
$ rpki-client -vvvf rpkica.twnic.tw/rpki/TAIWAN_NO1/1/5D61A267754DE88CD8451A63D9D2285FD5AF457D.mft
File: 5D61A267754DE88CD8451A63D9D2285FD5AF457D.mft (raw, json)
Hash identifier: UYIXLpsHJvOPvD5khQtuHcJFfe8kHJWIUwr2DzBK3Tk=
Subject key identifier: D2:AF:C1:14:B4:CA:36:3D:59:48:6E:36:D4:C8:88:41:18:55:8F:81
Authority key identifier: 5D:61:A2:67:75:4D:E8:8C:D8:45:1A:63:D9:D2:28:5F:D5:AF:45:7D
Certificate issuer: /CN=5D61A267754DE88CD8451A63D9D2285FD5AF457D
Certificate serial: 3875B1289CF64A7242008CB448AC6AF7F072C1E4
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/5D61A267754DE88CD8451A63D9D2285FD5AF457D.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TAIWAN_NO1/1/5D61A267754DE88CD8451A63D9D2285FD5AF457D.mft
Manifest number: C9
Signing time: Mon 05 Oct 2026 12:03:24 +0000
Manifest this update: Mon 05 Oct 2026 11:58:24 +0000
Manifest next update: Tue 06 Oct 2026 15:34:24 +0000
Files and hashes: 1: 5D61A267754DE88CD8451A63D9D2285FD5AF457D.crl (hash: VyEeq8fWzm6l6QXN6eq5LPMw/NioH/YYa2J7r550dX0=)
2: 3136302e3138372e3230312e302f32342d3234203d3e203632353137.roa (hash: 8yHvYhdJJ9fLsL7Jt/4h751xCSPOoZp026K/sE/wCVc=)
3: 3136302e3138372e3230302e302f32342d3234203d3e203338303437.roa (hash: y6F85fIDPHVAvBtzdu5R7Sx6xIWYFOo9//jso0kPGMs=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TAIWAN_NO1/1/5D61A267754DE88CD8451A63D9D2285FD5AF457D.crl
rsync://rpkica.twnic.tw/rpki/TAIWAN_NO1/1/5D61A267754DE88CD8451A63D9D2285FD5AF457D.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/5D61A267754DE88CD8451A63D9D2285FD5AF457D.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 06 Oct 2026 10:45:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:75:b1:28:9c:f6:4a:72:42:00:8c:b4:48:ac:6a:f7:f0:72:c1:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D61A267754DE88CD8451A63D9D2285FD5AF457D
Validity
Not Before: Oct 5 11:58:24 2026 GMT
Not After : Oct 6 15:34:24 2026 GMT
Subject: CN=D2AFC114B4CA363D59486E36D4C8884118558F81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:44:6b:f2:bf:45:bc:2b:ec:77:8e:dd:2e:2e:
aa:35:48:a8:e4:26:55:8c:4d:0c:8a:56:57:15:6b:
e1:f5:e2:b3:f4:0f:89:84:d1:4e:87:3c:f9:f0:71:
48:77:45:b2:4c:eb:6a:5d:eb:eb:bd:d1:05:8b:60:
c7:d6:3f:8e:6b:10:bb:ee:d2:76:d8:12:95:df:61:
f7:fe:16:08:3c:df:5b:a4:fd:cb:01:b8:1e:9e:58:
65:f3:18:7f:2c:da:77:52:f1:70:c8:db:71:a2:94:
d3:26:d3:d5:8a:ab:17:ad:3e:0c:96:4f:8d:d6:f2:
b0:bd:2a:d2:95:b0:94:bb:98:ab:31:59:77:28:41:
22:4c:04:84:ae:91:a5:47:51:65:88:d4:31:38:5e:
c0:50:57:ae:95:bc:f6:b5:be:19:c4:0b:f3:da:c8:
0a:5d:b9:56:7a:ba:b2:18:e1:c3:d7:24:99:f6:af:
77:d1:ad:2a:8d:88:95:16:da:10:65:18:3d:62:e3:
77:9c:fb:b5:24:cd:55:6f:09:cf:5b:67:8e:fe:d5:
05:14:37:76:1b:17:34:4a:7d:d0:d0:e0:97:25:cd:
44:aa:e2:7a:37:e3:42:ee:77:99:3c:50:f1:8e:e2:
79:a3:df:5c:fc:b9:38:1c:17:51:d9:90:79:8b:04:
fb:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:AF:C1:14:B4:CA:36:3D:59:48:6E:36:D4:C8:88:41:18:55:8F:81
X509v3 Authority Key Identifier:
keyid:5D:61:A2:67:75:4D:E8:8C:D8:45:1A:63:D9:D2:28:5F:D5:AF:45:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TAIWAN_NO1/1/5D61A267754DE88CD8451A63D9D2285FD5AF457D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/5D61A267754DE88CD8451A63D9D2285FD5AF457D.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TAIWAN_NO1/1/5D61A267754DE88CD8451A63D9D2285FD5AF457D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:10:53:cb:13:ea:b4:28:69:15:18:7b:45:fc:d6:8d:bd:b7:
70:63:d5:2b:6c:7e:25:e5:46:ad:47:66:27:c0:4a:c3:b1:76:
6a:af:70:56:9b:18:1e:33:9d:35:f8:88:68:60:db:aa:26:33:
cc:b1:c4:c1:01:78:e4:f3:38:8d:7e:52:c2:2e:69:6d:de:ab:
35:a2:93:6e:06:cc:df:4a:d0:cf:cb:d2:1d:3e:7d:c2:90:c0:
c6:f5:44:28:c2:25:42:41:cf:ec:48:9a:74:bb:bd:86:b7:ec:
6b:91:01:5f:80:37:55:d3:70:87:5c:25:78:97:ef:86:c3:5d:
e5:5f:1b:71:a0:e3:08:03:38:cc:71:67:09:d3:e1:84:7f:5d:
c4:88:00:f7:82:79:2d:36:d1:f8:d1:bf:90:dd:36:89:08:37:
94:b1:59:37:12:f4:21:81:6a:23:23:9c:58:e4:da:59:76:e6:
f7:d9:65:eb:34:2c:68:5e:55:97:4e:44:a6:db:2c:c9:4c:f0:
ba:46:dc:c4:ce:4d:dd:69:64:1d:ee:42:d3:eb:ac:4c:f7:a3:
56:2c:40:19:41:e3:75:96:ae:96:53:b2:72:d8:09:6a:48:ba:
a0:93:9d:4c:8f:eb:2a:8d:52:f8:29:74:37:8e:c6:7b:38:f5:
56:3c:df:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 15:14:10 2026 by rpki-client