2:28:5c:d4:8b:47:18:
76:b4:74:9c:d9:dd:97:d3:48:6f:36:b1:37:8b:81:62:0f:9a:
8e:3b:dd:5f:f9:4a:44:01:49:e3:60:22:6b:96:61:59:fa:54:
be:c7:9a:da:e5:6e:4d:32:30:b8:51:d4:b3:8e:fd:19:a8:30:
69:3d:e6:b7:7c:59:14:9c:fd:5a:40:8d:0c:a4:20:0e:ab:52:
d2:d0:3d:24:7d:e6:3f:30:d7:03:b1:4a:a6:dc:ce:04:89:b0:
7a:02:e9:34:3f:a1:65:68:0f:f8:e4:a4:2f:37:d1:8b:27:8c:
81:d4:77:08:81:2b:55:38:36:7c:fb:f0:0e:80:70:28:2c:79:
2b:55:88:cb:c5:b1:85:ec:e2:4d:9f:53:6b:69:07:7e:75:e9:
18:f9:c8:8e:25:40:af:99:38:0d:9f:08:cd:b7:a3:3d:f4:b9:
00:09:54:a0:be:ae:2f:56:db:9c:ff:d4:dd:58:8b:1d:99:fa:
70:e8:f1:b5:3a:63:c2:9b:d7:d6:e5:28:d0:d7:39:39:2e:f0:
20:72:51:82:be:fd:39:c0:a1:f8:77:04:7d:6d:99:b2:85:7b:
36:0f:88:2c:d1:52:da:bd:62:56:9d:bd:21:73:6b:9b:cc:94:
a0:13:a9:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 05:58:34 2026 by rpki-client