
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TECHDRIVEN/m_z6ohBnQrLAmeP0wqUEKOXNYtM.mft
File: m_z6ohBnQrLAmeP0wqUEKOXNYtM.mft (raw, json)
Hash identifier: /VKAH4uLClULFm4uJIsX6dS5KcNHLIaxFNxzyClqVDU=
Subject key identifier: 79:5D:90:5E:77:95:2D:D1:FE:C2:8C:6A:56:DA:1F:DD:CF:1E:0C:6B
Authority key identifier: 9B:FC:FA:A2:10:67:42:B2:C0:99:E3:F4:C2:A5:04:28:E5:CD:62:D3
Certificate issuer: /CN=9BFCFAA2106742B2C099E3F4C2A50428E5CD62D3
Certificate serial: 03A5
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/m_z6ohBnQrLAmeP0wqUEKOXNYtM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TECHDRIVEN/m_z6ohBnQrLAmeP0wqUEKOXNYtM.mft
Manifest number: 038D
Signing time: Wed 11 Mar 2026 08:26:25 +0000
Manifest this update: Wed 11 Mar 2026 08:26:25 +0000
Manifest next update: Fri 13 Mar 2026 08:26:25 +0000
Files and hashes: 1: -1e2AdlZM_kthAXAVDWdyw5ddmQ.roa (hash: grduK08LNWkFZnV7k9CSs49kYkTtuDiPGH3AkPWQvy0=)
2: 1FZ9xVPUVQZd3NZxmi3VEnlQsEg.roa (hash: U+TPLK5JTqhFXUtthiNct6dA59hyvG0NSPtNFes7KL0=)
3: 4NjTqan12me_p3c4kJ5pASqS4jM.roa (hash: uibqPg6JVeqXPcRIxVkudxh5JGzOD9Rmz0K5VlzMxVQ=)
4: HXMq6aoknxTmytxY7RSrHsYpt_g.roa (hash: hJpvy00NLN4dlxIzwmKdDB1poqJMfeou7n0Fuw2imM4=)
5: hwPzsGds16UWb86szZaeZXXvQpE.roa (hash: iY4c0DjiGId0Aa15ap0LWbmvwGS4G2BS3tUGBUnNRRw=)
6: m_z6ohBnQrLAmeP0wqUEKOXNYtM.crl (hash: NyBiIRyXH/in32n0flUXC1KqxYbKdtl1pFw7TZohn0I=)
7: q8MZgMWgdtePuCv9114g_FqV6KY.roa (hash: ZPULdz8ciqCZCwIwOw2ZvUgUjQs9WSuMXc4jxCbfUFw=)
8: w10Xzm3QnT0ajMLDmBOEIonN8Ro.roa (hash: QYwPy/H598La7J5MB1HqoJS0u7dDO+OJwY1gvU8qT5A=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TECHDRIVEN/m_z6ohBnQrLAmeP0wqUEKOXNYtM.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/TECHDRIVEN/m_z6ohBnQrLAmeP0wqUEKOXNYtM.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/m_z6ohBnQrLAmeP0wqUEKOXNYtM.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Mar 2026 16:56:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 933 (0x3a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9BFCFAA2106742B2C099E3F4C2A50428E5CD62D3
Validity
Not Before: Mar 11 08:26:25 2026 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=795D905E77952DD1FEC28C6A56DA1FDDCF1E0C6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:39:bb:30:78:4f:5e:c4:e7:47:9e:70:1b:2a:
d2:fc:24:de:98:60:2f:fc:73:5a:7f:3a:94:74:4a:
a8:cf:a5:6c:26:b5:7e:90:27:e3:1f:f5:5e:c4:c3:
62:de:e1:c8:07:f8:9f:ed:b9:cc:5c:43:3b:fc:1d:
f5:74:12:ab:fe:a6:e9:ec:fb:95:fb:e2:e6:2d:18:
71:14:b8:75:36:f1:25:b0:fa:09:4b:89:28:97:fa:
34:c0:dc:fb:0f:74:e5:e9:82:e3:e3:3c:b9:44:31:
ab:d7:ec:25:43:d4:b4:87:5b:bd:66:de:30:b2:1b:
4c:cb:c3:6d:ae:99:12:bc:80:95:46:76:39:e0:59:
b1:fb:79:b5:4f:c9:c0:5d:05:a9:4b:e9:48:1c:9c:
47:f4:35:81:7c:72:d5:25:5b:9b:ce:c4:2b:1a:a4:
6f:d6:90:e1:95:bc:19:b1:3e:00:3e:b2:9e:63:b7:
b7:64:68:7c:f8:18:2f:6b:8d:fa:11:7c:82:df:8b:
72:7b:1f:9a:fb:7f:17:11:73:42:64:b0:28:70:91:
14:ef:48:da:e9:82:6b:93:03:81:48:fc:03:9f:8a:
36:2e:de:af:ff:2e:01:1e:e2:60:05:62:b5:c5:a4:
3f:8d:d9:fc:77:e5:1c:59:bb:be:67:03:e6:18:d5:
95:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:5D:90:5E:77:95:2D:D1:FE:C2:8C:6A:56:DA:1F:DD:CF:1E:0C:6B
X509v3 Authority Key Identifier:
keyid:9B:FC:FA:A2:10:67:42:B2:C0:99:E3:F4:C2:A5:04:28:E5:CD:62:D3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TECHDRIVEN/m_z6ohBnQrLAmeP0wqUEKOXNYtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/m_z6ohBnQrLAmeP0wqUEKOXNYtM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TECHDRIVEN/m_z6ohBnQrLAmeP0wqUEKOXNYtM.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:11:d7:2a:2b:e6:a5:72:78:e4:dd:74:c0:52:4d:7e:d3:d3:
99:af:6e:8a:de:8a:fd:68:06:92:08:3b:dc:b9:4f:40:67:b7:
87:b8:c9:ae:e4:23:ce:9b:1c:2a:c5:3f:1c:9c:4c:81:09:1d:
ba:e2:ae:13:22:bb:aa:b1:23:5d:d1:9f:26:e5:9a:6f:a2:6c:
a8:81:a0:41:bb:a5:2d:8e:1f:10:65:6b:35:0c:dd:61:8e:3c:
c2:da:7d:3e:cf:1a:20:d1:d2:93:f7:d1:8c:57:aa:33:aa:d2:
5f:04:e4:9d:f9:f6:6f:0e:81:3f:4e:9e:fd:c1:cf:c0:26:44:
83:ee:fa:ba:5d:7f:10:bc:a3:76:b2:f7:4e:fd:7a:d8:47:82:
ee:64:7d:cd:12:80:fc:b9:32:d2:f8:5a:ca:74:bb:52:05:3b:
eb:ad:63:46:b2:4e:1b:6f:2f:bb:49:d0:6d:77:66:4d:bf:82:
5e:07:35:da:81:90:f9:e4:d5:0f:7a:4b:43:c6:c6:70:27:a5:
14:00:b5:59:a2:80:ef:7e:fe:34:d9:f3:f9:47:ed:0d:f0:bc:
85:f7:68:f4:94:e9:92:ef:3a:40:d7:51:26:08:77:cb:cf:2a:
ab:79:e2:0f:55:b2:4a:a2:86:4e:84:a2:26:fa:7e:66:c4:e9:
68:47:dd:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 16:51:31 2026 by rpki-client