
$ rpki-client -vvf rpkica.twnic.tw/rpki/LIRUN/0/4672CC1FE2708E882C7C7AC9F016C9C5350301B8.mft
File: 4672CC1FE2708E882C7C7AC9F016C9C5350301B8.mft (raw, json)
Hash identifier: yVt0nyoUmol8SOWNSsG/SpWDKORmdEx+MraO+p/miok=
Subject key identifier: 07:B3:90:3A:9B:BD:D7:0A:DB:2F:1D:0B:2A:4A:8E:DF:D3:6B:56:FE
Authority key identifier: 46:72:CC:1F:E2:70:8E:88:2C:7C:7A:C9:F0:16:C9:C5:35:03:01:B8
Certificate issuer: /CN=4672CC1FE2708E882C7C7AC9F016C9C5350301B8
Certificate serial: 1861393285BA3B61930369891A7D3A5D2AF87753
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4672CC1FE2708E882C7C7AC9F016C9C5350301B8.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/LIRUN/0/4672CC1FE2708E882C7C7AC9F016C9C5350301B8.mft
Manifest number: 07
Signing time: Wed 13 May 2026 04:31:48 +0000
Manifest this update: Wed 13 May 2026 04:26:48 +0000
Manifest next update: Thu 14 May 2026 07:44:48 +0000
Files and hashes: 1: 323430313a393765303a3a2f34382d3438203d3e20313331313437.roa (hash: p8UsvXIz5WgkEXh1nf22VVGfO3Td54MJiWuDiLo2EHQ=)
2: 4672CC1FE2708E882C7C7AC9F016C9C5350301B8.crl (hash: /mc438pyw5LdWuM64edRfyMjMAIJeuRI7YgrWeohXds=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/LIRUN/0/4672CC1FE2708E882C7C7AC9F016C9C5350301B8.crl
rsync://rpkica.twnic.tw/rpki/LIRUN/0/4672CC1FE2708E882C7C7AC9F016C9C5350301B8.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4672CC1FE2708E882C7C7AC9F016C9C5350301B8.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 07:44:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:61:39:32:85:ba:3b:61:93:03:69:89:1a:7d:3a:5d:2a:f8:77:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4672CC1FE2708E882C7C7AC9F016C9C5350301B8
Validity
Not Before: May 13 04:26:48 2026 GMT
Not After : May 14 07:44:48 2026 GMT
Subject: CN=07B3903A9BBDD70ADB2F1D0B2A4A8EDFD36B56FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b9:f6:07:b5:9e:26:f7:4c:38:11:84:47:46:
0a:63:5d:ea:67:f5:11:3e:9e:b5:75:a9:7f:98:bf:
b7:01:71:8b:71:4d:12:32:e1:f4:99:80:de:90:df:
6b:1a:b2:71:7e:ab:6d:c4:55:8e:65:81:6a:31:d2:
51:e8:de:d8:b9:f1:0d:f2:2d:c3:7c:4c:c4:0b:ef:
fe:63:4e:8f:70:1e:a8:21:db:de:b0:62:91:cb:5a:
df:2f:68:04:6a:12:ca:a9:55:74:0e:66:28:a7:f0:
3e:fa:ce:a6:fb:be:93:6b:da:e5:fb:90:25:c2:db:
48:8f:ca:24:2c:8e:9d:a0:dc:20:5a:db:47:09:3c:
45:79:eb:7e:38:d5:18:58:6f:ec:3f:b5:37:14:3b:
39:b5:e0:02:2e:3f:5e:59:25:dc:0f:bc:bf:af:72:
03:84:a8:6f:b6:c2:ce:af:f7:5d:31:63:9e:47:a7:
e0:7e:50:85:3e:c9:ec:ef:99:58:b5:ac:d2:fc:f8:
39:e6:06:d2:1d:ee:7c:d6:34:e8:17:0d:5d:09:33:
7e:7f:3e:9c:22:46:89:cb:3b:86:99:03:ac:b9:c5:
09:50:b5:3e:57:fe:30:5e:25:91:9d:d9:e9:a8:9f:
68:50:f3:b4:be:47:31:39:4d:53:c9:e4:bd:e8:b7:
e2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:B3:90:3A:9B:BD:D7:0A:DB:2F:1D:0B:2A:4A:8E:DF:D3:6B:56:FE
X509v3 Authority Key Identifier:
keyid:46:72:CC:1F:E2:70:8E:88:2C:7C:7A:C9:F0:16:C9:C5:35:03:01:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/LIRUN/0/4672CC1FE2708E882C7C7AC9F016C9C5350301B8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4672CC1FE2708E882C7C7AC9F016C9C5350301B8.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LIRUN/0/4672CC1FE2708E882C7C7AC9F016C9C5350301B8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:8b:ee:38:d9:13:47:bb:22:e4:4d:a4:08:ca:62:cb:2b:a4:
2a:2e:5b:75:67:ca:0a:ca:80:f6:07:1f:1a:70:55:cc:b7:7f:
d0:8f:62:70:04:5f:05:8a:61:49:08:cb:60:e3:a7:a2:b4:e5:
bf:38:09:25:53:29:9b:5b:40:d6:fa:84:77:c1:7a:fa:e6:47:
a2:95:5c:bc:36:98:58:77:ff:52:5b:77:50:de:fd:11:a4:b9:
56:20:bf:c0:19:4d:44:24:f0:4f:2c:b4:b9:1f:d1:38:a2:c6:
ec:3d:af:af:62:db:3b:77:94:f8:5c:5d:9d:09:7e:01:54:10:
49:62:4a:87:bc:4d:b4:6e:a8:35:7e:2c:a2:e0:97:e7:e4:ff:
fd:49:69:9f:4d:1f:31:a4:27:8a:56:b0:fa:7c:7e:db:c8:2e:
8c:a9:98:ee:55:bc:68:ab:94:57:61:83:40:a9:a0:4c:64:71:
b7:8d:00:4d:52:b4:5a:ae:24:3e:6e:42:6e:a0:56:37:f6:06:
35:cb:f9:e2:65:a4:2e:fe:2b:29:f8:11:bf:18:e1:dd:17:15:
bf:af:46:71:01:35:b4:1b:79:e4:b3:50:45:b1:3b:3b:b0:d4:
a6:e9:95:5c:13:dc:7c:1a:eb:62:b0:d5:8b:37:19:d3:53:e1:
34:fd:0b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:35:58 2026 by rpki-client