
$ rpki-client -vvf rpkica.twnic.tw/rpki/TSMC/0/BD49467776DCA7472F88470782DAD5722E5AFE49.mft
File: BD49467776DCA7472F88470782DAD5722E5AFE49.mft (raw, json)
Hash identifier: XxJKJZbvlamJh2NZgNSG3fCI0Vux0GPzGgGoCTWSytE=
Subject key identifier: 3C:3C:13:57:F3:02:86:11:A7:91:69:31:B4:7E:31:98:ED:19:02:32
Authority key identifier: BD:49:46:77:76:DC:A7:47:2F:88:47:07:82:DA:D5:72:2E:5A:FE:49
Certificate issuer: /CN=BD49467776DCA7472F88470782DAD5722E5AFE49
Certificate serial: 6A4703D425F713C89D85CD3C7D2320DD7D5D57EE
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BD49467776DCA7472F88470782DAD5722E5AFE49.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TSMC/0/BD49467776DCA7472F88470782DAD5722E5AFE49.mft
Manifest number: 85
Signing time: Sat 15 Aug 2026 03:39:15 +0000
Manifest this update: Sat 15 Aug 2026 03:34:15 +0000
Manifest next update: Sun 16 Aug 2026 05:18:15 +0000
Files and hashes: 1: 3130332e3133322e3135362e302f32322d3234203d3e2033343632.roa (hash: VPf6uIakoYZwsPqscjmnQeuLXrwksi5sXN8VBO8l4Lc=)
2: 3130332e3133322e3135362e302f32322d3234203d3e203233363735.roa (hash: O4tFAGNoujrjTe1QFIiUNSL1btHs7X9nG4rNOC2WBrk=)
3: 3230322e3132362e36342e302f32302d3234203d3e203233363735.roa (hash: xFZEcb1Fw2/MAZxDxH/3wq6F1a0AY71y22CkSbZ45UA=)
4: 3230322e3132362e36342e302f32302d3234203d3e2033343632.roa (hash: pv9lagNPR6ISK4mgr1r0U+d2oQ424uEiHyejWXcDKkg=)
5: BD49467776DCA7472F88470782DAD5722E5AFE49.crl (hash: 1Lw0OOs7a0sUzqLfECtIRA8b9lOL++q5okffN8YkdJY=)
6: 3230322e3132362e36342e302f32322d3234203d3e2033343632.roa (hash: JSztXJfkuE++Rr44bJxraDVeK0vJ1Z2LCKTFE+mnoSo=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TSMC/0/BD49467776DCA7472F88470782DAD5722E5AFE49.crl
rsync://rpkica.twnic.tw/rpki/TSMC/0/BD49467776DCA7472F88470782DAD5722E5AFE49.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BD49467776DCA7472F88470782DAD5722E5AFE49.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 16 Aug 2026 03:24:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:47:03:d4:25:f7:13:c8:9d:85:cd:3c:7d:23:20:dd:7d:5d:57:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BD49467776DCA7472F88470782DAD5722E5AFE49
Validity
Not Before: Aug 15 03:34:15 2026 GMT
Not After : Aug 16 05:18:15 2026 GMT
Subject: CN=3C3C1357F3028611A7916931B47E3198ED190232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:13:d6:be:d5:46:00:92:5f:8b:85:3d:cc:c1:
b5:19:ce:3a:74:d3:20:b1:07:32:9a:f0:da:be:42:
a0:b7:5a:f1:20:1e:ac:ac:d7:e5:8b:15:60:13:09:
b0:fe:05:59:75:78:03:72:85:ba:6e:4a:1a:ef:52:
84:96:a1:c7:fc:db:57:f1:fd:d3:f9:07:de:87:a4:
88:b6:7d:20:46:4d:c3:37:c8:42:b2:8e:c6:bc:72:
f8:1e:05:a7:e0:04:78:f8:e7:94:a3:89:84:d3:de:
7a:3b:28:39:49:d9:ca:e0:aa:21:89:f9:59:e4:ca:
52:a4:41:33:70:72:ee:99:c9:52:00:e6:22:d4:5b:
be:6e:03:c0:05:16:4b:09:48:60:2c:7b:d4:19:ef:
3d:78:64:68:ab:be:b4:46:4f:99:84:ad:1b:0d:e8:
43:c6:14:de:bc:5f:49:f4:93:53:93:02:dd:74:a5:
18:6e:6d:60:b0:af:01:8a:e9:39:93:a2:ff:a2:08:
3d:d5:c0:00:2c:60:57:cd:ec:1f:bc:b2:69:8b:b4:
df:43:db:0c:c8:bb:d1:c7:d9:90:7c:16:57:f5:ef:
f1:8a:b5:4c:ed:d7:f5:9e:6f:21:49:49:04:1f:5c:
29:9e:fe:19:ed:53:95:32:f8:ff:76:00:fd:6c:49:
c7:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:3C:13:57:F3:02:86:11:A7:91:69:31:B4:7E:31:98:ED:19:02:32
X509v3 Authority Key Identifier:
keyid:BD:49:46:77:76:DC:A7:47:2F:88:47:07:82:DA:D5:72:2E:5A:FE:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TSMC/0/BD49467776DCA7472F88470782DAD5722E5AFE49.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BD49467776DCA7472F88470782DAD5722E5AFE49.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TSMC/0/BD49467776DCA7472F88470782DAD5722E5AFE49.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:d6:76:f5:6a:08:c9:bb:7c:28:71:95:49:e9:2f:0b:5e:8c:
fd:0b:83:c3:6e:1a:b5:e1:4d:b6:05:3d:2d:f5:15:ac:3e:9c:
34:54:83:8f:e0:88:26:8b:ff:f0:70:82:79:f1:62:47:74:cf:
32:75:51:b8:2a:04:e5:49:b7:82:e6:7f:c4:1c:8c:c9:42:04:
e4:e3:55:71:71:2b:64:c0:d4:a9:0c:30:9a:48:89:18:b2:77:
56:73:c9:fd:6b:86:ac:c9:d9:ad:9e:cf:e0:a0:bc:5f:9c:57:
1b:b9:68:5c:78:77:09:fb:ce:21:59:c1:57:4c:55:d7:10:ef:
b3:f4:99:90:a9:ee:02:3b:0f:a3:4f:90:f7:57:f6:aa:be:13:
3b:27:8a:44:90:72:23:ab:56:3a:0d:f5:83:91:41:87:f3:a6:
6e:fb:ed:f3:6c:bc:7e:50:03:57:de:61:f2:0e:83:36:aa:c5:
31:b0:f2:c8:7a:bf:e0:43:f8:87:48:99:9b:00:a3:b8:7e:53:
e5:90:39:c9:47:aa:f4:c9:db:4d:8e:13:2b:19:47:73:1b:d8:
73:42:dc:45:43:52:5f:3b:c8:da:c5:2f:f2:f0:cb:ef:6b:15:
22:40:21:4e:ff:6e:a6:5b:e9:bf:1f:ee:34:ba:9a:09:c6:f9:
51:a2:67:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:28:31 2026 by rpki-client