
$ rpki-client -vvf rpkica.twnic.tw/rpki/MINGDING/1/54A767F70005E532FFA8B9DDE3FA21A08AB2071B.mft
File: 54A767F70005E532FFA8B9DDE3FA21A08AB2071B.mft (raw, json)
Hash identifier: fPD4C3F0cKRj/k1Wlbn6HJxkTOHJSi6Nb/jzuEDMIR4=
Subject key identifier: 17:B1:9C:FB:B9:14:4F:0C:26:B1:51:62:02:21:D5:C9:D1:C9:2D:B1
Authority key identifier: 54:A7:67:F7:00:05:E5:32:FF:A8:B9:DD:E3:FA:21:A0:8A:B2:07:1B
Certificate issuer: /CN=54A767F70005E532FFA8B9DDE3FA21A08AB2071B
Certificate serial: 20D21CBCC9550CB6C827215612A56DE0253E6736
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/54A767F70005E532FFA8B9DDE3FA21A08AB2071B.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/MINGDING/1/54A767F70005E532FFA8B9DDE3FA21A08AB2071B.mft
Manifest number: 44
Signing time: Mon 29 Jun 2026 18:32:13 +0000
Manifest this update: Mon 29 Jun 2026 18:27:13 +0000
Manifest next update: Tue 30 Jun 2026 20:19:13 +0000
Files and hashes: 1: 54A767F70005E532FFA8B9DDE3FA21A08AB2071B.crl (hash: jJgx3xEGMJHRFXXQSt1+zxXx76rUsdcEC1h1JHC4Ko4=)
2: 3136352e3130312e38362e302f32332d3234203d3e20313334383233.roa (hash: X9cgg5To/tOSqEbLz+VmO5OOyOSIyUo2tulTtg9S+xk=)
3: 3136352e3130312e38362e302f32332d3234203d3e20313532313739.roa (hash: Y4PZP14tJCK7MmTbM230zXm6HZDKrsi1V3k9WtO8MoU=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/MINGDING/1/54A767F70005E532FFA8B9DDE3FA21A08AB2071B.crl
rsync://rpkica.twnic.tw/rpki/MINGDING/1/54A767F70005E532FFA8B9DDE3FA21A08AB2071B.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/54A767F70005E532FFA8B9DDE3FA21A08AB2071B.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 19:24:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:d2:1c:bc:c9:55:0c:b6:c8:27:21:56:12:a5:6d:e0:25:3e:67:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54A767F70005E532FFA8B9DDE3FA21A08AB2071B
Validity
Not Before: Jun 29 18:27:13 2026 GMT
Not After : Jun 30 20:19:13 2026 GMT
Subject: CN=17B19CFBB9144F0C26B151620221D5C9D1C92DB1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:72:fe:38:15:20:d3:82:28:22:54:5c:8d:06:
a2:7b:bf:da:30:ea:4d:3e:31:7a:8f:8b:61:d5:28:
8c:97:13:af:42:67:87:a6:1c:d9:d7:09:f2:aa:71:
9c:89:28:81:6f:10:df:68:8c:c2:e9:ff:64:01:51:
ef:a8:ed:ce:e5:85:10:a3:69:51:a4:5e:7b:a4:4c:
20:e9:cf:ea:41:13:7f:12:5f:d3:67:e2:25:ed:4f:
ad:3c:b6:f6:d8:e0:e4:8b:59:ec:4f:be:34:62:7c:
ea:e7:85:6b:75:1d:63:79:da:51:e8:0a:c3:d7:58:
07:c2:57:5a:fd:1c:99:df:36:16:8c:99:5e:29:c7:
e1:7e:16:80:12:8d:c5:df:b1:64:42:d5:2e:7f:08:
ce:2e:f4:44:9c:b4:17:8e:d7:46:bd:fb:06:e9:83:
c5:53:4f:d6:2a:cf:39:4e:6c:84:fb:56:fd:57:87:
a6:c8:9f:7e:3f:c2:4a:b0:2d:79:41:28:7e:02:1c:
be:8c:15:62:64:fa:e9:b2:a5:60:60:f7:ef:77:85:
f6:51:d0:00:a7:27:17:76:af:ea:e9:53:de:67:cd:
ab:b5:c6:d2:7a:a7:59:41:09:62:58:1c:fe:79:05:
ed:6f:8f:1e:33:8f:c2:3b:b7:95:00:0a:c1:0d:04:
26:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B1:9C:FB:B9:14:4F:0C:26:B1:51:62:02:21:D5:C9:D1:C9:2D:B1
X509v3 Authority Key Identifier:
keyid:54:A7:67:F7:00:05:E5:32:FF:A8:B9:DD:E3:FA:21:A0:8A:B2:07:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/MINGDING/1/54A767F70005E532FFA8B9DDE3FA21A08AB2071B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/54A767F70005E532FFA8B9DDE3FA21A08AB2071B.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MINGDING/1/54A767F70005E532FFA8B9DDE3FA21A08AB2071B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:03:b9:d0:00:60:ac:be:8c:31:f8:7a:5f:42:e0:a4:8f:09:
90:c6:25:be:07:82:55:d2:27:aa:27:38:22:0b:04:c5:1a:60:
a1:64:74:49:86:5c:17:5d:cd:87:70:1e:ae:1f:54:02:c3:5c:
0f:5c:06:df:c5:6f:34:d6:70:7a:2c:40:c9:40:0b:00:b5:e6:
41:3e:90:f8:e7:77:d0:a9:ed:2f:56:bf:2a:60:5b:42:b8:f5:
3a:56:68:df:8b:f7:cf:8a:c8:49:f9:2c:82:32:95:a4:73:ad:
a7:27:1e:62:99:41:2e:44:22:ab:c9:84:60:4b:ad:90:b9:59:
12:3a:5e:bb:04:f0:ea:f8:3b:94:13:ef:c4:5b:c9:a3:dd:02:
2c:ac:5f:99:37:2b:5c:f5:41:05:1a:83:e4:15:9f:ba:15:af:
85:d2:42:29:79:85:36:57:59:bd:7d:63:f4:fb:12:7b:8a:60:
84:7a:b6:22:fc:63:da:ba:ab:ed:06:a0:69:51:77:6e:0a:cc:
ca:ad:90:5b:8a:10:4c:76:3b:d6:aa:bf:d2:ae:0c:5f:65:9b:
99:cb:14:4e:e0:4d:4d:82:09:b9:3c:da:57:d5:4d:c7:ce:40:
ac:5b:9a:98:7b:3b:54:6a:68:51:d6:4b:f0:91:dd:da:d6:70:
f2:85:7a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 13:10:51 2026 by rpki-client