
$ rpki-client -vvvf rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft
File: C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft (raw, json)
Hash identifier: Z5owgiZn03ZZgYwhvK/7Acj4h7l8XD5dmarBBZ9J1dE=
Subject key identifier: 95:18:C1:52:92:E8:A2:B2:A3:F6:BC:D5:D8:51:A6:CE:41:E6:C9:92
Authority key identifier: C4:9B:AE:24:30:BE:EC:35:4C:1B:14:F2:26:E7:61:FC:9B:DC:F0:05
Certificate issuer: /CN=A91BDB290000/serialNumber=C49BAE2430BEEC354C1B14F226E761FC9BDCF005
Certificate serial: 66C3262CF8B7FA465F03887E48E6953085603EB3
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft
Manifest number: 02AF
Signing time: Sun 11 Oct 2026 06:46:28 +0000
Manifest this update: Sun 11 Oct 2026 06:41:28 +0000
Manifest next update: Mon 12 Oct 2026 09:51:28 +0000
Files and hashes: 1: 5F225958DB67E3418BFBE293BFD25E6F6A9346B9.cer (hash: wYdtix/LDee8ZEJGiTxD5AqF7ZWjOoSZiL6WSmE5qzo=)
2: 138A054AE20232FE74DA41A7D1FB6684BFF8B631.cer (hash: Zo39dsWqNkolqaKhWzlf8458SfxFo6DnsdWakso6pqc=)
3: 061E60E9FDA5A25EDC961572A4CBA8C539D780AF.cer (hash: etK9ChY/67xJMPxpSS2bELv6+079wOhz5Owjed+7V9s=)
4: BDC7715D29F4E43198D59315B71674EE9F648F6D.cer (hash: mHwEYS1tNelL6RV/T7poIrm2xe//+2sBhpMulCadIwE=)
5: 9F397B838061280C2F2A887AC9D64012310492D8.cer (hash: AkAR+lSILTN1pLkO4LJRfr6uv+VMbaYKmt4kHAXjuR0=)
6: 71E534018547D77B65EBCD0FC4941DC8113FAEE3.cer (hash: e/12Bvs4XBSRwhh9g+zZp9qn/cEuRAq2sYTeeh5SElU=)
7: C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl (hash: 6rTp3by+VwoQ6tEFncxFr1jtq0sWsrE18R6o41pv/9A=)
8: 1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.cer (hash: I5RrhNzkFBB9aTAVEwcT8m+Fq6yg/7jrMob8Rgy03bQ=)
9: BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.cer (hash: Wgiiza2OtZGJQUX76W3y7Jpru4jNxqcQx1dg64cWfx0=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 09:51:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:c3:26:2c:f8:b7:fa:46:5f:03:88:7e:48:e6:95:30:85:60:3e:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=C49BAE2430BEEC354C1B14F226E761FC9BDCF005
Validity
Not Before: Oct 11 06:41:28 2026 GMT
Not After : Oct 12 09:51:28 2026 GMT
Subject: CN=9518C15292E8A2B2A3F6BCD5D851A6CE41E6C992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c6:27:8b:d8:6e:50:bf:cc:0d:39:2c:3a:eb:
5c:53:81:ec:24:86:39:1f:41:85:df:57:75:b7:56:
39:ea:09:34:74:eb:d1:1d:dc:36:3f:a3:6e:13:d4:
26:bb:fd:3b:af:11:05:52:e0:b5:f9:a9:cd:ff:a0:
07:0d:c5:04:ad:87:6b:2a:1e:00:a9:06:e8:6c:6c:
1e:bc:18:9d:bf:7c:43:af:07:f8:a7:e2:59:58:bc:
de:da:00:d7:f8:7c:88:8e:ce:31:73:45:9c:28:b5:
3f:2c:70:2b:3f:61:5b:d6:64:bc:78:6d:43:67:10:
bf:ef:ac:41:f9:f9:d4:3b:90:c4:e5:9c:98:04:42:
1e:94:ae:31:73:f2:40:3e:d4:63:9f:1b:e2:b8:52:
66:f0:15:3c:18:45:92:4f:57:99:fb:ac:b3:c5:97:
eb:55:1f:c3:6e:0c:ed:dc:e1:1d:e3:13:ca:86:03:
3d:cd:df:35:e1:10:49:66:fc:17:18:61:d8:8b:d5:
2c:0f:1c:d5:3a:56:2a:34:61:83:df:6f:15:f9:93:
bc:60:99:7d:a6:63:35:2e:c1:1d:b0:19:40:0e:9d:
f8:a5:cc:65:e5:bf:9c:85:fc:3d:9d:fd:61:48:b5:
83:fd:db:36:b9:f6:d8:60:07:49:bf:65:14:de:93:
11:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:18:C1:52:92:E8:A2:B2:A3:F6:BC:D5:D8:51:A6:CE:41:E6:C9:92
X509v3 Authority Key Identifier:
keyid:C4:9B:AE:24:30:BE:EC:35:4C:1B:14:F2:26:E7:61:FC:9B:DC:F0:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:34:d4:93:cf:28:8d:73:71:59:8d:e0:5a:a4:31:14:88:5c:
13:80:c5:ab:54:b4:1f:f9:6b:a3:d9:3f:dc:f7:b8:9c:fb:f7:
76:8c:8a:d6:cc:a5:50:e1:3e:f6:4e:a8:68:c6:a8:ae:d0:b6:
27:9d:d0:5a:98:52:f0:a9:48:13:53:d0:ce:20:f5:61:c3:71:
ba:9d:35:d0:4e:3b:f6:40:55:77:05:0b:1b:f8:e8:ee:8c:09:
55:ee:ed:fe:c8:7c:37:c4:1d:66:24:75:b2:f4:91:32:91:ea:
18:db:db:c6:dc:61:eb:f1:34:d7:6e:d7:ff:bc:3f:44:f8:52:
1d:86:d5:f3:44:d3:06:86:ce:a6:f8:14:bb:e6:a6:bd:56:e1:
94:2d:f4:b5:43:06:1a:91:ab:cb:63:14:51:39:fc:6a:b0:e7:
e7:79:87:d5:5a:82:02:49:50:86:ed:86:c7:95:b0:36:85:6e:
83:2f:bd:f0:ad:cd:f5:9c:4a:7c:57:c9:6f:a9:de:62:e8:77:
36:71:91:95:a6:6d:d0:5b:48:00:a9:bd:4d:f5:0e:1f:8d:2b:
c9:37:55:90:c8:e9:12:ca:3e:63:09:fe:42:62:97:99:a8:b3:
88:7c:54:25:97:29:50:17:9c:3c:aa:10:ae:95:f3:32:97:45:
25:b0:40:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:03:02 2026 by rpki-client