
$ rpki-client -vvf rpkica.twnic.tw/rpki/NETGUARD/0/A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.mft
File: A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.mft (raw, json)
Hash identifier: 3HxudoSpX6wtHJMBi9YOsUKyjTS5DMGkaYF0g8Smaho=
Subject key identifier: 01:C8:5D:63:78:B4:4D:7A:22:6A:4F:68:8E:23:0C:34:93:E3:50:C1
Authority key identifier: A7:9F:FF:D9:8D:67:B1:DC:F7:64:D6:C6:0D:9D:8F:77:B1:8C:80:F8
Certificate issuer: /CN=A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8
Certificate serial: 29299252743F545532E597ACA24473F714293E3B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/NETGUARD/0/A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.mft
Manifest number: 81
Signing time: Fri 14 Aug 2026 12:21:46 +0000
Manifest this update: Fri 14 Aug 2026 12:16:46 +0000
Manifest next update: Sat 15 Aug 2026 15:12:46 +0000
Files and hashes: 1: 3130332e3136302e3232342e302f32332d3234203d3e20313331363532.roa (hash: 47voBXTyiYiW0GNSqQXzjv9mGc6KAROEr3k+QrljAQs=)
2: 3130332e3136302e3232342e302f32332d3234203d3e20313331363539.roa (hash: 7S4FcOba0oK0ThFobE5ZoA1Yfm0vEJ1gjov31dZGXJY=)
3: A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.crl (hash: bnfYDza2HXctVfuck7JJmvdlf1tnePr2URJ6FVP2VOk=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/NETGUARD/0/A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.crl
rsync://rpkica.twnic.tw/rpki/NETGUARD/0/A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 15 Aug 2026 15:12:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:29:92:52:74:3f:54:55:32:e5:97:ac:a2:44:73:f7:14:29:3e:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8
Validity
Not Before: Aug 14 12:16:46 2026 GMT
Not After : Aug 15 15:12:46 2026 GMT
Subject: CN=01C85D6378B44D7A226A4F688E230C3493E350C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:af:fa:db:20:74:2f:9a:aa:0a:9d:04:d0:00:
4a:87:2d:8f:95:5d:84:92:d4:3d:bf:7b:8b:16:59:
a8:1e:ae:36:95:27:75:f9:e5:52:83:7b:c5:fe:97:
3a:e7:73:28:64:cf:db:9d:4d:65:ce:a8:29:34:01:
55:f1:19:db:6d:aa:12:3e:21:01:21:33:6f:24:e0:
10:4b:c8:22:e9:6a:e0:6b:58:99:df:09:3a:1c:78:
4d:66:d5:78:97:46:3e:1e:5d:7d:3f:06:2d:ff:f5:
17:da:19:ad:c5:5b:2b:19:22:32:96:da:c3:42:90:
f9:92:93:4c:9f:ed:ef:b4:4d:8e:69:58:30:df:73:
97:c8:91:3a:16:d9:61:65:9c:e6:1a:01:cb:8c:46:
11:7e:46:b6:23:c1:a6:09:f8:3f:5c:e7:37:bf:1d:
a0:29:0c:ff:df:51:dd:1f:4c:ce:13:ab:d0:87:8f:
ae:81:eb:3c:46:4e:ac:e8:22:ff:6b:67:30:3b:b8:
63:8d:ac:f6:91:0e:27:38:9c:eb:39:df:a6:ae:73:
e1:be:35:c5:b5:aa:f2:c8:d2:02:d7:cd:89:ab:c8:
45:e3:88:b4:2a:23:42:e5:92:3c:ac:2a:be:43:68:
dd:f0:4a:37:66:e3:91:96:27:d5:8f:ff:64:72:71:
04:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:C8:5D:63:78:B4:4D:7A:22:6A:4F:68:8E:23:0C:34:93:E3:50:C1
X509v3 Authority Key Identifier:
keyid:A7:9F:FF:D9:8D:67:B1:DC:F7:64:D6:C6:0D:9D:8F:77:B1:8C:80:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/NETGUARD/0/A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NETGUARD/0/A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:67:86:0e:ad:5b:22:d9:f7:4a:f9:9c:2a:2c:13:80:44:b5:
0b:b8:f0:9c:cf:74:32:80:c8:e2:62:69:52:e1:a1:1c:8b:a9:
8a:83:d2:01:c8:57:a5:86:b5:ef:29:97:c4:0f:26:d4:70:57:
31:55:d6:06:45:96:94:1d:91:e4:31:39:0e:ca:c8:d5:28:bc:
c7:2c:25:64:a5:8a:65:5f:6d:3f:0a:5e:64:d9:2b:0f:0f:35:
7e:95:a3:6d:12:b5:d8:10:15:9c:a1:6e:e0:61:9d:2f:b5:bb:
f7:1d:81:2e:dc:21:a0:63:69:8d:9c:cc:1b:8e:84:2d:aa:6f:
2b:90:f8:f9:71:47:c7:97:a2:7e:29:6b:20:de:f5:c8:85:1e:
d2:fa:20:db:c9:84:f5:d7:5e:95:0c:72:f0:cb:f2:04:df:a3:
fd:89:04:d9:6f:6b:58:4b:c1:57:be:f7:5f:f5:4c:69:76:f9:
49:24:a2:6a:35:7a:bb:94:6f:5a:5c:73:b4:27:49:09:a8:97:
40:70:cd:2e:8d:10:55:82:78:ab:54:af:7e:23:36:30:0d:bc:
b9:38:c6:60:d9:8a:2a:5b:15:90:9f:12:94:18:13:78:84:9b:
4a:ce:8d:6f:20:e4:13:08:16:fe:ab:5a:ad:21:51:2f:65:e1:
50:c0:ab:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:20:22 2026 by rpki-client