
$ rpki-client -vvf rpkica.twnic.tw/rpki/NTCCATV/0/B621735E324046FFFC1DD75D4ED8815E08CD25AE.mft
File: B621735E324046FFFC1DD75D4ED8815E08CD25AE.mft (raw, json)
Hash identifier: 2q5pRHy2rGqHsIRR4qaF1LPbq86MM6Q4clYRDQc5plk=
Subject key identifier: A3:C9:41:5E:35:11:35:4C:2A:42:37:41:DC:29:1A:CA:F9:43:FB:57
Authority key identifier: B6:21:73:5E:32:40:46:FF:FC:1D:D7:5D:4E:D8:81:5E:08:CD:25:AE
Certificate issuer: /CN=B621735E324046FFFC1DD75D4ED8815E08CD25AE
Certificate serial: 4C7CF76540728C7B74481BC82E3BDC185EDB64E1
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B621735E324046FFFC1DD75D4ED8815E08CD25AE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/NTCCATV/0/B621735E324046FFFC1DD75D4ED8815E08CD25AE.mft
Manifest number: 88
Signing time: Fri 14 Aug 2026 13:26:55 +0000
Manifest this update: Fri 14 Aug 2026 13:21:55 +0000
Manifest next update: Sat 15 Aug 2026 14:29:55 +0000
Files and hashes: 1: 3130332e34362e3138382e302f32332d3233203d3e203338383531.roa (hash: mG1ga13lp7MgEJvmiHGi6aFGInKwqgg1PecqbqqFlqE=)
2: 34332e3232372e32342e302f32322d3232203d3e203338383531.roa (hash: Jc0taR/H4saYaDAoJgE+9UiKJq1S+bCLyLdRp8kMM8s=)
3: 34332e3232372e32342e302f32332d3233203d3e203338383531.roa (hash: sZR2upIjgJ8ucZv/gsPF7tQAoIHfXdof9Y1BIEmdMEk=)
4: 3130332e34362e3138382e302f32322d3232203d3e203338383531.roa (hash: IGUXagfNdDGbcIwOiNJB2WILqRSYaabubVYlRzK02WU=)
5: B621735E324046FFFC1DD75D4ED8815E08CD25AE.crl (hash: IRBF9w7wsL1UX4a27IdO0ZZIhmpQcNU1zZ7wjEbycnw=)
6: 34332e3232372e32352e302f32342d3234203d3e203338383531.roa (hash: AVukq4MJYvCGIAziMbV6ZV4Pe3c02PVGzfhBcKVubb8=)
7: 3130332e3133312e3137322e302f32322d3234203d3e203338383531.roa (hash: gJf9DLGPPpkcFmCRmCzChYMvtlZ7ty7+aorHZQ0RXhY=)
8: 3130332e3133312e3137322e302f32322d3232203d3e203338383531.roa (hash: wAf5rAvxkIVF2EmVrtaklm33SqKTtuxnUU+SmUZADj8=)
9: 34332e3232372e32362e302f32332d3233203d3e203338383531.roa (hash: C2usZixthQiIE+xeQ3sCGdfoDlrvv1uF2zFJ8tVVXIc=)
10: 3130332e34362e3139302e302f32332d3233203d3e203338383531.roa (hash: s3NIqrucGxxXoVh7k9P2N6l5jBGUlMpH1t4x77/+R9g=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/NTCCATV/0/B621735E324046FFFC1DD75D4ED8815E08CD25AE.crl
rsync://rpkica.twnic.tw/rpki/NTCCATV/0/B621735E324046FFFC1DD75D4ED8815E08CD25AE.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B621735E324046FFFC1DD75D4ED8815E08CD25AE.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 15 Aug 2026 14:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:7c:f7:65:40:72:8c:7b:74:48:1b:c8:2e:3b:dc:18:5e:db:64:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B621735E324046FFFC1DD75D4ED8815E08CD25AE
Validity
Not Before: Aug 14 13:21:55 2026 GMT
Not After : Aug 15 14:29:55 2026 GMT
Subject: CN=A3C9415E3511354C2A423741DC291ACAF943FB57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b9:46:7d:e7:34:e7:36:9f:a4:38:41:b0:fb:
2d:d4:52:08:f0:61:21:06:b1:8c:db:38:f1:9e:f6:
56:7b:fa:0c:89:ad:bb:8f:01:36:e9:d4:7c:e3:0f:
e3:02:5e:37:09:2c:f2:af:40:d5:5e:b7:dd:4e:bd:
f6:8e:4f:fb:b7:5d:a5:ce:6f:ae:75:18:a0:b6:78:
6c:1e:bd:13:5b:02:37:9e:78:98:b2:0f:23:7a:92:
ef:13:6b:83:c9:c6:4c:37:11:2d:7f:d3:c0:04:20:
ce:74:7d:17:e7:a1:7c:ea:23:d5:13:1e:3e:6e:c7:
da:39:79:f9:7e:f2:3f:09:35:e9:de:b2:63:4a:95:
1e:fb:a4:a3:23:47:cf:11:4d:20:82:97:be:31:e1:
f0:66:85:b3:28:0a:9e:d1:c4:1c:9a:d0:38:0e:90:
97:90:c1:51:c8:16:43:65:a4:52:8d:f8:a6:ef:9f:
e4:0d:1b:81:7e:a3:0a:8a:d9:e5:b5:fe:54:06:7e:
ef:42:98:c8:db:ba:55:d6:cd:36:c3:3c:0c:d2:8b:
da:dc:ef:16:b8:65:f6:5e:86:43:33:a3:5e:f9:b6:
17:ab:d4:d6:58:80:cd:48:af:86:00:9d:74:ff:de:
a2:16:47:0f:2b:72:41:a7:26:9d:d7:28:d5:b9:4f:
2e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:C9:41:5E:35:11:35:4C:2A:42:37:41:DC:29:1A:CA:F9:43:FB:57
X509v3 Authority Key Identifier:
keyid:B6:21:73:5E:32:40:46:FF:FC:1D:D7:5D:4E:D8:81:5E:08:CD:25:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/NTCCATV/0/B621735E324046FFFC1DD75D4ED8815E08CD25AE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B621735E324046FFFC1DD75D4ED8815E08CD25AE.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NTCCATV/0/B621735E324046FFFC1DD75D4ED8815E08CD25AE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:7f:9e:5a:6c:57:74:df:43:37:9d:5e:74:2e:4c:47:ac:fe:
12:bf:5a:1c:04:f1:da:8c:86:84:b9:4c:59:57:5b:1d:0f:0d:
3d:b9:d8:ef:1a:0f:55:66:2c:f5:22:ce:40:96:9b:c9:76:43:
f5:ad:b6:cf:90:6f:6f:5b:c7:36:09:35:43:2f:4d:ec:dd:ea:
14:2b:41:c2:a1:2c:83:39:ca:25:a8:de:6e:bc:bf:1e:ad:0a:
d9:f6:89:93:42:fe:91:88:4b:89:5b:40:04:37:5e:07:a8:fe:
f1:c0:a8:a6:2e:87:2a:e8:0a:29:d6:e5:cb:86:e9:29:17:fe:
36:9f:fe:38:d0:55:54:3c:fc:41:23:6a:a0:b7:61:37:b3:98:
ff:7d:e7:87:2e:81:d8:53:9a:f9:97:b3:d5:8d:b0:90:b1:d8:
4d:e6:3c:4f:5e:a1:66:77:3c:fc:ce:ab:8a:38:b1:62:66:86:
32:ad:9e:17:c5:47:c8:96:9a:8a:9f:ce:25:30:c4:4e:6c:cf:
ae:79:5f:80:f5:20:ed:3c:09:35:40:f6:e2:06:e8:de:dd:07:
77:ca:02:50:68:d8:ef:8b:d4:fa:8e:f5:f4:a7:ab:3b:03:7c:
e1:bb:77:52:4d:9c:b3:98:75:6c:3b:68:8a:c5:7d:d9:0d:f4:
68:15:c8:27
-----BEGIN CERTIFICATE-----
MIIE5jCCA86gAwIBAgIUTHz3ZUByjHt0SBvILjvcGF7bZOEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjYyMTczNUUzMjQwNDZGRkZDMURENzVENEVEODgxNUUw
OENEMjVBRTAeFw0yNjA4MTQxMzIxNTVaFw0yNjA4MTUxNDI5NTVaMDMxMTAvBgNV
BAMTKEEzQzk0MTVFMzUxMTM1NEMyQTQyMzc0MURDMjkxQUNBRjk0M0ZCNTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCouUZ95zTnNp+kOEGw+y3UUgjw
YSEGsYzbOPGe9lZ7+gyJrbuPATbp1HzjD+MCXjcJLPKvQNVet91OvfaOT/u3XaXO
b651GKC2eGwevRNbAjeeeJiyDyN6ku8Ta4PJxkw3ES1/08AEIM50fRfnoXzqI9UT
Hj5ux9o5efl+8j8JNenesmNKlR77pKMjR88RTSCCl74x4fBmhbMoCp7RxBya0DgO
kJeQwVHIFkNlpFKN+Kbvn+QNG4F+owqK2eW1/lQGfu9CmMjbulXWzTbDPAzSi9rc
7xa4ZfZehkMzo175ther1NZYgM1Ir4YAnXT/3qIWRw8rckGnJp3XKNW5Ty6rAgMB
AAGjggHwMIIB7DAdBgNVHQ4EFgQUo8lBXjURNUwqQjdB3CkayvlD+1cwHwYDVR0j
BBgwFoAUtiFzXjJARv/8HdddTtiBXgjNJa4wDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTlRDQ0FU
Vi8wL0I2MjE3MzVFMzI0MDQ2RkZGQzFERDc1RDRFRDg4MTVFMDhDRDI1QUUuY3Js
MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu
aWMudHcvcnBraS9UV05JQ0NBLzEvQjYyMTczNUUzMjQwNDZGRkZDMURENzVENEVE
ODgxNUUwOENEMjVBRS5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy
c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05UQ0NBVFYvMC9CNjIxNzM1RTMy
NDA0NkZGRkMxREQ3NUQ0RUQ4ODE1RTA4Q0QyNUFFLm1mdDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQH+eWmxX
dN9DN51edC5MR6z+Er9aHATx2oyGhLlMWVdbHQ8NPbnY7xoPVWYs9SLOQJabyXZD
9a22z5Bvb1vHNgk1Qy9N7N3qFCtBwqEsgznKJajebry/Hq0K2faJk0L+kYhLiVtA
BDdeB6j+8cCopi6HKugKKdbly4bpKRf+Np/+ONBVVDz8QSNqoLdhN7OY/33nhy6B
2FOa+Zez1Y2wkLHYTeY8T16hZnc8/M6rijixYmaGMq2eF8VHyJaaip/OJTDETmzP
rnlfgPUg7TwJNUD24gbo3t0Hd8oCUGjY74vU+o719KerOwN84bt3Uk2cs5h1bDto
isV92Q30aBXIJw==
-----END CERTIFICATE-----
Generated at Sat Aug 15 05:21:27 2026 by rpki-client