
$ rpki-client -vvvf rpkica.twnic.tw/rpki/SPUSER/0/164EB710D7AA83CB67EE2E709B4F195437239363.mft
File: 164EB710D7AA83CB67EE2E709B4F195437239363.mft (raw, json)
Hash identifier: +FN6PuUNAGTcLebedNymMhIegWirCRVhLiZXT1OhVA4=
Subject key identifier: 2F:C2:B9:DF:08:C1:DA:D7:C9:13:B1:A7:AA:89:74:BC:06:54:45:6A
Authority key identifier: 16:4E:B7:10:D7:AA:83:CB:67:EE:2E:70:9B:4F:19:54:37:23:93:63
Certificate issuer: /CN=164EB710D7AA83CB67EE2E709B4F195437239363
Certificate serial: 314C53BD400E655D629AC8BFFE2236E3375A4EFA
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/164EB710D7AA83CB67EE2E709B4F195437239363.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SPUSER/0/164EB710D7AA83CB67EE2E709B4F195437239363.mft
Manifest number: C1
Signing time: Fri 02 Oct 2026 11:11:33 +0000
Manifest this update: Fri 02 Oct 2026 11:06:33 +0000
Manifest next update: Sat 03 Oct 2026 13:48:33 +0000
Files and hashes: 1: 323430363a3330303a3a2f33322d3332203d3e2033343632.roa (hash: Mx2hdpo1JSD9a9oOTPfRMGnVumGCxyTkbl1EN6cIp8s=)
2: 164EB710D7AA83CB67EE2E709B4F195437239363.crl (hash: QR0YpdZKupxhQZXcMnATUeVG3LpvaMKyx036diVvf64=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/SPUSER/0/164EB710D7AA83CB67EE2E709B4F195437239363.crl
rsync://rpkica.twnic.tw/rpki/SPUSER/0/164EB710D7AA83CB67EE2E709B4F195437239363.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/164EB710D7AA83CB67EE2E709B4F195437239363.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 10:19:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:4c:53:bd:40:0e:65:5d:62:9a:c8:bf:fe:22:36:e3:37:5a:4e:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=164EB710D7AA83CB67EE2E709B4F195437239363
Validity
Not Before: Oct 2 11:06:33 2026 GMT
Not After : Oct 3 13:48:33 2026 GMT
Subject: CN=2FC2B9DF08C1DAD7C913B1A7AA8974BC0654456A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:51:c4:b7:a8:d0:43:2d:8d:83:22:2e:96:23:
6c:2f:98:a2:29:c4:90:b5:d4:f4:ad:8e:a3:f6:0f:
96:81:e2:09:c3:bb:48:c7:5c:a3:06:90:3a:ae:7b:
04:7c:df:a2:9b:b0:f6:eb:be:b8:ac:9f:bb:84:c1:
03:03:cb:97:c1:82:dc:8a:bf:61:ef:f3:99:28:28:
8d:fb:79:42:d1:9e:0b:0c:18:d9:56:59:88:ee:b6:
28:b9:17:c3:aa:e2:4c:68:a3:45:0f:ac:6a:51:a5:
86:08:06:c2:47:2a:ce:4b:ef:cf:f7:54:e5:28:11:
dc:cd:45:ee:d9:99:11:7f:62:3a:7c:3a:11:d2:b0:
be:f2:bd:47:a3:55:79:42:00:d9:80:9a:53:fc:16:
f8:1a:2e:79:94:ec:75:4e:ef:b5:e0:fc:4b:4d:70:
35:26:e3:4b:db:89:f3:a9:14:75:17:b3:7f:6a:26:
db:8a:2f:7a:c4:a4:2e:ed:b4:7b:46:3c:8c:da:06:
31:3d:5e:ea:a2:53:18:34:fc:a5:32:dc:b9:f2:4b:
53:75:23:6c:e9:59:9a:d0:dc:b7:fb:2e:b0:28:80:
05:6c:36:d7:6c:5d:d8:b5:bb:fb:0c:a7:bc:b3:f2:
e6:03:e5:13:1a:d7:9a:34:4b:61:ee:60:7e:91:ea:
dc:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:C2:B9:DF:08:C1:DA:D7:C9:13:B1:A7:AA:89:74:BC:06:54:45:6A
X509v3 Authority Key Identifier:
keyid:16:4E:B7:10:D7:AA:83:CB:67:EE:2E:70:9B:4F:19:54:37:23:93:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SPUSER/0/164EB710D7AA83CB67EE2E709B4F195437239363.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/164EB710D7AA83CB67EE2E709B4F195437239363.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SPUSER/0/164EB710D7AA83CB67EE2E709B4F195437239363.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:a5:2c:02:46:07:ec:af:96:66:ea:19:f2:84:70:3a:06:29:
28:e2:b4:e6:20:fb:c1:58:7a:30:55:ac:7b:a1:cd:6e:d1:e1:
99:ae:93:bb:88:6f:67:7b:8f:ea:d7:19:57:1b:39:8e:76:22:
4e:cf:88:c8:90:db:4a:fa:9e:46:cd:2d:e0:3f:68:0c:f3:7b:
b4:ad:6e:c4:cd:eb:11:61:4d:d4:92:96:40:1d:94:b3:8f:3b:
b0:cf:ab:44:21:d0:29:b6:15:2b:27:46:32:dc:db:14:e2:0a:
d4:ec:92:6a:8d:f8:ce:81:a3:e2:da:e3:d5:5a:d5:f6:4a:b7:
77:4d:e7:db:f7:9a:2e:32:e3:90:78:4e:ee:9c:a0:1e:8b:83:
56:7c:e5:fc:94:50:33:ce:f7:55:b2:25:b8:1e:26:61:ba:0f:
72:32:53:df:59:27:f7:3e:a4:1d:b0:36:2e:f2:26:2e:35:e9:
71:f4:37:c5:e3:27:38:b1:db:32:d4:5d:be:c9:b4:7c:f4:46:
2f:4a:e1:52:c3:0c:cf:cd:5e:cc:5a:f9:13:46:6a:3e:84:fd:
b0:01:2b:8d:fe:10:3a:75:1c:3b:b2:24:d5:e9:3f:d5:7f:4c:
3e:1d:5f:dc:24:29:0a:02:de:b7:c4:22:a8:94:dc:85:35:b9:
3d:ac:56:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 16:22:37 2026 by rpki-client