
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWD-COM-TW/0/AD79CBDEB391C70F0A9DAD7888224213297EEB3A.mft
File: AD79CBDEB391C70F0A9DAD7888224213297EEB3A.mft (raw, json)
Hash identifier: nBDtHMW/4BMv14aAMADw0jDIoKG32kPYwa0xln57Z9c=
Subject key identifier: 59:41:FA:72:37:CF:0A:5F:DB:C0:2D:48:E3:A4:D5:37:43:C9:1A:B1
Authority key identifier: AD:79:CB:DE:B3:91:C7:0F:0A:9D:AD:78:88:22:42:13:29:7E:EB:3A
Certificate issuer: /CN=AD79CBDEB391C70F0A9DAD7888224213297EEB3A
Certificate serial: 230F9533FF421188B443545DAACA238DADB50418
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AD79CBDEB391C70F0A9DAD7888224213297EEB3A.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWD-COM-TW/0/AD79CBDEB391C70F0A9DAD7888224213297EEB3A.mft
Manifest number: 48
Signing time: Tue 30 Jun 2026 01:57:52 +0000
Manifest this update: Tue 30 Jun 2026 01:52:52 +0000
Manifest next update: Wed 01 Jul 2026 02:35:52 +0000
Files and hashes: 1: 3232332e3136352e392e302f32342d3234203d3e20313333393535.roa (hash: fVpKpRteO0VaGR3toHlP0vvzNxEFvd9ooLHtR/Rm6ss=)
2: 3232332e3136352e31302e302f32342d3234203d3e20313333393535.roa (hash: 34le8Xt54+WlmHbA7MxBAZytMwZ88iAqDKmDa3GmapE=)
3: 3232332e3136352e31322e302f32342d3234203d3e20313333393535.roa (hash: 9G6BmFXh8fI5XHgtWuAKkjyuUhCjr0NlC/99CzJuGCU=)
4: 3232332e3136352e31352e302f32342d3234203d3e20313333393535.roa (hash: vzvsaRt3rkqEGPQk4J2sABSExNjL19sA4MUYScGsF+g=)
5: 3232332e3136352e382e302f32342d3234203d3e20313333393535.roa (hash: 211j9d7v6cqKfTJDkyYktBBdrb7sSCkBHmY96MN17tA=)
6: AD79CBDEB391C70F0A9DAD7888224213297EEB3A.crl (hash: cidVFyThJZmAUuGiuVg0Cf+0dDBB7hpdrDjUJZ23Y+I=)
7: 3232332e3136352e31332e302f32342d3234203d3e20313333393535.roa (hash: Pq+rcQBopuW70X5LeXjFWpzJbmIFP/Yyd1b9pbIm2QA=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWD-COM-TW/0/AD79CBDEB391C70F0A9DAD7888224213297EEB3A.crl
rsync://rpkica.twnic.tw/rpki/TWD-COM-TW/0/AD79CBDEB391C70F0A9DAD7888224213297EEB3A.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AD79CBDEB391C70F0A9DAD7888224213297EEB3A.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Jul 2026 02:35:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:0f:95:33:ff:42:11:88:b4:43:54:5d:aa:ca:23:8d:ad:b5:04:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AD79CBDEB391C70F0A9DAD7888224213297EEB3A
Validity
Not Before: Jun 30 01:52:52 2026 GMT
Not After : Jul 1 02:35:52 2026 GMT
Subject: CN=5941FA7237CF0A5FDBC02D48E3A4D53743C91AB1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:59:42:24:82:87:1b:ab:61:7b:d6:be:c9:a5:
c8:26:2f:4b:f9:06:ce:74:f1:00:84:ac:6c:1d:0d:
ae:ce:b7:d9:df:60:34:32:e9:58:28:d7:74:ba:3b:
e9:26:de:9e:41:dd:1d:7f:ef:6f:99:d6:32:f7:3f:
54:3a:64:62:eb:a5:88:8f:81:00:e6:5d:27:de:3b:
c5:5a:14:f7:c8:3f:36:f7:fa:40:c6:1c:4f:20:17:
1e:fe:a8:ef:c0:37:d2:1d:31:8c:8b:94:38:fe:e2:
91:84:fa:ee:f1:a4:20:3e:98:7d:da:57:38:16:84:
04:ab:67:6d:dc:25:34:5a:c2:8c:52:05:7b:2c:b1:
f8:eb:88:61:cd:03:c8:7b:7d:b0:5a:d8:a4:3b:04:
d2:a0:eb:57:32:fb:2f:27:ec:74:69:36:e5:bd:25:
d0:31:9f:b5:75:63:1a:7a:fa:e9:72:97:72:98:88:
7f:c6:0b:63:80:cf:e5:a1:08:7a:84:ca:1a:95:4e:
fb:8e:47:10:2a:01:17:a6:0e:48:b9:5d:8d:4d:14:
ef:89:6e:3f:5e:2d:a6:cc:7a:f4:26:ab:a4:ba:e2:
