
$ rpki-client -vvf rpkica.twnic.tw/rpki/WANGTIAN/0/137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.mft
File: 137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.mft (raw, json)
Hash identifier: 59tn4Ed7rCgHkoIegz0C2KgTxNY4oBgM7hb0L3JyA0s=
Subject key identifier: 20:EC:B7:A0:68:01:27:A9:C7:D9:11:E1:1A:81:6D:C5:DD:A2:AE:94
Authority key identifier: 13:7D:CF:3F:E1:8E:3C:9D:B3:3A:C6:C5:0E:8B:E3:57:D0:72:99:91
Certificate issuer: /CN=137DCF3FE18E3C9DB33AC6C50E8BE357D0729991
Certificate serial: 5389A67113A930F88ADE6790AA2566B207F4D868
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/WANGTIAN/0/137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.mft
Manifest number: 09
Signing time: Fri 15 May 2026 12:02:01 +0000
Manifest this update: Fri 15 May 2026 11:57:01 +0000
Manifest next update: Sat 16 May 2026 12:51:01 +0000
Files and hashes: 1: 3136312e3234382e3134342e302f32332d3234203d3e20313334383233.roa (hash: yCZqZR2AGCBzXj4ey9qRZrUJv2f1vti5atnbmciNS40=)
2: 3136312e3234382e3134342e302f32342d3234203d3e20313438393936.roa (hash: 0xOt/alcpAMDww+3hdnLaeae14FERuOIKEuHy9m9JLc=)
3: 137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.crl (hash: gb+loPtd3RjieItEw68inxESajWgzWKpqlmEuhFHw1g=)
4: 3136312e3234382e3134342e302f32332d3234203d3e203338303432.roa (hash: qRkyiJdn63qokFKKv0HxSqaEykqKM4bsKkcH46FpFZc=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/WANGTIAN/0/137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.crl
rsync://rpkica.twnic.tw/rpki/WANGTIAN/0/137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 16 May 2026 12:51:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:89:a6:71:13:a9:30:f8:8a:de:67:90:aa:25:66:b2:07:f4:d8:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137DCF3FE18E3C9DB33AC6C50E8BE357D0729991
Validity
Not Before: May 15 11:57:01 2026 GMT
Not After : May 16 12:51:01 2026 GMT
Subject: CN=20ECB7A0680127A9C7D911E11A816DC5DDA2AE94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:66:2e:82:d5:88:fc:72:2f:a9:4f:e1:0a:3c:
31:fb:a6:62:0d:1b:aa:7c:bd:3c:7f:50:ae:aa:28:
ee:75:fa:5d:3a:7c:26:81:d3:23:cf:0d:d2:aa:28:
b3:d3:5a:b4:4c:4e:60:8b:75:14:6d:d8:80:63:5d:
f9:9f:75:aa:82:52:fe:d5:22:a2:d8:20:05:a3:a5:
92:5f:4a:b2:cd:b9:41:8a:d9:85:12:b4:37:8e:53:
2d:de:49:e2:36:1d:fe:cd:a2:9d:87:3d:33:a0:c1:
72:21:0f:43:69:43:9c:6c:d5:c6:11:35:2f:9d:45:
dd:df:7e:e0:f7:43:9a:0a:52:37:50:e0:f1:1b:31:
03:74:52:df:a8:b9:84:28:c6:1d:bc:25:b5:f4:cb:
1b:9d:c1:f1:29:0e:bb:4a:c8:76:18:bc:65:e3:bf:
fc:86:45:05:2b:9a:a8:ad:2c:3e:65:12:16:5b:16:
01:7e:d8:e6:73:0e:1f:15:8d:b0:27:df:91:4a:ae:
1a:f5:34:f1:79:a1:4c:2e:93:c1:a4:12:88:4f:da:
7b:10:ca:50:e1:d9:94:44:12:bb:3e:50:8d:64:e9:
b1:b8:77:d6:6f:37:63:3a:69:dd:bb:80:9c:8d:a9:
c2:2c:cc:de:60:e4:ab:8d:68:0e:ed:f6:9f:8d:e3:
54:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:EC:B7:A0:68:01:27:A9:C7:D9:11:E1:1A:81:6D:C5:DD:A2:AE:94
X509v3 Authority Key Identifier:
keyid:13:7D:CF:3F:E1:8E:3C:9D:B3:3A:C6:C5:0E:8B:E3:57:D0:72:99:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/WANGTIAN/0/137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/WANGTIAN/0/137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:3c:97:ee:61:bc:eb:49:e7:45:e1:91:e5:f2:84:b7:4b:e0:
f2:71:bc:eb:30:d3:c6:70:2d:73:7e:3c:23:ad:f2:2b:87:a9:
10:3b:d7:99:ec:27:9a:5e:7d:36:ee:16:4f:99:c4:8e:db:6c:
5d:3f:cc:b8:8e:70:43:e8:97:32:17:af:b6:6b:02:88:98:a6:
ab:c4:c4:ac:a7:54:f1:f6:46:26:69:56:9f:db:c9:c2:20:a5:
f1:ea:6c:8f:b2:7d:b3:4f:04:c6:ce:19:24:09:f0:77:4c:d6:
fb:b8:0a:88:38:ee:3e:ce:9b:40:6e:7f:84:e0:14:45:fb:47:
d9:06:fa:55:31:cf:05:af:48:74:9c:0c:ec:be:65:20:87:b7:
4e:b2:aa:7f:2a:96:2e:f9:39:01:ad:f9:5c:ae:19:68:8b:ee:
55:50:d8:16:fa:63:a3:dd:e7:e4:3c:e0:ef:f1:11:1e:18:a0:
28:48:34:d0:97:c8:d4:7d:e0:ba:46:3a:b8:ab:df:52:45:74:
b2:14:d1:4a:65:8c:0d:a7:99:ae:ef:47:9a:38:07:79:14:55:
64:e8:e7:63:97:1c:30:77:4f:bd:d6:ef:ef:25:6d:f0:4c:d7:
e9:99:36:2b:8f:2c:19:05:94:f6:79:86:df:f7:a4:92:fb:a9:
81:5e:30:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 04:47:39 2026 by rpki-client