
$ rpki-client -vvf rpkica.twnic.tw/rpki/SIMPLE/0/5407824F2094BDB5E96C450A4F36563A73225CCB.mft
File: 5407824F2094BDB5E96C450A4F36563A73225CCB.mft (raw, json)
Hash identifier: 17LqsUPZSHCgt4wkFvImPsH2IIx5uBFrteXmX6w1d98=
Subject key identifier: 3C:AB:0E:43:C6:74:71:CF:C0:A1:EB:9A:CF:E0:CD:C3:5A:69:89:36
Authority key identifier: 54:07:82:4F:20:94:BD:B5:E9:6C:45:0A:4F:36:56:3A:73:22:5C:CB
Certificate issuer: /CN=5407824F2094BDB5E96C450A4F36563A73225CCB
Certificate serial: 4EDA61F6D58FF3CB0A888C7AB20EEC914EDA8C69
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5407824F2094BDB5E96C450A4F36563A73225CCB.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SIMPLE/0/5407824F2094BDB5E96C450A4F36563A73225CCB.mft
Manifest number: 48
Signing time: Tue 30 Jun 2026 14:34:10 +0000
Manifest this update: Tue 30 Jun 2026 14:29:10 +0000
Manifest next update: Wed 01 Jul 2026 16:52:10 +0000
Files and hashes: 1: 323430313a626136303a3a2f33322d3438203d3e2039393233.roa (hash: 5TVrVE33kIL0XhQaO3gte1KLCXkOhF1o3uG63J4/55s=)
2: 5407824F2094BDB5E96C450A4F36563A73225CCB.crl (hash: 08kAwuS8ca5VzH0TtPKEx5p6CXj7gmLHhqeOz83o+5Y=)
3: 323430313a626136303a3a2f33322d3438203d3e203332353935.roa (hash: RBIOP3iKwRtqrSWqj44FA3/x/uVqA34IvA8ZG8hK44Q=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/SIMPLE/0/5407824F2094BDB5E96C450A4F36563A73225CCB.crl
rsync://rpkica.twnic.tw/rpki/SIMPLE/0/5407824F2094BDB5E96C450A4F36563A73225CCB.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5407824F2094BDB5E96C450A4F36563A73225CCB.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Jul 2026 14:08:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:da:61:f6:d5:8f:f3:cb:0a:88:8c:7a:b2:0e:ec:91:4e:da:8c:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5407824F2094BDB5E96C450A4F36563A73225CCB
Validity
Not Before: Jun 30 14:29:10 2026 GMT
Not After : Jul 1 16:52:10 2026 GMT
Subject: CN=3CAB0E43C67471CFC0A1EB9ACFE0CDC35A698936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:1c:24:5c:73:d2:8b:6c:ab:d2:75:93:68:30:
74:d3:9d:4e:15:a2:40:72:31:e6:3b:05:e0:3a:c6:
62:38:38:59:c7:77:ae:14:1e:ad:ad:92:de:31:29:
a0:bb:ca:fb:fe:de:ae:b0:ad:5d:f3:58:78:77:e8:
11:2c:13:a1:43:80:50:79:2e:4b:c7:2e:1c:75:fb:
1f:9f:65:fd:46:b9:ff:ea:e3:eb:d9:64:a1:c8:2f:
36:15:3f:54:b9:c0:ad:9e:49:96:09:d2:a6:02:02:
d6:a8:0a:f1:14:36:0b:4a:95:31:19:19:5e:c4:af:
b9:0d:7a:e8:83:8a:00:62:ae:72:92:1d:d8:8b:03:
05:fc:f7:c6:42:1f:2b:49:6a:ff:79:d0:f6:1f:09:
21:3b:da:e9:e8:5e:e2:a8:63:c5:9d:d5:ec:fe:a7:
3c:c1:9b:a4:a2:4f:f4:4b:65:60:8f:86:60:91:eb:
00:77:3c:f6:e1:1a:18:f9:81:47:e6:c4:33:69:7d:
98:cb:aa:4e:ae:15:d4:fb:4d:a4:6a:7f:c0:04:51:
e9:23:c1:fa:92:1f:c5:b8:07:ef:5e:a5:3f:47:0b:
2b:0f:9f:e2:a9:f8:69:10:18:2f:c7:6d:e1:d4:dd:
28:d1:c2:4f:7d:be:d0:92:6a:b1:d5:bc:74:29:f6:
9f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:AB:0E:43:C6:74:71:CF:C0:A1:EB:9A:CF:E0:CD:C3:5A:69:89:36
X509v3 Authority Key Identifier:
keyid:54:07:82:4F:20:94:BD:B5:E9:6C:45:0A:4F:36:56:3A:73:22:5C:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SIMPLE/0/5407824F2094BDB5E96C450A4F36563A73225CCB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5407824F2094BDB5E96C450A4F36563A73225CCB.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SIMPLE/0/5407824F2094BDB5E96C450A4F36563A73225CCB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:a7:86:9e:25:a0:2e:02:02:db:ce:21:f6:3a:30:ae:8c:e8:
d0:ac:b8:df:26:1e:3c:c8:4f:be:a6:a2:72:c8:10:5a:4c:f2:
10:b1:f5:6e:aa:81:af:c0:67:da:be:04:4f:46:ce:08:72:e3:
9a:1c:a9:62:b6:db:36:49:4d:6d:d4:89:9e:96:25:fb:a8:45:
f3:be:ab:1d:50:e1:0e:e5:57:e1:98:6e:9c:f7:e1:57:a0:99:
e2:aa:56:50:ab:ec:5c:05:21:c4:8b:49:66:21:ca:4d:49:ac:
94:92:67:14:1e:f7:bf:54:f9:d0:e1:71:d0:9a:e6:e2:a4:1a:
46:db:22:3b:ca:bd:8c:99:64:b9:8e:5a:07:42:f4:e8:cc:ba:
11:4d:bb:03:6a:58:47:6b:1b:52:e6:48:0e:79:e5:fe:a7:ac:
31:5b:42:79:42:fe:cf:a1:41:70:40:ac:2f:12:5b:30:e1:7c:
1c:17:fa:32:30:a7:d1:ac:73:1c:ad:e6:52:32:8c:8a:ed:dd:
4b:1b:b6:d1:9f:83:47:3b:3a:48:1f:20:25:ee:27:fd:4d:01:
7a:dd:45:7a:f4:d4:d8:0c:38:74:29:48:ca:c9:46:90:a7:2b:
a2:da:32:bf:06:7c:04:7d:25:40:d2:db:10:a0:0d:2d:40:96:
e0:d8:1b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:07:33 2026 by rpki-client