
$ rpki-client -vvvf rpkica.twnic.tw/rpki/TWNTT/0/866155EC56EF0A61BC489259EA6B444F2596FF9E.mft
File: 866155EC56EF0A61BC489259EA6B444F2596FF9E.mft (raw, json)
Hash identifier: OKRwkKLn7p3F9R9BL9ib3iOL0uoshOAxhau5mUzc/cY=
Subject key identifier: C1:08:EE:73:61:E9:09:7B:92:79:3D:B4:32:7D:1F:4C:3C:10:2E:00
Authority key identifier: 86:61:55:EC:56:EF:0A:61:BC:48:92:59:EA:6B:44:4F:25:96:FF:9E
Certificate issuer: /CN=866155EC56EF0A61BC489259EA6B444F2596FF9E
Certificate serial: 41D769EB995ED21B0086BCD0330572B3C9A9A4B5
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/866155EC56EF0A61BC489259EA6B444F2596FF9E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNTT/0/866155EC56EF0A61BC489259EA6B444F2596FF9E.mft
Manifest number: CC
Signing time: Sat 03 Oct 2026 07:43:51 +0000
Manifest this update: Sat 03 Oct 2026 07:38:51 +0000
Manifest next update: Sun 04 Oct 2026 08:45:51 +0000
Files and hashes: 1: 36312e35382e34312e3132382f32392d3239203d3e20313331363138.roa (hash: E6IxpTdYXlAMqeX0+c0IU8U2bczaMIO7WYlkAnDJQFE=)
2: 36312e35382e34312e3137362f32382d3238203d3e2033393439.roa (hash: 8+1bqHrAQFD10kktfKxge62Vv7sjt8foTbNXn1au08A=)
3: 3132322e3235352e39352e3132382f32352d3235203d3e203138303138.roa (hash: QsixafQjwfqu9M7sBGz7C/Kx4ATf5EPodViRplY14v8=)
4: 3132322e3235352e39342e31362f32382d3238203d3e2033393439.roa (hash: jFOqKNSTBrTIV1xUzqrbetFhA6QtKyhxqkPiIbQ8Meo=)
5: 3132322e3235352e39332e3131322f32382d3238203d3e203138303138.roa (hash: DCuf39QCWplBT1yHKKE16KE93ZquNcCivbp7rdZaTpo=)
6: 36312e35382e33342e302f32352d3235203d3e203138303138.roa (hash: sEbgj8r5BW9LG+uLbdsnQ3mfWS9qyXUgDZxxUrhdajU=)
7: 3132322e3235352e38302e302f32302d3234203d3e2032393134.roa (hash: fMdNagEZlOANeSxcOpb3w/TF/IYf3DkNkif0u6p7BJo=)
8: 3132322e3235352e39342e302f32382d3238203d3e203138303138.roa (hash: 1FyQfERQbzRtqHMN+lCM3804V/dGWG068p//0dtL/f4=)
9: 36312e35382e33322e302f32302d3234203d3e2032393134.roa (hash: 5f4R2kruXwvonwhPEwdiJqWNobqGweT9ncTpgiNvvP8=)
10: 323030313a6434303a3a2f33322d3332203d3e2032393134.roa (hash: 95cinPFxr6M1UrLSOID8fzCFDcqIv0aWY/wubzGwKoY=)
11: 3132322e3235352e39342e36342f32362d3236203d3e203138303138.roa (hash: 5asE5DvsTfpB1BVRf4zu0Zel18vuQX5T6T90JBepePs=)
12: 866155EC56EF0A61BC489259EA6B444F2596FF9E.crl (hash: hwJo5c4sNhfxfMFuYCwMapoDn9wdpRi3UchJD6rw9A8=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNTT/0/866155EC56EF0A61BC489259EA6B444F2596FF9E.crl
rsync://rpkica.twnic.tw/rpki/TWNTT/0/866155EC56EF0A61BC489259EA6B444F2596FF9E.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/866155EC56EF0A61BC489259EA6B444F2596FF9E.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 04:17:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:d7:69:eb:99:5e:d2:1b:00:86:bc:d0:33:05:72:b3:c9:a9:a4:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=866155EC56EF0A61BC489259EA6B444F2596FF9E
