
$ rpki-client -vvvf rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.mft
File: B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.mft (raw, json)
Hash identifier: QdaXMZGYWVfpyXDJgBuG6uOH73rV8N5AHIp3QQz41DI=
Subject key identifier: AC:8C:E5:87:33:76:F4:17:56:C8:59:BD:58:EC:34:D8:BC:3D:82:4A
Authority key identifier: B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A
Certificate issuer: /CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
Certificate serial: 697F9F6040B814C015025CCC897BB9186F8FDFA4
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.mft
Manifest number: 02B2
Signing time: Wed 07 Oct 2026 14:58:19 +0000
Manifest this update: Wed 07 Oct 2026 14:53:19 +0000
Manifest next update: Thu 08 Oct 2026 17:28:19 +0000
Files and hashes: 1: AS18177.roa (hash: JXd4kw1h0DUqkVz+WM6nOf/irwZe99z7YhtvoDc+f38=)
2: AS18420.roa (hash: PXf9Qhwo15Y5emliO+pnlr0GJR0383jI4wLPlz9cZTg=)
3: AS17711.roa (hash: m0HPSs1Iwy9qB3mv37WVtid5LeyQRcfLwoUhzXI5emM=)
4: AS1659.roa (hash: a9JF70ttylpg+T9TOGnj3tVWmGB1CnSM61mc0bVSBuE=)
5: AS18047.roa (hash: 19MTy8wCYv2FBhBBghHo9w6JAaEzVOI6LdAVH3Rlg5Y=)
6: AS17712.roa (hash: yj06hI79Weqj0lNXdwRX13x+5jtyeGXUVFzjIzWVW0A=)
7: AS38845.roa (hash: cBg+wWm1codz3x4d8coFCdbCh9JGi9zzO0X1xsE2hc0=)
8: AS9916.roa (hash: VmKEplDioE9dRbG+IqWy+ORyQkpVQi8turUDPKdrc2Q=)
9: AS7539.roa (hash: 6fbm1TR+0zsapj8wMHiV2+RkmfeJg5iudxoqZFriHfU=)
10: AS18217.roa (hash: CBxkgnpykTRk9QIRMbL2x3TUBYEyue7/dUYQoccL57k=)
11: AS17713.roa (hash: LQ6EfaCsflHu4QRHUvkVyF9PGfNlVYNPlWt5InYVNtY=)
12: AS9264.roa (hash: QLmbG5wa3NxY4bLQDawo02KSEx9V2mKqt+zSToKsIXw=)
13: B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl (hash: 9OTWgJgEPUEWjOEBzaFv8Dyh8yWlx9Uq7grufaf9CpQ=)
14: AS17716.roa (hash: a/i12ZDZd4PdO/FM3dk8C6At59pShqCqeD+uHBMGx6s=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl
rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 08 Oct 2026 15:33:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:7f:9f:60:40:b8:14:c0:15:02:5c:cc:89:7b:b9:18:6f:8f:df:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
Validity
Not Before: Oct 7 14:53:19 2026 GMT
Not After : Oct 8 17:28:19 2026 GMT
Subject: CN=AC8CE5873376F41756C859BD58EC34D8BC3D824A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d9:de:eb:e4:be:5b:b3:f3:2b:f8:ee:67:b2:
50:c3:77:34:e7:f9:42:d5:69:50:4f:4e:0b:3d:ee:
44:e7:ee:f0:87:f1:79:76:7d:c2:e9:3d:e0:9a:48:
4a:98:ad:cd:11:ea:49:3a:66:ce:d4:4b:58:c0:d0:
0d:73:c1:9d:ca:bc:72:1b:74:17:96:65:8a:e8:bc:
72:7a:64:70:69:65:90:54:e1:55:df:2b:ac:15:d7:
5f:cc:64:4f:79:f4:bc:63:17:9d:a9:88:b3:66:c8:
f2:19:76:9a:0f:89:a6:2d:c1:0b:74:76:0f:e6:f6:
a9:1f:66:39:86:11:fc:0c:73:ef:c3:33:18:38:23:
4a:28:f9:24:2e:25:c7:7b:79:5a:f1:33:17:dd:77:
19:5d:3b:06:e8:d2:e2:e4:f7:23:62:93:7d:fa:23:
8e:df:6b:f6:0b:30:d8:e0:a6:06:4a:06:70:79:d4:
7b:4d:43:4f:fd:89:62:41:a6:fa:75:82:a1:05:e0:
6a:02:3b:68:bd:d9:3a:d3:d4:0a:85:73:0c:d1:2e:
