
$ rpki-client -vvf rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.mft
File: 33CA4B5F4295B6812127AF5761C6D7353D1F0314.mft (raw, json)
Hash identifier: J1Qv7EMNdggtz5xgjqF76+t+g1sWXNQByfTS5cDUjDc=
Subject key identifier: E9:38:B4:CC:B8:F0:4F:98:95:6F:10:09:51:1D:45:E9:84:06:B4:14
Authority key identifier: 33:CA:4B:5F:42:95:B6:81:21:27:AF:57:61:C6:D7:35:3D:1F:03:14
Certificate issuer: /CN=33CA4B5F4295B6812127AF5761C6D7353D1F0314
Certificate serial: 23B4098C18ABF0EFEFB7136DFA7A517ADF56E9
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/33CA4B5F4295B6812127AF5761C6D7353D1F0314.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.mft
Manifest number: A7
Signing time: Sat 13 Jun 2026 01:08:35 +0000
Manifest this update: Sat 13 Jun 2026 01:03:35 +0000
Manifest next update: Sun 14 Jun 2026 01:25:35 +0000
Files and hashes: 1: AS9831.roa (hash: FWqKihPbwMeaIlZ7ThBn9asgGgR941PW7x3/Ort9ea4=)
2: AS131596.roa (hash: rDMwBtuoUrFSw4uCROJpFSHT6GaQFwx2GO67xaLVrX0=)
3: AS18419.roa (hash: /dBUveC7fqyuZzMk38kcJmt+xDfVQjUD//1ye3Vr2s4=)
4: AS17651.roa (hash: saImIicoMhFhyAiu3X9cFqQpw4AOPcKEzXWMqV3wLV0=)
5: AS18046.roa (hash: VPK3WDXlrekfmZlMSkN9vlMyxOeqrzgD1jd03AJW0Aw=)
6: 33CA4B5F4295B6812127AF5761C6D7353D1F0314.crl (hash: 3aFaEEqPFtxqLiLVs9p9NzIDwfmxLHD2h5wI/Nh0jVU=)
7: AS38851.roa (hash: YHsM/Rq4XjgIDmV2IQ8QRia9ohmb8bF1nSfYLTD2C8w=)
8: AS18186.roa (hash: EV9W7YJdN6JfqPHNRPF7dE+tFsoz2qlc/xI6DKTa0Xw=)
9: AS131607.roa (hash: Ko3377c28EF6ik+MPYsJpuviH/yggUoyqs69q5XaynQ=)
10: AS142142.roa (hash: pokumrqQLiP5EznNsihZXJPNru+bvHtowcf10P8h1jM=)
11: AS17408.roa (hash: Q6z9Ubavej3zNqN4sh+89PMkaxrzUiPQg4hTXkVKGL4=)
12: AS131600.roa (hash: Hqjr0QNzCDAb58no3kyXToiKsdA+yAVu1DmUsHaYkdo=)
13: AS131627.roa (hash: +LMBK9XHf+sI1+zmkbXs5kImDXCKh9N84fFmLCKnJu0=)
14: AS138915.roa (hash: uGsNun+BxX8ZT/vgZvX6thq65lHzhDxm5P5ef2BV7oU=)
15: AS63199.roa (hash: K7p+/FAv1xE8+SKc9RiQCaNiZuYVks05xmlRCszBRLI=)
16: AS132157.roa (hash: tFFi1vSrbwtrfFt/UyfwLLV2meCBJmoSlGLhs6pZWrY=)
17: AS57976.roa (hash: OHhIkRujl/u3lh08F8Zhg5fPJywkv42cHFKXuXYHMaw=)
18: AS139750.roa (hash: GV5NMmRzHea6XnMsN0IxKMCLZBnQovc5+vQXwtuFXho=)
19: AS10133.roa (hash: 47zvRVIR2WbvgxtxFbdSuq8znJ1SAW86/RViAR4ZUbo=)
20: AS137263.roa (hash: aWDUIanQ1UTRiTJZIsgedPN0+uNT0/Vn7AOQa9to8VA=)
21: AS131273.roa (hash: 7DQdSW74ZlUm8cX5Tb5xd4EbJNzHTY4LBV+VnF78EEw=)
22: AS10085.roa (hash: iqrxvDsALP0o8cvNww3K9WEnd+8xt7iZ5T8XoOMTITQ=)
23: AS7532.roa (hash: XmGzEusu01Qc/t82T+l8B0d9yy7aFTUPd4r0xeo4QYE=)
24: AS21859.roa (hash: P/VRc3mKgDpqa0oxXnZb+Wejk0MLOhvIVYZXAyR8RBQ=)
25: AS136744.roa (hash: KmFFxCh7QltvylknLN6m9CZsIjFILUoeD8Jr/J0+GRM=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.crl
rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/33CA4B5F4295B6812127AF5761C6D7353D1F0314.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 00:20:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:b4:09:8c:18:ab:f0:ef:ef:b7:13:6d:fa:7a:51:7a:df:56:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33CA4B5F4295B6812127AF5761C6D7353D1F0314
Validity
Not Before: Jun 13 01:03:35 2026 GMT
Not After : Jun 14 01:25:35 2026 GMT
Subject: CN=E938B4CCB8F04F98956F1009511D45E98406B414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c5:4b:3a:f5:66:61:4b:02:c7:38:21:fa:97:
76:d6:6d:5c:ae:ab:5a:39:6e:4c:44:32:2a:72:97:
b7:da:94:74:b4:aa:45:6a:63:7e:0d:fe:bb:11:03:
e6:85:95:6d:73:82:76:7f:48:5a:f0:7e:06:85:f7:
ce:b5:12:44:6f:18:bc:8b:d2:ad:c7:23:ac:16:61:
88:b8:d3:e1:32:69:a4:b2:40:f2:93:39:ec:f4:fd:
82:b0:37:9e:ff:43:63:cb:1a:a6:86:86:5a:e0:cb:
26:4f:8f:08:c6:74:f1:48:27:8c:4a:75:d7:47:10:
ab:df:40:2f:6d:e4:0a:8a:c8:8d:82:69:0e:22:06:
3d:0c:ac:f4:bb:98:01:37:5a:b3:7a:01:40:85:71:
d8:92:6c:f9:43:e8:eb:c5:73:57:9d:f7:78:2e:b2:
f8:d8:f1:18:df:42:6e:51:87:1a:f7:1a:cd:ba:f5:
02:ea:f9:49:28:18:ca:ce:c9:1a:7d:49:b6:b9:81:
51:df:f2:64:16:27:3e:93:bc:89:a3:f6:2f:9b:7b:
a7:b7:3b:f6:e1:e1:3f:cf:3a:29:ec:d5:9e:4d:71:
2d:9a:30:04:90:a5:47:1b:3d:8d:6a:99:77:39:92:
e3:e5:0a:58:a7:b1:5f:44:7a:42:96:2c:0c:9a:25:
97:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:38:B4:CC:B8:F0:4F:98:95:6F:10:09:51:1D:45:E9:84:06:B4:14
X509v3 Authority Key Identifier:
keyid:33:CA:4B:5F:42:95:B6:81:21:27:AF:57:61:C6:D7:35:3D:1F:03:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/33CA4B5F4295B6812127AF5761C6D7353D1F0314.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:65:0b:b7:11:fb:1f:d9:e7:cf:3d:d7:48:f6:5f:37:66:30:
09:c2:4e:d4:58:9a:5f:02:e6:4e:ae:27:2f:13:81:f0:0d:78:
e2:71:22:ce:f0:da:08:de:6d:6a:72:ae:56:8d:0d:13:7e:ce:
e5:8b:1a:01:1b:3b:87:8e:ed:d7:b7:12:64:c0:2c:e5:d3:ac:
11:cf:45:57:b7:8d:39:65:32:c1:12:d8:f7:42:f9:95:da:55:
d6:de:51:fd:93:55:d5:c0:3a:5a:57:6b:b2:87:02:60:c8:c5:
1a:84:c2:8e:a3:b2:6e:3c:0a:03:e6:14:ea:3b:31:79:96:c5:
d2:04:35:13:bc:3a:81:9c:cf:50:c7:dc:bc:72:10:ba:2d:ed:
4a:88:65:90:78:ad:40:98:ce:ca:43:a3:71:6e:9a:39:1c:24:
a5:d4:6f:c1:63:ee:f8:e6:a6:7c:70:90:e6:0d:86:b3:55:a7:
d0:91:6e:fe:9e:af:03:84:20:85:cc:e6:a8:61:4c:30:ee:9c:
9a:ce:68:25:77:be:8d:1e:69:6d:aa:b1:2f:81:36:29:88:54:
c5:81:2d:4b:04:b4:e4:b7:dd:05:a2:32:2a:da:45:20:36:d8:
c0:ef:28:6b:c5:d5:49:0b:e7:51:02:a2:80:b4:b2:08:42:62:
fe:18:eb:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:55:40 2026 by rpki-client