Validity
Not Before: Oct 3 07:38:51 2026 GMT
Not After : Oct 4 08:45:51 2026 GMT
Subject: CN=C108EE7361E9097B92793DB4327D1F4C3C102E00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cb:b6:d5:a3:7d:c2:e2:9d:0f:77:3a:54:fd:
98:94:4d:56:3d:50:73:5f:ef:a1:36:92:42:2a:52:
9a:9a:0d:2e:27:db:42:ad:d3:2c:71:12:f6:69:0d:
da:6c:48:42:b1:c6:94:22:08:f2:cd:74:e9:5c:1d:
fd:ef:93:b1:5d:91:d8:f2:d7:de:32:80:54:cd:31:
37:5a:40:9d:62:5f:04:69:b2:0b:26:23:b3:88:aa:
87:40:fb:00:8d:f7:f6:b4:15:70:e2:11:f0:07:a5:
ca:a1:19:b1:60:da:df:fb:66:43:06:8e:43:ac:22:
2a:81:6b:f6:9c:00:f8:41:97:f8:31:65:42:18:14:
ab:33:14:70:0f:86:3f:38:52:6e:12:30:5f:10:ce:
da:89:21:6a:88:81:88:4f:ca:f9:b0:00:f9:65:28:
44:62:9c:b0:9e:4d:43:fc:f7:51:e2:d8:66:bb:f9:
b0:6a:a9:82:94:b4:4a:dc:be:b7:e7:b5:af:4b:d4:
2b:27:2e:f9:a8:2a:64:9f:b6:31:5d:0d:83:d3:1a:
35:47:1a:0c:fb:93:43:9f:75:25:84:74:72:93:22:
9d:0b:ff:7c:fb:b3:5a:1c:07:fb:a9:d4:75:81:9e:
4d:40:d3:bd:65:f9:fd:6b:72:20:72:21:a3:a6:88:
f1:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:08:EE:73:61:E9:09:7B:92:79:3D:B4:32:7D:1F:4C:3C:10:2E:00
X509v3 Authority Key Identifier:
keyid:86:61:55:EC:56:EF:0A:61:BC:48:92:59:EA:6B:44:4F:25:96:FF:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNTT/0/866155EC56EF0A61BC489259EA6B444F2596FF9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/866155EC56EF0A61BC489259EA6B444F2596FF9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNTT/0/866155EC56EF0A61BC489259EA6B444F2596FF9E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:47:3f:f9:5d:10:f8:45:f4:dd:d7:07:ed:7d:70:37:e4:ab:
10:f2:fe:13:05:3e:f9:41:09:2b:b6:dd:39:26:18:2b:0e:85:
e9:9f:62:38:3a:dc:38:04:22:59:87:78:8c:3f:e6:8f:6e:72:
a9:57:99:6a:f7:11:ee:17:4c:1d:a2:bd:12:d9:21:28:5f:13:
79:37:49:43:0e:a9:17:25:59:41:ae:e6:78:07:b0:2a:56:0e:
0a:45:e6:69:29:bd:70:72:1a:5b:51:96:9e:e5:65:f5:59:43:
b7:83:30:a5:3d:0c:c3:6b:73:14:d0:b3:db:36:4a:16:f2:05:
df:ab:d6:ca:ae:d2:34:2c:8e:65:91:ec:24:97:c8:5e:7d:b9:
3d:2e:28:e4:97:80:ad:e0:5f:77:54:ec:34:1d:6d:3e:63:d4:
07:bb:75:4e:15:91:a3:a6:89:10:2b:f0:c9:9e:b9:0a:fd:2d:
9f:4d:dd:65:1c:71:dd:b7:66:06:a0:a7:e6:12:8f:3f:cc:62:
b7:ce:81:df:ea:0b:4d:60:27:d2:54:24:54:1c:c3:19:02:15:
d3:fa:3f:ee:40:12:0a:38:89:21:bf:72:c0:0b:27:7f:85:80:
bb:47:7e:72:73:72:03:34:0f:4e:4b:9a:cc:d5:76:47:d7:e6:
3a:fc:3d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 14:28:00 2026 by rpki-client