94:1c:7d:13:41:d1:bd:72:95:cd:7f:68:ee:b6:86:
e9:a7:56:52:f2:2b:77:39:3a:dc:1e:fa:25:c7:2e:
60:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:41:FA:72:37:CF:0A:5F:DB:C0:2D:48:E3:A4:D5:37:43:C9:1A:B1
X509v3 Authority Key Identifier:
keyid:AD:79:CB:DE:B3:91:C7:0F:0A:9D:AD:78:88:22:42:13:29:7E:EB:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWD-COM-TW/0/AD79CBDEB391C70F0A9DAD7888224213297EEB3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AD79CBDEB391C70F0A9DAD7888224213297EEB3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWD-COM-TW/0/AD79CBDEB391C70F0A9DAD7888224213297EEB3A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:fd:75:6d:af:cd:48:a8:2f:34:3b:ab:7d:c1:de:15:08:93:
55:9f:1e:ea:ca:ff:f2:3f:32:95:af:0d:a5:49:24:12:37:e8:
3e:cb:0e:b8:08:ce:d0:f9:f4:7c:3e:ad:d0:0d:16:e4:4e:d4:
12:ad:bd:7f:89:7f:cd:96:2c:41:0b:08:87:c3:cc:65:e3:b7:
8a:02:17:d0:88:4d:25:21:14:13:d6:ef:ff:72:97:e7:fc:59:
ba:38:8f:1a:f3:96:1e:75:eb:b5:f9:d3:5b:35:15:de:91:62:
b8:7e:6f:98:19:38:4b:b6:6f:bd:63:ba:fc:98:dd:cb:e7:49:
d8:c4:d2:5d:81:11:bb:4a:6e:5c:59:91:d2:24:ab:14:2c:38:
d2:54:aa:25:e7:5b:73:96:92:48:cd:cf:30:4e:d3:d3:1f:d0:
5d:8f:d6:74:1f:33:ba:a4:c1:8b:99:11:b3:df:c6:a5:67:60:
46:8b:e2:30:1c:1f:f1:ab:1e:16:51:81:57:ab:d1:98:88:da:
7b:3d:03:66:b7:b0:e7:10:72:f5:ad:ff:79:be:28:7d:97:c5:
8a:b7:5d:14:1b:07:2e:96:5a:f6:2e:2d:27:30:1f:0f:65:ea:
12:ac:e4:45:6d:aa:36:fc:ca:2b:92:09:8d:26:1f:a8:4d:1e:
b1:c6:31:6b
-----BEGIN CERTIFICATE-----
MIIE7DCCA9SgAwIBAgIUIw+VM/9CEYi0Q1Rdqsojja21BBgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUQ3OUNCREVCMzkxQzcwRjBBOURBRDc4ODgyMjQyMTMy
OTdFRUIzQTAeFw0yNjA2MzAwMTUyNTJaFw0yNjA3MDEwMjM1NTJaMDMxMTAvBgNV
BAMTKDU5NDFGQTcyMzdDRjBBNUZEQkMwMkQ0OEUzQTRENTM3NDNDOTFBQjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoWUIkgocbq2F71r7JpcgmL0v5
Bs508QCErGwdDa7Ot9nfYDQy6Vgo13S6O+km3p5B3R1/72+Z1jL3P1Q6ZGLrpYiP
gQDmXSfeO8VaFPfIPzb3+kDGHE8gFx7+qO/AN9IdMYyLlDj+4pGE+u7xpCA+mH3a
VzgWhASrZ23cJTRawoxSBXsssfjriGHNA8h7fbBa2KQ7BNKg61cy+y8n7HRpNuW9
JdAxn7V1Yxp6+ulyl3KYiH/GC2OAz+WhCHqEyhqVTvuORxAqARemDki5XY1NFO+J
bj9eLabMevQmq6S64pQcfRNB0b1ylc1/aO62humnVlLyK3c5Otwe+iXHLmARAgMB
AAGjggH2MIIB8jAdBgNVHQ4EFgQUWUH6cjfPCl/bwC1I46TVN0PJGrEwHwYDVR0j
BBgwFoAUrXnL3rORxw8Kna14iCJCEyl+6zowDgYDVR0PAQH/BAQDAgeAMGcGA1Ud
HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdELUNP
TS1UVy8wL0FENzlDQkRFQjM5MUM3MEYwQTlEQUQ3ODg4MjI0MjEzMjk3RUVCM0Eu
Y3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBLzEvQUQ3OUNCREVCMzkxQzcwRjBBOURBRDc4
ODgyMjQyMTMyOTdFRUIzQS5jZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzAL
hlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXRC1DT00tVFcvMC9BRDc5
Q0JERUIzOTFDNzBGMEE5REFENzg4ODIyNDIxMzI5N0VFQjNBLm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
rv11ba/NSKgvNDurfcHeFQiTVZ8e6sr/8j8yla8NpUkkEjfoPssOuAjO0Pn0fD6t
0A0W5E7UEq29f4l/zZYsQQsIh8PMZeO3igIX0IhNJSEUE9bv/3KX5/xZujiPGvOW
HnXrtfnTWzUV3pFiuH5vmBk4S7ZvvWO6/Jjdy+dJ2MTSXYERu0puXFmR0iSrFCw4
0lSqJedbc5aSSM3PME7T0x/QXY/WdB8zuqTBi5kRs9/GpWdgRoviMBwf8aseFlGB
V6vRmIjaez0DZrew5xBy9a3/eb4ofZfFirddFBsHLpZa9i4tJzAfD2XqEqzkRW2q
NvzKK5IJjSYfqE0escYxaw==
-----END CERTIFICATE-----
Generated at Tue Jun 30 19:10:07 2026 by rpki-client