
$ rpki-client -vvvf rpkica.twnic.tw/rpki/JIGENTEC/0/29663E2ACD53191459F334EE521FAAAABE4930ED.mft
File: 29663E2ACD53191459F334EE521FAAAABE4930ED.mft (raw, json)
Hash identifier: ERS3Gh/KNi4NneN+cvAPpmWtrBo54ujJfT6IIqEIgUI=
Subject key identifier: 5A:2F:12:7C:6F:B8:FC:7C:7B:0A:69:C6:39:49:6D:71:50:A7:A9:9C
Authority key identifier: 29:66:3E:2A:CD:53:19:14:59:F3:34:EE:52:1F:AA:AA:BE:49:30:ED
Certificate issuer: /CN=29663E2ACD53191459F334EE521FAAAABE4930ED
Certificate serial: 0DFD253F2087301B0203686884E8CC72C61D81F2
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/29663E2ACD53191459F334EE521FAAAABE4930ED.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/JIGENTEC/0/29663E2ACD53191459F334EE521FAAAABE4930ED.mft
Manifest number: C5
Signing time: Sat 03 Oct 2026 06:43:17 +0000
Manifest this update: Sat 03 Oct 2026 06:38:17 +0000
Manifest next update: Sun 04 Oct 2026 06:50:17 +0000
Files and hashes: 1: 3130332e3131362e39362e302f32342d3234203d3e20313331363139.roa (hash: UaKYusfbQq14jtksCxK2CbIiFuahrOYiKDtCnF6A974=)
2: 29663E2ACD53191459F334EE521FAAAABE4930ED.crl (hash: lWQWp1gmnrA2sgjX0luRc069agXetapn1FJ7G1pOCbY=)
3: 3130332e3131362e39382e302f32342d3234203d3e20313331363139.roa (hash: vB78JeXzEIoLQiYpw0x+ezfTYtefp/jMfHOSSelfvok=)
4: 3130332e3131362e39392e302f32342d3234203d3e20313331363139.roa (hash: xXNeaO4C8aKEBhmN2JoffMBnVtAHrRBzBfB76rl23+E=)
5: 3130332e3131362e39372e302f32342d3234203d3e20313331363139.roa (hash: CH3QbLk0/qbEK/EUtq0OeWcQdKVrjc4fx65CJOAhNOc=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/JIGENTEC/0/29663E2ACD53191459F334EE521FAAAABE4930ED.crl
rsync://rpkica.twnic.tw/rpki/JIGENTEC/0/29663E2ACD53191459F334EE521FAAAABE4930ED.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/29663E2ACD53191459F334EE521FAAAABE4930ED.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 04:17:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:fd:25:3f:20:87:30:1b:02:03:68:68:84:e8:cc:72:c6:1d:81:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29663E2ACD53191459F334EE521FAAAABE4930ED
Validity
Not Before: Oct 3 06:38:17 2026 GMT
Not After : Oct 4 06:50:17 2026 GMT
Subject: CN=5A2F127C6FB8FC7C7B0A69C639496D7150A7A99C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fa:81:95:ef:7e:f9:ca:4a:56:67:fc:68:55:
3f:23:70:b5:bd:35:0b:a6:a7:0f:ca:1e:63:31:a9:
76:52:f6:44:f5:85:48:c4:f8:1e:99:30:87:31:63:
f9:b9:d2:56:59:b5:9b:df:b3:dc:a7:e3:70:a6:01:
4d:54:ff:8a:8d:55:75:85:c5:1a:3f:22:84:f9:31:
3e:69:00:49:78:8a:f5:0a:d4:ce:77:d6:89:14:33:
21:e5:da:7f:57:08:5a:c2:b6:69:6c:69:fb:f8:ee:
d7:89:23:b1:3c:c6:6a:d7:7e:a0:1b:9b:fa:49:43:
50:32:13:6e:3b:b6:c7:25:53:5b:0d:da:20:37:2d:
c9:34:bf:8c:4f:a3:7e:62:29:89:d5:dd:0f:44:00:
07:2c:a3:96:a2:f1:f0:e1:5b:af:6b:f2:79:3a:23:
e7:2b:f4:95:5c:71:48:a1:3a:4d:85:c5:56:fc:d6:
cd:cd:b7:55:c0:a7:10:7c:0d:b2:39:1b:f1:ee:7c:
f8:be:dd:85:00:0c:b9:2c:35:f0:61:3e:16:39:5d:
7f:c4:c9:44:d5:3e:95:ab:46:d6:44:d0:c0:12:94:
0c:24:e4:ca:46:68:fa:9b:62:da:f1:85:da:3e:0c:
53:11:d6:68:91:77:c8:dc:43:fe:6f:0f:a5:a3:9e:
43:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:2F:12:7C:6F:B8:FC:7C:7B:0A:69:C6:39:49:6D:71:50:A7:A9:9C
X509v3 Authority Key Identifier:
keyid:29:66:3E:2A:CD:53:19:14:59:F3:34:EE:52:1F:AA:AA:BE:49:30:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/JIGENTEC/0/29663E2ACD53191459F334EE521FAAAABE4930ED.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/29663E2ACD53191459F334EE521FAAAABE4930ED.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/JIGENTEC/0/29663E2ACD53191459F334EE521FAAAABE4930ED.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:de:52:ff:e4:c0:c8:a8:00:f6:22:c1:e9:85:68:40:32:c1:
1f:93:60:cf:09:c8:46:c8:3a:d3:b9:7c:01:97:eb:70:41:e5:
57:6e:89:41:6f:0c:a6:06:2a:89:17:98:ec:f2:75:c0:a9:3c:
db:b0:54:c2:3c:c2:47:0e:4a:c5:52:a9:76:36:8c:e3:4b:1e:
9f:48:d5:6d:de:bd:0a:bc:05:57:38:b0:8c:e4:48:43:0e:36:
12:91:1f:19:3b:4b:7a:b0:09:f9:e6:d3:52:68:85:05:42:cf:
d0:ab:b8:0d:c0:84:1e:75:a0:60:c4:85:06:e3:b1:03:ae:e5:
59:af:84:70:c5:b9:17:9f:1c:a1:91:83:34:22:a7:f1:80:ed:
d1:af:e7:63:e1:65:6b:d0:23:75:fe:92:ac:af:7f:28:8d:41:
ad:e0:c3:cf:72:5f:e8:79:64:4e:ba:12:45:a9:74:9d:bb:66:
83:a0:3c:a3:89:10:51:b5:a0:d3:1d:77:1b:34:4c:70:c9:8a:
b1:08:2b:0b:48:78:1a:0d:cc:de:eb:d5:df:c3:8c:6a:fb:f1:
48:04:97:0f:34:78:d0:36:9d:70:33:86:70:8b:85:d4:d3:63:
39:7b:f2:6a:81:61:8e:b4:ab:f9:41:44:46:51:44:0a:ea:a4:
8f:85:19:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 20:10:44 2026 by rpki-client