
$ rpki-client -vvf rpkica.twnic.tw/rpki/SHIJICOLTD/0/1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.mft
File: 1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.mft (raw, json)
Hash identifier: S0GPEjKauA7c9rV21PC+hgQjt3q0ExZl1kbFJFs6uSo=
Subject key identifier: 89:D0:FE:E0:E3:0F:E7:55:71:53:0B:69:9A:82:09:88:78:8D:1F:C5
Authority key identifier: 1A:5D:E0:B5:C7:2E:02:E2:A2:38:0C:A2:7C:ED:A3:32:99:59:C5:32
Certificate issuer: /CN=1A5DE0B5C72E02E2A2380CA27CEDA3329959C532
Certificate serial: 52ECAFEA83449F87D2DE41BD29FFD1FC45EDD62B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SHIJICOLTD/0/1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.mft
Manifest number: 0C
Signing time: Wed 13 May 2026 04:36:50 +0000
Manifest this update: Wed 13 May 2026 04:31:50 +0000
Manifest next update: Thu 14 May 2026 05:59:50 +0000
Files and hashes: 1: 33362e35302e3234382e302f32332d3332203d3e20323035333239.roa (hash: kvKFidKAXKAwaMmiIgXnzcK5auO8ISz5aFkcmjUeP2E=)
2: 323430313a356632303a3a2f33322d313237203d3e20313530373637.roa (hash: Ej9DwCYeyuTCZ174KTX54oaUVIPTu6XH7JZcj5XxBwo=)
3: 33362e35302e3234382e302f32342d3234203d3e20323032383831.roa (hash: WG6X/jnayWkEMowgg+mWD8HiPPilQG6Q3sQOujOR2xs=)
4: 33362e35302e3234382e302f32332d3332203d3e20313530373637.roa (hash: h3JWwr2HmitnfBr13BTu4JXUXE3E10XdIu4AZ17neQQ=)
5: 323430313a356632303a663030303a3a2f34382d313237203d3e20323136313233.roa (hash: kbqJXOVL+rIVgTjXmyOflW5aA5dujQIMdG/ncqD3NDM=)
6: 323430313a356632303a313030303a3a2f33362d313237203d3e203332353935.roa (hash: sExiRNuVZ6Y/PqJdBLwrUGBsgr3jsRNlzqkEQKoiTeI=)
7: 323430313a356632303a313030303a3a2f33362d3438203d3e2039393233.roa (hash: 7Q4Gr2Sw3gVQE2N5T2sDzOwrlfIUZjCRsL8QVX+lTmo=)
8: 33362e35302e3234392e302f32342d3332203d3e203332353935.roa (hash: 4YC2Q76asHyydDpwY4AZWbAq0mphU7cmSGG8ZDxjJnE=)
9: 1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.crl (hash: FEpdasLbOTR/ucDY5q/amn45Typ1vR3NtlrWiiG+tNo=)
10: 323430313a356632303a3a2f33322d313237203d3e20323035333239.roa (hash: 8yGamJRav/ZDHTFcB9LQPl8vcZJDC9UL92XjkdKbALk=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/SHIJICOLTD/0/1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.crl
rsync://rpkica.twnic.tw/rpki/SHIJICOLTD/0/1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 05:59:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:ec:af:ea:83:44:9f:87:d2:de:41:bd:29:ff:d1:fc:45:ed:d6:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1A5DE0B5C72E02E2A2380CA27CEDA3329959C532
Validity
Not Before: May 13 04:31:50 2026 GMT
Not After : May 14 05:59:50 2026 GMT
Subject: CN=89D0FEE0E30FE75571530B699A820988788D1FC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:44:5d:7d:e7:bb:db:09:ab:01:2d:02:67:da:
2c:88:97:a6:4f:61:61:10:2f:7b:25:d5:8e:b6:b6:
66:09:df:9a:5f:ca:f3:41:bb:d7:2f:e0:cf:fd:59:
c5:c2:7f:c2:1f:0f:bb:d7:23:01:b3:04:d9:f9:eb:
86:54:bb:5f:ea:e8:5d:d1:e6:d8:2a:f7:12:0e:4d:
80:5c:45:8c:c4:e2:99:d3:0c:2c:6d:de:67:9d:6d:
42:a4:a9:1d:41:6c:50:40:d6:5a:ed:b6:fa:f7:14:
9f:b3:c5:00:67:50:6d:e0:e4:f7:80:59:f4:2d:d8:
9e:46:68:66:3a:ca:9a:6f:4d:07:88:c2:e6:1c:f8:
87:a9:4b:91:c2:69:55:4d:39:58:93:15:86:3c:21:
c4:60:55:f8:db:33:ea:2a:67:ee:92:6a:21:cd:e0:
1e:de:67:aa:73:0f:41:05:89:a5:61:da:7f:43:15:
ae:3e:19:2a:46:d6:8a:3c:34:3c:64:3b:ff:58:04:
c5:7c:a3:f0:14:25:cd:0f:82:3b:8c:ce:a9:b9:f3:
65:8f:f1:8a:ae:e4:f2:b2:ad:01:d5:df:60:ac:48:
e2:20:6e:44:06:d0:3e:c0:bc:48:fb:c5:67:f8:68:
83:98:85:93:9a:22:3e:27:73:d0:76:e3:4e:84:fd:
c2:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:D0:FE:E0:E3:0F:E7:55:71:53:0B:69:9A:82:09:88:78:8D:1F:C5
X509v3 Authority Key Identifier:
keyid:1A:5D:E0:B5:C7:2E:02:E2:A2:38:0C:A2:7C:ED:A3:32:99:59:C5:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SHIJICOLTD/0/1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SHIJICOLTD/0/1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:64:3a:bd:07:a7:f5:ef:2a:6f:61:25:c3:df:fe:d4:9d:6e:
34:16:c5:06:75:14:28:ab:28:78:6c:a4:10:7a:a1:ac:d9:4d:
b6:28:9f:56:80:2d:d5:08:e6:7b:4f:71:5b:1f:5a:62:b7:ca:
b0:6d:1a:e3:b9:c7:04:21:c9:3d:98:4f:c5:35:bd:bb:11:b1:
fc:b7:c9:ac:1e:c2:35:2b:0a:f6:48:c5:fb:03:84:9a:0f:29:
9e:58:2d:ee:47:4d:a5:50:55:c6:19:46:90:17:ce:31:86:99:
a0:ae:58:8c:3b:e3:e8:32:44:37:39:97:0f:64:95:52:00:e3:
07:5c:e4:ee:9c:b1:46:e1:29:78:3e:ac:a7:b4:d3:2a:e2:b1:
2b:46:5c:54:ed:fb:f8:c9:d5:58:f5:fe:bb:b6:a3:e6:d2:30:
4f:f1:f0:ef:f3:44:33:06:c0:65:c9:7c:54:4b:f9:cf:e4:7f:
8a:cc:6a:30:e1:18:a7:28:05:14:79:5c:4d:e4:52:a8:66:22:
9d:f6:a5:1d:bb:16:a3:22:48:48:99:92:18:09:88:91:eb:03:
06:e3:e0:6b:eb:73:83:ff:b3:03:80:15:de:b6:bf:47:6c:2f:
06:80:98:e9:38:d4:a2:f6:20:81:ed:5b:34:07:06:bc:b0:45:
aa:40:2e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:36:58 2026 by rpki-client