
$ rpki-client -vvf rpkica.twnic.tw/rpki/SECUNET/0/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.mft
File: 4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.mft (raw, json)
Hash identifier: wa96VyzHupDolaDs4hBVktaK9pY6AAW7LFsfIUqhsIc=
Subject key identifier: 8C:13:43:8C:27:C8:C7:65:FF:D9:D0:0D:77:E5:0C:D8:3F:A0:CD:BF
Authority key identifier: 4D:4D:BD:28:BB:EB:89:20:B3:7A:A6:04:8A:C2:7D:52:46:6A:C7:E6
Certificate issuer: /CN=4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6
Certificate serial: 57A107332F106BF65E6D2B96A7C287A848427EA5
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SECUNET/0/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.mft
Manifest number: 07
Signing time: Wed 13 May 2026 04:36:50 +0000
Manifest this update: Wed 13 May 2026 04:31:50 +0000
Manifest next update: Thu 14 May 2026 07:40:50 +0000
Files and hashes: 1: 3130332e3139382e3135322e302f32332d3234203d3e2037353336.roa (hash: RqA+16NcNPgMT4YMF2BTGjQjH/2+48khaUyObZRFtRE=)
2: 3130332e3139382e3135322e302f32332d3234203d3e2037343833.roa (hash: uG7CGWdeS5uhveRrD2X7qwANEb3T2edbHmVXjF6fXlg=)
3: 4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.crl (hash: OGJIHiQtOmy7fuGIuYZosvrt2aBfN8Zh9aDPxav3iiM=)
4: 3130332e3139382e3135322e302f32332d3234203d3e2037353338.roa (hash: lozDj5Lx5lP+vcH1OuWHc2uSVB3sN9/AJEBNfjtjdxc=)
5: 3130332e3139382e3135322e302f32332d3234203d3e203231383539.roa (hash: cAZa+9mLNLRFrGmQjJmou8jCTgH3y1HwgtvgIKtzlGk=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/SECUNET/0/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.crl
rsync://rpkica.twnic.tw/rpki/SECUNET/0/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 07:40:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:a1:07:33:2f:10:6b:f6:5e:6d:2b:96:a7:c2:87:a8:48:42:7e:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6
Validity
Not Before: May 13 04:31:50 2026 GMT
Not After : May 14 07:40:50 2026 GMT
Subject: CN=8C13438C27C8C765FFD9D00D77E50CD83FA0CDBF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:9d:c4:c4:18:b5:24:93:ee:4a:cd:9c:6c:f0:
00:bc:e4:85:30:2c:63:7e:bf:b9:27:68:51:21:d2:
9a:4f:a7:42:b9:fb:fd:17:46:ca:b4:a7:28:d8:a7:
17:d1:aa:7a:98:34:ba:35:ac:3e:d6:d2:ac:6f:c9:
47:66:bf:5d:50:16:35:4c:13:8e:5c:86:16:38:11:
40:1b:35:65:fd:65:58:51:e7:ec:d7:80:eb:db:30:
4e:fb:f9:61:ef:16:d3:f7:41:16:de:02:1d:c5:8c:
51:7c:ea:98:13:57:ec:50:a8:f7:23:e0:ec:04:5a:
83:2c:2f:94:88:a4:c7:c9:7f:35:6f:0d:c4:f3:f4:
d7:20:bd:d5:5a:dc:36:9c:be:05:ea:89:bf:ce:fe:
f4:f7:31:7e:0a:01:b3:cf:dd:65:d6:84:ed:53:c8:
f4:77:9f:50:39:dd:31:1a:c7:9b:d9:6b:79:e9:11:
40:66:8d:e9:bc:97:e7:e8:b8:ae:b7:a9:b0:d8:ed:
56:80:99:8f:ce:b6:18:8f:43:9c:af:67:52:67:05:
75:32:80:e2:5d:62:3a:34:92:78:18:f8:92:aa:b8:
f2:a5:e7:ed:4f:bd:f1:46:e0:fa:5d:ac:78:43:ed:
e7:53:e0:4c:37:d3:aa:ca:29:c0:86:8e:d6:a4:f1:
61:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:13:43:8C:27:C8:C7:65:FF:D9:D0:0D:77:E5:0C:D8:3F:A0:CD:BF
X509v3 Authority Key Identifier:
keyid:4D:4D:BD:28:BB:EB:89:20:B3:7A:A6:04:8A:C2:7D:52:46:6A:C7:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SECUNET/0/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SECUNET/0/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:65:0c:b4:c7:0f:3e:15:4d:0e:ab:d7:99:8a:ba:40:59:21:
fd:65:ed:45:05:b7:cc:3a:f9:94:70:59:37:a4:91:3c:14:56:
3a:f6:e6:1c:f3:b6:04:56:dd:f0:31:fb:ef:8e:fa:69:c3:15:
da:c4:d0:b9:97:2e:8a:58:90:55:20:2b:54:d7:22:92:a0:2a:
3a:52:8d:f4:53:17:68:9c:7e:99:c7:6b:22:e0:0a:41:c1:fe:
b3:c5:4a:96:5b:e5:de:81:ae:41:83:66:bf:24:ad:fb:4e:96:
ef:83:03:3b:3e:2b:ea:71:59:18:db:c8:a1:81:ef:8c:9b:d7:
6b:31:d5:c9:91:73:0e:d3:d7:87:fd:aa:34:02:c1:ad:16:07:
21:af:ed:e5:75:09:fd:72:ba:12:75:4e:7e:fc:cc:b7:c0:3c:
77:c5:38:13:f2:a4:57:23:f3:29:8b:85:a1:58:05:ce:b2:06:
94:d8:e4:53:c7:6d:4c:69:c6:2e:dd:9a:39:a8:1e:5d:19:56:
b1:7c:5c:23:f3:1b:72:4a:a8:55:ed:6a:4c:9a:54:30:4a:8b:
6b:68:0d:90:7b:d9:43:b7:a0:77:87:4c:7e:ca:f1:f3:be:57:
db:cc:7d:a1:86:dd:16:65:6e:3a:ca:62:08:60:5e:5e:55:fa:
07:f1:43:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:36:12 2026 by rpki-client