
$ rpki-client -vvvf rpkica.twnic.tw/rpki/TWDS/0/432734F40920205CA6443A3B99308DD718E70D42.mft
File: 432734F40920205CA6443A3B99308DD718E70D42.mft (raw, json)
Hash identifier: d2JG7qlvH+Pv3fXJZj/rjXemp6S2sFW4wK34o0zdTI8=
Subject key identifier: AC:D6:00:9B:93:06:25:97:05:6C:7D:10:F0:1E:7A:A9:A7:A2:35:9A
Authority key identifier: 43:27:34:F4:09:20:20:5C:A6:44:3A:3B:99:30:8D:D7:18:E7:0D:42
Certificate issuer: /CN=432734F40920205CA6443A3B99308DD718E70D42
Certificate serial: 5863ADFE45965273455CAB5374FF83E8374CE579
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/432734F40920205CA6443A3B99308DD718E70D42.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWDS/0/432734F40920205CA6443A3B99308DD718E70D42.mft
Manifest number: C7
Signing time: Sat 03 Oct 2026 05:33:05 +0000
Manifest this update: Sat 03 Oct 2026 05:28:05 +0000
Manifest next update: Sun 04 Oct 2026 07:44:05 +0000
Files and hashes: 1: 432734F40920205CA6443A3B99308DD718E70D42.crl (hash: h5FgJ5J2NFAa+0/wN4fSG+ySb/0TdRAgoaPoNoLOJWs=)
2: 3231312e37362e3138302e302f32332d3234203d3e203138303431.roa (hash: bbxNqJpcFoKQB8YEZ9k9dbWZhlMmSJIxxEto4IGtK6w=)
3: 323430353a613634303a313137333a3a2f34382d3438203d3e20323039353537.roa (hash: QNMFjQL+XZqARqPpMvaXZNEvipiDpxefIbtDxQ7JW9Y=)
4: 323430353a613634303a313137333a3a2f34382d3438203d3e20313431313733.roa (hash: 87eGcMzsBcFERAr5N4m3uIfuCE9wu8GrAFKZcBGz6Qc=)
5: 323430353a613634303a3a2f33322d3438203d3e203138303431.roa (hash: Me8ETjKs1rBTDIHMtzcFjvks6+2DOyVK7V5OGraUmDY=)
6: 3130332e3134372e32322e302f32332d3234203d3e203138303431.roa (hash: B4DWL17lSxBYMT/SKD6UY6D7iduYtyLTzr7HPcix8dk=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWDS/0/432734F40920205CA6443A3B99308DD718E70D42.crl
rsync://rpkica.twnic.tw/rpki/TWDS/0/432734F40920205CA6443A3B99308DD718E70D42.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/432734F40920205CA6443A3B99308DD718E70D42.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 04:17:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:63:ad:fe:45:96:52:73:45:5c:ab:53:74:ff:83:e8:37:4c:e5:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=432734F40920205CA6443A3B99308DD718E70D42
Validity
Not Before: Oct 3 05:28:05 2026 GMT
Not After : Oct 4 07:44:05 2026 GMT
Subject: CN=ACD6009B93062597056C7D10F01E7AA9A7A2359A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:70:32:cd:69:33:f5:f5:83:e1:02:86:ba:4f:
e1:ee:28:88:3d:3d:63:a7:4b:46:76:d8:78:f3:51:
c7:4b:8f:c9:95:16:0c:d7:01:8b:da:8e:f2:0e:b1:
c0:b7:d2:aa:94:88:61:a9:5a:ba:b8:c7:d0:10:77:
98:07:e4:15:2f:44:2e:68:32:b0:f0:61:8b:40:bf:
26:d5:7f:45:f4:82:37:34:b8:c5:c3:5f:9c:c9:96:
7c:68:84:61:31:b5:c0:b9:5d:b4:ff:72:15:a1:d3:
2d:90:07:4c:d7:05:ae:f0:ec:41:20:d8:54:7d:9e:
b1:56:64:2e:39:0c:5b:6c:10:d1:c2:2c:20:99:a6:
2d:80:77:d6:37:e7:2a:d5:b0:39:3f:bd:a7:bb:50:
31:bb:5d:e3:9f:8c:7a:eb:ba:6f:5c:40:05:de:82:
c3:ef:8c:b0:cc:82:ad:88:2c:28:a5:63:ef:20:de:
6d:5f:58:62:6a:31:50:f2:a3:f0:af:77:5b:f3:89:
d2:2d:a3:b2:10:53:4e:23:0c:ca:13:a0:bf:59:19:
74:9f:2c:34:f2:dc:41:95:47:93:26:80:b3:c6:0a:
a0:02:7f:1a:d1:89:54:19:5e:a7:90:a5:19:7b:25:
93:17:6e:6b:1a:87:da:5e:a5:a4:06:57:b9:1c:78:
96:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:D6:00:9B:93:06:25:97:05:6C:7D:10:F0:1E:7A:A9:A7:A2:35:9A
X509v3 Authority Key Identifier:
keyid:43:27:34:F4:09:20:20:5C:A6:44:3A:3B:99:30:8D:D7:18:E7:0D:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWDS/0/432734F40920205CA6443A3B99308DD718E70D42.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/432734F40920205CA6443A3B99308DD718E70D42.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWDS/0/432734F40920205CA6443A3B99308DD718E70D42.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:37:31:76:13:2c:7d:e3:a2:ff:ee:c7:55:a1:2c:8d:06:a9:
ef:05:1c:53:7d:ad:cd:49:84:01:ae:fb:b6:a3:90:63:95:3d:
b4:93:b4:5f:f4:c7:bc:7c:fe:c0:48:92:89:36:96:7b:ff:cb:
97:bc:2b:57:3f:3c:1e:aa:40:d1:38:0c:d7:f4:7d:e5:04:c5:
6f:60:0a:a4:2c:70:04:99:21:74:9d:7c:79:96:6c:4a:f2:09:
72:97:48:e0:3e:f6:1a:31:1e:d5:37:4f:9b:e3:51:7b:86:30:
42:60:fc:75:83:7c:1c:69:a2:0d:38:cf:3e:f7:ec:92:7e:7f:
d2:51:ad:28:f1:59:16:eb:86:4e:09:a2:64:20:9e:ea:67:b9:
1d:c9:e9:48:62:11:b9:6b:56:b2:8e:81:0f:bf:c7:6b:3e:81:
b8:61:27:c0:86:b6:40:8c:63:61:27:39:85:51:f3:87:ff:16:
2e:f6:32:60:b0:ba:fa:7c:20:4c:7d:fa:31:0a:fd:0e:b4:6b:
ad:e6:df:be:97:0b:96:80:84:2a:cd:ea:fb:eb:9b:a3:5a:6e:
ef:2c:bc:0a:7c:90:01:c3:e8:10:78:bd:08:18:cd:24:e4:88:
ca:4f:63:cb:cb:a2:c4:8b:07:56:8b:e7:53:75:0e:05:42:4c:
09:33:db:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 14:27:56 2026 by rpki-client