
$ rpki-client -vvvf rpkica.twnic.tw/rpki/MITACMDC/0/F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.mft
File: F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.mft (raw, json)
Hash identifier: +Bd8+NvlDfntuUVkseyz9NkbIpgOv49pvc0gcMwkOfo=
Subject key identifier: E6:E5:A8:39:A5:D1:3D:85:61:88:18:CB:CA:4D:83:F9:54:D5:3A:15
Authority key identifier: F1:CE:AE:4A:E1:3A:71:AF:6A:07:09:A4:C3:00:AD:A4:62:3A:2C:AA
Certificate issuer: /CN=F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA
Certificate serial: 22DDFBDA73614959787D9578909C8A4C913D07C8
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/MITACMDC/0/F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.mft
Manifest number: C6
Signing time: Fri 02 Oct 2026 23:25:19 +0000
Manifest this update: Fri 02 Oct 2026 23:20:19 +0000
Manifest next update: Sun 04 Oct 2026 02:51:19 +0000
Files and hashes: 1: F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.crl (hash: OfOLdy1uTPMBQV6Y0KgpjUbWJfgxf4qZ+YeOqvGsMjs=)
2: 323430343a646230303a3a2f33322d3332203d3e203138313739.roa (hash: ScKz5v7qY5jPX8fFHjF9zU3+yWebwV6lUVVjO7sfadI=)
3: 3130332e32302e3137362e302f32322d3232203d3e203138313739.roa (hash: PNKjey9tKMdDR4FRuzXEfmnFsMhGJbtdw6pFSO4K0J8=)
4: 3231312e37382e3234302e302f32302d3232203d3e203138313739.roa (hash: wtDOplvpAqeejc+mSEqtFsj/OGKvnvcOzFKX6zd6nQY=)
5: 3130332e31362e3234342e302f32322d3232203d3e203138313739.roa (hash: 7gfsjGvmdQGtAgO0An6FiUxxSYVdxi5kO9sx5OvgxYQ=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/MITACMDC/0/F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.crl
rsync://rpkica.twnic.tw/rpki/MITACMDC/0/F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 02:51:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:dd:fb:da:73:61:49:59:78:7d:95:78:90:9c:8a:4c:91:3d:07:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA
Validity
Not Before: Oct 2 23:20:19 2026 GMT
Not After : Oct 4 02:51:19 2026 GMT
Subject: CN=E6E5A839A5D13D85618818CBCA4D83F954D53A15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3c:39:9d:ec:55:e2:a3:37:65:2b:cd:bb:4e:
b6:c9:ff:e4:49:3b:51:3e:79:49:9c:98:a3:ae:3b:
b7:36:95:ca:c6:22:d8:01:c5:6d:1d:d9:be:d0:6b:
24:ab:b0:75:3d:42:f6:01:f1:82:b2:60:37:f0:e5:
f4:01:c3:33:2b:f9:6a:3a:93:9d:7d:6c:12:8c:e4:
2e:c9:6d:b2:f9:b5:bd:ee:7a:b4:99:76:da:d1:49:
06:c2:3a:cd:87:a2:7d:2a:a0:b7:a1:72:74:a1:ad:
6e:45:57:98:41:96:0d:3a:8a:79:9d:6b:8f:95:38:
dc:bd:1d:76:03:5e:65:9b:c6:ad:b8:c6:68:88:ad:
49:8d:30:15:aa:0a:40:2e:58:67:bd:4d:4f:36:e8:
d1:9f:04:6d:3d:f1:bf:5d:a6:f7:bc:82:18:27:63:
a7:a5:40:32:56:3f:b4:e0:64:52:e1:83:8e:f6:f4:
85:5b:88:04:84:77:47:96:ee:e3:94:d9:71:41:c8:
43:f5:36:79:84:01:37:45:74:f1:a2:12:fd:73:3d:
34:3b:59:01:4e:60:84:fc:53:5b:9b:92:0b:67:a6:
5e:ee:3c:f8:d4:4f:6f:77:37:ff:42:ee:9d:fa:07:
f9:03:4b:9e:3f:fd:9b:29:8e:d9:8d:21:71:39:68:
da:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:E5:A8:39:A5:D1:3D:85:61:88:18:CB:CA:4D:83:F9:54:D5:3A:15
X509v3 Authority Key Identifier:
keyid:F1:CE:AE:4A:E1:3A:71:AF:6A:07:09:A4:C3:00:AD:A4:62:3A:2C:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/MITACMDC/0/F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MITACMDC/0/F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:80:28:42:c0:3a:7a:b9:85:69:17:e2:09:81:63:f6:88:ee:
ef:c7:63:4a:31:00:aa:63:4b:10:27:f6:41:95:de:e2:23:37:
50:20:e7:4c:0c:05:e3:ab:69:0b:f5:1c:c0:ed:20:14:c7:ca:
7e:78:35:4d:bc:7d:6c:29:93:a9:9f:f1:5a:25:9f:64:db:89:
b4:cb:ca:d5:d6:16:8f:5c:f6:10:00:a8:9b:1f:35:c2:79:75:
a6:97:fb:90:3e:19:62:ae:71:38:ec:ac:77:e3:d7:4b:ce:88:
e3:9c:4a:f4:ca:d1:ea:6d:52:57:94:69:82:d6:2b:52:49:76:
1e:67:85:74:ee:09:8f:4f:e5:e2:1a:98:7e:67:b8:08:23:4b:
c8:b6:65:df:27:dd:5e:9f:09:c5:13:45:a2:01:10:36:fa:e9:
dd:69:06:59:81:26:fb:43:78:9a:b1:79:8d:ea:c0:56:e6:cb:
ee:68:dd:d6:72:09:33:1b:c1:66:57:0d:7f:15:70:c1:a6:8a:
c2:c3:40:e4:2b:fe:cd:7d:c9:5a:ae:32:c9:d7:f1:df:fa:cc:
0d:40:6c:ec:46:1e:fb:f5:30:96:a5:6b:53:8b:34:ba:98:4e:
4d:9a:8a:f7:5b:f9:9a:27:ec:1a:47:30:e7:f8:76:5d:70:08:
a9:e4:af:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 20:19:33 2026 by rpki-client