
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft
File: 71525972E3C1153DE53054798F51A5BD55C75019.mft (raw, json)
Hash identifier: 27hqrCyTez0o23E4c/rxVdnsSdPZfokMvETbvYc4vOc=
Subject key identifier: 5F:56:4C:A4:E0:46:0F:C4:C8:26:0F:42:FE:2C:80:43:FD:80:CC:6F
Authority key identifier: 71:52:59:72:E3:C1:15:3D:E5:30:54:79:8F:51:A5:BD:55:C7:50:19
Certificate issuer: /CN=A91BDB290000/serialNumber=71525972E3C1153DE53054798F51A5BD55C75019
Certificate serial: 315C8AFE23984521871009732F36C0D3E2FD8F41
Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft
Manifest number: 01C3
Signing time: Thu 11 Jun 2026 08:39:48 +0000
Manifest this update: Thu 11 Jun 2026 08:34:48 +0000
Manifest next update: Fri 12 Jun 2026 12:37:48 +0000
Files and hashes: 1: DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.cer (hash: igsdE4f1Y42tZEivMwx3eHh5HVhFmHDZJfR7gCVbVBY=)
2: 3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.cer (hash: R1kblQJMjAsS/YNh6d7aaVt7qie9Fxfl9yAQ//XEynw=)
3: 95B1A62479B36C1414FF17CE759F45E2E7E421A3.cer (hash: BPhgrofW+MPV8EIXWYSG7NFjsYgtzBTWs7BZJx8QvFg=)
4: 71525972E3C1153DE53054798F51A5BD55C75019.crl (hash: nxRz0yh+EPiSqgwSYnKAPDh/d+DR5e/QpfA94T/c/OE=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 12:37:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:5c:8a:fe:23:98:45:21:87:10:09:73:2f:36:c0:d3:e2:fd:8f:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=71525972E3C1153DE53054798F51A5BD55C75019
Validity
Not Before: Jun 11 08:34:48 2026 GMT
Not After : Jun 12 12:37:48 2026 GMT
Subject: CN=5F564CA4E0460FC4C8260F42FE2C8043FD80CC6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:8c:e2:9b:47:5c:ae:d2:1e:da:5a:b7:90:f3:
72:4c:f9:7a:b3:f5:1a:13:e0:d3:5d:7a:06:47:98:
1b:aa:6b:c2:69:ba:1c:7d:ff:72:ab:41:50:b0:4b:
3c:d4:a1:94:9e:ca:4d:44:93:a6:3b:aa:8b:85:c3:
7c:b1:08:88:2f:30:3b:f3:14:92:96:0e:44:a0:44:
83:91:5d:14:11:f5:f5:8a:c9:e2:a6:07:fb:e3:ab:
7f:da:c2:60:01:7f:b0:70:ea:31:10:d7:b4:26:2e:
95:fb:78:89:b0:93:1d:cc:7c:ba:7c:a1:3f:44:80:
27:a6:29:7c:ed:07:d7:37:30:13:0f:ea:14:dd:3a:
a1:9c:c5:ef:4c:e3:cd:29:b7:00:28:81:18:eb:0b:
0b:9f:c2:95:8d:8c:5b:1f:98:a5:c6:b1:a1:d9:b6:
6e:94:28:ee:12:ba:56:9d:a7:ee:68:e6:7e:ec:db:
50:03:3f:e6:06:f5:9c:e1:78:d3:fd:98:dc:12:af:
0d:43:de:36:6a:7a:d4:ed:dd:8c:ce:24:70:d8:86:
73:2f:7b:21:92:28:d0:d5:32:31:4d:a5:72:9b:87:
9f:cc:4a:99:dd:5f:ec:d5:c2:85:35:3f:17:50:b5:
99:0e:d2:c5:1a:5a:bb:0d:a7:60:5b:4e:9e:92:8d:
ea:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:56:4C:A4:E0:46:0F:C4:C8:26:0F:42:FE:2C:80:43:FD:80:CC:6F
X509v3 Authority Key Identifier:
keyid:71:52:59:72:E3:C1:15:3D:E5:30:54:79:8F:51:A5:BD:55:C7:50:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:9b:0c:21:c3:b6:2a:25:57:32:a7:2a:d1:e6:50:ef:dc:b0:
85:2a:1f:4b:5e:a8:9e:6f:9b:0b:ff:b5:16:b1:31:ef:ae:79:
d4:03:72:79:fc:ea:6b:26:2c:bf:ec:75:e5:1e:0c:04:22:cd:
a9:35:49:92:44:ec:07:80:50:eb:47:fc:ca:54:c1:ce:ed:40:
96:35:99:cf:a4:18:77:0a:c8:46:6b:6c:ba:64:de:f0:37:c7:
5c:ad:95:7e:46:76:52:2e:3c:c2:e7:8a:f4:af:26:c7:26:68:
5e:ab:d2:66:72:c7:7b:cc:3e:09:e8:7b:a3:db:5b:4f:79:44:
d3:f1:d2:e7:be:16:77:58:88:0d:6a:ec:30:7d:e3:90:48:25:
51:20:17:30:6b:b6:f1:28:7e:1d:b1:46:be:1d:35:89:bb:d0:
e6:2b:3b:9a:c1:c4:e4:36:05:ed:14:73:67:28:80:7b:06:e0:
34:b6:3e:fa:4e:29:67:ee:ae:6f:93:1a:0c:ff:2b:9b:d5:4e:
cf:6f:b2:02:70:5c:c9:e9:2a:72:08:6a:10:16:75:be:be:43:
3b:9c:83:d1:58:f8:05:6d:f3:ac:5d:42:1b:be:20:21:36:13:
b6:f1:bf:0c:6b:b4:eb:ed:c2:2e:ba:48:23:cd:67:f6:30:7e:
d4:a6:ef:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 20:23:05 2026 by rpki-client