
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NTUSTCCADM/rvbQnZwUoQiqIFF0PBN57Y_yW0g.mft
File: rvbQnZwUoQiqIFF0PBN57Y_yW0g.mft (raw, json)
Hash identifier: 7BkM8Jut+t7O4bBu3FSuijVjs/E/WBF2rWVHrV/ZPRk=
Subject key identifier: 03:8E:3D:47:93:CB:01:6B:29:DD:EF:84:BA:5A:A0:2C:D8:9F:98:70
Authority key identifier: AE:F6:D0:9D:9C:14:A1:08:AA:20:51:74:3C:13:79:ED:8F:F2:5B:48
Certificate issuer: /CN=AEF6D09D9C14A108AA2051743C1379ED8FF25B48
Certificate serial: 03C9
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/rvbQnZwUoQiqIFF0PBN57Y_yW0g.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NTUSTCCADM/rvbQnZwUoQiqIFF0PBN57Y_yW0g.mft
Manifest number: 03C3
Signing time: Tue 14 Apr 2026 23:33:37 +0000
Manifest this update: Tue 14 Apr 2026 23:33:37 +0000
Manifest next update: Thu 16 Apr 2026 23:33:37 +0000
Files and hashes: 1: bzc0gVLUnOY1fcZCfkE25RGv5xM.roa (hash: DFQVjNuS8WTDkMYOULIjEXBW4hmHFrvxbGcaHR1ee4o=)
2: rvbQnZwUoQiqIFF0PBN57Y_yW0g.crl (hash: sZ/Ra7SCWPB5CbA9nfPXP7TxTPjuYGjM2nf9oz9r/Qg=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NTUSTCCADM/rvbQnZwUoQiqIFF0PBN57Y_yW0g.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/NTUSTCCADM/rvbQnZwUoQiqIFF0PBN57Y_yW0g.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/rvbQnZwUoQiqIFF0PBN57Y_yW0g.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 16 Apr 2026 07:33:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 969 (0x3c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AEF6D09D9C14A108AA2051743C1379ED8FF25B48
Validity
Not Before: Apr 14 23:33:37 2026 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=038E3D4793CB016B29DDEF84BA5AA02CD89F9870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:50:73:60:fb:5a:99:31:7a:4d:8b:ba:6b:8c:
bd:a7:cc:8b:d2:1f:33:72:da:9e:d8:55:f4:91:63:
d3:5e:8d:36:32:4e:05:d0:ab:0b:ea:3f:e1:ab:39:
a2:ea:b5:92:1a:8b:33:93:2d:c9:97:bb:93:9a:4b:
97:41:cc:2c:97:62:4e:6b:b8:ab:ed:8c:b5:09:da:
1f:00:7d:bb:ae:f1:29:70:a2:6d:1d:3a:a1:01:b9:
2c:7d:3f:81:9b:14:ff:5f:dd:85:4c:7f:6c:80:b0:
82:59:e5:37:90:eb:35:e1:6d:8c:3d:bd:26:43:87:
53:39:6b:b5:5b:de:3e:13:5c:a2:06:8e:42:29:3f:
f1:58:07:75:c4:02:f6:b9:3a:13:b0:27:87:b2:b8:
49:31:13:b7:8e:df:d0:ce:da:8a:a6:0c:64:e9:f7:
f1:4a:44:da:10:71:e1:47:a0:81:ea:03:04:df:f8:
8d:6f:20:6d:db:6d:d4:04:33:ba:42:3d:ff:94:7b:
63:3c:57:2a:27:fc:28:c1:57:3e:70:1d:55:42:b3:
d0:c0:ee:c9:2d:54:d5:a9:d3:51:b2:a7:21:de:c5:
b9:b2:9f:5d:e2:de:f0:93:b4:02:af:6d:66:25:80:
26:3e:ed:4d:99:b8:b2:fb:fd:83:d8:f4:22:56:b1:
e3:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:8E:3D:47:93:CB:01:6B:29:DD:EF:84:BA:5A:A0:2C:D8:9F:98:70
X509v3 Authority Key Identifier:
