
$ rpki-client -vvf rpkica.twnic.tw/rpki/UBBNET/0/704404201DFE2DEA001DB9D48001735C8BEE3A0E.mft
File: 704404201DFE2DEA001DB9D48001735C8BEE3A0E.mft (raw, json)
Hash identifier: Os/JcoHdzHk5gJEgtAxWGdZOEPiICBWL7ksS3XujKaA=
Subject key identifier: CB:51:C5:6F:A0:B3:64:88:52:3D:3E:0F:44:FB:2A:4A:BC:59:4E:4A
Authority key identifier: 70:44:04:20:1D:FE:2D:EA:00:1D:B9:D4:80:01:73:5C:8B:EE:3A:0E
Certificate issuer: /CN=704404201DFE2DEA001DB9D48001735C8BEE3A0E
Certificate serial: 695412A1F2B950D73E11870FB1E75886541EC76D
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/704404201DFE2DEA001DB9D48001735C8BEE3A0E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/UBBNET/0/704404201DFE2DEA001DB9D48001735C8BEE3A0E.mft
Manifest number: 018C
Signing time: Wed 13 May 2026 13:47:53 +0000
Manifest this update: Wed 13 May 2026 13:42:53 +0000
Manifest next update: Thu 14 May 2026 14:05:53 +0000
Files and hashes: 1: 704404201DFE2DEA001DB9D48001735C8BEE3A0E.crl (hash: Vk4go4ud1oU6+lvT6a8IMPolhahCNxs0HWzQvt3fkC4=)
2: AS24165.roa (hash: 3tMmuZ9HrkmbB39XK4WylKBdU/A8HnyG0MnIgl7Oyb8=)
3: AS9924.roa (hash: XcdGJFStk6sFQBvaBPyyGpaFfDK/D04lA1uO4zNGZoQ=)
4: AS24613.roa (hash: BOMFv12VWuDFcMo0MLAvEUpJABw6zTK+45yaZfd4C5Q=)
5: AS24163.roa (hash: OWbvhoRY5zy3ESQoCDYHmvYMcD23zu2mtSNG2tJQho4=)
6: AS4662.roa (hash: l5YT6HkB93vM2G/iP6se4DxzXKxSOnbgp5YjONj14kg=)
7: AS24614.roa (hash: G7Gg7VCljIh1ubEFuZMNnhSLAWR0ry+skX1cGqlCX9g=)
8: AS24164.roa (hash: sIOeJGoPYIpl+PqRCZgUzjJTeH0hyt6alVKPdi1KsqA=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/UBBNET/0/704404201DFE2DEA001DB9D48001735C8BEE3A0E.crl
rsync://rpkica.twnic.tw/rpki/UBBNET/0/704404201DFE2DEA001DB9D48001735C8BEE3A0E.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/704404201DFE2DEA001DB9D48001735C8BEE3A0E.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 14:05:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:54:12:a1:f2:b9:50:d7:3e:11:87:0f:b1:e7:58:86:54:1e:c7:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=704404201DFE2DEA001DB9D48001735C8BEE3A0E
Validity
Not Before: May 13 13:42:53 2026 GMT
Not After : May 14 14:05:53 2026 GMT
Subject: CN=CB51C56FA0B36488523D3E0F44FB2A4ABC594E4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:32:53:03:85:66:92:3f:0a:92:2f:cd:31:73:
41:85:ac:7e:2e:6f:b3:92:a6:4d:fb:b1:30:29:c8:
37:59:5c:2c:50:24:a6:90:98:ae:34:90:44:c5:ea:
e9:ce:49:74:0f:6d:ec:e6:dc:d3:0a:30:7c:5a:f8:
fb:23:80:a4:c3:75:9c:e3:d8:58:d1:e5:e5:b2:35:
f0:67:21:69:a1:9a:a4:87:dd:cc:bf:e0:52:3b:2a:
94:12:73:67:b5:8c:03:52:f4:e3:5e:33:70:9b:b8:
e9:e7:fb:e0:43:83:ea:36:da:6f:af:25:84:29:06:
8d:64:35:4c:ca:09:4e:c3:3f:63:f1:50:e6:39:ef:
c9:03:14:9f:a7:71:11:cb:3d:de:fe:75:04:8b:ef:
22:3b:ee:8a:a2:01:db:05:9a:4a:b9:db:e7:6d:09:
d9:d6:6d:54:2b:2b:4c:81:09:5a:7f:db:97:3d:fe:
c3:91:ad:c5:7b:06:79:cb:6b:a7:d7:73:30:4a:f0:
88:71:86:55:24:80:0a:15:ae:c5:57:c8:9d:be:6c:
3b:a0:d3:b3:94:d4:cf:f9:7b:40:72:12:4f:ee:cd:
ca:a8:82:27:93:12:20:55:70:c3:97:2f:78:cc:66:
5c:b1:58:a2:41:6d:05:11:ef:09:41:cd:97:52:e0:
a8:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:51:C5:6F:A0:B3:64:88:52:3D:3E:0F:44:FB:2A:4A:BC:59:4E:4A
X509v3 Authority Key Identifier:
keyid:70:44:04:20:1D:FE:2D:EA:00:1D:B9:D4:80:01:73:5C:8B:EE:3A:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/UBBNET/0/704404201DFE2DEA001DB9D48001735C8BEE3A0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/704404201DFE2DEA001DB9D48001735C8BEE3A0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/UBBNET/0/704404201DFE2DEA001DB9D48001735C8BEE3A0E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:2d:27:85:06:18:79:8f:45:55:92:d0:dc:3f:01:82:13:9e:
2f:b9:f6:67:e8:c6:46:80:e0:12:b1:e8:ba:2b:36:a5:9c:02:
f0:fa:a6:b7:44:7e:74:81:a8:d7:8d:2c:0c:a0:af:bc:79:0f:
a5:69:d8:e4:94:b4:04:68:89:d1:70:d7:cf:71:d6:6a:4d:86:
2f:81:a6:be:bd:86:e4:31:42:e9:85:86:0d:3d:21:da:b2:e0:
7b:82:14:09:09:eb:e5:2e:ee:18:cc:b0:2d:53:c1:9d:bd:45:
d7:90:b6:84:ef:de:13:7b:09:a2:68:40:b9:35:8b:1b:9d:5b:
cc:51:83:a5:ad:8e:8b:5b:4a:49:b2:70:ac:4e:86:45:16:6d:
c4:07:ed:b4:66:f1:e7:d8:ae:fb:f6:02:6f:9c:59:27:da:71:
7b:f9:37:72:24:44:b1:57:d8:ad:6f:4c:38:e0:6b:31:d5:9d:
f8:30:06:70:87:6b:e5:86:b6:58:0f:06:05:88:d8:17:e5:0f:
05:85:ae:6e:89:33:42:5a:4b:97:2d:11:78:71:30:16:2e:f6:
0b:0b:56:06:e7:bf:af:73:05:35:6b:3c:df:cb:72:55:43:e7:
61:e1:c3:51:7c:01:dd:b5:61:25:3c:a6:25:ec:79:a0:2e:63:
cb:ac:22:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:33:33 2026 by rpki-client