
$ rpki-client -vvvf rpkica.twnic.tw/rpki/TIH/0/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.mft
File: 56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.mft (raw, json)
Hash identifier: AMqL5PK1H3N0QQpgtHNV9Pbw1ZjMvtXBATVHk0tfM3g=
Subject key identifier: 90:BE:80:79:87:53:29:07:E2:73:3D:44:76:42:F4:1E:C9:8F:E5:DD
Authority key identifier: 56:D2:E2:5E:40:9F:E9:56:A1:4A:8F:5A:5C:0E:EA:69:CC:F5:0E:A3
Certificate issuer: /CN=56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3
Certificate serial: 323E256472AC5B795FC81F63ECA35AA484F08A62
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TIH/0/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.mft
Manifest number: C9
Signing time: Sat 03 Oct 2026 14:50:35 +0000
Manifest this update: Sat 03 Oct 2026 14:45:35 +0000
Manifest next update: Sun 04 Oct 2026 17:56:35 +0000
Files and hashes: 1: 3130332e3132392e3134342e302f32342d3234203d3e2035303635.roa (hash: r6atDIqgperuF3RfaudvB73QXSoXlYlurO9YxRuzsEo=)
2: 323430333a376634303a666630303a3a2f34382d3438203d3e203230343733.roa (hash: AfAX13SxCLnlMaK5dhRCuMKxU7A8dV/NgyypCpd1bdY=)
3: 3130332e3132392e3134362e302f32342d3234203d3e20313331363339.roa (hash: CBt4aj49jAfK/FkdSCAEmu5FJcJ8ZBpytmS6xaMxItA=)
4: 3130332e3132392e3134372e302f32342d3234203d3e203230343733.roa (hash: jLHkK85y6D6I/P5jhpzcJkW6hQFZ18OruOJ4poV43Y8=)
5: 3130332e3132392e3134352e302f32342d3234203d3e203338323534.roa (hash: xP411/3P+QncE7UBCG9FjIpMvagWAoQKRii7/7dwrps=)
6: 323430333a376634303a653030303a3a2f33362d3336203d3e203338323534.roa (hash: o6RGuHIfda02+Jk34ePKyhchsrC+xHDAy6BJ51uRReg=)
7: 323430333a376634303a663030303a3a2f34382d3634203d3e20313331363339.roa (hash: ZRXaYx+Nrn2iAFlJIwnl9HLp8Eud4rItrm9qIQL8K3o=)
8: 56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.crl (hash: /DnKi4z9VrvIsjxcH7N1b3IEvJJyod3kjdzCwzVh4fo=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TIH/0/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.crl
rsync://rpkica.twnic.tw/rpki/TIH/0/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 17:56:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:3e:25:64:72:ac:5b:79:5f:c8:1f:63:ec:a3:5a:a4:84:f0:8a:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3
Validity
Not Before: Oct 3 14:45:35 2026 GMT
Not After : Oct 4 17:56:35 2026 GMT
Subject: CN=90BE807987532907E2733D447642F41EC98FE5DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:16:6e:30:07:48:0a:3e:00:e6:6a:d1:0a:bf:
98:36:95:95:2c:02:65:9c:25:db:23:de:c7:22:6c:
27:e5:a8:88:b8:0f:c5:81:eb:bc:f3:13:90:55:e5:
24:01:7f:f3:b4:a9:94:8e:2c:37:a0:cf:3e:db:ef:
c1:b4:af:6e:86:de:2b:a5:d7:14:42:77:eb:0e:79:
73:94:3e:6e:c5:6a:9c:ea:ea:b9:72:87:14:29:fa:
33:86:0c:c7:59:f8:68:40:cc:b4:29:1a:72:d8:5f:
09:f0:da:ab:2c:02:fd:25:45:ff:52:af:21:a3:a6:
0c:c1:e6:b3:a6:09:48:00:37:bd:06:66:8a:38:7e:
d9:a9:b8:df:57:d4:04:e3:49:1e:4a:a4:5e:ab:ea:
aa:96:85:bd:ec:7f:f3:1a:ee:eb:f2:01:c8:a4:eb:
1b:d1:27:4f:eb:2a:af:ca:78:c7:53:bb:90:53:81:
5f:3d:05:48:9e:85:3b:02:4f:79:80:ad:6f:cd:e4:
a8:be:48:fb:9b:8d:a0:fd:27:49:97:a2:1d:df:a5:
4b:fa:d9:2e:5e:18:e5:14:fb:92:f8:1c:81:3c:0b:
85:75:8e:82:cb:ff:05:39:6b:81:a8:62:8d:69:f6:
66:54:8e:be:05:5e:7d:82:9f:fc:68:d3:2f:d7:cb:
5d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:BE:80:79:87:53:29:07:E2:73:3D:44:76:42:F4:1E:C9:8F:E5:DD
X509v3 Authority Key Identifier:
keyid:56:D2:E2:5E:40:9F:E9:56:A1:4A:8F:5A:5C:0E:EA:69:CC:F5:0E:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TIH/0/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TIH/0/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:94:b7:25:9f:f9:c3:2b:c5:53:96:fc:10:a9:83:bc:ee:35:
40:6b:f6:f7:f1:54:71:ee:db:6d:ce:ff:33:d5:80:22:2d:02:
dd:64:87:d7:83:7d:76:43:ef:ef:3e:9a:c9:41:1c:3e:5b:5d:
26:0c:4f:2c:5e:27:91:d6:52:f3:6d:ff:2b:1f:93:d9:b9:c5:
16:dc:95:07:14:1b:be:83:6d:c5:3d:02:a3:ed:43:53:cc:29:
ca:c6:92:84:5c:3f:40:7b:8f:7c:56:74:e0:3a:ed:10:cf:27:
21:64:5e:2b:c0:41:e8:0c:f9:a2:98:88:11:05:25:57:97:cc:
9e:4d:be:7d:5e:a6:2b:e7:4e:32:50:39:21:ce:f4:61:be:fa:
0b:6e:e8:a6:1e:33:e9:f2:12:ed:68:ec:56:00:c3:55:bd:3b:
54:64:5e:d3:90:5e:2d:b2:d0:2c:d8:f7:c1:c1:cd:c8:42:6d:
6e:7e:68:3d:bb:b0:26:9c:71:1e:99:3e:2f:6d:aa:80:35:10:
fc:d9:e7:50:ff:23:3e:f1:b8:a6:db:1f:98:44:0b:fb:71:9e:
ec:c7:35:f3:95:57:e0:d8:0f:15:5a:01:a7:d8:55:05:46:78:
ac:fc:1a:98:c9:53:2c:8d:9f:b5:53:5e:67:df:5a:a5:be:29:
dd:47:00:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 00:52:30 2026 by rpki-client