keyid:AE:F6:D0:9D:9C:14:A1:08:AA:20:51:74:3C:13:79:ED:8F:F2:5B:48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NTUSTCCADM/rvbQnZwUoQiqIFF0PBN57Y_yW0g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/rvbQnZwUoQiqIFF0PBN57Y_yW0g.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NTUSTCCADM/rvbQnZwUoQiqIFF0PBN57Y_yW0g.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:cd:16:ad:e3:d0:4d:25:4d:8c:a3:1e:52:83:18:13:b0:f5:
db:84:74:79:15:ee:52:64:0a:ac:2f:f9:ad:26:74:94:1d:98:
40:29:34:67:2b:d7:7d:04:9c:51:73:bb:72:f1:6e:6d:5c:26:
49:95:f8:03:89:1c:e7:25:22:56:fe:23:1d:71:f8:34:fa:2e:
e8:8c:f9:23:23:42:74:cd:45:91:5d:80:23:8d:27:b6:9f:c5:
6e:71:b8:0f:8b:21:d7:25:c0:7f:a4:fd:a2:8e:3f:8b:26:05:
16:0d:ab:f1:d9:b2:34:33:88:34:3c:0a:b3:15:ab:70:e1:dc:
92:2d:2e:34:6c:1f:2d:3f:de:d4:44:c4:6b:bc:f9:a9:60:86:
8d:41:48:8e:55:af:63:0a:dc:91:67:64:6e:fe:9c:a8:da:2a:
98:c7:cc:51:ec:f4:86:84:83:40:5d:24:12:a4:27:df:34:6f:
f1:ff:f1:f7:7f:b6:12:7a:0d:29:0b:71:e5:fa:d4:4f:19:20:
15:90:ce:d3:c9:89:ab:cc:1c:35:3a:e6:1e:ab:b8:4b:2c:07:
d6:0b:3b:6c:bf:ec:c2:1c:27:11:af:b8:1e:f6:04:21:af:ca:
df:7b:67:f6:4a:9f:7e:80:71:31:a6:36:2e:8f:22:e1:5e:08:
e1:6b:1d:ed
-----BEGIN CERTIFICATE-----
MIIE8zCCA9ugAwIBAgICA8kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQUVG
NkQwOUQ5QzE0QTEwOEFBMjA1MTc0M0MxMzc5RUQ4RkYyNUI0ODAeFw0yNjA0MTQy
MzMzMzdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDAzOEUzRDQ3OTNDQjAx
NkIyOURERUY4NEJBNUFBMDJDRDg5Rjk4NzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDGUHNg+1qZMXpNi7prjL2nzIvSHzNy2p7YVfSRY9NejTYyTgXQ
qwvqP+GrOaLqtZIaizOTLcmXu5OaS5dBzCyXYk5ruKvtjLUJ2h8Afbuu8Slwom0d
OqEBuSx9P4GbFP9f3YVMf2yAsIJZ5TeQ6zXhbYw9vSZDh1M5a7Vb3j4TXKIGjkIp
P/FYB3XEAva5OhOwJ4eyuEkxE7eO39DO2oqmDGTp9/FKRNoQceFHoIHqAwTf+I1v
IG3bbdQEM7pCPf+Ue2M8Vyon/CjBVz5wHVVCs9DA7sktVNWp01GypyHexbmyn13i
3vCTtAKvbWYlgCY+7U2ZuLL7/YPY9CJWseNRAgMBAAGjggIPMIICCzAdBgNVHQ4E
FgQUA449R5PLAWsp3e+EulqgLNifmHAwHwYDVR0jBBgwFoAUrvbQnZwUoQiqIFF0
PBN57Y/yW0gwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg
U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTlRVU1RD
Q0FETS9ydmJRblp3VW9RaXFJRkYwUEJONTdZX3lXMGcuY3JsMGAGCCsGAQUFBwEB
BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U
V05JQ0NBL3J2YlFuWndVb1FpcUlGRjBQQk41N1lfeVcwZy5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y
cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL05UVVNUQ0NBRE0vcnZiUW5ad1Vv
UWlxSUZGMFBCTjU3WV95VzBnLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw
LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAKDNFq3j0E0lTYyjHlKDGBOw9duEdHkV7lJkCqwv+a0mdJQdmEApNGcr
130EnFFzu3Lxbm1cJkmV+AOJHOclIlb+Ix1x+DT6LuiM+SMjQnTNRZFdgCONJ7af
xW5xuA+LIdclwH+k/aKOP4smBRYNq/HZsjQziDQ8CrMVq3Dh3JItLjRsHy0/3tRE
xGu8+algho1BSI5Vr2MK3JFnZG7+nKjaKpjHzFHs9IaEg0BdJBKkJ980b/H/8fd/
thJ6DSkLceX61E8ZIBWQztPJiavMHDU65h6ruEssB9YLO2y/7MIcJxGvuB72BCGv
yt97Z/ZKn36AcTGmNi6PIuFeCOFrHe0=
-----END CERTIFICATE-----
Generated at Thu Apr 16 03:31:29 2026 by rpki-client