
$ rpki-client -vvf rpkica.twnic.tw/rpki/NTCCATV/0/B621735E324046FFFC1DD75D4ED8815E08CD25AE.mft
File: B621735E324046FFFC1DD75D4ED8815E08CD25AE.mft (raw, json)
Hash identifier: OssjpuYeKweJEBNe01oqmfaEiwYjGPjaIazdjq5yk6o=
Subject key identifier: 2C:3E:5B:D0:91:A9:23:45:0C:F0:35:89:FD:2C:29:1C:FA:6A:FE:CE
Authority key identifier: B6:21:73:5E:32:40:46:FF:FC:1D:D7:5D:4E:D8:81:5E:08:CD:25:AE
Certificate issuer: /CN=B621735E324046FFFC1DD75D4ED8815E08CD25AE
Certificate serial: 227D3163399D459839F046B95875ED1A23650BB8
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B621735E324046FFFC1DD75D4ED8815E08CD25AE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/NTCCATV/0/B621735E324046FFFC1DD75D4ED8815E08CD25AE.mft
Manifest number: 0C
Signing time: Wed 13 May 2026 06:52:27 +0000
Manifest this update: Wed 13 May 2026 06:47:27 +0000
Manifest next update: Thu 14 May 2026 09:06:27 +0000
Files and hashes: 1: 34332e3232372e32352e302f32342d3234203d3e203338383531.roa (hash: AVukq4MJYvCGIAziMbV6ZV4Pe3c02PVGzfhBcKVubb8=)
2: 34332e3232372e32342e302f32332d3233203d3e203338383531.roa (hash: sZR2upIjgJ8ucZv/gsPF7tQAoIHfXdof9Y1BIEmdMEk=)
3: 3130332e34362e3139302e302f32332d3233203d3e203338383531.roa (hash: s3NIqrucGxxXoVh7k9P2N6l5jBGUlMpH1t4x77/+R9g=)
4: 3130332e3133312e3137322e302f32322d3234203d3e203338383531.roa (hash: gJf9DLGPPpkcFmCRmCzChYMvtlZ7ty7+aorHZQ0RXhY=)
5: 3130332e3133312e3137322e302f32322d3232203d3e203338383531.roa (hash: wAf5rAvxkIVF2EmVrtaklm33SqKTtuxnUU+SmUZADj8=)
6: B621735E324046FFFC1DD75D4ED8815E08CD25AE.crl (hash: /ckad9LenI7IglTALJNHWI/YB98qGUrHdZHQ0qMPubc=)
7: 3130332e34362e3138382e302f32322d3232203d3e203338383531.roa (hash: IGUXagfNdDGbcIwOiNJB2WILqRSYaabubVYlRzK02WU=)
8: 34332e3232372e32342e302f32322d3232203d3e203338383531.roa (hash: Jc0taR/H4saYaDAoJgE+9UiKJq1S+bCLyLdRp8kMM8s=)
9: 34332e3232372e32362e302f32332d3233203d3e203338383531.roa (hash: C2usZixthQiIE+xeQ3sCGdfoDlrvv1uF2zFJ8tVVXIc=)
10: 3130332e34362e3138382e302f32332d3233203d3e203338383531.roa (hash: mG1ga13lp7MgEJvmiHGi6aFGInKwqgg1PecqbqqFlqE=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/NTCCATV/0/B621735E324046FFFC1DD75D4ED8815E08CD25AE.crl
rsync://rpkica.twnic.tw/rpki/NTCCATV/0/B621735E324046FFFC1DD75D4ED8815E08CD25AE.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B621735E324046FFFC1DD75D4ED8815E08CD25AE.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 09:06:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:7d:31:63:39:9d:45:98:39:f0:46:b9:58:75:ed:1a:23:65:0b:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B621735E324046FFFC1DD75D4ED8815E08CD25AE
