
$ rpki-client -vvf rpkica.twnic.tw/rpki/KANRAYS/0/56C0B74262A19F328983C278635DE9570AFEB948.mft
File: 56C0B74262A19F328983C278635DE9570AFEB948.mft (raw, json)
Hash identifier: JY4KjikINCwmHLbCVircO6qwQHftNvM4BXFXZRKap3o=
Subject key identifier: A8:C6:BD:30:5F:3F:9B:81:B5:6C:08:F1:E9:8B:04:DD:13:28:C3:BA
Authority key identifier: 56:C0:B7:42:62:A1:9F:32:89:83:C2:78:63:5D:E9:57:0A:FE:B9:48
Certificate issuer: /CN=56C0B74262A19F328983C278635DE9570AFEB948
Certificate serial: 3DDB8D3DF43FBBABBD3B099DD4D0E8D755D86B42
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/56C0B74262A19F328983C278635DE9570AFEB948.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/KANRAYS/0/56C0B74262A19F328983C278635DE9570AFEB948.mft
Manifest number: 44
Signing time: Mon 29 Jun 2026 22:22:29 +0000
Manifest this update: Mon 29 Jun 2026 22:17:29 +0000
Manifest next update: Wed 01 Jul 2026 01:40:29 +0000
Files and hashes: 1: 323430323a343932303a3a2f33322d3438203d3e203138303434.roa (hash: w+sTaFe8OsYZPZPjwuyvLTqcXmP0CcIo8Vy8833aYz8=)
2: 56C0B74262A19F328983C278635DE9570AFEB948.crl (hash: rmeuu3pjGfI4csTcgH+l5vZuB73izKNkHxGQ1s7X3jk=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/KANRAYS/0/56C0B74262A19F328983C278635DE9570AFEB948.crl
rsync://rpkica.twnic.tw/rpki/KANRAYS/0/56C0B74262A19F328983C278635DE9570AFEB948.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/56C0B74262A19F328983C278635DE9570AFEB948.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Jul 2026 01:40:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:db:8d:3d:f4:3f:bb:ab:bd:3b:09:9d:d4:d0:e8:d7:55:d8:6b:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56C0B74262A19F328983C278635DE9570AFEB948
Validity
Not Before: Jun 29 22:17:29 2026 GMT
Not After : Jul 1 01:40:29 2026 GMT
Subject: CN=A8C6BD305F3F9B81B56C08F1E98B04DD1328C3BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5b:cf:e3:e6:78:ac:bc:16:fe:a6:91:85:3c:
a7:10:ff:c1:c9:4f:00:f8:00:ea:ec:61:0c:21:e8:
4e:bb:9f:2c:6c:12:e1:bb:99:5a:0e:35:8c:6e:29:
5d:b2:48:b4:93:0c:59:5a:e7:d9:4b:f0:d0:85:b3:
f8:fa:b9:fb:53:b4:ab:03:a9:2a:2b:6b:12:48:e5:
68:a7:07:9a:cd:78:5e:ec:a5:3f:ed:d7:a8:68:56:
61:2e:fe:89:0e:b3:b9:d1:72:69:1d:da:24:33:7a:
de:a8:65:79:ac:de:85:a9:ee:91:7f:a9:40:35:05:
d6:77:be:20:13:5f:2c:fd:08:f7:c4:55:00:e8:87:
e6:73:83:61:dd:7b:b4:aa:91:54:ae:2e:b5:34:41:
3a:c1:70:dd:9f:20:b9:c6:3d:81:ec:7d:76:6c:b3:
e8:f6:35:fa:1e:83:0d:a0:b1:73:d0:46:68:5b:06:
d6:9c:79:86:11:b6:07:61:71:7b:7b:44:ea:1e:28:
b0:21:dd:f1:17:a7:87:ac:2f:78:c4:12:78:48:e0:
47:34:3e:f1:4e:ae:38:7f:78:13:01:93:c9:46:fe:
dd:ba:64:68:2c:47:1f:cd:11:2c:d8:25:fe:ef:59:
2f:22:04:bc:ed:5e:f6:a8:de:b5:08:c7:84:4f:e5:
75:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:C6:BD:30:5F:3F:9B:81:B5:6C:08:F1:E9:8B:04:DD:13:28:C3:BA
X509v3 Authority Key Identifier:
