
$ rpki-client -vvf rpkica.twnic.tw/rpki/MERCYCAT/0/C4FE0149FC774090A5B6304E8968380A1F1B0426.mft
File: C4FE0149FC774090A5B6304E8968380A1F1B0426.mft (raw, json)
Hash identifier: 8JxtehmVoiY5JGKXT0F/e1Fqd6btchycp+y0V1unWr0=
Subject key identifier: 86:AE:28:CB:75:52:1E:FB:25:47:D5:DD:1D:FC:39:B9:29:9A:80:CB
Authority key identifier: C4:FE:01:49:FC:77:40:90:A5:B6:30:4E:89:68:38:0A:1F:1B:04:26
Certificate issuer: /CN=C4FE0149FC774090A5B6304E8968380A1F1B0426
Certificate serial: 07B0EEEF22F1B3A2F0A52F57B78B0A7D87A6F707
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C4FE0149FC774090A5B6304E8968380A1F1B0426.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/MERCYCAT/0/C4FE0149FC774090A5B6304E8968380A1F1B0426.mft
Manifest number: 82
Signing time: Fri 14 Aug 2026 12:01:46 +0000
Manifest this update: Fri 14 Aug 2026 11:56:46 +0000
Manifest next update: Sat 15 Aug 2026 15:58:46 +0000
Files and hashes: 1: 3130332e3137322e3132362e302f32332d3234203d3e203138343238.roa (hash: RmocfnFYGeRr/aQ5L4jWeV+BcjwmA5Wox7nbUvuA0XQ=)
2: C4FE0149FC774090A5B6304E8968380A1F1B0426.crl (hash: G3WwYC4CY1/1oCfXOr8vyczCk9BiFJfP1Hqxurh7uto=)
3: 323430373a643234303a3a2f33322d3438203d3e203138343238.roa (hash: rBUhV/xvRZeEelrs2jyNJogNIGW8G/cMNY2z96YxdgM=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/MERCYCAT/0/C4FE0149FC774090A5B6304E8968380A1F1B0426.crl
rsync://rpkica.twnic.tw/rpki/MERCYCAT/0/C4FE0149FC774090A5B6304E8968380A1F1B0426.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C4FE0149FC774090A5B6304E8968380A1F1B0426.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 15 Aug 2026 15:58:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:b0:ee:ef:22:f1:b3:a2:f0:a5:2f:57:b7:8b:0a:7d:87:a6:f7:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C4FE0149FC774090A5B6304E8968380A1F1B0426
Validity
Not Before: Aug 14 11:56:46 2026 GMT
Not After : Aug 15 15:58:46 2026 GMT
Subject: CN=86AE28CB75521EFB2547D5DD1DFC39B9299A80CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ee:c3:30:43:fb:5e:89:4d:af:4b:45:a1:8e:
03:04:ab:04:86:74:1e:17:9e:4f:df:3c:55:f6:5a:
b8:95:e0:3b:1b:ba:ab:4e:81:6b:bf:78:4a:15:c9:
b8:3f:68:43:67:de:14:ee:31:e1:af:63:ab:ca:25:
47:43:a5:be:0e:0c:ec:e8:5b:a9:80:66:15:89:aa:
f7:7b:b2:68:87:f2:ad:6c:d9:16:9f:1c:39:40:d8:
a1:5a:5f:a8:1a:86:38:19:2e:3e:e7:21:c7:26:b1:
53:64:5d:86:db:20:71:62:af:d8:8a:bc:35:29:ef:
7c:54:5a:99:4d:0e:14:3d:9e:dc:51:5f:27:20:93:
ba:d9:db:56:a3:91:93:df:ab:08:d3:0b:f4:17:f1:
37:6a:14:0f:57:18:b6:a9:fc:b8:77:f5:e3:9a:cc:
43:99:33:5e:4d:69:fe:c1:bc:26:14:ca:0c:59:62:
9d:3e:90:ca:9f:e2:f1:10:ed:ee:59:36:b9:5b:f7:
e7:0f:8a:4e:d4:81:df:02:4f:a8:93:b1:4a:ad:91:
c9:ad:7e:88:be:42:bf:a5:fc:7b:3c:71:f9:b8:33:
94:d4:22:19:85:1b:58:01:56:e3:4e:79:9c:dd:c6:
1a:45:3a:c6:f0:58:48:ac:16:94:14:67:ca:48:69:
ff:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:AE:28:CB:75:52:1E:FB:25:47:D5:DD:1D:FC:39:B9:29:9A:80:CB
X509v3 Authority Key Identifier:
keyid:C4:FE:01:49:FC:77:40:90:A5:B6:30:4E:89:68:38:0A:1F:1B:04:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/MERCYCAT/0/C4FE0149FC774090A5B6304E8968380A1F1B0426.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C4FE0149FC774090A5B6304E8968380A1F1B0426.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MERCYCAT/0/C4FE0149FC774090A5B6304E8968380A1F1B0426.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:e9:11:13:93:c8:9b:83:a5:0a:61:bb:bb:cc:0d:8c:8f:32:
21:8a:fb:70:50:26:cb:24:b5:4b:20:38:93:1f:98:67:8c:07:
2f:cc:1b:78:27:b7:b1:55:01:14:4d:d0:ac:5c:cd:c1:e6:34:
48:0f:57:02:89:9c:76:ae:cd:79:a2:ab:e7:60:66:a6:f3:63:
fd:fc:4a:7a:ff:ac:66:4c:23:e2:22:b8:fa:ba:30:bb:6e:fc:
6e:b0:71:9c:1b:b3:67:37:ca:e5:69:a6:dd:a2:be:84:3a:c3:
27:3a:1f:68:62:33:2e:fa:0a:83:4f:e5:8e:07:15:36:a0:6a:
35:d9:0d:0f:28:b8:45:8f:8a:17:02:43:01:aa:0b:08:41:39:
0f:b3:5e:61:b4:f1:42:bc:15:6e:d4:a1:10:f2:39:d2:83:44:
d8:f6:0c:24:1a:17:09:03:11:78:80:61:74:8a:2b:00:41:f7:
2d:7e:3f:d8:aa:19:d0:4e:d4:5b:d2:3c:69:1b:4e:8e:06:38:
cb:6f:8b:1c:7a:83:63:86:29:f7:48:87:b3:c8:4e:7e:93:4d:
a7:ea:8f:bc:93:47:9d:58:aa:9e:e3:67:e3:6b:b1:b6:0b:96:
ae:89:2f:dc:03:08:c7:3f:0d:4a:26:87:c2:19:18:6a:3c:c2:
1a:f3:74:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:21:38 2026 by rpki-client