
$ rpki-client -vvf rpkica.twnic.tw/rpki/VERYFAST/0/4116665BE4ABEC579625EB8F93706D8A5D25D811.mft
File: 4116665BE4ABEC579625EB8F93706D8A5D25D811.mft (raw, json)
Hash identifier: 9E24dd19SXyvw3J1REYvbb3fEqT6t37HIv687SetjkA=
Subject key identifier: 65:82:D0:C9:CA:F2:4D:3B:D4:7F:C4:10:42:78:3E:45:9F:D6:BA:6B
Authority key identifier: 41:16:66:5B:E4:AB:EC:57:96:25:EB:8F:93:70:6D:8A:5D:25:D8:11
Certificate issuer: /CN=4116665BE4ABEC579625EB8F93706D8A5D25D811
Certificate serial: 26DC44C363BAA6394917DC565A438EA591C69727
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4116665BE4ABEC579625EB8F93706D8A5D25D811.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/VERYFAST/0/4116665BE4ABEC579625EB8F93706D8A5D25D811.mft
Manifest number: 0B
Signing time: Wed 13 May 2026 06:12:17 +0000
Manifest this update: Wed 13 May 2026 06:07:17 +0000
Manifest next update: Thu 14 May 2026 09:37:17 +0000
Files and hashes: 1: 323430313a653365303a3330303a3a2f34342d3438203d3e20313938393534.roa (hash: +MPj1+FqsGNNfrSwLB7ceVoBXHWs1y8m+Mu4VImaW80=)
2: 323430313a653365303a3a2f34382d3438203d3e20313532363139.roa (hash: EKluDgUWuNPYLOL9EW7U6TRfKnY+emx5Mxp9x96Yono=)
3: 323430313a653365303a35333a3a2f34382d3438203d3e20313532363139.roa (hash: inMxOGvmxhpz+t2U+aw17poC114ZD09uaitT0n/sR38=)
4: 323430313a653365303a3930303a3a2f34342d3438203d3e20313939323033.roa (hash: 08KENw26rpbLh+PQlIfO2TkhmZXEARMLbNYiVllfdSo=)
5: 323430313a653365303a313a3a2f34382d3438203d3e20313532363139.roa (hash: Vbn0DlkAIJGfZ7fXrVFA39Q+4YeR+96LAdOV3sxu/Z8=)
6: 323430313a653365303a323a3a2f34382d3438203d3e20313532363139.roa (hash: jCyDqTwyynUAj0Cq2T29ZHOBjRuvY31Wq/Ivps7Y/mI=)
7: 4116665BE4ABEC579625EB8F93706D8A5D25D811.crl (hash: gjmIsrfkDYcLQk0O0QVBTYv6SOAg8bM+yc7fTu6BNZY=)
8: 323430313a653365303a663a3a2f34382d3438203d3e20313532363139.roa (hash: 2niirm1c1f/SapiThm2nh9vCjN+JRzuRNRhF3OjVLM4=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/VERYFAST/0/4116665BE4ABEC579625EB8F93706D8A5D25D811.crl
rsync://rpkica.twnic.tw/rpki/VERYFAST/0/4116665BE4ABEC579625EB8F93706D8A5D25D811.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4116665BE4ABEC579625EB8F93706D8A5D25D811.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 09:37:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:dc:44:c3:63:ba:a6:39:49:17:dc:56:5a:43:8e:a5:91:c6:97:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4116665BE4ABEC579625EB8F93706D8A5D25D811
Validity
Not Before: May 13 06:07:17 2026 GMT
Not After : May 14 09:37:17 2026 GMT
Subject: CN=6582D0C9CAF24D3BD47FC41042783E459FD6BA6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:2c:6c:f8:bc:16:e5:23:ee:83:20:60:ba:90:
7f:50:71:dc:7f:b9:4e:da:58:d9:ad:5b:9d:78:36:
ef:23:d1:51:34:fd:99:e6:c0:49:3b:65:26:71:e0:
90:05:59:b6:67:db:c7:d4:26:7e:9b:3d:d0:fd:88:
18:55:e0:8e:a1:da:98:d0:f4:83:6c:aa:ca:a1:71:
4a:52:95:91:ab:d3:f7:c6:a4:df:ab:c9:53:4b:1e:
db:b8:b4:02:f3:59:9e:53:10:b7:c1:eb:93:6d:c4:
c6:0d:6c:1e:60:ce:99:f9:bb:ba:14:de:c7:ce:5a:
9a:42:ae:b1:f8:c8:1d:9e:5d:fd:31:cc:a0:b1:2f:
10:a0:f9:20:3a:fe:06:1e:aa:0d:1e:90:cd:d1:b8:
d0:b5:df:1d:a4:dc:88:8c:ff:3d:3c:af:53:93:60:
61:a4:30:52:6b:99:30:9c:30:cf:fe:82:5a:0e:1f:
5f:e9:7c:0d:0a:24:39:d6:e0:45:89:c4:97:95:b2:
84:a8:ca:89:05:30:79:8f:00:0a:e9:f1:47:41:cf:
9b:ea:0a:d9:95:da:85:53:1f:b7:34:be:3c:eb:18:
59:bf:21:cd:17:75:35:5c:e6:86:0e:5a:15:3f:86:
82:6e:be:52:1d:a5:f0:9d:1e:4a:c8:6e:fc:36:a1:
d9:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:82:D0:C9:CA:F2:4D:3B:D4:7F:C4:10:42:78:3E:45:9F:D6:BA:6B
X509v3 Authority Key Identifier:
keyid:41:16:66:5B:E4:AB:EC:57:96:25:EB:8F:93:70:6D:8A:5D:25:D8:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/VERYFAST/0/4116665BE4ABEC579625EB8F93706D8A5D25D811.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4116665BE4ABEC579625EB8F93706D8A5D25D811.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VERYFAST/0/4116665BE4ABEC579625EB8F93706D8A5D25D811.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:00:32:ce:0e:b7:e8:76:b9:e1:3c:ff:e2:e3:b9:80:1a:54:
a0:de:65:d6:23:1f:33:fe:13:ec:ce:f7:63:96:6a:00:5d:1d:
91:85:fb:3f:fd:94:27:b8:e8:64:fd:05:ff:c0:c4:56:78:e0:
e8:8b:34:93:e7:ab:2f:70:34:24:e3:57:73:7c:e1:81:40:65:
7c:81:d6:60:c8:ba:be:36:26:f2:c5:70:05:6c:ab:61:da:cc:
53:35:b4:43:84:9c:b8:0a:12:53:97:5d:6c:60:66:4d:dc:1e:
0e:9a:fb:75:6b:9b:60:b1:fc:0d:3a:63:46:1c:81:f4:9b:92:
a2:7a:da:26:20:30:a1:95:88:ab:e6:43:d7:72:c8:09:6a:42:
78:e4:3e:0a:55:77:00:8a:8d:86:d2:54:50:18:8e:8f:c7:2b:
c1:38:fe:4d:4d:d2:2e:fe:24:a5:b0:e4:30:73:c5:e8:3e:df:
cd:71:d8:45:af:18:b9:bd:d0:39:80:c8:b4:b3:bc:22:de:2a:
c9:81:4b:c6:6b:1c:9a:31:e6:eb:59:55:dd:1c:3a:f3:16:04:
bf:51:bc:85:91:f3:6b:cc:52:00:0e:38:79:eb:da:12:5e:ed:
7f:2d:db:a8:eb:af:67:71:06:ad:d5:06:c3:b1:73:11:6e:a3:
56:3f:17:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:35:57 2026 by rpki-client