
$ rpki-client -vvvf rpkica.twnic.tw/rpki/WANGTIAN/0/137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.mft
File: 137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.mft (raw, json)
Hash identifier: mD/7MvkODIERaAkFPjkwJ9QonRFktI+WvX23jSbNVXY=
Subject key identifier: 51:FD:32:77:E6:13:A8:AB:9C:C4:31:60:A5:84:9D:40:EF:B6:5D:D0
Authority key identifier: 13:7D:CF:3F:E1:8E:3C:9D:B3:3A:C6:C5:0E:8B:E3:57:D0:72:99:91
Certificate issuer: /CN=137DCF3FE18E3C9DB33AC6C50E8BE357D0729991
Certificate serial: 579884145F78F3916A42D9081D8F50BA895E2C8B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/WANGTIAN/0/137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.mft
Manifest number: C9
Signing time: Tue 06 Oct 2026 22:59:40 +0000
Manifest this update: Tue 06 Oct 2026 22:54:40 +0000
Manifest next update: Thu 08 Oct 2026 00:19:40 +0000
Files and hashes: 1: 3136312e3234382e3134342e302f32342d3234203d3e20313438393936.roa (hash: 0xOt/alcpAMDww+3hdnLaeae14FERuOIKEuHy9m9JLc=)
2: 3136312e3234382e3134342e302f32332d3234203d3e203338303432.roa (hash: qRkyiJdn63qokFKKv0HxSqaEykqKM4bsKkcH46FpFZc=)
3: 137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.crl (hash: ckz9gzpJPd1FA3EM2TkyVqEDTGbr/JoerSvqnyDYxQM=)
4: 3136312e3234382e3134342e302f32332d3234203d3e20313334383233.roa (hash: yCZqZR2AGCBzXj4ey9qRZrUJv2f1vti5atnbmciNS40=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/WANGTIAN/0/137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.crl
rsync://rpkica.twnic.tw/rpki/WANGTIAN/0/137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 07 Oct 2026 20:49:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:98:84:14:5f:78:f3:91:6a:42:d9:08:1d:8f:50:ba:89:5e:2c:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137DCF3FE18E3C9DB33AC6C50E8BE357D0729991
Validity
Not Before: Oct 6 22:54:40 2026 GMT
Not After : Oct 8 00:19:40 2026 GMT
Subject: CN=51FD3277E613A8AB9CC43160A5849D40EFB65DD0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d5:07:53:56:6f:76:4d:ae:6b:e9:03:89:cb:
07:88:07:7a:51:1a:7b:c8:0f:f7:70:30:20:48:8f:
8d:ac:a1:8e:b2:9f:84:63:3c:d8:58:6d:d6:2f:c7:
4a:12:71:a2:25:16:0e:84:e6:76:9b:27:19:2a:12:
77:90:d4:6b:df:56:80:0b:60:5d:d9:e0:ad:3b:96:
fe:b7:e6:7f:1d:7c:8d:f3:b0:dc:66:e3:1e:dd:45:
71:1d:ea:bd:e0:40:f3:27:4c:a9:0b:28:43:98:3f:
2a:da:07:e9:57:31:61:20:ac:33:65:1d:b2:fd:35:
86:03:97:4f:08:80:e9:a7:8f:e7:98:13:ee:65:a8:
ba:da:63:63:19:e4:84:ae:8e:35:7e:89:ca:05:95:
e1:95:c2:04:e6:54:d5:bc:90:fa:00:b6:fd:00:f5:
84:cf:99:ec:7a:b0:99:1d:f8:bb:fd:a5:2c:fd:eb:
03:04:e3:1a:0c:02:42:95:ab:07:d4:d9:f6:27:8e:
99:6d:c9:2c:bf:9f:5a:a9:92:22:2e:16:ed:db:29:
ba:5e:86:85:c9:6d:b9:a3:26:7c:ca:6f:86:39:82:
8b:50:2b:49:8d:80:13:82:2a:84:36:5a:56:af:fb:
33:c9:6d:99:3c:cb:0e:1a:7e:31:0f:65:e1:08:25:
1c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:FD:32:77:E6:13:A8:AB:9C:C4:31:60:A5:84:9D:40:EF:B6:5D:D0
