
$ rpki-client -vvf rpkica.twnic.tw/rpki/VERYFAST/0/4116665BE4ABEC579625EB8F93706D8A5D25D811.mft
File: 4116665BE4ABEC579625EB8F93706D8A5D25D811.mft (raw, json)
Hash identifier: A9tvTaoX5vN7RExc30QSJYH9ip+cbxLZ7oOW+5E8pj4=
Subject key identifier: FE:FF:6B:F4:52:84:B2:D2:B9:68:24:FC:76:37:34:0A:39:32:C5:D7
Authority key identifier: 41:16:66:5B:E4:AB:EC:57:96:25:EB:8F:93:70:6D:8A:5D:25:D8:11
Certificate issuer: /CN=4116665BE4ABEC579625EB8F93706D8A5D25D811
Certificate serial: 18E46F0E5F474960847683CA401D1EBD14BFF3F9
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4116665BE4ABEC579625EB8F93706D8A5D25D811.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/VERYFAST/0/4116665BE4ABEC579625EB8F93706D8A5D25D811.mft
Manifest number: 4A
Signing time: Tue 30 Jun 2026 04:18:04 +0000
Manifest this update: Tue 30 Jun 2026 04:13:04 +0000
Manifest next update: Wed 01 Jul 2026 05:56:04 +0000
Files and hashes: 1: 323430313a653365303a323a3a2f34382d3438203d3e20313532363139.roa (hash: jCyDqTwyynUAj0Cq2T29ZHOBjRuvY31Wq/Ivps7Y/mI=)
2: 323430313a653365303a3930303a3a2f34342d3438203d3e20313939323033.roa (hash: 08KENw26rpbLh+PQlIfO2TkhmZXEARMLbNYiVllfdSo=)
3: 323430313a653365303a313a3a2f34382d3438203d3e20313532363139.roa (hash: Vbn0DlkAIJGfZ7fXrVFA39Q+4YeR+96LAdOV3sxu/Z8=)
4: 323430313a653365303a663a3a2f34382d3438203d3e20313532363139.roa (hash: 2niirm1c1f/SapiThm2nh9vCjN+JRzuRNRhF3OjVLM4=)
5: 4116665BE4ABEC579625EB8F93706D8A5D25D811.crl (hash: Q1m8sMNxBxsMaTu9OxYfb8ypaBizTmTO5QxbpM4Yfgg=)
6: 323430313a653365303a3330303a3a2f34342d3438203d3e20313938393534.roa (hash: +MPj1+FqsGNNfrSwLB7ceVoBXHWs1y8m+Mu4VImaW80=)
7: 323430313a653365303a3a2f34382d3438203d3e20313532363139.roa (hash: EKluDgUWuNPYLOL9EW7U6TRfKnY+emx5Mxp9x96Yono=)
8: 323430313a653365303a35333a3a2f34382d3438203d3e20313532363139.roa (hash: inMxOGvmxhpz+t2U+aw17poC114ZD09uaitT0n/sR38=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/VERYFAST/0/4116665BE4ABEC579625EB8F93706D8A5D25D811.crl
rsync://rpkica.twnic.tw/rpki/VERYFAST/0/4116665BE4ABEC579625EB8F93706D8A5D25D811.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4116665BE4ABEC579625EB8F93706D8A5D25D811.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Jul 2026 05:56:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:e4:6f:0e:5f:47:49:60:84:76:83:ca:40:1d:1e:bd:14:bf:f3:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4116665BE4ABEC579625EB8F93706D8A5D25D811
Validity
Not Before: Jun 30 04:13:04 2026 GMT
Not After : Jul 1 05:56:04 2026 GMT
Subject: CN=FEFF6BF45284B2D2B96824FC7637340A3932C5D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:af:0a:e6:ae:ea:9b:3b:5f:aa:f2:5e:46:ae:
c8:0e:72:39:35:12:e9:43:55:17:5f:2b:b4:d7:4a:
5b:57:0a:fc:62:69:a1:72:eb:7e:55:ca:0a:ba:2f:
d7:42:ff:60:0e:e6:ac:c6:39:c1:a1:37:d3:59:36:
28:6d:dd:f5:30:fd:11:cc:68:e0:e1:0f:6d:50:5b:
ef:84:3b:4b:d2:ea:3e:a3:28:00:71:e6:69:48:00:
0f:87:f7:c5:35:2f:6a:3d:dd:f7:c3:ea:b9:88:5b:
b9:9b:ed:d6:b6:37:ea:0f:ce:18:7d:00:d1:8e:19:
ab:aa:1c:25:c0:b4:e1:49:0f:5b:10:76:7f:b0:86:
2f:50:bd:db:7c:15:0a:87:7c:10:a5:4e:22:6e:0d:
4f:a1:92:eb:8c:64:89:23:e8:9a:6f:5b:4f:e6:db:
9d:38:03:43:7e:5a:b4:0f:84:9f:df:fa:1e:0a:7f:
b2:35:36:e3:a1:fe:dc:7e:7b:6d:c5:30:d4:da:da:
18:d7:cb:cb:0f:10:9e:14:df:86:bf:2f:43:4d:cb:
