
$ rpki-client -vvvf rpkica.twnic.tw/rpki/SIANGYU/0/1F8D4CE11E68D7B343F492770E897CADC2157E7F.mft
File: 1F8D4CE11E68D7B343F492770E897CADC2157E7F.mft (raw, json)
Hash identifier: Tv+OdlBGWd+KdjMej7Eu2q4FWXAq7pUW3Xz1GqzjAXQ=
Subject key identifier: 33:B6:1B:CC:D3:95:D2:91:B9:95:B0:EE:D2:6E:EE:F0:E6:3C:7F:83
Authority key identifier: 1F:8D:4C:E1:1E:68:D7:B3:43:F4:92:77:0E:89:7C:AD:C2:15:7E:7F
Certificate issuer: /CN=1F8D4CE11E68D7B343F492770E897CADC2157E7F
Certificate serial: 5B27505A16D6F0E8FB155C4D38577EE2C0215FB4
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1F8D4CE11E68D7B343F492770E897CADC2157E7F.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SIANGYU/0/1F8D4CE11E68D7B343F492770E897CADC2157E7F.mft
Manifest number: C9
Signing time: Tue 06 Oct 2026 15:25:25 +0000
Manifest this update: Tue 06 Oct 2026 15:20:25 +0000
Manifest next update: Wed 07 Oct 2026 15:42:25 +0000
Files and hashes: 1: 3130332e3137352e3235342e302f32342d3234203d3e203633383937.roa (hash: 6nO2CjoyKQ++7F8uQmuPvL80F94N0DTmwguikTzVJW4=)
2: 1F8D4CE11E68D7B343F492770E897CADC2157E7F.crl (hash: Zgdn0GUPy8m2Zpt1ri6heL6KJmDvBpJqukn6H4/y85I=)
3: 3130332e3137352e3235352e302f32342d3234203d3e20313430323134.roa (hash: U+U3TE1+aqEG2dNbLEwYnuusmfUHp3Crw3DZOdcMWq4=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/SIANGYU/0/1F8D4CE11E68D7B343F492770E897CADC2157E7F.crl
rsync://rpkica.twnic.tw/rpki/SIANGYU/0/1F8D4CE11E68D7B343F492770E897CADC2157E7F.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1F8D4CE11E68D7B343F492770E897CADC2157E7F.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 07 Oct 2026 15:42:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:27:50:5a:16:d6:f0:e8:fb:15:5c:4d:38:57:7e:e2:c0:21:5f:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1F8D4CE11E68D7B343F492770E897CADC2157E7F
Validity
Not Before: Oct 6 15:20:25 2026 GMT
Not After : Oct 7 15:42:25 2026 GMT
Subject: CN=33B61BCCD395D291B995B0EED26EEEF0E63C7F83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d4:f2:2c:85:ab:5c:31:b6:18:f9:1b:9e:74:
5b:78:fd:71:3b:12:a6:aa:fc:8a:4f:7e:c5:18:27:
11:fd:85:64:7a:18:e2:94:29:0b:03:f9:ca:a9:fa:
90:f2:ae:96:25:ac:73:f6:9b:7e:6a:82:e0:1f:3b:
22:eb:db:59:7d:4d:13:b8:87:83:ee:89:f0:dd:23:
33:89:44:c2:e2:df:48:c9:dc:ff:21:ec:db:1f:11:
e2:e0:ed:55:74:53:97:70:e7:f3:01:e3:e3:f9:36:
e2:a3:87:0a:59:dd:a6:ad:81:6d:43:35:21:1f:6e:
f5:05:54:9a:6a:71:d2:d2:bf:98:b1:54:cd:85:17:
fb:63:6e:f5:7c:2d:0c:52:27:61:68:b4:a5:c0:65:
4f:a3:ff:56:6d:75:71:9d:fd:e4:1a:91:df:7a:bd:
8a:29:48:2a:81:1c:8b:22:a2:9e:0d:39:98:c4:ae:
0a:7a:8f:0c:6b:89:ca:a4:66:9a:01:75:c3:04:27:
e0:ad:15:ee:ad:ee:95:11:7e:e9:4f:78:1f:53:5b:
34:30:b3:ba:d4:4f:64:c9:c0:2a:90:bf:78:bd:ea:
fe:ca:de:ff:14:54:7f:c5:5b:a9:d9:a1:17:8f:25:
f7:5f:f9:80:d5:79:7c:e0:1a:69:b8:25:58:0a:66:
3e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:B6:1B:CC:D3:95:D2:91:B9:95:B0:EE:D2:6E:EE:F0:E6:3C:7F:83
X509v3 Authority Key Identifier:
keyid:1F:8D:4C:E1:1E:68:D7:B3:43:F4:92:77:0E:89:7C:AD:C2:15:7E:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SIANGYU/0/1F8D4CE11E68D7B343F492770E897CADC2157E7F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1F8D4CE11E68D7B343F492770E897CADC2157E7F.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SIANGYU/0/1F8D4CE11E68D7B343F492770E897CADC2157E7F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:79:b3:03:f1:c8:f2:a4:1d:b9:7b:0c:a4:c6:01:55:36:c1:
ed:96:e9:b0:ca:2c:98:4f:2f:73:5a:27:cb:71:5f:a1:7a:fc:
a7:77:02:66:c5:6e:1b:06:26:eb:8d:33:58:90:68:2f:fa:a3:
d0:b5:f8:05:e9:c2:5c:95:85:17:f5:ab:77:05:f2:2f:26:1d:
ff:b7:4f:eb:89:bb:5d:57:52:57:3b:e3:46:ef:c6:28:ad:a2:
e6:47:a6:1b:7a:cf:1e:b5:8f:81:8f:6b:8b:c7:43:86:80:d0:
d7:a1:74:4f:cf:17:51:3a:76:76:17:61:2b:8a:b9:83:75:ca:
f4:60:40:fe:29:7f:d5:8d:97:1f:b9:d2:a4:dc:e9:07:1c:0b:
6e:6d:0e:d2:f7:9c:0d:fe:8e:c1:1b:c3:f7:7b:fa:d8:84:7d:
4b:02:79:c7:92:fb:3a:6b:5c:fc:8c:75:01:56:d4:bd:91:89:
a0:7e:7d:ae:26:b9:e9:f0:ec:98:da:a4:6d:f0:6a:a9:54:66:
f0:6f:d3:a1:3e:97:b0:41:bf:73:b3:06:0f:68:76:42:6a:f3:
da:42:c6:7a:66:37:f6:de:34:7b:c0:d1:f7:a6:20:68:8f:84:
df:2d:90:ed:41:33:bf:9a:f3:cb:12:bf:0f:29:28:c7:62:7c:
a3:3d:7d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 07:56:33 2026 by rpki-client