
$ rpki-client -vvvf rpkica.twnic.tw/rpki/MERCYCAT/0/C4FE0149FC774090A5B6304E8968380A1F1B0426.mft
File: C4FE0149FC774090A5B6304E8968380A1F1B0426.mft (raw, json)
Hash identifier: ERPAraJxlsRHMQdpwuuwiprlE77JqUboo9wXPUausUA=
Subject key identifier: 3C:52:78:60:34:F5:21:A2:0A:2A:9B:3A:53:3F:57:98:9C:2A:A6:FF
Authority key identifier: C4:FE:01:49:FC:77:40:90:A5:B6:30:4E:89:68:38:0A:1F:1B:04:26
Certificate issuer: /CN=C4FE0149FC774090A5B6304E8968380A1F1B0426
Certificate serial: 790F10F37147232051169A0AE10CDE425959EEEC
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C4FE0149FC774090A5B6304E8968380A1F1B0426.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/MERCYCAT/0/C4FE0149FC774090A5B6304E8968380A1F1B0426.mft
Manifest number: C6
Signing time: Sun 04 Oct 2026 09:19:49 +0000
Manifest this update: Sun 04 Oct 2026 09:14:49 +0000
Manifest next update: Mon 05 Oct 2026 10:40:49 +0000
Files and hashes: 1: 3130332e3137322e3132362e302f32332d3234203d3e203138343238.roa (hash: RmocfnFYGeRr/aQ5L4jWeV+BcjwmA5Wox7nbUvuA0XQ=)
2: 323430373a643234303a3a2f33322d3438203d3e203138343238.roa (hash: rBUhV/xvRZeEelrs2jyNJogNIGW8G/cMNY2z96YxdgM=)
3: C4FE0149FC774090A5B6304E8968380A1F1B0426.crl (hash: oUE/8t7MSLVdhOh+tZIwZ94TWw4n72Np39m5y/FD5ow=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/MERCYCAT/0/C4FE0149FC774090A5B6304E8968380A1F1B0426.crl
rsync://rpkica.twnic.tw/rpki/MERCYCAT/0/C4FE0149FC774090A5B6304E8968380A1F1B0426.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C4FE0149FC774090A5B6304E8968380A1F1B0426.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Oct 2026 10:40:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:0f:10:f3:71:47:23:20:51:16:9a:0a:e1:0c:de:42:59:59:ee:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C4FE0149FC774090A5B6304E8968380A1F1B0426
Validity
Not Before: Oct 4 09:14:49 2026 GMT
Not After : Oct 5 10:40:49 2026 GMT
Subject: CN=3C52786034F521A20A2A9B3A533F57989C2AA6FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5f:10:f4:e9:5f:2d:42:fb:20:c8:49:01:5c:
19:b0:56:24:19:f7:4e:66:32:9f:0d:fc:06:7d:76:
8e:43:0b:50:b0:15:84:f2:dd:df:b2:86:4e:1d:dd:
eb:d9:62:f1:ce:30:1d:59:84:68:c8:8a:1b:b4:d4:
0f:10:7b:45:8f:62:49:c9:a6:c8:49:6d:7b:f2:4d:
29:74:89:64:a4:7c:81:cf:f9:c9:94:ae:aa:1f:f7:
33:5e:1e:b3:29:87:61:21:41:cc:ce:66:fc:aa:20:
82:85:f9:f6:4e:34:63:19:4f:da:df:5d:c7:f5:7e:
4e:f3:7d:12:36:dd:8f:13:a8:5b:b3:ee:84:59:53:
57:c3:fd:32:80:fc:f9:7d:f3:c0:2a:c1:6d:76:e4:
7c:c5:60:aa:f7:d5:c5:65:d8:d2:9a:44:1d:37:82:
02:1a:95:09:78:03:99:05:58:45:25:4b:29:d5:f5:
16:ff:94:0b:95:32:e9:d9:3b:cb:c0:a8:8c:ca:2b:
05:1e:01:f5:10:df:92:23:d6:6f:b7:ca:b1:66:66:
73:61:54:56:0d:85:39:e0:9e:ea:5d:8d:2e:f2:56:
b5:5d:65:bd:95:fd:cb:03:a8:d1:c1:48:96:a3:a9:
65:84:2e:2e:4c:2f:a4:60:78:c4:ce:a8:1a:1a:16:
47:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:52:78:60:34:F5:21:A2:0A:2A:9B:3A:53:3F:57:98:9C:2A:A6:FF
X509v3 Authority Key Identifier:
keyid:C4:FE:01:49:FC:77:40:90:A5:B6:30:4E:89:68:38:0A:1F:1B:04:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/MERCYCAT/0/C4FE0149FC774090A5B6304E8968380A1F1B0426.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C4FE0149FC774090A5B6304E8968380A1F1B0426.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MERCYCAT/0/C4FE0149FC774090A5B6304E8968380A1F1B0426.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:a9:91:80:a8:69:6c:47:d8:fd:e4:12:f0:c9:8b:f2:c5:fa:
9d:63:7a:05:ee:1d:8e:7c:62:ec:7d:49:a6:9d:f9:5e:bc:3a:
e1:7b:62:76:36:a7:af:49:f2:9a:f1:13:62:18:43:39:90:5b:
69:14:00:86:ec:c2:34:8a:d4:d6:51:26:26:10:e1:27:a2:78:
47:9a:a2:ac:86:b3:b8:27:2e:b5:06:57:f3:95:16:18:35:57:
db:10:5f:ae:14:97:53:b4:4a:44:c8:a3:57:32:8a:f8:74:51:
b2:f4:c8:d2:21:4c:8f:b7:58:98:e6:30:2c:b2:19:9c:80:e2:
10:9c:23:14:33:3d:f3:87:5b:bf:a6:2e:a6:b1:9b:88:da:d9:
ed:06:79:fb:36:2a:8e:1b:e9:de:fa:29:8b:02:96:02:ea:26:
e4:b5:e9:34:6e:22:08:4a:f9:3d:e7:4b:09:09:c4:f1:a6:ef:
49:7c:ce:10:c2:9a:c6:48:d6:8b:69:3a:99:a8:40:48:15:15:
ec:f1:e0:d6:d2:05:88:7b:8a:b2:68:9e:aa:b1:93:95:3c:30:
b8:6b:6b:70:bb:b2:eb:7a:25:8c:6d:1b:5a:c8:de:6c:a0:f7:
8c:11:5c:e7:c4:7d:72:03:c9:87:ac:c3:5c:7c:c2:4f:36:7f:
76:0a:8b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:39:30 2026 by rpki-client