
$ rpki-client -vvvf rpkica.twnic.tw/rpki/MINGJINGEN/0/FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6.mft
File: FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6.mft (raw, json)
Hash identifier: JA++0dQVGE3wMgbefmC4bGPg+TU26sx/YfXG0cjbGlo=
Subject key identifier: D5:9A:C0:70:ED:55:88:99:A4:0E:28:30:FC:A1:71:B8:B4:C0:F9:9F
Authority key identifier: FD:6E:1D:F6:0D:EF:D4:38:47:09:30:6D:E6:F6:2F:96:FE:1C:5B:A6
Certificate issuer: /CN=FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6
Certificate serial: BA9CC3ED3417D7C3AAE77B88E3A95EB90E8480
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/MINGJINGEN/0/FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6.mft
Manifest number: D7
Signing time: Sat 03 Oct 2026 23:13:21 +0000
Manifest this update: Sat 03 Oct 2026 23:08:21 +0000
Manifest next update: Mon 05 Oct 2026 01:24:21 +0000
Files and hashes: 1: 3130332e3133352e32322e302f32332d3234203d3e20313331363333.roa (hash: QJpakj5AI9RKVWG2PgQIpjIivIC60des2reJiowl4os=)
2: 3130332e3133352e32302e302f32322d3234203d3e20323033303133.roa (hash: /BkzGnIADOG5q6v5Jcjt5hTu07e9hGlwOm8KNG5UzOI=)
3: 3130332e3133352e32302e302f32322d3232203d3e20313331363333.roa (hash: JgeKv43zj2I8mn+V1L9xsA2666IYScxWd+2UEJ5XPhc=)
4: FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6.crl (hash: gYM5LlC4eQ9wqdgahH21rQ8hs2KV/3EZHE2MgOkN/Ds=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/MINGJINGEN/0/FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6.crl
rsync://rpkica.twnic.tw/rpki/MINGJINGEN/0/FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Oct 2026 01:24:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
ba:9c:c3:ed:34:17:d7:c3:aa:e7:7b:88:e3:a9:5e:b9:0e:84:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6
Validity
Not Before: Oct 3 23:08:21 2026 GMT
Not After : Oct 5 01:24:21 2026 GMT
Subject: CN=D59AC070ED558899A40E2830FCA171B8B4C0F99F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:46:79:05:ba:ca:05:19:08:36:cc:9c:49:52:
0e:75:e5:7b:f5:54:dd:c1:09:cd:f7:f5:3b:c2:fc:
5f:94:95:0a:7e:59:75:19:ef:19:f8:b6:4f:bf:ac:
32:53:f3:f5:a4:bb:5c:11:04:5e:75:02:15:e2:72:
7b:99:59:29:68:2f:57:c3:51:83:38:65:f2:68:44:
e9:9a:dc:63:2e:c5:81:1f:fc:82:02:ff:12:e9:bf:
b1:ed:23:80:85:30:32:4e:01:9e:26:fd:e9:7a:ca:
94:7d:ab:c4:6d:ee:15:e2:cc:bb:dd:11:73:4d:14:
b7:4e:5f:d8:d8:f9:9d:cb:d1:01:10:c5:a3:64:76:
4a:e2:2e:7d:b8:c4:94:ce:f6:25:90:ae:41:f2:54:
f7:56:4f:38:a1:87:6d:b6:ce:1c:2d:f7:77:be:df:
8a:89:df:2b:7e:95:9d:cf:a8:de:96:fb:87:10:1f:
52:a0:72:93:77:f0:70:24:d7:c9:c5:e8:37:bf:e2:
5e:9e:63:57:ed:f8:30:5d:58:01:3c:98:44:c0:b1:
0e:3b:a5:d3:8f:10:9f:e4:1f:5b:9a:05:20:b3:f0:
8c:2a:39:60:ab:c1:16:ba:d3:c4:6d:26:74:01:d4:
fe:1b:55:6a:ed:89:13:25:13:4e:68:a1:a1:34:f1:
f7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:9A:C0:70:ED:55:88:99:A4:0E:28:30:FC:A1:71:B8:B4:C0:F9:9F
X509v3 Authority Key Identifier:
keyid:FD:6E:1D:F6:0D:EF:D4:38:47:09:30:6D:E6:F6:2F:96:FE:1C:5B:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/MINGJINGEN/0/FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MINGJINGEN/0/FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:f9:3b:61:84:f4:08:b0:fa:33:73:f2:55:16:4f:94:8d:75:
ee:ca:f9:b8:f6:19:86:88:5b:63:30:81:b2:3b:fd:6d:21:41:
2d:51:c2:60:fe:69:04:3d:36:dd:5a:8c:d5:88:b1:b3:27:84:
ac:ed:8c:46:6f:b5:6b:b9:49:a7:7c:c9:1e:2c:c9:7a:93:a3:
80:ac:62:ff:2a:51:9e:87:c5:04:fd:7c:7a:64:a8:3f:a1:02:
1d:51:d5:39:15:83:44:0c:e2:e9:43:7d:d3:d3:a9:94:df:51:
7e:a0:0c:bb:6e:5a:f2:05:b7:fc:56:7d:3e:b6:9f:b5:bf:cb:
ea:ee:31:73:e6:dc:4f:d9:f5:2a:b2:ee:06:31:fd:04:fd:94:
4a:0c:69:36:82:0e:b4:a7:bc:ad:12:5f:ec:73:6e:cc:c7:38:
7f:bf:24:3d:80:03:55:fd:26:11:02:51:8f:cf:3b:17:36:a6:
f6:de:f1:a6:95:c8:0d:d3:31:2f:1b:e5:0b:2d:97:43:9b:09:
4a:f2:e2:d1:08:15:28:f4:32:69:24:4e:7b:be:fd:a7:02:68:
11:00:89:1d:6f:03:48:d3:a4:b8:d4:a6:1a:4b:3d:15:49:cd:
42:86:6d:e4:9d:aa:32:c7:01:79:0e:b9:5b:53:7d:55:96:d8:
97:b5:d9:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:37:40 2026 by rpki-client