
$ rpki-client -vvf rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.mft
File: DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.mft (raw, json)
Hash identifier: 4cNRug7JOL6ZwGz8k/lgkwUa+zX4xy3VeH7s/GqPHAg=
Subject key identifier: 7A:80:5A:90:06:33:B1:59:BB:47:4F:60:13:1E:21:9D:BB:5E:A6:BB
Authority key identifier: DF:AD:87:73:5B:96:E3:8C:5B:16:45:0D:06:F1:E3:F0:5D:1C:0B:50
Certificate issuer: /CN=DFAD87735B96E38C5B16450D06F1E3F05D1C0B50
Certificate serial: 6A92BA1283894118423A838FD63A8D2064511F92
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/2/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.mft
Manifest number: 40
Signing time: Thu 11 Jun 2026 12:43:07 +0000
Manifest this update: Thu 11 Jun 2026 12:38:07 +0000
Manifest next update: Fri 12 Jun 2026 14:47:07 +0000
Files and hashes: 1: DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.crl (hash: xfb4+Vgu3vWYeR8Fu8ER0tJf/TaiTuRSmCNHGxA3s1o=)
2: 3138372e37392e3139322e302f31392d3234203d3e203338303432.roa (hash: L/E0Yfp/GwgZgFh8cWkW12iwkjBxZmoDDFi3H0v3pY8=)
3: 3138372e37392e3139322e302f31392d3234203d3e20313334383233.roa (hash: a8CleYW3Fkq8o8fjYWlYdkD+yxdQ7vmQublJvofR+u0=)
4: 3138372e37392e3234382e302f32312d3234203d3e203338303432.roa (hash: /1olUNUta2jWsipkUXWKP+uzfj0Zi5YxacKqhx693kk=)
5: 3138372e37392e3139322e302f31392d3234203d3e20313331313531.roa (hash: 05w0uJce6h2DLQWt4ZdfTjMtpIegQ9tImqKoarYiRe8=)
6: 3138372e37392e3234382e302f32312d3234203d3e20313331313531.roa (hash: 3vADVgqIF+DMqXN/Slxe4U6QenJyre1e9qbCennjH4s=)
7: 3138372e37392e3234382e302f32312d3234203d3e20313334383233.roa (hash: Zz9CvLm2AJx5rpKaFfW4V3557O2rIHrGg/E64B0gDkE=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.crl
rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/2/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 12:37:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:92:ba:12:83:89:41:18:42:3a:83:8f:d6:3a:8d:20:64:51:1f:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFAD87735B96E38C5B16450D06F1E3F05D1C0B50
Validity
Not Before: Jun 11 12:38:07 2026 GMT
Not After : Jun 12 14:47:07 2026 GMT
Subject: CN=7A805A900633B159BB474F60131E219DBB5EA6BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:17:15:0c:63:e0:a9:9b:b3:b0:53:49:05:a6:
be:04:d4:2a:36:4d:56:1b:99:8e:81:2a:2c:9d:44:
e2:f9:aa:c0:8a:c4:f6:40:b3:7a:d3:7a:3c:a2:fc:
3c:20:37:79:ec:cf:d9:7d:c8:4f:e4:32:26:d2:89:
85:3a:33:9f:50:a5:7f:01:99:12:ea:25:65:70:d2:
90:89:a3:ff:b6:c6:a3:32:3f:2c:ce:2d:b4:d8:49:
2e:85:bc:b5:0c:56:1f:59:44:f0:e7:58:d5:7a:ea:
fa:91:2e:d9:ef:17:16:62:3e:77:fa:de:62:1d:2d:
fd:38:8f:75:45:d2:73:83:aa:17:cf:63:53:47:2b:
f7:d7:67:1a:16:ee:f3:29:81:0a:4f:8c:90:a4:e9:
2c:99:20:f8:ce:6f:bf:a1:d6:00:70:a9:c8:73:f9:
59:2a:d3:fd:3d:11:46:ef:fd:9a:3f:b7:94:c5:d2:
5f:e0:81:44:dc:5f:f8:a5:42:df:1a:a5:6d:19:5a:
2e:1e:a2:f8:3a:62:00:34:6d:73:8e:7a:4d:70:ce:
52:c1:a5:16:bf:ee:7a:80:7c:88:23:b1:b4:05:cd:
3a:2a:1c:fc:d9:52:2e:a1:a1:e9:f6:67:40:4e:70:
83:15:4e:a3:b9:e5:a4:46:3c:c3:d2:58:20:c6:c1:
35:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:80:5A:90:06:33:B1:59:BB:47:4F:60:13:1E:21:9D:BB:5E:A6:BB
X509v3 Authority Key Identifier:
keyid:DF:AD:87:73:5B:96:E3:8C:5B:16:45:0D:06:F1:E3:F0:5D:1C:0B:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:94:ca:ed:86:72:77:2d:78:2f:8e:59:29:e8:1b:75:f3:82:
f2:ca:5c:06:ea:48:11:6f:65:b7:af:66:42:da:97:4a:2e:04:
ab:7b:9b:2a:95:4d:49:6d:fe:22:b3:12:fc:84:1d:7c:b3:d8:
cd:b6:d2:b5:c4:f2:c0:e5:80:ef:e1:5b:e2:94:c1:11:66:74:
58:de:c9:e0:34:db:5e:7e:5a:7c:b5:0b:1b:c7:9d:da:d4:f2:
2e:d2:a9:4f:c6:f5:94:c6:aa:c5:c4:57:19:6d:0d:84:c7:e1:
ba:20:a0:fe:0c:a5:3c:33:b4:90:7c:9f:2e:af:8f:f9:d2:61:
0a:4c:87:a9:4d:97:bc:84:e2:a5:cc:49:8d:c5:5e:e2:f4:eb:
5c:55:30:a7:23:ec:c6:6e:05:8c:07:c7:07:09:4e:a6:21:66:
1c:3f:ea:18:36:13:99:a1:40:6f:e3:f2:5b:9e:5f:4a:29:be:
aa:72:c7:45:1f:4a:15:a5:c3:d2:b8:4d:e8:c8:c0:61:f9:cc:
8a:db:bc:32:68:4a:05:8d:5f:7c:ab:b0:62:b8:52:69:3b:a9:
73:68:d9:e3:f0:2b:f2:8d:74:d1:79:b6:61:b0:00:b4:bb:96:
df:ad:2e:ac:50:4b:f5:90:30:9a:d9:03:4d:f5:82:fa:ff:a6:
9f:68:59:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 20:23:10 2026 by rpki-client