
$ rpki-client -vvvf rpkica.twnic.tw/rpki/JGZ/0/7198602C0FFFDBCD1689380B05AC4CD694FAF839.mft
File: 7198602C0FFFDBCD1689380B05AC4CD694FAF839.mft (raw, json)
Hash identifier: 436gLEAf4xLweaqhv19CkbWmwaeSTSNqicVEetMfLVg=
Subject key identifier: 18:CE:E1:0E:CF:BF:99:2F:21:28:7E:30:05:26:9C:51:2A:36:F9:0B
Authority key identifier: 71:98:60:2C:0F:FF:DB:CD:16:89:38:0B:05:AC:4C:D6:94:FA:F8:39
Certificate issuer: /CN=7198602C0FFFDBCD1689380B05AC4CD694FAF839
Certificate serial: 485EBC81DCE9C6CAC94F898232EC93491B67DA33
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7198602C0FFFDBCD1689380B05AC4CD694FAF839.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/JGZ/0/7198602C0FFFDBCD1689380B05AC4CD694FAF839.mft
Manifest number: C7
Signing time: Sat 03 Oct 2026 20:37:09 +0000
Manifest this update: Sat 03 Oct 2026 20:32:09 +0000
Manifest next update: Sun 04 Oct 2026 21:45:09 +0000
Files and hashes: 1: 7198602C0FFFDBCD1689380B05AC4CD694FAF839.crl (hash: o5oliEGkxroad5nUjboDJXRICe4l9UqItuyc6MDJOq8=)
2: 3138302e39342e33302e302f32332d3233203d3e203139353531.roa (hash: 1dGSwf6J4VcyADpI0W1MqTQLF5KD5bTH4vYg7j9oZjM=)
3: 3138302e39342e33302e302f32332d3234203d3e203633393237.roa (hash: pjcbMKqxFhdZKYgKADpdkIDPG/goMICc5D5clKBpXPM=)
4: 3138302e39342e33302e302f32332d3234203d3e20313530373630.roa (hash: NR6Il7L9iFcamA2lktoW745VgVcaMO4WXmBiIrFz33E=)
5: 3138302e39342e33302e302f32332d3234203d3e2039323939.roa (hash: wXHXnquzJPMvt2eL/0ADugpfutlaQZTySmvZfMnVTRQ=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/JGZ/0/7198602C0FFFDBCD1689380B05AC4CD694FAF839.crl
rsync://rpkica.twnic.tw/rpki/JGZ/0/7198602C0FFFDBCD1689380B05AC4CD694FAF839.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7198602C0FFFDBCD1689380B05AC4CD694FAF839.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 21:45:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:5e:bc:81:dc:e9:c6:ca:c9:4f:89:82:32:ec:93:49:1b:67:da:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7198602C0FFFDBCD1689380B05AC4CD694FAF839
Validity
Not Before: Oct 3 20:32:09 2026 GMT
Not After : Oct 4 21:45:09 2026 GMT
Subject: CN=18CEE10ECFBF992F21287E3005269C512A36F90B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:17:88:dd:fc:09:a3:83:9b:9f:7e:bb:7b:86:
75:fc:9e:59:43:a9:fd:0d:35:2b:aa:d0:8e:2f:7f:
5e:bc:b5:74:25:0c:61:d0:15:4b:54:be:0b:c7:49:
9a:dd:ea:9c:7d:cb:a7:e2:9c:b2:ed:d6:45:6f:2f:
3a:6c:3e:42:48:e9:b8:15:88:3a:06:ab:ed:5b:a6:
67:67:f3:37:a4:94:de:40:24:f1:6b:21:fc:07:a9:
17:64:00:e7:0b:03:f5:ae:25:a1:6c:51:f9:62:fd:
cd:2f:2f:ae:b9:1a:3e:00:61:7a:c7:c1:de:83:24:
56:42:cd:de:96:55:76:0f:29:45:29:61:37:ee:5c:
b8:54:4d:bb:78:19:63:d0:9a:5d:94:dd:65:53:22:
0d:e0:53:e3:df:c1:ad:96:a5:ae:e7:43:3f:4e:92:
81:4d:9e:26:58:a9:d9:a1:77:9e:ad:26:2a:5a:c2:
90:95:f6:6a:c2:03:6f:af:02:08:2e:ba:e9:d3:4d:
e7:be:40:0a:e6:ee:8b:ca:24:ec:65:5f:3c:86:25:
1f:4a:e1:3a:ce:c1:26:8b:d1:62:77:19:b5:6a:47:
b6:8f:99:a0:85:23:23:de:bb:f0:df:37:b6:23:8b:
4d:c5:bc:e9:6d:db:13:b9:0b:f2:1b:51:a1:fe:99:
79:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:CE:E1:0E:CF:BF:99:2F:21:28:7E:30:05:26:9C:51:2A:36:F9:0B
X509v3 Authority Key Identifier:
keyid:71:98:60:2C:0F:FF:DB:CD:16:89:38:0B:05:AC:4C:D6:94:FA:F8:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/JGZ/0/7198602C0FFFDBCD1689380B05AC4CD694FAF839.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7198602C0FFFDBCD1689380B05AC4CD694FAF839.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/JGZ/0/7198602C0FFFDBCD1689380B05AC4CD694FAF839.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:11:91:65:35:01:05:00:aa:22:2e:23:0e:c6:b9:f0:f9:9c:
12:21:d7:a0:9a:19:80:9b:15:68:69:ce:ed:0d:7e:fc:61:7f:
25:35:3c:57:30:07:67:e6:c7:83:35:7e:3d:63:d4:e2:94:37:
89:6e:3d:0e:aa:a1:71:d2:2c:ba:81:94:77:77:76:59:a4:0c:
0c:55:7e:ad:a8:7e:8f:32:9e:94:b1:ed:53:18:ff:aa:11:44:
d7:3b:57:ec:2a:82:f6:b6:4c:ef:cb:fd:92:44:fb:ed:4c:cd:
30:bd:9e:bd:b6:45:6b:98:ba:e7:fb:bb:45:99:62:35:f0:53:
e4:0b:69:30:d6:2f:9e:5a:77:0d:2c:b6:b8:4e:63:42:32:cc:
bb:a1:92:6e:f5:51:78:77:92:93:db:c7:88:58:18:2a:a0:d0:
ca:ae:e8:fe:91:06:db:32:ed:e2:33:0f:e8:6d:a0:0d:91:4a:
ea:60:af:7f:23:b5:d1:9d:4d:3d:36:2f:8b:c1:a9:dd:92:80:
33:cb:72:27:7a:36:cf:2e:de:d5:f0:7f:02:e1:62:bd:0e:c5:
3e:34:93:67:c2:eb:ee:c1:72:b0:3f:40:f0:8e:39:10:9f:9b:
3b:16:1e:76:08:68:b0:a8:a1:59:2c:44:5a:5a:15:ad:c4:66:
86:e0:d7:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:02:10 2026 by rpki-client