
$ rpki-client -vvvf rpkica.twnic.tw/rpki/M2NIM/0/E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.mft
File: E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.mft (raw, json)
Hash identifier: gqkMfCZ7jry58hYzCYlnb4ZVjvmV7C9vWq5mKAecZ8I=
Subject key identifier: AC:B8:C6:6E:AF:28:20:F6:66:72:73:0E:57:B3:4C:1E:6C:DF:BA:7E
Authority key identifier: E5:AA:3B:0F:9F:58:C9:34:21:C6:48:20:4A:B4:31:A4:AD:C4:B0:CB
Certificate issuer: /CN=E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB
Certificate serial: 7E5DE227FA3ABA735A3FF7794DB56773968376CC
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/M2NIM/0/E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.mft
Manifest number: C8
Signing time: Sun 04 Oct 2026 01:28:36 +0000
Manifest this update: Sun 04 Oct 2026 01:23:36 +0000
Manifest next update: Mon 05 Oct 2026 02:24:36 +0000
Files and hashes: 1: E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.crl (hash: +3KwaUrXNYjwdoTTQZ6uLJXPPxf5ZCfLdh5xTqW5oxI=)
2: 323430313a383432303a3a2f33322d3438203d3e2039393233.roa (hash: mAMCDxxdS5D0xlBjJmg5NjQv1GONdD1Fp7YNezXC9T8=)
3: 323430313a383432303a3a2f33322d3438203d3e203332353935.roa (hash: 7IK6gvzs6uMwoViSpBOdjJrk5WxLH5pe447RiZaITJY=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/M2NIM/0/E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.crl
rsync://rpkica.twnic.tw/rpki/M2NIM/0/E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 22:23:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:5d:e2:27:fa:3a:ba:73:5a:3f:f7:79:4d:b5:67:73:96:83:76:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB
Validity
Not Before: Oct 4 01:23:36 2026 GMT
Not After : Oct 5 02:24:36 2026 GMT
Subject: CN=ACB8C66EAF2820F66672730E57B34C1E6CDFBA7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e4:6d:e2:59:e5:b9:d0:13:20:2c:1c:ab:2c:
84:8c:a3:26:95:79:84:25:a4:0a:fd:6b:53:72:ff:
82:ae:65:e2:bf:41:97:a8:db:94:6e:93:0a:56:97:
af:a1:18:a1:a0:3d:30:8c:93:ec:8e:27:0e:bb:9d:
67:05:3f:33:ee:d4:69:ea:77:b4:74:85:7a:38:55:
ce:a3:35:c4:1c:1a:0f:58:85:34:39:1e:eb:68:3f:
6e:00:45:9c:9e:01:3c:c5:0a:fc:f7:7b:ef:bb:05:
8d:d9:8d:88:1b:ad:02:95:45:ef:40:f6:70:41:eb:
7a:23:75:17:c6:1e:f8:4b:ea:bb:99:36:9b:0c:ec:
9a:77:d2:7d:26:6a:15:57:6e:f3:25:66:86:c8:e3:
c2:f4:55:61:95:6a:c5:84:1a:7b:6b:78:da:5d:8c:
f0:91:aa:7c:69:46:79:cd:3f:15:5a:56:88:af:74:
5c:3b:d6:34:33:35:d8:bb:2d:d4:a7:4e:50:6e:c4:
2d:81:c5:b6:20:80:9b:a9:c1:c4:f3:21:de:e0:30:
27:d8:88:b6:fe:d6:3f:e4:2c:3f:83:92:67:eb:2a:
1b:64:5c:6d:61:a4:51:96:43:5a:3e:16:c3:fb:23:
12:d1:8c:61:3d:71:e7:f2:b3:c7:12:90:61:0d:03:
24:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:B8:C6:6E:AF:28:20:F6:66:72:73:0E:57:B3:4C:1E:6C:DF:BA:7E
X509v3 Authority Key Identifier:
keyid:E5:AA:3B:0F:9F:58:C9:34:21:C6:48:20:4A:B4:31:A4:AD:C4:B0:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/M2NIM/0/E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/M2NIM/0/E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:d2:fa:fe:e2:cc:ee:0a:60:29:f6:03:34:e2:94:52:4d:b3:
5f:39:b0:dd:a6:53:be:f5:ed:a5:51:96:7a:d0:87:bc:1c:ba:
14:0b:fa:00:0f:b2:b5:89:e9:1a:a4:53:7d:a5:cd:86:15:e9:
39:1a:44:09:1f:7b:32:78:9e:35:a7:5d:d8:9f:79:d8:18:d4:
9b:49:3c:8c:f2:91:47:70:57:eb:7e:f8:b5:25:e1:65:07:63:
9f:c8:ad:5b:f7:73:89:78:ab:11:5a:4d:06:30:43:9f:35:4a:
9f:d3:1b:4e:d3:0c:40:47:e1:b9:59:c3:22:35:5f:82:8c:67:
a6:9f:c8:c6:31:fc:27:b4:f4:a1:4d:c2:d7:f1:d2:bd:99:ca:
f7:e0:99:93:a2:e0:93:b1:32:26:1b:c0:f9:91:ed:7a:9b:f5:
ee:e2:eb:2e:9f:fd:89:36:8b:75:12:0d:a6:4d:76:33:7a:15:
21:4e:6e:88:36:70:3b:19:39:2f:02:c4:d9:3c:93:0f:a2:d5:
2f:88:99:72:f7:ec:2f:f8:a7:60:32:ae:10:26:a2:6e:2c:9a:
18:bc:9e:6b:32:fd:74:da:3b:c6:ca:98:2c:92:c5:25:bf:5d:
7a:28:3b:1c:ac:90:44:52:d7:3e:e3:d5:93:fc:2d:ab:5c:3e:
ca:9b:31:35
-----BEGIN CERTIFICATE-----
MIIE4jCCA8qgAwIBAgIUfl3iJ/o6unNaP/d5TbVnc5aDdswwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTVBQTNCMEY5RjU4QzkzNDIxQzY0ODIwNEFCNDMxQTRB
REM0QjBDQjAeFw0yNjEwMDQwMTIzMzZaFw0yNjEwMDUwMjI0MzZaMDMxMTAvBgNV
BAMTKEFDQjhDNjZFQUYyODIwRjY2NjcyNzMwRTU3QjM0QzFFNkNERkJBN0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv5G3iWeW50BMgLByrLISMoyaV
eYQlpAr9a1Ny/4KuZeK/QZeo25RukwpWl6+hGKGgPTCMk+yOJw67nWcFPzPu1Gnq
d7R0hXo4Vc6jNcQcGg9YhTQ5HutoP24ARZyeATzFCvz3e++7BY3ZjYgbrQKVRe9A
9nBB63ojdRfGHvhL6ruZNpsM7Jp30n0mahVXbvMlZobI48L0VWGVasWEGntreNpd
jPCRqnxpRnnNPxVaVoivdFw71jQzNdi7LdSnTlBuxC2BxbYggJupwcTzId7gMCfY
iLb+1j/kLD+DkmfrKhtkXG1hpFGWQ1o+FsP7IxLRjGE9cefys8cSkGENAyS/AgMB
AAGjggHsMIIB6DAdBgNVHQ4EFgQUrLjGbq8oIPZmcnMOV7NMHmzfun4wHwYDVR0j
BBgwFoAU5ao7D59YyTQhxkggSrQxpK3EsMswDgYDVR0PAQH/BAQDAgeAMGIGA1Ud
HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTTJOSU0v
MC9FNUFBM0IwRjlGNThDOTM0MjFDNjQ4MjA0QUI0MzFBNEFEQzRCMENCLmNybDBv
BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS8xL0U1QUEzQjBGOUY1OEM5MzQyMUM2NDgyMDRBQjQz
MUE0QURDNEIwQ0IuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5
bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9NMk5JTS8wL0U1QUEzQjBGOUY1OEM5
MzQyMUM2NDgyMDRBQjQzMUE0QURDNEIwQ0IubWZ0MBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA10vr+4szuCmAp
9gM04pRSTbNfObDdplO+9e2lUZZ60Ie8HLoUC/oAD7K1iekapFN9pc2GFek5GkQJ
H3syeJ41p13Yn3nYGNSbSTyM8pFHcFfrfvi1JeFlB2OfyK1b93OJeKsRWk0GMEOf
NUqf0xtO0wxAR+G5WcMiNV+CjGemn8jGMfwntPShTcLX8dK9mcr34JmTouCTsTIm
G8D5ke16m/Xu4usun/2JNot1Eg2mTXYzehUhTm6INnA7GTkvAsTZPJMPotUviJly
9+wv+KdgMq4QJqJuLJoYvJ5rMv102jvGypgsksUlv116KDscrJBEUtc+49WT/C2r
XD7KmzE1
-----END CERTIFICATE-----
Generated at Sun Oct 4 08:16:21 2026 by rpki-client