keyid:56:C0:B7:42:62:A1:9F:32:89:83:C2:78:63:5D:E9:57:0A:FE:B9:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/KANRAYS/0/56C0B74262A19F328983C278635DE9570AFEB948.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/56C0B74262A19F328983C278635DE9570AFEB948.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KANRAYS/0/56C0B74262A19F328983C278635DE9570AFEB948.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:7a:2a:4b:f1:20:aa:ee:b4:d4:60:65:a0:62:ad:29:17:e9:
38:72:e1:86:e6:08:6c:46:d9:82:88:c6:2d:20:84:30:86:a1:
3f:2e:b2:99:ac:61:e9:c3:b3:ff:e9:26:02:bd:cc:7a:8e:83:
9e:26:ae:3f:18:f2:53:08:ac:70:44:6a:4b:e4:76:af:db:94:
91:60:06:ed:72:77:98:2b:bc:51:cd:db:a3:ca:01:92:cc:fd:
26:62:e9:53:2d:5b:b8:3d:53:64:b4:8a:59:ac:15:35:f7:e3:
f1:d0:ea:74:57:2e:78:38:6e:ea:f3:75:b8:29:5a:ed:f8:93:
22:89:3d:63:ab:eb:d7:36:17:6a:cb:23:64:45:4a:90:aa:ba:
11:67:0d:32:4e:d6:3b:97:16:11:92:f4:fe:59:62:9f:96:4c:
1c:73:6b:e1:97:83:f5:3d:5c:73:36:24:6a:05:48:cf:6e:86:
79:4e:f0:d9:46:dc:e0:93:c8:b6:8d:b6:61:ad:8f:63:6e:18:
c1:0d:07:85:a0:a9:42:7b:44:48:c2:ea:2d:b0:6a:e1:bb:3f:
4a:8d:51:d5:20:77:6d:f8:e3:ae:74:f8:1e:2e:b4:a9:1a:24:
ef:1c:a1:7a:48:77:99:4a:ca:6e:20:6d:78:62:21:0d:f1:b8:
3c:42:b6:65
-----BEGIN CERTIFICATE-----
MIIE5jCCA86gAwIBAgIUPduNPfQ/u6u9Owmd1NDo11XYa0IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTZDMEI3NDI2MkExOUYzMjg5ODNDMjc4NjM1REU5NTcw
QUZFQjk0ODAeFw0yNjA2MjkyMjE3MjlaFw0yNjA3MDEwMTQwMjlaMDMxMTAvBgNV
BAMTKEE4QzZCRDMwNUYzRjlCODFCNTZDMDhGMUU5OEIwNEREMTMyOEMzQkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVW8/j5nisvBb+ppGFPKcQ/8HJ
TwD4AOrsYQwh6E67nyxsEuG7mVoONYxuKV2ySLSTDFla59lL8NCFs/j6uftTtKsD
qSoraxJI5WinB5rNeF7spT/t16hoVmEu/okOs7nRcmkd2iQzet6oZXms3oWp7pF/
qUA1BdZ3viATXyz9CPfEVQDoh+Zzg2Hde7SqkVSuLrU0QTrBcN2fILnGPYHsfXZs
s+j2Nfoegw2gsXPQRmhbBtaceYYRtgdhcXt7ROoeKLAh3fEXp4esL3jEEnhI4Ec0
PvFOrjh/eBMBk8lG/t26ZGgsRx/NESzYJf7vWS8iBLztXvao3rUIx4RP5XWzAgMB
AAGjggHwMIIB7DAdBgNVHQ4EFgQUqMa9MF8/m4G1bAjx6YsE3RMow7owHwYDVR0j
BBgwFoAUVsC3QmKhnzKJg8J4Y13pVwr+uUgwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0FOUkFZ
Uy8wLzU2QzBCNzQyNjJBMTlGMzI4OTgzQzI3ODYzNURFOTU3MEFGRUI5NDguY3Js
MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu
aWMudHcvcnBraS9UV05JQ0NBLzEvNTZDMEI3NDI2MkExOUYzMjg5ODNDMjc4NjM1
REU5NTcwQUZFQjk0OC5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy
c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0tBTlJBWVMvMC81NkMwQjc0MjYy
QTE5RjMyODk4M0MyNzg2MzVERTk1NzBBRkVCOTQ4Lm1mdDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJXoqS/Eg
qu601GBloGKtKRfpOHLhhuYIbEbZgojGLSCEMIahPy6ymaxh6cOz/+kmAr3Meo6D
niauPxjyUwiscERqS+R2r9uUkWAG7XJ3mCu8Uc3bo8oBksz9JmLpUy1buD1TZLSK
WawVNffj8dDqdFcueDhu6vN1uCla7fiTIok9Y6vr1zYXassjZEVKkKq6EWcNMk7W
O5cWEZL0/llin5ZMHHNr4ZeD9T1cczYkagVIz26GeU7w2Ubc4JPIto22Ya2PY24Y
wQ0HhaCpQntESMLqLbBq4bs/So1R1SB3bfjjrnT4Hi60qRok7xyhekh3mUrKbiBt
eGIhDfG4PEK2ZQ==
-----END CERTIFICATE-----
Generated at Tue Jun 30 19:11:49 2026 by rpki-client