
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/BEBITTECH/VH5LZPYCntrHwWfUUi2j2fB-9Dc.mft
File:                     VH5LZPYCntrHwWfUUi2j2fB-9Dc.mft (raw, json)
Hash identifier:          pb1uQ6YJEmxxggYP8ZTtchgSXTDKwujE+pEu7vxrv8w=
Subject key identifier:   29:90:15:F4:8D:10:83:B8:55:C3:95:EA:13:C4:A5:4D:CA:5D:35:84
Authority key identifier: 54:7E:4B:64:F6:02:9E:DA:C7:C1:67:D4:52:2D:A3:D9:F0:7E:F4:37
Certificate issuer:       /CN=547E4B64F6029EDAC7C167D4522DA3D9F07EF437
Certificate serial:       31
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/VH5LZPYCntrHwWfUUi2j2fB-9Dc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/BEBITTECH/VH5LZPYCntrHwWfUUi2j2fB-9Dc.mft
Manifest number:          2F
Signing time:             Tue 04 Nov 2025 07:27:50 +0000
Manifest this update:     Tue 04 Nov 2025 07:27:50 +0000
Manifest next update:     Tue 04 Nov 2025 13:27:50 +0000
Files and hashes:         1: 2vz-xMzPl8hiyTavYHJYKLC1WPY.roa (hash: W5GyxgtP1ONLKY2Y7pIwNIhLloHANzxzrB/mIxHajfQ=)
                          2: VH5LZPYCntrHwWfUUi2j2fB-9Dc.crl (hash: 4q9CeDWWl5ylqXglKAeNITrXzrZ1WgbhCY9MZoPjBx0=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/BEBITTECH/VH5LZPYCntrHwWfUUi2j2fB-9Dc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/BEBITTECH/VH5LZPYCntrHwWfUUi2j2fB-9Dc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/VH5LZPYCntrHwWfUUi2j2fB-9Dc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Nov 2025 11:29:21 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49 (0x31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=547E4B64F6029EDAC7C167D4522DA3D9F07EF437
        Validity
            Not Before: Nov  4 07:27:50 2025 GMT
            Not After : Oct 16 15:30:20 2026 GMT
        Subject: CN=299015F48D1083B855C395EA13C4A54DCA5D3584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ac:39:7f:a8:68:20:a5:fe:a8:ef:85:35:a5:
                    cc:92:73:f6:fe:ef:ef:7f:79:ef:71:b5:99:e1:b1:
                    7a:1f:ea:23:5c:62:b4:cc:1f:e2:f4:c4:f9:5b:2a:
                    f4:6a:9e:6f:ef:2a:fe:38:c3:ac:21:5b:51:54:d7:
                    59:52:5a:73:fa:a9:d3:cd:b7:c0:42:d4:c7:07:b1:
                    f3:c8:db:96:0f:07:7b:be:f0:8b:5f:7a:a0:f0:13:
                    22:36:3b:d7:0b:0d:05:4f:07:fc:67:93:4c:c1:28:
                    2e:ed:6a:d9:ac:22:ed:8c:ea:9d:f9:cd:c1:ad:9b:
                    e1:ce:58:56:af:9b:88:07:bd:66:86:e2:41:87:e8:
                    44:98:15:74:9e:05:55:21:37:bc:31:2e:b7:be:8c:
                    15:90:a9:12:8c:92:5c:61:be:69:94:e5:b8:29:03:
                    1c:6b:ab:19:44:ce:f6:69:4f:2a:da:9c:4d:b8:9f:
                    0b:f9:ad:ba:0e:8c:75:80:95:1f:34:4e:6b:d6:0e:
                    ed:89:3a:11:a3:8c:01:69:60:40:36:1d:ec:e2:8d:
                    74:bd:47:05:f5:3d:19:3a:cd:49:5e:2a:fd:f4:d2:
                    54:d5:a4:b2:89:f5:a5:37:a2:5f:17:ad:8b:f6:36:
                    4b:a2:c7:db:56:bb:9c:46:6a:97:57:b4:c3:d4:0c:
                    ec:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:90:15:F4:8D:10:83:B8:55:C3:95:EA:13:C4:A5:4D:CA:5D:35:84
            X509v3 Authority Key Identifier:
                keyid:54:7E:4B:64:F6:02:9E:DA:C7:C1:67:D4:52:2D:A3:D9:F0:7E:F4:37
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BEBITTECH/VH5LZPYCntrHwWfUUi2j2fB-9Dc.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VH5LZPYCntrHwWfUUi2j2fB-9Dc.cer
            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BEBITTECH/VH5LZPYCntrHwWfUUi2j2fB-9Dc.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
    Signature Algorithm: sha256WithRSAEncryption
         58:8c:03:2d:dc:16:cc:97:83:89:f6:67:65:80:05:1a:39:5f:
         b0:5f:41:63:af:28:ef:2e:31:75:12:91:77:b8:ff:b6:dd:15:
         21:6c:e4:86:a8:b5:5e:e7:48:77:03:0e:12:f0:82:01:ce:da:
         64:35:cf:95:50:ad:b5:b0:80:9b:8b:ca:16:2e:36:7c:17:b0:
         53:17:a0:91:64:79:8d:b5:04:e9:49:00:1c:eb:5b:81:a8:36:
         ba:37:c5:6e:d8:e5:4f:77:1d:bb:70:46:83:70:98:a3:ae:ef:
         93:68:a5:d5:a5:5f:85:42:71:36:eb:f3:0a:45:f8:11:14:66:
         4a:73:65:f6:9c:58:f3:06:6f:83:f5:68:4e:87:b3:58:bc:56:
         f3:9d:63:49:e3:45:36:3f:36:67:f9:ec:13:d1:f6:f5:14:c5:
         40:c1:1f:5b:b0:4e:42:5a:4e:29:8d:4e:56:d6:40:12:d6:4c:
         6e:4c:b7:50:eb:a4:57:61:ea:61:65:6f:66:59:0b:1a:b6:e5:
         ec:89:ac:df:12:bd:4c:b4:b7:9d:89:c6:82:4a:50:3a:e6:a7:
         d4:8a:d7:fc:62:36:6b:d4:8f:ad:4b:7a:9b:54:89:7c:07:83:
         b2:31:23:59:96:2f:1f:72:41:e4:ed:60:29:00:98:08:2b:eb:
         ea:5f:2e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 09:23:31 2025 by rpki-client