X509v3 Authority Key Identifier:
keyid:13:7D:CF:3F:E1:8E:3C:9D:B3:3A:C6:C5:0E:8B:E3:57:D0:72:99:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/WANGTIAN/0/137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/WANGTIAN/0/137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:5b:2e:42:30:fc:9d:d1:09:14:ea:07:d0:59:49:a9:e4:29:
3a:b7:85:db:59:9d:15:48:53:57:58:2a:35:1f:f9:2d:d5:f2:
b1:d3:b6:2f:40:ca:9a:8a:38:38:72:46:c8:59:7f:b5:c5:1a:
d3:b9:3d:4d:7f:7a:91:ec:0a:fb:55:b1:de:80:94:1b:62:a6:
ec:71:b3:99:64:b0:eb:13:7e:20:d6:7f:f8:16:f2:9a:52:ab:
64:c6:49:31:7b:60:fe:72:62:7a:2a:68:72:4c:a8:fb:e8:25:
7e:ff:64:41:22:0d:24:22:4d:22:33:4a:2a:6c:ec:68:b7:3b:
b1:b1:78:82:0a:00:bc:b6:6f:bc:d3:e2:63:d3:f8:7d:06:68:
bf:ec:36:99:f5:65:7b:93:be:40:74:d6:54:dd:8d:92:0e:4f:
08:e2:4a:57:f0:89:d8:1d:38:67:51:2a:a4:3c:5b:b4:ff:b9:
02:82:20:09:54:5c:8c:1e:94:44:5b:63:9e:c9:0f:44:25:fc:
79:ba:4f:fc:04:bf:c6:01:78:36:1a:79:e1:32:33:58:e3:b8:
70:3a:91:5b:36:5a:b1:e2:a2:0d:9a:0e:a1:94:55:a8:3f:8f:
9f:d9:45:5d:5d:67:1b:e9:39:cf:a8:85:6e:7c:49:ed:c2:56:
38:31:9a:39
-----BEGIN CERTIFICATE-----
MIIE6DCCA9CgAwIBAgIUV5iEFF9485FqQtkIHY9QuoleLIswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTM3RENGM0ZFMThFM0M5REIzM0FDNkM1MEU4QkUzNTdE
MDcyOTk5MTAeFw0yNjEwMDYyMjU0NDBaFw0yNjEwMDgwMDE5NDBaMDMxMTAvBgNV
BAMTKDUxRkQzMjc3RTYxM0E4QUI5Q0M0MzE2MEE1ODQ5RDQwRUZCNjVERDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ1QdTVm92Ta5r6QOJyweIB3pR
GnvID/dwMCBIj42soY6yn4RjPNhYbdYvx0oScaIlFg6E5nabJxkqEneQ1GvfVoAL
YF3Z4K07lv635n8dfI3zsNxm4x7dRXEd6r3gQPMnTKkLKEOYPyraB+lXMWEgrDNl
HbL9NYYDl08IgOmnj+eYE+5lqLraY2MZ5ISujjV+icoFleGVwgTmVNW8kPoAtv0A
9YTPmex6sJkd+Lv9pSz96wME4xoMAkKVqwfU2fYnjpltySy/n1qpkiIuFu3bKbpe
hoXJbbmjJnzKb4Y5gotQK0mNgBOCKoQ2Wlav+zPJbZk8yw4afjEPZeEIJRzNAgMB
AAGjggHyMIIB7jAdBgNVHQ4EFgQUUf0yd+YTqKucxDFgpYSdQO+2XdAwHwYDVR0j
BBgwFoAUE33PP+GOPJ2zOsbFDovjV9BymZEwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud
HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvV0FOR1RJ
QU4vMC8xMzdEQ0YzRkUxOEUzQzlEQjMzQUM2QzUwRThCRTM1N0QwNzI5OTkxLmNy
bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3
bmljLnR3L3Jwa2kvVFdOSUNDQS8wLzEzN0RDRjNGRTE4RTNDOURCMzNBQzZDNTBF
OEJFMzU3RDA3Mjk5OTEuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU
cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9XQU5HVElBTi8wLzEzN0RDRjNG
RTE4RTNDOURCMzNBQzZDNTBFOEJFMzU3RDA3Mjk5OTEubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAjWy5C
MPyd0QkU6gfQWUmp5Ck6t4XbWZ0VSFNXWCo1H/kt1fKx07YvQMqaijg4ckbIWX+1
xRrTuT1Nf3qR7Ar7VbHegJQbYqbscbOZZLDrE34g1n/4FvKaUqtkxkkxe2D+cmJ6
KmhyTKj76CV+/2RBIg0kIk0iM0oqbOxotzuxsXiCCgC8tm+80+Jj0/h9Bmi/7DaZ
9WV7k75AdNZU3Y2SDk8I4kpX8InYHThnUSqkPFu0/7kCgiAJVFyMHpREW2OeyQ9E
Jfx5uk/8BL/GAXg2GnnhMjNY47hwOpFbNlqx4qINmg6hlFWoP4+f2UVdXWcb6TnP
qIVufEntwlY4MZo5
-----END CERTIFICATE-----
Generated at Wed Oct 7 07:46:59 2026 by rpki-client