
$ rpki-client -vvf rpkica.twnic.tw/rpki/M2NIM/1/B5BCB843FC62D50C018D67AAECEC768693B898BB.mft
File: B5BCB843FC62D50C018D67AAECEC768693B898BB.mft (raw, json)
Hash identifier: SRuIhA3oBPbWN8NK4podAA+nXHbIdM39OBUlecgXwuo=
Subject key identifier: 59:68:05:6C:8D:00:65:4C:65:9A:A2:02:4E:64:67:4E:CD:7E:BD:ED
Authority key identifier: B5:BC:B8:43:FC:62:D5:0C:01:8D:67:AA:EC:EC:76:86:93:B8:98:BB
Certificate issuer: /CN=B5BCB843FC62D50C018D67AAECEC768693B898BB
Certificate serial: 56A8BDB42E55B3942C15949D6BF56CDF40D03ABB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B5BCB843FC62D50C018D67AAECEC768693B898BB.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/M2NIM/1/B5BCB843FC62D50C018D67AAECEC768693B898BB.mft
Manifest number: 85
Signing time: Fri 14 Aug 2026 17:27:41 +0000
Manifest this update: Fri 14 Aug 2026 17:22:41 +0000
Manifest next update: Sat 15 Aug 2026 18:21:41 +0000
Files and hashes: 1: 3135372e32302e3133342e302f32342d3234203d3e20343030363138.roa (hash: XXKYaMUQ9ja5C/x9TwazrmKnnlLWSfJb+JMU6MAgrIw=)
2: 3135372e32302e3133352e302f32342d3234203d3e20313339333538.roa (hash: NLBte/Xngt5YiZc1cKE0ofpG8JJd20KTmhuGOcBYInE=)
3: B5BCB843FC62D50C018D67AAECEC768693B898BB.crl (hash: wpcjq/2q+9xhKxcRWLrBcmtaKU0qru0VuHsxzSF4ExM=)
4: 3135372e32302e3133352e302f32342d3234203d3e20313431303031.roa (hash: WOYBOovAsDkyK43+ASCyGIyOHFzLI6jt6PTK/EFmDKY=)
5: 3135372e32302e3133342e302f32332d3234203d3e203332353935.roa (hash: 2miGNbONfgJVnuMX1O6Xis0X2QHCKO3xHvx8nDoW3Q0=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/M2NIM/1/B5BCB843FC62D50C018D67AAECEC768693B898BB.crl
rsync://rpkica.twnic.tw/rpki/M2NIM/1/B5BCB843FC62D50C018D67AAECEC768693B898BB.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B5BCB843FC62D50C018D67AAECEC768693B898BB.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 15 Aug 2026 18:21:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:a8:bd:b4:2e:55:b3:94:2c:15:94:9d:6b:f5:6c:df:40:d0:3a:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B5BCB843FC62D50C018D67AAECEC768693B898BB
Validity
Not Before: Aug 14 17:22:41 2026 GMT
Not After : Aug 15 18:21:41 2026 GMT
Subject: CN=5968056C8D00654C659AA2024E64674ECD7EBDED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ae:46:71:d8:ca:2b:58:b0:c9:9a:6c:47:16:
50:3e:43:8b:c8:35:d3:23:d0:c9:80:ed:33:c8:98:
4b:ec:08:7a:5d:60:07:e0:5e:a5:0c:9b:df:ea:33:
dc:73:7a:1a:04:f5:f8:9e:87:fd:4d:0c:72:df:e9:
4a:64:a3:f0:79:96:73:98:f2:23:51:ec:1e:c4:f0:
90:56:5a:3f:6c:a0:5d:ea:c8:f8:de:bb:fa:23:ef:
6d:5e:19:d9:87:8c:48:88:7e:e1:77:2f:9d:b1:47:
5b:7c:83:81:c9:97:2e:df:58:eb:1b:af:87:0b:4a:
3a:ce:58:bf:ce:48:1b:72:8d:a3:a8:53:33:c6:7d:
78:48:99:6e:00:11:3c:f0:23:4c:e4:b4:1a:f9:0f:
ad:2e:8a:6e:37:18:67:12:f6:14:76:ac:5b:e6:37:
1a:a2:ed:ca:24:85:23:4b:5a:04:1a:60:23:5c:91:
8d:34:f6:fd:91:c8:5b:7c:d9:2f:0d:17:b7:7a:ed:
0c:f5:38:42:8d:7b:7f:a1:20:90:e4:f9:f1:82:c4:
69:5b:2c:b5:6b:5f:44:b0:5e:ed:fc:31:e6:a1:fc:
67:c0:6c:ef:c1:63:14:c9:7d:0e:52:93:a6:fc:38:
c7:21:c1:52:db:a7:ad:c2:f3:32:d7:51:e6:f8:ba:
3a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:68:05:6C:8D:00:65:4C:65:9A:A2:02:4E:64:67:4E:CD:7E:BD:ED
X509v3 Authority Key Identifier:
keyid:B5:BC:B8:43:FC:62:D5:0C:01:8D:67:AA:EC:EC:76:86:93:B8:98:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/M2NIM/1/B5BCB843FC62D50C018D67AAECEC768693B898BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B5BCB843FC62D50C018D67AAECEC768693B898BB.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/M2NIM/1/B5BCB843FC62D50C018D67AAECEC768693B898BB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:2b:e0:3b:3b:b7:d4:00:59:38:74:50:5d:a5:a2:0e:25:02:
37:5b:1e:9f:51:a6:b7:9c:0e:b4:f1:82:5f:33:49:4e:96:e3:
93:2b:56:1a:da:a9:28:38:72:02:74:dc:e9:d0:dc:d4:ae:37:
33:93:94:fd:d8:ad:0d:f6:67:51:50:ae:f7:9d:b0:f8:f0:86:
16:ed:b4:4f:13:74:bc:9c:60:9e:ae:bd:e6:80:81:bd:cf:92:
72:dd:54:9b:96:e0:2e:44:7c:36:19:20:b0:55:74:dd:39:68:
33:06:0d:39:c6:77:c4:34:4b:0a:59:1a:62:b0:eb:6c:79:80:
a4:72:79:80:0a:ea:e4:38:de:50:19:10:fc:b2:74:21:e7:7a:
88:93:02:74:1d:6b:da:97:dc:4c:36:6e:be:de:0e:d4:fb:14:
1b:8e:fe:bd:af:60:7f:35:d3:5b:4c:73:4d:f6:87:6d:86:35:
8e:d0:68:68:53:4e:53:e0:ee:de:70:19:52:d2:28:10:10:f6:
75:c0:25:b4:27:70:4b:e8:e9:89:cc:bc:c4:53:b0:51:46:e2:
59:37:64:e7:7a:f1:98:85:47:51:28:4d:61:b7:ff:be:d6:51:
5b:73:fc:bc:c6:5b:c9:c7:c2:27:e2:92:cb:21:16:2f:39:9a:
75:d3:ef:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 10:16:21 2026 by rpki-client