
$ rpki-client -vvf rpkica.twnic.tw/rpki/NCIC/1/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.mft
File: D5C99016D01EDDE0A4D47C3C948EE8859612C73B.mft (raw, json)
Hash identifier: hmTwmhOpdKj6mN3Qk46A3plodueLvDibpg5SJhKHCRk=
Subject key identifier: E4:A0:43:D1:23:C6:27:75:C1:A9:98:C4:1F:21:04:AC:D7:92:49:1E
Authority key identifier: D5:C9:90:16:D0:1E:DD:E0:A4:D4:7C:3C:94:8E:E8:85:96:12:C7:3B
Certificate issuer: /CN=D5C99016D01EDDE0A4D47C3C948EE8859612C73B
Certificate serial: 2A768B87531AAE35C2D0FAD23269D1FD87CED062
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/NCIC/1/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.mft
Manifest number: 01D5
Signing time: Sat 15 Aug 2026 01:59:03 +0000
Manifest this update: Sat 15 Aug 2026 01:54:03 +0000
Manifest next update: Sun 16 Aug 2026 05:41:03 +0000
Files and hashes: 1: 3139322e37322e3234302e302f32312d3234203d3e2034373830.roa (hash: w9y6pwWmA3JFdHYwXGU59AkfbSQ5hRF5f8RxZemOXM8=)
2: 3139322e37322e31362e302f32302d3234203d3e2034373830.roa (hash: 9ZGrNp+VsLlXW7PeBXw8YpqEX/WVDXlTYIwuby9ILk4=)
3: 3139322e37322e3139322e302f31392d3234203d3e2039393139.roa (hash: Ah2jakkWaX8SyRrg2TG3GrlMUxHdK/+BuuzbL3/oW74=)
4: 3133392e3137352e302e302f31362d3234203d3e2034373830.roa (hash: /ZgMlJJWHzRz3oSWNjGyPTQH1Mg84+PLKC/H5qUI7Ns=)
5: 3139322e37322e3132382e302f31382d3234203d3e2034373830.roa (hash: LzN8cI51zk5jZy8rEOcECVIZmpi8vie+TUsPNlzdXuc=)
6: 3139322e37322e36342e302f31382d3234203d3e2039393139.roa (hash: 6ubqZ+h8/1xZM/Z1mXArWRioq7/yui3/nMg9Ngz6hKA=)
7: 3139322e37322e3232342e302f32302d3234203d3e2034373830.roa (hash: JFJbmB7cfEuw1iDDZaeMc1QewQMUllS7sHbdWQbrgDc=)
8: 3139322e37322e342e302f32322d3234203d3e2034373830.roa (hash: Ba5i8ude16dQiEfcAiO+btSj/eH4uGS0xcFo7grp3x0=)
9: 3139322e37322e3235322e302f32342d3234203d3e2039393139.roa (hash: VBtmPKe5I226J9zWpVQAjkGTwQ8c6xfoJIAIP/bSZoI=)
10: 3139322e37322e33322e302f31392d3234203d3e2034373830.roa (hash: IAJDcSfRLpjVsd3ilJuaUqAl0u4sdr8+zfKeB8N1STk=)
11: 3139322e37322e3234302e302f32312d3234203d3e2039393139.roa (hash: zyCP5RCcYrInB0mG7H3w0fJawxlNECjjYSjAg7D7d1Y=)
12: 3139322e37322e3234382e302f32322d3234203d3e2039393139.roa (hash: w2LmOI1eQP3xj9n4sBqRb67lBeJFTEuUVe+BjjWP/g8=)
13: 3139322e37322e332e302f32342d3234203d3e2039393139.roa (hash: qMTF96rAy8wZ4NUEpq4S8Q/4tASEMCoJMKXrGLo6KtQ=)
14: 3139322e37322e3139322e302f31392d3234203d3e2034373830.roa (hash: HDP+weW9NczVRv3tVvCtth7CO+aCW75PFkRxJDjQFGU=)
15: 3139322e37322e3235322e302f32342d3234203d3e2034373830.roa (hash: QUCYMabkjkOS3bq4pnYLsjSc27ckRrPNJ8pg8qqNByc=)
16: 3139322e37322e3132382e302f31382d3234203d3e2039393139.roa (hash: bXHD2UHkc/GfgCH5hcaP2+voIqd8TOjXlXtoDjGW8JA=)
17: 3139322e37322e36342e302f31382d3234203d3e2034373830.roa (hash: IkE5VbWeMMJYwmOD5YW4lS/zGapdsVeaSsB5x46YyVs=)
18: 3139322e37322e3234382e302f32322d3234203d3e2034373830.roa (hash: 65UG56uDtaduhHckiIsfYUMD5Llwyc25pnJQFOvZ6Bo=)
19: 3139322e37322e3232342e302f32302d3234203d3e2039393139.roa (hash: IbJvzNWqowT9ss8SkDFFbTJBrs2hceylDNcxXN29XFI=)
20: 3139322e37322e31362e302f32302d3234203d3e2039393139.roa (hash: YfF/tC6LRnh/bsWMphOM4qUtQ57nFavnsqtfTl2of/U=)
21: 3139322e37322e382e302f32312d3234203d3e2034373830.roa (hash: 1Hh6x51Jeg1BSF3NwDHjHunpz1y1V3E8ygnYaLHBszo=)
