
$ rpki-client -vvf rpkica.twnic.tw/rpki/MITACMDC/0/F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.mft
File: F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.mft (raw, json)
Hash identifier: qWqW0ZPFrAJi/PrkJcDsQG9uIHt8peef5NqWbXhCk6Y=
Subject key identifier: 3C:64:11:E9:A9:81:86:02:D3:C8:7D:D2:FB:95:8A:E6:60:3F:52:B0
Authority key identifier: F1:CE:AE:4A:E1:3A:71:AF:6A:07:09:A4:C3:00:AD:A4:62:3A:2C:AA
Certificate issuer: /CN=F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA
Certificate serial: 20EB7EDBC1B7F0D8FF2F2BA3B8FAAED209B97CCC
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/MITACMDC/0/F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.mft
Manifest number: 47
Signing time: Tue 30 Jun 2026 01:02:44 +0000
Manifest this update: Tue 30 Jun 2026 00:57:44 +0000
Manifest next update: Wed 01 Jul 2026 01:30:44 +0000
Files and hashes: 1: 3130332e31362e3234342e302f32322d3232203d3e203138313739.roa (hash: 7gfsjGvmdQGtAgO0An6FiUxxSYVdxi5kO9sx5OvgxYQ=)
2: F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.crl (hash: llnMOrdCTwU1bro/pnVHBYYWQfQL6R7gCfBeY1UF2xI=)
3: 3231312e37382e3234302e302f32302d3232203d3e203138313739.roa (hash: wtDOplvpAqeejc+mSEqtFsj/OGKvnvcOzFKX6zd6nQY=)
4: 323430343a646230303a3a2f33322d3332203d3e203138313739.roa (hash: ScKz5v7qY5jPX8fFHjF9zU3+yWebwV6lUVVjO7sfadI=)
5: 3130332e32302e3137362e302f32322d3232203d3e203138313739.roa (hash: PNKjey9tKMdDR4FRuzXEfmnFsMhGJbtdw6pFSO4K0J8=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/MITACMDC/0/F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.crl
rsync://rpkica.twnic.tw/rpki/MITACMDC/0/F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Jul 2026 01:30:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:eb:7e:db:c1:b7:f0:d8:ff:2f:2b:a3:b8:fa:ae:d2:09:b9:7c:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA
Validity
Not Before: Jun 30 00:57:44 2026 GMT
Not After : Jul 1 01:30:44 2026 GMT
Subject: CN=3C6411E9A9818602D3C87DD2FB958AE6603F52B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ad:05:01:97:c4:59:36:86:e3:80:0c:9d:e1:
90:64:2a:77:bf:10:72:c1:ac:24:8c:c6:75:66:7e:
4d:87:32:4c:79:7f:f1:8d:06:01:8d:88:eb:cf:fb:
9d:f6:85:26:c3:ff:1c:06:40:ea:d2:d6:4e:29:27:
cf:ae:06:5c:29:e2:9b:97:36:b9:ea:77:65:13:e6:
d2:e4:73:6c:60:d0:cb:72:3f:45:36:8d:0f:9b:bf:
5f:37:7c:89:47:b0:80:61:8c:a7:d3:13:f6:9b:6e:
8a:75:f7:fb:86:1a:82:e0:a3:8f:d4:42:52:64:46:
55:ff:98:c5:49:37:28:b7:11:37:4f:40:b5:3a:b9:
9e:c4:f4:48:73:98:2e:d7:5a:6a:d2:52:fd:f5:23:
14:a9:b8:41:07:4f:bf:3a:d5:af:80:79:17:1d:53:
09:0a:9c:d0:7e:fb:ac:a1:b5:a1:b0:09:8b:ab:9e:
e8:e8:15:4f:1e:b1:76:3f:75:46:f5:25:e2:45:03:
e5:de:34:64:18:fe:20:0a:df:4d:df:0b:75:9a:30:
10:11:35:f0:c4:c2:3e:ba:17:e9:ae:77:1b:5e:5d:
c2:7c:ba:6b:10:c3:bb:c3:7b:57:69:37:dd:12:29:
f8:f5:07:50:c5:f4:40:05:5f:5d:79:0a:6b:72:64:
39:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:64:11:E9:A9:81:86:02:D3:C8:7D:D2:FB:95:8A:E6:60:3F:52:B0
X509v3 Authority Key Identifier:
keyid:F1:CE:AE:4A:E1:3A:71:AF:6A:07:09:A4:C3:00:AD:A4:62:3A:2C:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/MITACMDC/0/F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MITACMDC/0/F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:1b:71:41:61:7d:c4:75:6c:45:4a:fd:bb:f7:87:18:a2:59:
10:ec:ee:29:b4:05:9f:0c:c8:33:85:88:ef:07:ac:fb:1c:d7:
aa:ad:9e:22:23:99:4d:56:07:b3:11:39:b2:f9:a5:c0:e9:51:
67:8d:b3:c4:b9:d4:8e:d7:69:ad:96:5a:01:d0:26:c0:2d:ed:
a6:b5:fd:1a:d1:90:ca:8d:a8:a4:25:59:65:d8:67:f0:61:9b:
ac:3b:84:87:a3:91:d0:15:08:bc:ff:85:ad:7f:e8:a4:7d:7f:
99:f5:41:1c:7b:b2:16:c0:8f:02:04:09:65:d0:25:f7:36:3d:
6b:c5:fe:87:a7:f6:47:66:60:49:6b:0e:f5:07:4b:a7:9f:89:
1b:2a:9c:22:a2:96:67:d9:ae:a4:93:e0:8b:a3:20:8a:c7:f9:
90:dd:05:0c:d8:98:91:01:88:e5:b5:1a:23:73:8f:24:02:49:
66:5d:55:32:fe:bd:49:88:d7:2a:20:24:58:c8:f4:64:72:8d:
b7:ad:81:6e:be:18:52:0e:b9:24:8d:db:88:b8:4c:20:38:53:
0b:70:37:ca:17:7f:92:e6:46:56:40:7c:c3:f0:77:2e:ba:39:
48:c2:d5:6c:c7:c8:f0:39:ff:48:18:57:cc:71:fc:ae:10:00:
3a:83:70:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:07:28 2026 by rpki-client