ed:a1:c4:17:0f:c1:fc:eb:b6:9b:46:85:c0:fa:db:
46:ca:9b:eb:39:6a:69:1a:da:33:25:38:bb:dc:fc:
e6:c2:34:47:e3:71:f3:1e:88:c7:5a:a6:e3:89:f0:
80:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:8C:E5:87:33:76:F4:17:56:C8:59:BD:58:EC:34:D8:BC:3D:82:4A
X509v3 Authority Key Identifier:
keyid:B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:43:16:1f:01:0f:6b:99:e9:de:bc:83:6e:95:2c:84:a0:7d:
95:88:fc:6f:a4:ea:80:0b:e7:3a:f1:89:5c:15:03:2e:91:88:
e8:fc:c5:c4:5d:93:8d:e0:87:e9:23:94:00:30:63:8c:3e:0d:
70:b7:52:08:44:b9:81:80:36:11:9e:09:e6:bd:13:47:7b:42:
a4:cd:90:1c:56:a0:30:09:06:7c:38:03:c8:d9:88:00:40:02:
58:d0:dd:8a:55:6f:ae:ab:cc:83:ce:aa:6a:5f:ab:d1:06:4d:
ac:a7:cc:cc:5c:4a:80:d8:7e:95:c8:28:12:cd:42:ab:22:bf:
59:7f:1a:e6:78:c5:8e:22:ea:a6:c5:ab:fb:f9:09:fd:af:eb:
7a:b1:dd:9e:ea:3e:22:5e:7b:d3:fa:30:c5:21:b7:58:6d:d1:
b3:2e:18:03:26:1a:05:4c:e4:d3:31:14:a5:42:a6:55:03:30:
ad:72:f9:be:85:50:3a:0a:f2:8f:63:e8:68:e2:d2:cf:14:f5:
a2:2d:9c:a4:3d:90:8e:49:24:a8:e8:7f:e2:d2:d7:70:ce:3a:
23:29:21:73:d2:14:f7:b3:98:21:12:bc:05:19:88:88:8a:2e:
9f:0c:f0:b9:81:03:95:89:a2:46:16:e1:02:72:98:6e:e0:61:
da:12:d4:ad
-----BEGIN CERTIFICATE-----
MIIE4jCCA8qgAwIBAgIUaX+fYEC4FMAVAlzMiXu5GG+P36QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjdGMUExMkE1OUY5RTAyNDRDNDQ1RDE5NkQzM0NGNTA3
NkIzQ0Y2QTAeFw0yNjEwMDcxNDUzMTlaFw0yNjEwMDgxNzI4MTlaMDMxMTAvBgNV
BAMTKEFDOENFNTg3MzM3NkY0MTc1NkM4NTlCRDU4RUMzNEQ4QkMzRDgyNEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCP2d7r5L5bs/Mr+O5nslDDdzTn
+ULVaVBPTgs97kTn7vCH8Xl2fcLpPeCaSEqYrc0R6kk6Zs7US1jA0A1zwZ3KvHIb
dBeWZYrovHJ6ZHBpZZBU4VXfK6wV11/MZE959LxjF52piLNmyPIZdpoPiaYtwQt0
dg/m9qkfZjmGEfwMc+/DMxg4I0oo+SQuJcd7eVrxMxfddxldOwbo0uLk9yNik336
I47fa/YLMNjgpgZKBnB51HtNQ0/9iWJBpvp1gqEF4GoCO2i92TrT1AqFcwzRLu2h
xBcPwfzrtptGhcD620bKm+s5amka2jMlOLvc/ObCNEfjcfMeiMdapuOJ8ID3AgMB
AAGjggHsMIIB6DAdBgNVHQ4EFgQUrIzlhzN29BdWyFm9WOw02Lw9gkowHwYDVR0j
BBgwFoAUt/GhKln54CRMRF0ZbTPPUHazz2owDgYDVR0PAQH/BAQDAgeAMGIGA1Ud
HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVEFORVQv
MS9CN0YxQTEyQTU5RjlFMDI0NEM0NDVEMTk2RDMzQ0Y1MDc2QjNDRjZBLmNybDBv
BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS8wL0I3RjFBMTJBNTlGOUUwMjQ0QzQ0NUQxOTZEMzND
RjUwNzZCM0NGNkEuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5
bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UQU5FVC8xL0I3RjFBMTJBNTlGOUUw
MjQ0QzQ0NUQxOTZEMzNDRjUwNzZCM0NGNkEubWZ0MBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC1QxYfAQ9rmene
vINulSyEoH2ViPxvpOqAC+c68YlcFQMukYjo/MXEXZON4IfpI5QAMGOMPg1wt1II
RLmBgDYRngnmvRNHe0KkzZAcVqAwCQZ8OAPI2YgAQAJY0N2KVW+uq8yDzqpqX6vR
Bk2sp8zMXEqA2H6VyCgSzUKrIr9ZfxrmeMWOIuqmxav7+Qn9r+t6sd2e6j4iXnvT
+jDFIbdYbdGzLhgDJhoFTOTTMRSlQqZVAzCtcvm+hVA6CvKPY+ho4tLPFPWiLZyk
PZCOSSSo6H/i0tdwzjojKSFz0hT3s5ghErwFGYiIii6fDPC5gQOViaJGFuECcphu
4GHaEtSt
-----END CERTIFICATE-----
Generated at Thu Oct 8 07:37:16 2026 by rpki-client