
$ rpki-client -vvf rpkica.twnic.tw/rpki/NTCL/0/2D58FB0AD6CB4CFDF7364791D1435AD48C675D22.mft
File: 2D58FB0AD6CB4CFDF7364791D1435AD48C675D22.mft (raw, json)
Hash identifier: Isr/7MJ0Ms3oif886GCXjIRn8NsbqaA9h7r9h76AVvE=
Subject key identifier: 44:52:C9:5D:DB:EA:9C:45:D7:69:57:00:8A:C2:99:95:BD:61:0B:00
Authority key identifier: 2D:58:FB:0A:D6:CB:4C:FD:F7:36:47:91:D1:43:5A:D4:8C:67:5D:22
Certificate issuer: /CN=2D58FB0AD6CB4CFDF7364791D1435AD48C675D22
Certificate serial: 39BE057BD5628D14514BE615AC1C9004819A284B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2D58FB0AD6CB4CFDF7364791D1435AD48C675D22.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/NTCL/0/2D58FB0AD6CB4CFDF7364791D1435AD48C675D22.mft
Manifest number: 81
Signing time: Fri 14 Aug 2026 23:38:43 +0000
Manifest this update: Fri 14 Aug 2026 23:33:43 +0000
Manifest next update: Sun 16 Aug 2026 01:18:43 +0000
Files and hashes: 1: 3130332e3134302e3233322e302f32342d3234203d3e203332323432.roa (hash: q7dF1jX4ROfIjFDlO5sVW9hRX9k2oXkr8fjwFlVtFmE=)
2: 2D58FB0AD6CB4CFDF7364791D1435AD48C675D22.crl (hash: D392lUdKkts8zFe2B1anaeRi47spa1YvBVMlBuMOhWE=)
3: 3130332e3134302e3233332e302f32342d3234203d3e203332323432.roa (hash: dWqlZ57qGRFx6N79EQLtYosKEY+TDhYs9JMAewBJPsQ=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/NTCL/0/2D58FB0AD6CB4CFDF7364791D1435AD48C675D22.crl
rsync://rpkica.twnic.tw/rpki/NTCL/0/2D58FB0AD6CB4CFDF7364791D1435AD48C675D22.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2D58FB0AD6CB4CFDF7364791D1435AD48C675D22.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 16 Aug 2026 01:18:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:be:05:7b:d5:62:8d:14:51:4b:e6:15:ac:1c:90:04:81:9a:28:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D58FB0AD6CB4CFDF7364791D1435AD48C675D22
Validity
Not Before: Aug 14 23:33:43 2026 GMT
Not After : Aug 16 01:18:43 2026 GMT
Subject: CN=4452C95DDBEA9C45D76957008AC29995BD610B00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b7:83:c5:54:83:5c:1f:1a:39:cc:ca:45:86:
04:b8:b0:10:31:71:f3:1d:76:60:0e:fe:64:94:73:
bd:ff:3f:ed:60:bb:8e:fa:0c:7e:4c:94:56:c3:41:
f7:c7:ea:4e:76:da:e1:95:95:b1:cf:ae:9b:71:4e:
5b:1e:d8:92:87:a3:11:a8:55:8f:df:44:0a:1b:5b:
44:5e:2e:1e:58:5c:51:fd:3c:dd:fa:b1:01:ec:40:
fb:92:38:05:a6:68:c2:9e:9d:67:43:92:38:95:c3:
da:71:4c:ff:13:40:4e:21:b0:3c:0c:93:c6:25:5e:
07:a7:1f:5f:7e:7f:68:e8:e3:38:de:99:8f:bc:e7:
dc:4b:2a:73:ea:a3:0e:ea:03:02:5a:ba:05:e4:38:
1a:07:6e:f1:66:eb:1d:a8:3c:07:6c:cd:a9:ef:f0:
2e:1b:81:5c:32:e5:66:29:79:d8:f0:60:b5:22:d8:
44:2a:0f:83:ef:c7:09:06:c8:76:d9:be:ef:48:17:
41:8a:f9:10:47:4b:66:79:31:07:80:41:e9:99:bb:
13:ae:38:a6:48:3a:10:42:98:e3:44:6c:16:11:aa:
09:f2:38:a8:7d:05:94:97:a3:23:bf:19:b6:b9:24:
89:bc:da:dc:67:54:b7:d9:ed:f4:b5:d6:2a:f7:75:
55:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:52:C9:5D:DB:EA:9C:45:D7:69:57:00:8A:C2:99:95:BD:61:0B:00
X509v3 Authority Key Identifier:
keyid:2D:58:FB:0A:D6:CB:4C:FD:F7:36:47:91:D1:43:5A:D4:8C:67:5D:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/NTCL/0/2D58FB0AD6CB4CFDF7364791D1435AD48C675D22.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2D58FB0AD6CB4CFDF7364791D1435AD48C675D22.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NTCL/0/2D58FB0AD6CB4CFDF7364791D1435AD48C675D22.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:c7:a1:54:0a:e0:da:ca:aa:22:c5:22:77:31:8e:07:fa:55:
b9:03:ea:8c:f7:20:7f:48:00:1f:ea:80:99:03:bf:39:53:55:
28:48:4a:37:e2:06:a8:ef:1d:44:5c:e4:dc:61:b1:e3:4d:a8:
ba:75:10:c2:50:32:92:da:eb:93:e5:80:1b:e2:a1:41:b5:04:
fe:1c:38:ae:38:2c:13:96:b6:60:64:38:73:a2:9b:7a:15:2e:
18:32:3e:d6:17:89:36:36:99:a9:74:57:59:cc:d4:74:03:bb:
73:4a:fa:93:e2:4e:dc:7a:96:2a:02:dc:21:79:54:fc:37:a2:
0e:df:dc:67:49:64:05:94:55:12:f8:7e:f1:58:cb:05:55:c3:
78:be:15:bb:7c:be:9a:e8:33:05:df:0d:01:7b:d3:3f:14:4a:
61:88:75:7e:35:91:6a:64:3e:16:80:a2:60:78:74:ff:c6:20:
50:63:6e:74:3a:b9:d0:b1:85:82:cd:6a:7a:a3:b0:e4:6f:8c:
e7:31:20:4c:01:b3:f5:72:6b:7b:d4:b5:08:de:55:d8:c2:1c:
e1:7d:db:e6:49:d3:71:10:bc:ea:8e:09:bb:15:30:94:75:63:
9d:d3:00:f0:27:a3:8f:e7:ee:9a:90:23:a2:d2:bb:fe:35:30:
4d:d0:7f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:21:11 2026 by rpki-client