da:43:1a:00:a6:17:90:b8:c7:e5:2e:07:89:bc:00:
5d:7d:bf:22:14:13:88:b6:9b:ac:fe:82:02:02:bd:
a3:6e:81:89:ff:21:90:aa:bc:b0:16:76:1e:72:18:
c4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:FF:6B:F4:52:84:B2:D2:B9:68:24:FC:76:37:34:0A:39:32:C5:D7
X509v3 Authority Key Identifier:
keyid:41:16:66:5B:E4:AB:EC:57:96:25:EB:8F:93:70:6D:8A:5D:25:D8:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/VERYFAST/0/4116665BE4ABEC579625EB8F93706D8A5D25D811.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4116665BE4ABEC579625EB8F93706D8A5D25D811.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VERYFAST/0/4116665BE4ABEC579625EB8F93706D8A5D25D811.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:bb:bb:3e:bb:e8:7b:5a:13:49:33:14:75:92:62:84:b1:6d:
d2:e2:80:9c:39:6b:67:ca:8a:48:64:98:1d:af:58:31:37:1f:
07:4a:72:c3:5c:21:6c:e9:1f:d7:95:22:d2:40:f6:a7:eb:c4:
55:27:cb:29:3a:d7:bc:57:d5:b2:fc:6f:24:29:e7:fc:49:e0:
3b:28:9a:c4:88:7f:b9:fb:15:89:7c:7d:04:b1:f1:87:91:86:
24:39:a4:b2:fa:cb:9b:0f:40:e1:47:c3:69:8e:1e:5f:fe:cb:
2e:97:3e:01:82:3a:35:b0:1b:57:1d:17:13:bc:da:41:e2:98:
e1:6a:ab:1a:5e:eb:27:b7:8d:eb:04:f0:ab:aa:bc:1a:c3:97:
cb:8b:f4:65:20:7b:6e:4d:c4:f9:fe:d1:7b:dd:4e:59:b1:5e:
80:83:87:3c:49:4f:08:87:6f:12:0c:14:8b:a1:36:8f:53:c7:
d4:b3:f8:de:af:98:06:fc:54:96:c1:15:80:d5:28:45:ae:54:
fa:9b:66:5e:06:7f:4f:12:e3:96:cd:8f:bf:3a:0d:03:e4:f6:
f8:d6:7e:ce:23:bf:92:f0:7c:7b:bb:ab:49:d5:6f:c8:b1:1a:
78:49:2f:d6:7e:21:b1:f0:06:89:9d:2f:ee:fe:6f:a9:bf:db:
de:77:74:e9
-----BEGIN CERTIFICATE-----
MIIE6DCCA9CgAwIBAgIUGORvDl9HSWCEdoPKQB0evRS/8/kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDExNjY2NUJFNEFCRUM1Nzk2MjVFQjhGOTM3MDZEOEE1
RDI1RDgxMTAeFw0yNjA2MzAwNDEzMDRaFw0yNjA3MDEwNTU2MDRaMDMxMTAvBgNV
BAMTKEZFRkY2QkY0NTI4NEIyRDJCOTY4MjRGQzc2MzczNDBBMzkzMkM1RDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVrwrmruqbO1+q8l5GrsgOcjk1
EulDVRdfK7TXSltXCvxiaaFy635Vygq6L9dC/2AO5qzGOcGhN9NZNiht3fUw/RHM
aODhD21QW++EO0vS6j6jKABx5mlIAA+H98U1L2o93ffD6rmIW7mb7da2N+oPzhh9
ANGOGauqHCXAtOFJD1sQdn+whi9Qvdt8FQqHfBClTiJuDU+hkuuMZIkj6JpvW0/m
2504A0N+WrQPhJ/f+h4Kf7I1NuOh/tx+e23FMNTa2hjXy8sPEJ4U34a/L0NNy9pD
GgCmF5C4x+UuB4m8AF19vyIUE4i2m6z+ggICvaNugYn/IZCqvLAWdh5yGMRdAgMB
AAGjggHyMIIB7jAdBgNVHQ4EFgQU/v9r9FKEstK5aCT8djc0CjkyxdcwHwYDVR0j
BBgwFoAUQRZmW+Sr7FeWJeuPk3Btil0l2BEwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud
HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVkVSWUZB
U1QvMC80MTE2NjY1QkU0QUJFQzU3OTYyNUVCOEY5MzcwNkQ4QTVEMjVEODExLmNy
bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3
bmljLnR3L3Jwa2kvVFdOSUNDQS8xLzQxMTY2NjVCRTRBQkVDNTc5NjI1RUI4Rjkz
NzA2RDhBNUQyNUQ4MTEuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU
cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9WRVJZRkFTVC8wLzQxMTY2NjVC
RTRBQkVDNTc5NjI1RUI4RjkzNzA2RDhBNUQyNUQ4MTEubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBwu7s+
u+h7WhNJMxR1kmKEsW3S4oCcOWtnyopIZJgdr1gxNx8HSnLDXCFs6R/XlSLSQPan
68RVJ8spOte8V9Wy/G8kKef8SeA7KJrEiH+5+xWJfH0EsfGHkYYkOaSy+subD0Dh
R8Npjh5f/ssulz4Bgjo1sBtXHRcTvNpB4pjhaqsaXusnt43rBPCrqrwaw5fLi/Rl
IHtuTcT5/tF73U5ZsV6Ag4c8SU8Ih28SDBSLoTaPU8fUs/jer5gG/FSWwRWA1ShF
rlT6m2ZeBn9PEuOWzY+/Og0D5Pb41n7OI7+S8Hx7u6tJ1W/IsRp4SS/WfiGx8AaJ
nS/u/m+pv9ved3Tp
-----END CERTIFICATE-----
Generated at Tue Jun 30 19:08:57 2026 by rpki-client