22: 3139322e37322e382e302f32312d3234203d3e2039393139.roa (hash: GbQSPFutvMmuWccC6y+kxjUSwDJ1ik/mT03jQDCuwD4=)
23: 3133392e3137352e302e302f31362d3234203d3e2039393139.roa (hash: 3pZVp3TNQ/sRl3TjQTLvkQ3q6JCaq0d/zamjf+77kx8=)
24: D5C99016D01EDDE0A4D47C3C948EE8859612C73B.crl (hash: rlk8k5CCVJs1JCTo9ManYjZndbz60PvWj7eUh0F1jJc=)
25: 3139322e37322e33322e302f31392d3234203d3e2039393139.roa (hash: IdXpC8VBeG7nz0JfgL+likpQtKVBBBXtQNRSvEXG1d0=)
26: 3139322e37322e342e302f32322d3234203d3e2039393139.roa (hash: Mc3y+NW93aC6lat66PDBZYR8qmh9c+fZPRpk7bBYllo=)
27: 3139322e37322e332e302f32342d3234203d3e2034373830.roa (hash: hj2bnED2YLfhRnAL+cGxD8mEc2iquoy7i11842ivkl8=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/NCIC/1/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.crl
rsync://rpkica.twnic.tw/rpki/NCIC/1/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 16 Aug 2026 02:50:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:76:8b:87:53:1a:ae:35:c2:d0:fa:d2:32:69:d1:fd:87:ce:d0:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D5C99016D01EDDE0A4D47C3C948EE8859612C73B
Validity
Not Before: Aug 15 01:54:03 2026 GMT
Not After : Aug 16 05:41:03 2026 GMT
Subject: CN=E4A043D123C62775C1A998C41F2104ACD792491E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4a:3d:95:dd:22:d4:73:b2:34:3e:77:d1:32:
88:db:34:93:64:d7:7f:89:88:1d:6e:45:4e:24:da:
6a:81:80:dc:05:cf:50:4c:d0:91:81:ec:33:9d:72:
a1:29:50:63:cc:3b:d7:72:6f:88:27:56:6b:30:73:
7e:dc:66:8f:9d:5a:59:d5:d1:9d:24:dc:38:cf:f3:
ff:d1:1c:06:08:c4:a5:a4:93:cc:92:d1:2b:ae:68:
7b:f9:0a:61:4f:1d:2a:5d:d9:33:9c:ab:a5:49:ff:
87:7d:71:bc:36:cc:66:e9:03:26:3a:0a:8a:d8:79:
ff:29:b2:41:d6:d6:9c:96:be:6d:71:8a:9e:f4:72:
d9:b7:2e:fe:d6:20:cd:ed:ae:af:c2:5d:09:bb:1b:
dd:b1:53:85:84:85:95:0e:c1:27:c5:a3:0b:91:9c:
ab:a7:4c:1c:6d:90:44:4f:47:16:b3:78:f4:7d:f2:
e5:70:51:b9:fa:60:b5:67:fd:fb:3a:4f:ab:04:5a:
b7:fb:22:13:50:b8:01:a3:f2:de:a6:81:80:4c:c0:
4c:90:4d:5d:ac:4b:44:81:8c:87:ce:a3:e6:53:49:
32:9b:e8:f8:2d:c4:37:56:1e:e4:6e:97:ea:b2:37:
db:a6:d4:95:c9:fe:6d:02:68:40:cd:71:4d:1e:fe:
06:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:A0:43:D1:23:C6:27:75:C1:A9:98:C4:1F:21:04:AC:D7:92:49:1E
X509v3 Authority Key Identifier:
keyid:D5:C9:90:16:D0:1E:DD:E0:A4:D4:7C:3C:94:8E:E8:85:96:12:C7:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/NCIC/1/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NCIC/1/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:38:91:39:08:af:68:5b:68:90:bc:75:54:1a:a2:26:f0:2c:
ee:e8:29:f1:61:73:e0:05:b7:79:8d:44:6a:92:2d:23:3d:09:
08:fe:81:c7:cc:7f:f2:3f:78:95:43:f9:88:7c:46:df:e9:b3:
79:88:60:1f:f8:de:42:be:20:3c:5d:e2:e5:35:92:1e:4c:b4:
e0:52:ef:d1:6c:ea:bf:e4:77:a2:e6:79:b5:9f:a8:85:92:a5:
a5:a3:5a:2b:d0:46:c0:8b:2d:e2:6f:8a:1d:df:ed:08:96:2c:
68:37:58:2c:33:71:0d:fb:c6:d7:de:28:d2:40:4e:15:29:27:
05:4d:39:04:84:b6:c9:5d:88:41:9c:a7:b2:41:09:cb:2e:07:
53:c1:21:ff:df:1b:a4:c2:c4:b7:88:a2:54:3e:1d:f3:bd:c3:
44:20:81:a6:9e:60:04:04:90:f8:93:6a:ea:7d:58:ec:83:31:
51:2e:c5:d5:fe:d2:24:4d:a1:e1:a1:f1:99:0f:a0:81:79:8f:
58:b2:2d:c4:34:a4:46:05:7c:7c:71:3c:96:2e:cf:ad:8c:f8:
45:b5:a0:6b:a8:0d:c6:f6:e5:1c:fd:06:52:79:c8:c7:60:10:
07:36:3f:82:ee:ff:50:8e:05:c6:36:12:a0:27:52:21:fe:c4:
07:c7:14:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 10:23:57 2026 by rpki-client