
$ rpki-client -vvf rpkica.twnic.tw/rpki/MINGXI/1/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.mft
File: D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.mft (raw, json)
Hash identifier: b8iuaTHz/lx9AlIfL4UxvN96UOMFCfaPbS8yHQjbcXU=
Subject key identifier: 79:04:A4:EE:12:08:3C:C6:54:7C:91:D5:F1:6B:2D:2B:DC:38:F7:C5
Authority key identifier: D9:1F:6B:17:A5:DF:E3:B2:33:6D:1A:E3:E2:33:D1:0B:2D:62:AA:25
Certificate issuer: /CN=D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25
Certificate serial: 7A372948810651B4DF5663CFE4C6DF0A536F19F5
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/MINGXI/1/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.mft
Manifest number: 45
Signing time: Mon 29 Jun 2026 18:57:15 +0000
Manifest this update: Mon 29 Jun 2026 18:52:15 +0000
Manifest next update: Tue 30 Jun 2026 19:51:15 +0000
Files and hashes: 1: 3133382e3235322e3131362e302f32332d3234203d3e203234313632.roa (hash: xeGUxts4a0IBuIHgiewir0gp38fQafeLm2d3Cwvi9SE=)
2: D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.crl (hash: cjt6QKmnMEbB41svOJegOzi+A8sQ59zv9X/pCRChfO8=)
3: 3133382e3235322e3131362e302f32332d3234203d3e203231383539.roa (hash: sgvshajZGUxIlcU63EqLfebE4wegi3sti647jzuqblg=)
4: 3133382e3235322e3131362e302f32332d3234203d3e203138343136.roa (hash: 5vM1t1el5nYZJRxVKo6mmnrOcGRvisTj4oU5YWdMajw=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/MINGXI/1/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.crl
rsync://rpkica.twnic.tw/rpki/MINGXI/1/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 19:24:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:37:29:48:81:06:51:b4:df:56:63:cf:e4:c6:df:0a:53:6f:19:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25
Validity
Not Before: Jun 29 18:52:15 2026 GMT
Not After : Jun 30 19:51:15 2026 GMT
Subject: CN=7904A4EE12083CC6547C91D5F16B2D2BDC38F7C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:56:e1:38:fa:e3:34:e1:70:48:24:9f:61:5f:
0d:cd:48:2d:8b:66:e6:eb:b5:45:66:bf:f5:4b:21:
39:0c:5d:0b:19:36:df:57:ae:d4:33:05:a2:01:29:
68:73:f2:36:e7:b8:59:d6:65:56:48:a9:7a:9d:74:
e6:87:13:88:8e:5b:b0:50:66:dd:43:6c:be:e2:e7:
57:eb:7d:b0:11:0e:4c:87:7a:46:f9:03:74:ba:31:
e0:a9:6c:a8:e7:83:ac:de:f8:f6:b2:f0:d2:24:65:
54:5e:18:f3:20:55:24:c4:4a:49:ec:7c:2d:1a:d1:
99:a7:3e:a2:08:a9:fd:24:1e:5c:5b:44:be:30:06:
e0:fc:e1:11:89:6a:5e:1d:3d:b0:c5:7c:8c:c2:d0:
dc:89:64:5d:12:76:2a:9f:29:23:5b:07:08:64:9f:
5c:1d:db:da:54:c3:33:3f:fc:38:a8:55:3a:53:03:
ef:92:20:79:2f:94:9f:a2:db:5c:85:33:94:c2:4d:
41:a3:db:10:61:6f:12:75:cb:e8:e4:c3:51:dd:1e:
80:9d:89:6d:90:f3:fe:97:04:4c:7a:58:7a:78:e1:
3a:c7:70:f3:2a:78:20:c9:59:2d:00:57:51:41:3d:
52:ca:2f:8c:82:79:58:26:78:ec:43:85:4e:b2:bd:
b7:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:04:A4:EE:12:08:3C:C6:54:7C:91:D5:F1:6B:2D:2B:DC:38:F7:C5
X509v3 Authority Key Identifier:
keyid:D9:1F:6B:17:A5:DF:E3:B2:33:6D:1A:E3:E2:33:D1:0B:2D:62:AA:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/MINGXI/1/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MINGXI/1/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:77:42:26:79:3e:81:28:2a:02:af:47:7a:db:f8:89:19:04:
a5:34:0e:f7:14:30:68:24:2c:38:6c:0b:04:ec:3f:09:23:0b:
72:05:16:33:08:21:17:cd:25:ee:55:e9:ad:b4:b3:2d:89:1b:
c1:44:b1:84:c5:75:13:54:ff:58:44:a7:fa:6d:50:15:37:bd:
bc:7b:63:c2:ed:59:ae:ee:cf:3f:74:e8:d1:b1:9f:a6:de:cd:
20:54:ac:7c:77:d0:54:6d:eb:8b:78:2e:cb:2c:89:26:6c:b4:
65:9c:4f:d6:90:51:bc:82:c0:49:f0:58:ca:4c:69:22:56:0e:
99:e5:47:6d:de:79:92:d5:30:61:e4:39:a0:50:6e:f3:c6:85:
64:16:06:bd:45:ba:fe:b5:c9:3b:b0:e0:3e:5d:15:dc:eb:96:
1c:f8:21:f0:a3:69:da:fc:0c:68:52:16:83:18:ea:3d:a5:8f:
21:cd:8b:06:4f:b1:fe:d4:4e:39:bc:f7:ac:ea:ab:15:a4:f2:
81:37:72:26:30:88:b6:9a:eb:7f:66:8f:91:5e:2b:1e:7f:1d:
b2:38:ea:aa:9f:58:18:f1:aa:cb:05:79:a1:eb:ce:19:93:ee:
0d:fd:97:55:10:c0:3f:78:0e:0d:6e:41:1a:b7:e4:dd:8c:1a:
4e:7b:b5:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 13:10:14 2026 by rpki-client