
$ rpki-client -vvf rpkica.twnic.tw/rpki/OPENFOR/0/42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.mft
File: 42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.mft (raw, json)
Hash identifier: t820MpeXKVB/JBHLt3oS88L5phq39BrUChZFkCCsVLQ=
Subject key identifier: 2E:9E:71:89:41:AC:33:5A:3A:53:61:FE:C2:89:C5:36:68:D3:91:52
Authority key identifier: 42:C7:F7:8E:9F:DA:00:B9:CA:3E:2D:1D:DF:5E:08:DE:A8:62:01:62
Certificate issuer: /CN=42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162
Certificate serial: 6A49F01DD5C1A8FC6D00A17EDE7ECBBB8B14EEA8
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/OPENFOR/0/42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.mft
Manifest number: 82
Signing time: Fri 14 Aug 2026 13:11:55 +0000
Manifest this update: Fri 14 Aug 2026 13:06:55 +0000
Manifest next update: Sat 15 Aug 2026 14:22:55 +0000
Files and hashes: 1: 3130332e3134392e36342e302f32332d3234203d3e20313331363737.roa (hash: U1mFwcarBwcENEkbti0C1yVEmBtDzRAAAqYz8mcIUOg=)
2: 42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.crl (hash: eLF7vQUajEA+yPDmx9WGtQJesDw8AVD8rI/RPt8uiOs=)
3: 323430353a653463303a3a2f33322d3634203d3e20313331363734.roa (hash: R5XmHRGNRbL/JzVgicSjGM6c3avdhtCi9gHhhibn8Iw=)
4: 323430353a653463303a3a2f33322d3634203d3e20313331363737.roa (hash: 81X32lIDsqpLyEd5Xpy3ESJVHUbt39R1tegiSMqE1PY=)
5: 3130332e3134392e36342e302f32332d3234203d3e20313331363734.roa (hash: GSRooEfHneMScmMay9/suUawwfISd9M2Zp/oSqWxd5c=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/OPENFOR/0/42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.crl
rsync://rpkica.twnic.tw/rpki/OPENFOR/0/42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 15 Aug 2026 14:22:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:49:f0:1d:d5:c1:a8:fc:6d:00:a1:7e:de:7e:cb:bb:8b:14:ee:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162
Validity
Not Before: Aug 14 13:06:55 2026 GMT
Not After : Aug 15 14:22:55 2026 GMT
Subject: CN=2E9E718941AC335A3A5361FEC289C53668D39152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9e:7a:5b:31:bf:ad:3c:08:3e:c3:40:69:c1:
b1:67:7a:18:15:af:31:b4:9f:27:85:9b:3b:2a:4a:
fe:67:3e:8e:cd:78:b3:ae:94:65:37:f1:95:aa:6f:
3b:c7:e9:56:97:eb:1b:d6:45:a8:9b:21:f2:5e:f1:
16:d8:2a:5b:d6:a3:3c:47:73:d8:50:c3:15:0c:a3:
33:68:c0:26:dc:bf:c8:61:87:89:63:a8:60:9b:78:
d6:6c:2a:55:59:32:d8:61:ad:af:56:e2:f2:12:f6:
35:3a:eb:2d:58:7a:61:64:10:4d:f5:51:ff:d8:2a:
2d:a8:07:7c:26:22:22:05:4e:47:5a:79:39:6a:28:
ad:15:58:b2:f9:a0:9b:26:60:8c:bd:da:25:14:e7:
aa:e1:27:25:95:18:48:23:6f:f5:22:86:ba:f0:fe:
e9:8d:cf:fd:ae:f7:64:ff:42:ec:b3:35:97:2b:10:
94:b0:d9:c2:06:a9:86:f7:3c:ff:94:d0:38:2f:c4:
e7:79:7c:c4:31:df:a9:63:06:49:70:5e:9c:20:14:
42:51:8c:2b:d1:dd:a4:23:7d:7a:06:d8:e9:91:fa:
07:d1:90:f4:0c:66:62:50:05:35:94:e7:a2:d6:06:
16:ed:71:fa:43:e1:21:21:6f:4a:6b:ff:ea:bb:1c:
2c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:9E:71:89:41:AC:33:5A:3A:53:61:FE:C2:89:C5:36:68:D3:91:52
X509v3 Authority Key Identifier:
keyid:42:C7:F7:8E:9F:DA:00:B9:CA:3E:2D:1D:DF:5E:08:DE:A8:62:01:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/OPENFOR/0/42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/OPENFOR/0/42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:3e:d7:eb:e5:c9:b4:08:1d:86:75:06:2d:09:49:93:7c:2b:
9c:6a:7a:5d:3e:3a:78:f6:d1:2d:cf:bb:ea:4f:ca:3c:2d:fa:
59:2d:c1:d5:a7:02:22:ea:92:69:db:50:82:bd:29:df:3d:92:
f1:36:b4:8b:b0:68:02:b4:16:cd:43:6e:35:7d:39:84:22:a1:
66:8c:6a:e0:ba:12:20:69:e8:6a:bd:74:52:80:8f:78:bb:22:
4c:3c:81:a0:3c:26:73:5e:18:6f:91:83:f5:ea:c3:31:0c:be:
f0:cb:e3:a0:0a:30:e4:87:da:d2:ee:d1:c8:93:cb:0a:96:c5:
c1:aa:b8:5c:33:20:f2:08:d3:34:00:54:0e:5f:bb:47:52:0f:
4f:f3:9e:8e:6d:c4:c8:89:c8:a6:61:61:9e:0d:ff:5c:d4:53:
37:16:b0:61:c3:9e:19:47:8b:1d:7f:3c:98:1d:66:47:37:82:
03:6f:39:35:3d:de:02:37:f0:0e:4f:c7:b4:f0:6b:d4:d1:a0:
37:72:f2:ef:41:b6:76:78:02:58:c3:6a:80:e5:72:fb:dd:14:
47:0c:56:06:79:8b:4a:42:d3:ac:18:ea:a0:d0:7c:b1:10:06:
ff:78:97:73:c7:16:fe:a8:57:06:96:a7:39:0f:87:b3:b9:80:
98:f0:af:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:21:08 2026 by rpki-client