
$ rpki-client -vvvf rpkica.twnic.tw/rpki/TSMC/0/BD49467776DCA7472F88470782DAD5722E5AFE49.mft
File: BD49467776DCA7472F88470782DAD5722E5AFE49.mft (raw, json)
Hash identifier: NOBkLoHMmBIOTFWWpobN6Br/urgLNQI4XGmkhUV0hjc=
Subject key identifier: DF:77:55:2F:F1:3F:0C:A3:F1:EC:28:D0:81:07:90:7B:DC:DE:96:BB
Authority key identifier: BD:49:46:77:76:DC:A7:47:2F:88:47:07:82:DA:D5:72:2E:5A:FE:49
Certificate issuer: /CN=BD49467776DCA7472F88470782DAD5722E5AFE49
Certificate serial: 3E713C443733887F8626E78F6B9F3F6DD14057D9
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BD49467776DCA7472F88470782DAD5722E5AFE49.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TSMC/0/BD49467776DCA7472F88470782DAD5722E5AFE49.mft
Manifest number: C8
Signing time: Sun 04 Oct 2026 07:24:30 +0000
Manifest this update: Sun 04 Oct 2026 07:19:30 +0000
Manifest next update: Mon 05 Oct 2026 08:40:30 +0000
Files and hashes: 1: 3230322e3132362e36342e302f32322d3234203d3e2033343632.roa (hash: JSztXJfkuE++Rr44bJxraDVeK0vJ1Z2LCKTFE+mnoSo=)
2: 3230322e3132362e36342e302f32302d3234203d3e2033343632.roa (hash: pv9lagNPR6ISK4mgr1r0U+d2oQ424uEiHyejWXcDKkg=)
3: 3130332e3133322e3135362e302f32322d3234203d3e2033343632.roa (hash: VPf6uIakoYZwsPqscjmnQeuLXrwksi5sXN8VBO8l4Lc=)
4: 3130332e3133322e3135362e302f32322d3234203d3e203233363735.roa (hash: O4tFAGNoujrjTe1QFIiUNSL1btHs7X9nG4rNOC2WBrk=)
5: 3230322e3132362e36342e302f32302d3234203d3e203233363735.roa (hash: xFZEcb1Fw2/MAZxDxH/3wq6F1a0AY71y22CkSbZ45UA=)
6: BD49467776DCA7472F88470782DAD5722E5AFE49.crl (hash: AbrhKXQLXdb6MedhiBtA+787GSOm2EK0pVZSIhgsCTY=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TSMC/0/BD49467776DCA7472F88470782DAD5722E5AFE49.crl
rsync://rpkica.twnic.tw/rpki/TSMC/0/BD49467776DCA7472F88470782DAD5722E5AFE49.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BD49467776DCA7472F88470782DAD5722E5AFE49.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Oct 2026 08:40:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:71:3c:44:37:33:88:7f:86:26:e7:8f:6b:9f:3f:6d:d1:40:57:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BD49467776DCA7472F88470782DAD5722E5AFE49
Validity
Not Before: Oct 4 07:19:30 2026 GMT
Not After : Oct 5 08:40:30 2026 GMT
Subject: CN=DF77552FF13F0CA3F1EC28D08107907BDCDE96BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:31:d5:bc:6a:a9:2a:dd:bf:87:d6:cd:ae:d2:
25:b5:d3:6d:3c:eb:94:3e:3a:25:64:7a:af:5c:db:
af:d4:f7:22:90:1a:92:c8:a9:0d:bf:84:b9:3a:63:
b2:4b:3d:d8:4d:12:4f:7a:8f:7e:dd:c5:b7:a1:fa:
4c:d1:0b:f8:d9:c7:a2:35:3d:9c:04:70:03:e6:7f:
2c:2c:91:de:24:70:8a:c5:8f:4a:a8:42:5b:e4:6d:
67:f8:53:8a:a9:ae:88:5f:c8:33:70:09:d9:4b:58:
7b:60:db:23:ba:75:8e:34:24:62:9f:dd:15:1b:3a:
06:10:ad:06:b9:1c:99:27:23:ba:8f:3b:a1:fa:d6:
1f:02:be:e8:94:ac:1a:5b:29:e9:a6:a5:ea:5d:04:
ad:60:54:51:1f:7e:ea:2d:a5:d5:29:0b:16:08:dc:
4a:39:72:3f:e8:67:39:72:11:3c:9b:71:ff:36:ce:
55:ce:b9:6e:2e:0f:7b:3a:80:0b:7c:4f:97:1e:1a:
8d:f1:f7:e6:fc:5f:ea:ad:18:35:32:00:28:fd:ae:
18:ef:ad:cf:c6:42:93:cf:0e:69:d0:95:2e:e9:f3:
8a:f3:8d:c2:f1:d5:04:d9:a2:9d:d6:18:d0:25:93:
f5:75:44:c5:97:f7:4b:8a:fd:1e:6e:37:b0:4d:bf:
67:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:77:55:2F:F1:3F:0C:A3:F1:EC:28:D0:81:07:90:7B:DC:DE:96:BB
X509v3 Authority Key Identifier:
keyid:BD:49:46:77:76:DC:A7:47:2F:88:47:07:82:DA:D5:72:2E:5A:FE:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TSMC/0/BD49467776DCA7472F88470782DAD5722E5AFE49.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BD49467776DCA7472F88470782DAD5722E5AFE49.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TSMC/0/BD49467776DCA7472F88470782DAD5722E5AFE49.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:05:64:44:17:34:e3:64:03:4e:22:1f:c9:a1:2e:93:b4:3a:
05:d9:0f:97:37:9c:94:47:19:5e:7e:7c:3c:83:51:da:e0:b7:
9e:f4:32:07:60:04:29:9b:b9:1f:1d:c6:3b:3c:a8:db:95:36:
a9:2a:3c:68:a7:9d:70:ab:d9:7e:6f:51:7e:cf:f8:12:9a:04:
8e:77:bc:9d:f9:5a:12:9c:df:6f:37:8c:02:7e:d9:16:91:8b:
2f:9d:2c:a6:62:95:18:62:47:f8:80:a6:da:ae:f5:40:7d:fd:
dc:87:36:66:c7:d5:eb:1f:68:3e:5b:17:39:4f:4d:49:a6:c5:
4f:57:24:c7:dd:c6:7c:4c:db:f6:3a:ad:c3:1a:a5:3e:21:0b:
cf:23:c0:ac:b5:22:a5:2f:9b:a7:4a:a7:c4:e4:2c:4c:f5:05:
c7:da:11:33:e0:f0:b2:da:51:e6:f4:42:be:e2:fe:20:af:f8:
ad:b4:0b:0d:d8:bc:4b:fa:17:d3:c9:66:eb:85:44:67:a7:e4:
d6:d0:e2:55:a7:09:72:54:cf:21:3f:57:f3:3b:b9:ae:f6:86:
9d:60:4f:cc:4b:4d:28:1a:42:14:ea:49:7e:73:27:5d:36:f9:
83:e6:f6:4a:48:bc:d2:ae:c7:72:1e:d5:75:ab:93:c7:f9:e7:
be:1e:70:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:50:54 2026 by rpki-client