
$ rpki-client -vvvf rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.mft
File: DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.mft (raw, json)
Hash identifier: 6az2XdY1rOPlg44nfr3EjI5ibKpq75K744qkbqEhajE=
Subject key identifier: 15:DE:85:42:39:F4:BF:B7:10:9E:17:35:76:A6:E4:E5:29:31:E6:21
Authority key identifier: DF:AD:87:73:5B:96:E3:8C:5B:16:45:0D:06:F1:E3:F0:5D:1C:0B:50
Certificate issuer: /CN=DFAD87735B96E38C5B16450D06F1E3F05D1C0B50
Certificate serial: 2F357172F640FAB09685D552B4FC3D52FEAEFBD2
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/2/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.mft
Manifest number: 0101
Signing time: Sun 25 Oct 2026 17:26:11 +0000
Manifest this update: Sun 25 Oct 2026 17:21:11 +0000
Manifest next update: Mon 26 Oct 2026 18:54:11 +0000
Files and hashes: 1: 3138372e37392e3230312e302f32342d3234203d3e20323037353530.roa (hash: YnpfP1IY3Vl8PX3NftJuZv3w6OU/wLlp+t4Hb1Ri/Ek=)
2: 3138372e37392e3139322e302f31392d3234203d3e20313331313531.roa (hash: 05w0uJce6h2DLQWt4ZdfTjMtpIegQ9tImqKoarYiRe8=)
3: 3138372e37392e3139362e302f32322d3234203d3e20323037353530.roa (hash: DlmTrH0HWP82INqSmtsVtIWlfyhVreq2AQXQztnDoMc=)
4: 3138372e37392e3234382e302f32312d3234203d3e20313334383233.roa (hash: Zz9CvLm2AJx5rpKaFfW4V3557O2rIHrGg/E64B0gDkE=)
5: 3138372e37392e3230342e302f32322d3332203d3e20323037353530.roa (hash: /oZGuwPpFGcw768MWvS17zp/YymCcKVkmo9U2+1EqUw=)
6: 3138372e37392e3230302e302f32342d3234203d3e203137393939.roa (hash: Ms8KWMiqHBUeweg6G85Jzg70gg1CWi1Nsi+XQu4djsw=)
7: 3138372e37392e3231362e302f32312d3234203d3e20323037353530.roa (hash: 3+dW9wI0EjgqQpXg6HhrskIvYJ2q/OO48C7Pc+fjGww=)
8: 3138372e37392e3234382e302f32342d3234203d3e20313331313531.roa (hash: JI4So8ZhAPE0PToBNtuSCn4oQjqoqDXKjENSD5r0Aa8=)
9: 3138372e37392e3234382e302f32342d3234203d3e20313331363738.roa (hash: GPyZaSlRW0uZ9rINXF8kV4fuvB+9dJcD8GVRMaJQrtg=)
10: 3138372e37392e3139322e302f31392d3234203d3e203338303432.roa (hash: L/E0Yfp/GwgZgFh8cWkW12iwkjBxZmoDDFi3H0v3pY8=)
11: DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.crl (hash: 7z5DXeV37Lf31lD/bIrCKiMWo8M+1rxiOSrn/pf/jjI=)
12: 3138372e37392e3234382e302f32312d3234203d3e203338303432.roa (hash: /1olUNUta2jWsipkUXWKP+uzfj0Zi5YxacKqhx693kk=)
13: 3138372e37392e3230382e302f32312d3234203d3e20323037353530.roa (hash: KA0OUMP7ljY4AzOV5ZHcM5DuWTOfHvm6pZOogffe2ro=)
14: 3138372e37392e3139342e302f32332d3234203d3e20323037353530.roa (hash: CFYijgrVe9thQn2UPKNNnCd1WKmnT7yKY7hnrYCMKzw=)
15: 3138372e37392e3139362e302f32322d3332203d3e20323037353530.roa (hash: AecfZvbYsfuauKIcssxsMVDFnJB/KY/arLkgaP766g8=)
16: 3138372e37392e3234382e302f32312d3234203d3e20313331313531.roa (hash: 3vADVgqIF+DMqXN/Slxe4U6QenJyre1e9qbCennjH4s=)
