
$ rpki-client -vvf rpkica.twnic.tw/rpki/MLYTICS/0/2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F.mft
File: 2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F.mft (raw, json)
Hash identifier: ygiZmrwKJ7Wef2jxfE5Eus+UF/UvUDtVrJmKcfb/W4Y=
Subject key identifier: 85:B1:E9:89:4F:14:33:3E:DD:D0:5D:43:05:D2:CB:8B:2A:2A:0A:99
Authority key identifier: 29:23:BD:96:C7:B3:D4:BC:AA:10:BA:99:CE:29:DC:15:BC:10:18:3F
Certificate issuer: /CN=2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F
Certificate serial: 4C98C245BAFBECF190DE703756EBC5FA5C3E43DA
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/MLYTICS/0/2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F.mft
Manifest number: 4A
Signing time: Tue 30 Jun 2026 12:28:51 +0000
Manifest this update: Tue 30 Jun 2026 12:23:51 +0000
Manifest next update: Wed 01 Jul 2026 13:23:51 +0000
Files and hashes: 1: 3130332e3132352e3232362e302f32342d3234203d3e203136353039.roa (hash: 5Tf8/6KeNcrgy6JUvG6HFw++mwSYoU/UPstq8SkHoNA=)
2: 3130332e3132352e3232352e302f32342d3234203d3e203136353039.roa (hash: FmHmQMwwJ/NNx1Ea23G9M1I2l9BOeklXW28LFaNMNeA=)
3: 3130332e3132352e3232372e302f32342d3234203d3e203136353039.roa (hash: KGP6KIcV9P6yWvdW9RIZNoookZNci1EPcCE5EkDPzQg=)
4: 2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F.crl (hash: zAR2j65OO3jQDgYvQmC7PSESD5pgMSagZThQ52aGMPU=)
5: 3231312e37392e3130372e302f32342d3234203d3e203136353039.roa (hash: CjGMLe+Z4zl3oKhMgAnUNX5Qzo2hJu6hNiBeWrjbWr8=)
6: 3130332e3132352e3232342e302f32342d3234203d3e20333936393832.roa (hash: Uem5Q3NCsbS+pBiksFlyOVkJAZV5kyuPM0+iiLLcI/A=)
7: 3231312e37392e3130362e302f32342d3234203d3e203136353039.roa (hash: ChYOUadKkOPkyOsEvqDqF4mp00sueJFLaUXSsLjiDAw=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/MLYTICS/0/2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F.crl
rsync://rpkica.twnic.tw/rpki/MLYTICS/0/2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Jul 2026 13:23:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:98:c2:45:ba:fb:ec:f1:90:de:70:37:56:eb:c5:fa:5c:3e:43:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F
Validity
Not Before: Jun 30 12:23:51 2026 GMT
Not After : Jul 1 13:23:51 2026 GMT
Subject: CN=85B1E9894F14333EDDD05D4305D2CB8B2A2A0A99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:51:e3:00:8d:09:de:12:5c:a0:f9:50:91:4d:
33:23:36:70:3d:bf:e6:88:36:fd:18:14:12:7a:d1:
cd:d1:6f:69:c9:e5:eb:cf:d3:73:da:c7:78:30:a9:
5b:a1:c1:b4:1a:86:ca:70:1c:a3:0d:a8:b5:82:b6:
50:29:51:c0:c4:e1:8d:34:84:66:a6:bf:23:1f:39:
e3:71:f7:06:90:d6:df:87:a6:f2:c0:07:b3:ab:a2:
e2:e1:d7:d6:7e:50:00:d0:e5:69:3e:2a:b2:39:91:
7e:a9:d6:33:25:48:1a:b1:fb:13:82:27:06:8f:90:
cb:62:8a:28:88:bf:52:1d:f2:b2:13:b4:74:6c:ad:
2d:82:c5:30:23:f4:13:a0:b4:8a:1d:cb:be:9c:73:
1a:14:a6:a4:57:b8:25:7e:e9:68:73:76:19:1c:84:
9e:5c:3e:6b:74:f2:1e:7e:cf:29:ba:6d:dc:15:6a:
13:9f:d9:a5:dc:cc:44:0e:cb:df:f9:a3:5c:be:3d:
4d:3e:b8:19:99:60:15:92:15:98:97:cb:fb:b2:56:
03:3b:ae:a4:00:d4:31:d3:93:ac:20:1c:50:0c:7c:
ef:d4:0f:80:fc:de:47:f2:bc:ac:d3:3a:ad:08:c2:
0f:24:68:a0:73:c8:67:c4:73:f8:4b:b3:9f:f8:42:
79:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:B1:E9:89:4F:14:33:3E:DD:D0:5D:43:05:D2:CB:8B:2A:2A:0A:99
X509v3 Authority Key Identifier:
keyid:29:23:BD:96:C7:B3:D4:BC:AA:10:BA:99:CE:29:DC:15:BC:10:18:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/MLYTICS/0/2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MLYTICS/0/2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:14:22:cb:68:31:74:cc:f0:51:c4:01:5c:1e:42:c5:6e:3f:
9b:f6:ec:99:1c:89:fc:d6:37:76:0d:a8:f4:56:f9:8a:5f:e9:
99:ea:45:52:cf:0d:54:b6:7c:e3:1c:f3:38:a4:00:9b:f8:80:
59:53:b4:eb:88:d6:ae:03:ca:18:49:ba:50:1d:00:72:58:4a:
fe:25:5c:21:75:90:43:7d:c2:af:f4:03:a7:cd:37:15:95:7a:
ea:6d:ff:52:ab:27:f5:29:d4:52:e0:d1:99:cc:4c:6c:37:09:
c8:59:bf:f6:74:99:b0:3f:80:79:f3:b5:a8:21:3d:fe:d8:96:
c4:45:fa:66:5f:d9:33:b3:5a:2f:9e:e9:97:b7:f7:33:af:e3:
bc:28:e1:c5:f9:f2:c4:09:b2:8d:43:83:fc:ed:67:63:d9:c4:
98:db:84:e3:88:8f:a3:93:15:a8:ae:91:b5:9e:4a:10:d8:ed:
d4:51:b1:ff:71:30:ef:01:02:0d:df:a4:a2:56:07:56:cc:13:
3a:74:48:af:cb:ce:b5:d6:4e:9c:95:86:8e:d0:94:1c:e2:8c:
dc:82:4a:b8:bc:e7:77:6a:41:23:0b:df:cb:9c:43:86:23:c4:
f5:86:32:3b:93:62:26:d0:3e:5a:c0:da:77:3f:a8:76:16:4a:
72:ea:f0:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:07:28 2026 by rpki-client