
$ rpki-client -vvvf rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft
File: C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft (raw, json)
Hash identifier: CpOIMzxp/nnaWga8ILqvYikcruELCHhFOkkA78jP+aE=
Subject key identifier: DE:DB:A2:4C:FD:AB:BD:6D:EF:5D:67:AD:1C:E9:21:EA:E9:FF:33:74
Authority key identifier: C4:9B:AE:24:30:BE:EC:35:4C:1B:14:F2:26:E7:61:FC:9B:DC:F0:05
Certificate issuer: /CN=A91BDB290000/serialNumber=C49BAE2430BEEC354C1B14F226E761FC9BDCF005
Certificate serial: 7E710DB50AFB0D0587020FE7F617315E7BE1798C
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft
Manifest number: 0259
Signing time: Wed 26 Aug 2026 23:05:08 +0000
Manifest this update: Wed 26 Aug 2026 23:00:08 +0000
Manifest next update: Fri 28 Aug 2026 02:35:08 +0000
Files and hashes: 1: 5F225958DB67E3418BFBE293BFD25E6F6A9346B9.cer (hash: wYdtix/LDee8ZEJGiTxD5AqF7ZWjOoSZiL6WSmE5qzo=)
2: 71E534018547D77B65EBCD0FC4941DC8113FAEE3.cer (hash: e/12Bvs4XBSRwhh9g+zZp9qn/cEuRAq2sYTeeh5SElU=)
3: 1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.cer (hash: I5RrhNzkFBB9aTAVEwcT8m+Fq6yg/7jrMob8Rgy03bQ=)
4: BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.cer (hash: Wgiiza2OtZGJQUX76W3y7Jpru4jNxqcQx1dg64cWfx0=)
5: 138A054AE20232FE74DA41A7D1FB6684BFF8B631.cer (hash: Zo39dsWqNkolqaKhWzlf8458SfxFo6DnsdWakso6pqc=)
6: BDC7715D29F4E43198D59315B71674EE9F648F6D.cer (hash: mHwEYS1tNelL6RV/T7poIrm2xe//+2sBhpMulCadIwE=)
7: C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl (hash: I+McT6gnDWyDlrkMtR4rHb9zZ/VPQdOnFDg+sQha95s=)
8: 9F397B838061280C2F2A887AC9D64012310492D8.cer (hash: AkAR+lSILTN1pLkO4LJRfr6uv+VMbaYKmt4kHAXjuR0=)
9: 061E60E9FDA5A25EDC961572A4CBA8C539D780AF.cer (hash: etK9ChY/67xJMPxpSS2bELv6+079wOhz5Owjed+7V9s=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 28 Aug 2026 02:35:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:71:0d:b5:0a:fb:0d:05:87:02:0f:e7:f6:17:31:5e:7b:e1:79:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=C49BAE2430BEEC354C1B14F226E761FC9BDCF005
Validity
Not Before: Aug 26 23:00:08 2026 GMT
Not After : Aug 28 02:35:08 2026 GMT
Subject: CN=DEDBA24CFDABBD6DEF5D67AD1CE921EAE9FF3374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d0:5c:7f:20:d6:64:d6:1d:1a:f4:50:79:6f:
d2:c5:cf:9d:1a:ad:59:a8:44:61:ae:84:9c:aa:34:
71:aa:8a:8d:a2:97:af:1e:ff:9b:2f:c1:13:b1:19:
5e:0c:50:40:d2:33:89:c3:60:2b:d4:29:bd:a0:fb:
64:3a:71:0b:19:27:37:6f:cf:83:73:a8:b8:97:e9:
da:0b:de:04:c5:eb:91:b4:e7:fb:84:e3:e8:85:79:
f8:d2:55:06:53:02:cc:04:96:db:03:2d:c9:ca:9c:
ee:8f:8c:bb:75:63:61:b3:fe:2e:92:cd:48:8f:84:
54:6c:72:63:84:4f:84:b8:8d:0d:1a:1b:88:02:2d:
12:31:fc:59:50:30:71:ad:1f:ec:d1:bc:7d:2d:79:
7c:4f:bc:ec:65:0f:71:18:62:91:95:a4:3a:80:24:
bb:96:6e:de:39:2e:58:99:e3:8e:9f:98:13:c1:b3:
be:61:27:b2:45:56:12:6b:43:8a:54:64:f8:01:ca:
dd:91:38:be:08:cb:26:7d:fd:1d:c5:fd:d4:01:cb:
68:2f:5a:4c:cc:e5:ee:94:f0:18:91:27:d7:f3:fa:
62:86:0a:c1:44:1a:16:80:2b:1f:86:50:4e:06:46:
38:b6:a8:19:55:3b:c5:f2:1b:09:49:07:f0:e0:d0:
1e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:DB:A2:4C:FD:AB:BD:6D:EF:5D:67:AD:1C:E9:21:EA:E9:FF:33:74
X509v3 Authority Key Identifier:
keyid:C4:9B:AE:24:30:BE:EC:35:4C:1B:14:F2:26:E7:61:FC:9B:DC:F0:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:ee:b9:01:0f:d8:f0:5a:47:f0:55:1d:b1:6c:52:dd:01:ed:
75:ef:97:ee:1b:d2:b8:7d:f9:b6:32:71:d1:d3:b9:9a:bb:d9:
e7:3b:23:e1:c9:54:97:ae:9c:88:88:73:90:1d:53:a7:e8:36:
4b:90:83:5b:ff:2c:ca:00:e7:f6:ea:06:cd:b8:5f:64:27:6b:
39:e2:73:ec:44:8c:72:03:5c:a2:68:ae:d0:e2:a0:ad:5e:1f:
9d:8e:6c:b9:94:80:10:aa:73:74:0c:f6:15:6f:88:6e:a8:a9:
19:8e:30:12:de:4d:4c:6a:96:11:6b:27:e9:d6:7c:0f:55:07:
af:f9:91:b3:eb:e8:c5:66:c6:cd:96:50:3f:c3:5c:49:a9:34:
83:26:0a:f5:4e:0d:ec:15:69:8e:6b:0c:0e:38:bc:72:2f:d8:
9e:6a:15:ea:ca:52:4c:a7:f0:8b:51:63:8e:e9:c8:93:d3:02:
f5:24:7d:14:4c:c9:f4:8c:69:29:1e:4c:e6:6c:77:f4:95:51:
5d:ac:e3:36:e4:88:03:a4:08:7a:6b:44:24:8e:88:56:97:b8:
8b:01:21:1e:a4:14:2b:a0:aa:c7:51:f3:a4:0e:cf:68:92:21:
a4:3c:61:f2:e2:11:79:16:81:07:02:14:8e:5d:d9:fc:0b:d2:
3c:f9:86:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 02:09:37 2026 by rpki-client