17: 3138372e37392e3230322e302f32332d3234203d3e20323037353530.roa (hash: NOssyf0cVbehU0NIrpbuxzGDevbFBHHPuCiEoYJfVaI=)
18: 3138372e37392e3139322e302f31392d3234203d3e20313334383233.roa (hash: a8CleYW3Fkq8o8fjYWlYdkD+yxdQ7vmQublJvofR+u0=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.crl
rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/2/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 18:54:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:35:71:72:f6:40:fa:b0:96:85:d5:52:b4:fc:3d:52:fe:ae:fb:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFAD87735B96E38C5B16450D06F1E3F05D1C0B50
Validity
Not Before: Oct 25 17:21:11 2026 GMT
Not After : Oct 26 18:54:11 2026 GMT
Subject: CN=15DE854239F4BFB7109E173576A6E4E52931E621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:37:de:c0:23:39:68:5e:f2:ec:da:7c:21:dd:
ed:8b:9b:e5:14:ad:c3:4e:b4:a5:e9:c9:27:8a:a7:
05:c4:0d:04:8c:6f:ca:ef:fe:d8:e9:51:55:17:5e:
88:4c:fa:9c:4a:1c:f9:bd:a6:3a:87:60:eb:66:1a:
1a:b8:55:e4:59:af:a1:48:ca:ee:51:96:05:dc:0f:
45:2c:04:d8:fa:81:ec:4d:3c:a5:85:82:f2:43:37:
f2:c9:f0:77:6a:0c:85:eb:2a:e4:30:61:89:d8:e9:
35:c5:9f:22:fb:1f:0b:fa:c2:93:46:5e:e2:17:b8:
e4:af:5c:bc:94:2c:34:db:3c:cd:ce:05:7b:20:e5:
27:f8:a9:3b:b3:66:73:91:08:af:34:87:11:75:4a:
67:77:7d:bd:fb:f7:8a:f2:3f:f3:09:e5:37:43:a8:
67:db:06:0b:96:45:cc:ca:03:2b:82:e1:78:b0:96:
36:f8:ca:3e:9f:0e:ef:ef:38:b9:34:65:b6:bf:29:
1a:e9:53:92:24:40:12:af:f6:78:80:7b:d2:da:35:
9e:d1:3d:b1:7f:db:c4:1c:8b:8c:e9:0c:9b:58:27:
5b:cf:ba:31:61:ad:d4:9f:e4:6e:de:b2:44:7f:99:
f2:5c:bd:20:70:3b:90:8b:7a:59:84:a7:99:2f:62:
20:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:DE:85:42:39:F4:BF:B7:10:9E:17:35:76:A6:E4:E5:29:31:E6:21
X509v3 Authority Key Identifier:
keyid:DF:AD:87:73:5B:96:E3:8C:5B:16:45:0D:06:F1:E3:F0:5D:1C:0B:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:4a:0a:4a:f3:a4:a0:6e:b1:bb:44:4f:36:f3:47:4f:af:42:
84:c9:a1:db:50:fc:55:23:ef:b7:95:d9:5c:f1:4b:84:3b:b4:
94:8c:d8:af:ea:77:94:8d:db:9c:12:29:bb:3c:b2:83:b3:0b:
7b:57:4f:49:c8:34:a6:f1:1f:31:4e:ef:1a:84:bd:a8:a5:6a:
3e:e8:a1:5b:c7:3d:54:22:6d:72:a3:85:07:b9:b9:ad:64:35:
72:3e:64:17:3a:47:f0:be:7a:b9:06:e0:16:1a:18:3e:a9:90:
69:ab:89:68:3b:31:16:17:cb:f1:76:93:b3:b5:4a:e9:c3:b5:
44:07:f1:be:1a:94:33:3d:b8:92:71:78:f7:5b:5b:65:81:6e:
65:55:47:61:41:e3:c1:8a:8b:d5:b9:db:18:df:6c:ed:87:85:
cc:7e:4c:e4:f6:05:b8:b7:15:54:d5:c7:b9:69:40:32:4d:49:
24:f4:32:fd:d2:fa:c9:b1:b8:8b:41:db:64:62:49:05:3e:0b:
41:af:d1:77:4b:82:83:96:9e:6b:b8:d1:8a:dd:d1:54:ff:62:
76:a9:da:65:bd:40:93:b5:ff:1d:37:a1:bb:67:1a:dc:44:29:
8b:8f:3a:64:cb:fa:14:a0:49:c6:eb:86:dd:05:6b:72:2d:1a:
75:01:09:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 04:02:32 2026 by rpki-client