
$ rpki-client -vvvf rpkica.twnic.tw/rpki/SECUNET/0/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.mft
File: 4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.mft (raw, json)
Hash identifier: Btmovsnd+aK7cLIfp+NnneNf+GCnnWu1MUcwmGdXtHw=
Subject key identifier: 0E:22:6F:F2:F7:FF:21:8A:2A:E0:20:AE:E9:9C:D9:73:F1:3B:99:75
Authority key identifier: 4D:4D:BD:28:BB:EB:89:20:B3:7A:A6:04:8A:C2:7D:52:46:6A:C7:E6
Certificate issuer: /CN=4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6
Certificate serial: 52863C2C18ED83DDAA7A78C1A2CC6552E9BC41D4
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SECUNET/0/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.mft
Manifest number: D0
Signing time: Sat 10 Oct 2026 17:43:05 +0000
Manifest this update: Sat 10 Oct 2026 17:38:05 +0000
Manifest next update: Sun 11 Oct 2026 18:56:05 +0000
Files and hashes: 1: 3130332e3139382e3135322e302f32332d3234203d3e203231383539.roa (hash: cAZa+9mLNLRFrGmQjJmou8jCTgH3y1HwgtvgIKtzlGk=)
2: 3130332e3139382e3135322e302f32332d3234203d3e2037343833.roa (hash: uG7CGWdeS5uhveRrD2X7qwANEb3T2edbHmVXjF6fXlg=)
3: 3130332e3139382e3135322e302f32332d3234203d3e2037353336.roa (hash: RqA+16NcNPgMT4YMF2BTGjQjH/2+48khaUyObZRFtRE=)
4: 4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.crl (hash: 9/6j5b8uP0UwukYqqNAES0PdLeZq93lkT2JaAicm7Fc=)
5: 3130332e3139382e3135322e302f32332d3234203d3e2037353338.roa (hash: lozDj5Lx5lP+vcH1OuWHc2uSVB3sN9/AJEBNfjtjdxc=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/SECUNET/0/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.crl
rsync://rpkica.twnic.tw/rpki/SECUNET/0/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 15:19:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:86:3c:2c:18:ed:83:dd:aa:7a:78:c1:a2:cc:65:52:e9:bc:41:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6
Validity
Not Before: Oct 10 17:38:05 2026 GMT
Not After : Oct 11 18:56:05 2026 GMT
Subject: CN=0E226FF2F7FF218A2AE020AEE99CD973F13B9975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5d:f6:71:a8:f2:31:86:7a:f0:d5:83:d9:f2:
7c:2e:90:d0:09:f2:6c:e7:15:d3:26:1c:60:e5:1c:
f5:ca:44:dc:7c:3d:97:98:13:58:3e:09:26:cf:f8:
60:72:57:f8:94:31:67:b9:59:5e:26:e7:70:4b:3b:
3b:ce:83:b1:e8:1a:3c:6b:da:0c:39:8e:fc:2d:80:
d3:54:de:2d:4d:91:87:6d:62:0a:58:74:96:77:b8:
1b:88:20:f0:e5:44:0f:39:45:b1:70:47:ed:84:9b:
6c:8e:a2:07:9c:08:8a:52:43:e7:01:46:57:eb:89:
fc:2a:b7:cc:0a:2c:99:16:7a:c9:aa:61:65:43:a0:
d0:eb:8d:24:66:b9:e1:49:91:9e:df:40:84:69:e3:
e8:d8:c7:0a:80:d9:4d:f3:ec:ff:71:ac:10:50:a9:
d9:8b:33:98:56:60:d5:4f:3c:47:35:e6:8d:90:13:
a6:72:ae:00:e8:18:39:c0:66:cd:8c:03:fc:26:f3:
0e:cd:65:f1:ec:cf:5c:31:92:b2:fb:e3:e4:af:3d:
f1:1d:f9:4e:33:ec:fd:57:18:90:6a:0d:0f:62:6c:
7d:5b:17:93:3a:4c:7e:82:28:2a:12:0b:62:b2:5e:
fc:ae:58:0c:b3:78:d4:90:5e:01:00:96:65:f9:c9:
27:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:22:6F:F2:F7:FF:21:8A:2A:E0:20:AE:E9:9C:D9:73:F1:3B:99:75
X509v3 Authority Key Identifier:
keyid:4D:4D:BD:28:BB:EB:89:20:B3:7A:A6:04:8A:C2:7D:52:46:6A:C7:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SECUNET/0/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SECUNET/0/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:5f:71:e1:bb:af:74:1c:42:80:17:7e:5f:4a:40:eb:fd:5d:
3e:50:e0:62:6d:d6:39:3b:a2:a1:46:8a:dd:7c:ec:2c:5d:a8:
65:65:f9:8d:44:dc:f0:0a:79:25:d2:8c:b6:4c:ce:77:d6:28:
95:74:76:ff:84:82:75:f1:98:33:c7:07:d9:68:04:0d:13:ef:
c1:b2:e1:6b:64:a8:af:06:6e:6e:c9:29:f9:b6:b1:7b:f3:a4:
2a:6d:b6:48:5d:9d:1e:7d:e2:36:9b:66:34:cd:3c:5a:9e:d4:
59:12:8a:6a:52:e2:1d:5c:6d:97:97:83:98:30:43:b8:b2:0f:
85:04:7a:17:7b:5a:fd:c4:88:c5:81:69:c7:6b:58:51:51:28:
cb:6a:36:7f:dd:7f:8b:a8:8a:b2:c3:88:70:f5:83:10:16:63:
9a:2b:e0:ce:36:c2:65:a0:e0:56:c1:97:91:a2:8b:44:96:f1:
d6:a1:a7:c3:a4:61:c7:94:f7:da:00:63:11:68:71:e5:f8:a8:
7b:d6:8f:f0:4b:7d:43:47:2c:25:bb:f1:67:ae:76:a0:53:4c:
dd:1b:07:4e:c5:db:85:7e:c1:f1:c7:62:69:b7:23:9e:b7:43:
43:fd:a3:b4:d7:ee:c0:6e:2e:59:c7:81:27:02:7e:88:35:83:
b9:5d:ae:2a
-----BEGIN CERTIFICATE-----
MIIE5jCCA86gAwIBAgIUUoY8LBjtg92qenjBosxlUum8QdQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEQ0REJEMjhCQkVCODkyMEIzN0FBNjA0OEFDMjdENTI0
NjZBQzdFNjAeFw0yNjEwMTAxNzM4MDVaFw0yNjEwMTExODU2MDVaMDMxMTAvBgNV
BAMTKDBFMjI2RkYyRjdGRjIxOEEyQUUwMjBBRUU5OUNEOTczRjEzQjk5NzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWXfZxqPIxhnrw1YPZ8nwukNAJ
8mznFdMmHGDlHPXKRNx8PZeYE1g+CSbP+GByV/iUMWe5WV4m53BLOzvOg7HoGjxr
2gw5jvwtgNNU3i1NkYdtYgpYdJZ3uBuIIPDlRA85RbFwR+2Em2yOogecCIpSQ+cB
Rlfrifwqt8wKLJkWesmqYWVDoNDrjSRmueFJkZ7fQIRp4+jYxwqA2U3z7P9xrBBQ
qdmLM5hWYNVPPEc15o2QE6ZyrgDoGDnAZs2MA/wm8w7NZfHsz1wxkrL74+SvPfEd
+U4z7P1XGJBqDQ9ibH1bF5M6TH6CKCoSC2KyXvyuWAyzeNSQXgEAlmX5ySd5AgMB
AAGjggHwMIIB7DAdBgNVHQ4EFgQUDiJv8vf/IYoq4CCu6ZzZc/E7mXUwHwYDVR0j
BBgwFoAUTU29KLvriSCzeqYEisJ9UkZqx+YwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0VDVU5F
VC8wLzRENERCRDI4QkJFQjg5MjBCMzdBQTYwNDhBQzI3RDUyNDY2QUM3RTYuY3Js
MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu
aWMudHcvcnBraS9UV05JQ0NBLzEvNEQ0REJEMjhCQkVCODkyMEIzN0FBNjA0OEFD
MjdENTI0NjZBQzdFNi5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy
c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1NFQ1VORVQvMC80RDREQkQyOEJC
RUI4OTIwQjM3QUE2MDQ4QUMyN0Q1MjQ2NkFDN0U2Lm1mdDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQV9x4buv
dBxCgBd+X0pA6/1dPlDgYm3WOTuioUaK3XzsLF2oZWX5jUTc8Ap5JdKMtkzOd9Yo
lXR2/4SCdfGYM8cH2WgEDRPvwbLha2SorwZubskp+baxe/OkKm22SF2dHn3iNptm
NM08Wp7UWRKKalLiHVxtl5eDmDBDuLIPhQR6F3ta/cSIxYFpx2tYUVEoy2o2f91/
i6iKssOIcPWDEBZjmivgzjbCZaDgVsGXkaKLRJbx1qGnw6Rhx5T32gBjEWhx5fio
e9aP8Et9Q0csJbvxZ652oFNM3RsHTsXbhX7B8cdiabcjnrdDQ/2jtNfuwG4uWceB
JwJ+iDWDuV2uKg==
-----END CERTIFICATE-----
Generated at Sat Oct 10 22:40:49 2026 by rpki-client