
$ rpki-client -vvf rpkica.twnic.tw/rpki/NSSCYBER/0/7E4A0094054DD1AE4C3AA73976E554F191BC5230.mft
File: 7E4A0094054DD1AE4C3AA73976E554F191BC5230.mft (raw, json)
Hash identifier: fvQZeoDauH0ynHk9ZfDdUvcdiAsy4fMHsdKOxI+s5k0=
Subject key identifier: 19:13:F9:E4:DB:4B:5F:C9:0A:EE:AE:30:C5:83:70:C8:AE:42:B7:46
Authority key identifier: 7E:4A:00:94:05:4D:D1:AE:4C:3A:A7:39:76:E5:54:F1:91:BC:52:30
Certificate issuer: /CN=7E4A0094054DD1AE4C3AA73976E554F191BC5230
Certificate serial: 782C4D209367547D98F9CB797A4E1D2717CB449C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7E4A0094054DD1AE4C3AA73976E554F191BC5230.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/NSSCYBER/0/7E4A0094054DD1AE4C3AA73976E554F191BC5230.mft
Manifest number: 06
Signing time: Wed 13 May 2026 06:32:22 +0000
Manifest this update: Wed 13 May 2026 06:27:22 +0000
Manifest next update: Thu 14 May 2026 07:54:22 +0000
Files and hashes: 1: 7E4A0094054DD1AE4C3AA73976E554F191BC5230.crl (hash: aWV9t1KW+ASH2aeGQ8W8dQv09qG7c772DZO9MlGJoIo=)
2: 3130332e3134342e33322e302f32332d3234203d3e20313331363236.roa (hash: ceVA/LJaRY6/q+EaJ/ByMtC2DxZ+XlY891yuFfz5/6Y=)
3: 323430363a623463303a3a2f33322d3332203d3e203633383938.roa (hash: YWptf+2qSV9npfR4/3yUmYD8apviaOrBsr9jvocDV+4=)
4: 3130332e3135382e37382e302f32332d3234203d3e203633383938.roa (hash: Q+s1vVVcnXTpW/r/MnON9SbkY3njdmQ1XoB50+rVZow=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/NSSCYBER/0/7E4A0094054DD1AE4C3AA73976E554F191BC5230.crl
rsync://rpkica.twnic.tw/rpki/NSSCYBER/0/7E4A0094054DD1AE4C3AA73976E554F191BC5230.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7E4A0094054DD1AE4C3AA73976E554F191BC5230.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 07:54:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:2c:4d:20:93:67:54:7d:98:f9:cb:79:7a:4e:1d:27:17:cb:44:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7E4A0094054DD1AE4C3AA73976E554F191BC5230
Validity
Not Before: May 13 06:27:22 2026 GMT
Not After : May 14 07:54:22 2026 GMT
Subject: CN=1913F9E4DB4B5FC90AEEAE30C58370C8AE42B746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c9:90:a2:85:82:18:e8:31:cf:ec:58:1b:72:
57:80:83:5d:2d:47:fa:4e:c7:d5:ba:92:74:80:96:
7d:de:a8:be:93:a6:c5:2d:a3:e6:57:f5:ed:a4:4d:
83:b9:f7:4a:d5:66:21:3a:97:e6:86:99:3e:5d:b6:
16:56:f6:3a:29:76:bf:c1:dc:29:a6:23:0d:de:cb:
0e:0a:a9:d2:42:d2:ff:61:b2:c3:40:b5:03:90:0e:
7d:0f:d1:3d:12:f9:7d:35:0a:5b:a7:ff:56:3a:11:
0e:8f:22:fd:67:40:4a:43:1b:22:d8:d4:53:0d:bf:
ec:5a:90:fc:f8:34:59:5c:83:27:f1:a1:b8:e3:f4:
25:49:69:1f:54:44:14:37:1b:ae:b3:13:7a:68:e1:
0d:83:fb:6f:df:0f:fe:76:fb:f4:d6:e8:21:c4:33:
5d:2c:2e:bc:8e:50:ce:3c:53:e4:18:5a:6d:f6:58:
af:88:47:74:8b:0f:43:25:11:f7:1c:e8:96:e7:c8:
57:3b:13:1e:b6:93:e4:97:b7:ba:2b:36:ec:27:8f:
c7:5a:eb:d7:a1:ec:90:0a:63:fc:21:ef:2e:9e:34:
b1:09:b8:ef:d1:f4:ea:41:03:ad:8a:8b:0a:d6:73:
79:be:46:01:9b:c8:81:cb:ef:94:e5:f4:30:a0:a6:
03:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:13:F9:E4:DB:4B:5F:C9:0A:EE:AE:30:C5:83:70:C8:AE:42:B7:46
X509v3 Authority Key Identifier:
keyid:7E:4A:00:94:05:4D:D1:AE:4C:3A:A7:39:76:E5:54:F1:91:BC:52:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/NSSCYBER/0/7E4A0094054DD1AE4C3AA73976E554F191BC5230.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7E4A0094054DD1AE4C3AA73976E554F191BC5230.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NSSCYBER/0/7E4A0094054DD1AE4C3AA73976E554F191BC5230.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:62:41:8f:71:88:3f:97:2b:91:f9:83:8e:47:40:1c:cc:25:
c1:7a:92:69:15:84:e0:43:33:91:40:76:ad:c2:9e:be:c9:1e:
9a:02:3a:e6:3d:e7:74:2f:87:ae:32:1a:9f:ec:00:ae:54:53:
4c:aa:6a:28:56:d4:05:60:ea:9c:b3:70:8d:cb:fd:54:c4:98:
ac:15:a2:06:9f:4f:28:1f:7c:98:8a:2f:de:7a:d8:37:a9:9f:
8f:4b:ca:d2:92:c7:e6:62:67:5d:17:d2:01:f9:05:44:55:78:
97:ca:58:35:a0:87:20:6d:e0:f8:71:9b:f6:59:57:fa:f9:1f:
ae:4f:9f:79:ee:c0:31:53:92:64:d9:44:e2:55:b6:a1:c8:68:
20:d4:a6:9c:6c:d5:da:86:e1:25:16:f9:2b:e7:2f:7d:f1:27:
f9:f2:5c:63:b3:e9:d4:29:6e:b5:1a:c2:4a:7e:d5:5c:7d:79:
e0:32:df:af:75:1f:ba:24:a2:ee:63:59:68:fe:61:65:c9:e3:
85:58:ab:20:e7:e1:15:f0:2f:01:e0:17:25:e7:89:50:a8:91:
31:be:46:ee:00:c3:42:e8:58:c2:98:56:59:a3:47:3f:b7:d9:
03:69:88:a2:d4:27:88:d8:58:28:e4:73:c3:e7:7e:18:0f:56:
0c:2a:9a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:33:46 2026 by rpki-client