Validity
Not Before: May 13 06:47:27 2026 GMT
Not After : May 14 09:06:27 2026 GMT
Subject: CN=2C3E5BD091A923450CF03589FD2C291CFA6AFECE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:09:19:d6:26:1f:66:93:b4:ab:58:6c:f9:40:
ce:c9:cd:cd:92:1d:89:13:a1:19:9b:b0:19:a9:c0:
12:21:ea:88:1b:e6:91:ef:71:8f:f8:bc:83:91:5d:
a4:0d:36:ed:81:72:24:44:42:85:a2:2f:5c:1f:f0:
9b:48:43:02:c8:42:0e:57:3c:5e:45:7d:8f:7f:5e:
b6:e4:e6:d6:4e:cd:d7:6c:e1:c6:aa:b8:8f:74:50:
57:f8:83:4e:43:36:a5:5e:f5:1e:0d:1c:63:49:60:
0c:b7:3d:21:c4:1b:38:8a:7c:b6:1d:85:ef:c6:1d:
34:89:19:0e:ba:8e:31:ef:2f:61:f0:da:fe:2f:dd:
6b:a2:fe:56:f6:b3:69:77:71:20:f5:f3:fb:f9:de:
2a:09:57:fa:a6:3f:9e:e8:a5:02:f4:2e:42:7a:cf:
c9:bf:74:20:c3:fa:84:a1:b9:e1:47:a4:1d:d7:e6:
2d:11:c1:fb:e3:3f:bd:2f:2b:bc:45:8e:57:21:0b:
9a:0f:7a:41:fa:e7:6c:0d:4e:f1:59:67:3d:f8:7c:
c8:61:cb:49:f8:7b:d0:23:a1:59:55:2d:46:cc:53:
d2:d6:fa:0d:3e:9f:9c:c1:fb:26:d1:a3:a4:89:0a:
fd:3a:72:fa:08:53:34:bc:3f:ec:ac:92:c5:81:30:
91:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:3E:5B:D0:91:A9:23:45:0C:F0:35:89:FD:2C:29:1C:FA:6A:FE:CE
X509v3 Authority Key Identifier:
keyid:B6:21:73:5E:32:40:46:FF:FC:1D:D7:5D:4E:D8:81:5E:08:CD:25:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/NTCCATV/0/B621735E324046FFFC1DD75D4ED8815E08CD25AE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B621735E324046FFFC1DD75D4ED8815E08CD25AE.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NTCCATV/0/B621735E324046FFFC1DD75D4ED8815E08CD25AE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:f7:63:b3:56:74:3a:31:b8:19:4c:0a:cb:c3:57:ef:9d:8b:
22:d8:61:9d:39:1d:78:96:92:4e:fe:15:a2:77:74:b5:40:eb:
aa:23:b8:8f:1e:16:8c:ef:ef:1d:e5:1e:5d:85:74:43:e2:1a:
ce:b1:7a:eb:cb:e4:6b:b4:07:53:0e:57:bd:8f:be:82:68:9d:
79:64:06:ed:4b:df:ce:ec:f1:7a:29:b6:3b:ae:dc:2f:dd:e4:
4a:f5:67:2b:e6:25:d7:35:dd:19:20:48:35:69:15:a6:3e:ea:
19:0f:32:35:64:8a:62:51:df:0c:ca:c8:58:fd:f6:7f:69:8c:
ce:40:a0:d0:09:72:c4:c0:02:10:13:19:61:f8:59:89:3b:a4:
32:2c:11:8e:7b:e5:e1:51:d9:57:c2:84:d3:8c:d2:d4:8f:ef:
b0:b2:37:7e:18:c1:c5:b6:7a:a9:70:83:33:ca:17:c8:5d:6e:
e6:58:0f:eb:e3:07:07:31:cf:5f:80:39:50:06:a0:8e:56:6c:
b2:d8:93:31:e4:f1:a0:12:5e:a6:c1:cb:dc:b1:df:c4:30:53:
a5:c6:ca:c8:d8:ce:14:d9:b4:6d:fa:ad:94:51:54:99:f3:4c:
90:92:73:4c:7d:5a:4e:aa:6b:8f:8c:6e:b4:9c:ac:bc:14:d1:
fe:29:62:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:36:12 2026 by rpki-client