
$ rpki-client -vvvf rpkica.twnic.tw/rpki/CYCCATV/0/5C5E022D4CA559A4C669A6F7364972219C8E4A09.mft
File: 5C5E022D4CA559A4C669A6F7364972219C8E4A09.mft (raw, json)
Hash identifier: zOWi9iwOuvZbn0zVCMF2z7a4YXP1ZqI7qN9T1+0JNEM=
Subject key identifier: 05:40:3A:B4:E8:97:B5:6F:D4:AC:9E:2C:55:8A:6A:0A:8A:BF:CB:08
Authority key identifier: 5C:5E:02:2D:4C:A5:59:A4:C6:69:A6:F7:36:49:72:21:9C:8E:4A:09
Certificate issuer: /CN=5C5E022D4CA559A4C669A6F7364972219C8E4A09
Certificate serial: 33B8D51BE9B93B36881F1192D98B7BDBE4DF02D4
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5C5E022D4CA559A4C669A6F7364972219C8E4A09.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CYCCATV/0/5C5E022D4CA559A4C669A6F7364972219C8E4A09.mft
Manifest number: BA
Signing time: Sun 20 Sep 2026 21:29:26 +0000
Manifest this update: Sun 20 Sep 2026 21:24:26 +0000
Manifest next update: Mon 21 Sep 2026 22:50:26 +0000
Files and hashes: 1: 3130332e3133302e34302e302f32322d3234203d3e203138303436.roa (hash: UwalaM/yumP8VAzCH2kwI0YrOybKzt0D6yFVVeph3mc=)
2: 3130332e3133302e33322e302f32322d3234203d3e203138303436.roa (hash: fhEv062rGvRd2vywAS0IkZHiQ2iexOiI1jiVYDqh+Wk=)
3: 3130332e3133302e33362e302f32322d3234203d3e203138303436.roa (hash: EtFLge6U9GGwCaGF7GaIH4AGugeGlPuKD4XYVJqT0dA=)
4: 5C5E022D4CA559A4C669A6F7364972219C8E4A09.crl (hash: bIzNIL3UdssF0Qhm+d4beg1JZFeZ1L/T/0T/SB35lzM=)
5: 36312e35382e31362e302f32302d3234203d3e2034373830.roa (hash: ulLAO9jVmjVPeBWWCp8ASiEFf0HUdA7ADUlfbZ0y+H8=)
6: 3130332e3133302e32302e302f32322d3234203d3e203138303436.roa (hash: fLV1xsYNOJbdFp05Q7bjpEBZ/bWgjA4jSH8639TK4es=)
7: 36312e35372e3230382e302f32302d3234203d3e2034373830.roa (hash: 0vW2aeNMFlQCCdUqFw+kop6U+fnVyKA1KhUN54tofaU=)
8: 36312e35382e34382e302f32302d3234203d3e2034373830.roa (hash: PYv/nS8+yuI4Ayp1EGb1dsCdX5gLwaj2cdvLRAJdezk=)
9: 36312e36302e3234302e302f32302d3234203d3e2039393234.roa (hash: 7e6R//oqPKk3BcfQGoQ6C/oKPq6Dnu9fBoQljHau0BE=)
10: 3138302e39322e302e302f32302d3234203d3e2039393234.roa (hash: AtNEQnjXFTrYqDX0PCujhnRaUyyWStIdkrvnlxKt7qs=)
11: 3130332e3133302e34342e302f32322d3234203d3e203138303436.roa (hash: PuLpSdQZHzCEFGC7TmIZ9IbqnyJX6A4hr8rSx+omfPM=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/CYCCATV/0/5C5E022D4CA559A4C669A6F7364972219C8E4A09.crl
rsync://rpkica.twnic.tw/rpki/CYCCATV/0/5C5E022D4CA559A4C669A6F7364972219C8E4A09.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5C5E022D4CA559A4C669A6F7364972219C8E4A09.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 21 Sep 2026 22:50:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:b8:d5:1b:e9:b9:3b:36:88:1f:11:92:d9:8b:7b:db:e4:df:02:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5C5E022D4CA559A4C669A6F7364972219C8E4A09
Validity
Not Before: Sep 20 21:24:26 2026 GMT
Not After : Sep 21 22:50:26 2026 GMT
Subject: CN=05403AB4E897B56FD4AC9E2C558A6A0A8ABFCB08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:fd:85:71:ae:e8:2a:3b:85:aa:03:b1:58:09:
46:a2:87:f1:31:b4:ab:76:dc:e7:32:fc:6f:cd:c9:
c0:8b:d3:08:0f:08:df:53:dc:8e:87:9c:f9:71:cc:
1d:ac:3f:7a:da:4d:ce:30:4e:be:d5:86:1a:0a:98:
64:80:8e:59:62:cf:38:2d:55:c1:85:8b:13:17:2c:
ee:3a:d6:95:bc:96:c4:ee:7b:0e:fb:1e:c7:1a:d4:
26:9f:1b:77:88:39:6c:d5:98:de:e2:80:f1:40:25:
71:11:13:fd:d9:1e:73:3c:77:8a:a2:4f:2e:ad:43:
7f:f7:70:ed:17:cc:6b:58:44:64:6d:37:dc:c0:e1:
23:46:cf:7c:b4:15:dc:14:eb:93:24:10:4e:64:ec:
55:e9:4b:b5:03:4b:8b:ec:7a:51:00:c4:5e:43:5d:
44:51:07:b8:bf:ae:e1:a3:0f:c2:06:94:3e:ac:f3:
7a:f1:8f:00:99:cf:fb:e9:d3:aa:e6:ca:fc:d6:42:
e5:41:55:50:ed:02:ce:98:ad:53:41:27:35:68:97:
64:e1:79:4d:4a:1e:92:79:83:8b:1e:f5:f2:f2:ea:
ec:1e:f0:01:0a:ae:19:c8:94:c2:8d:c9:90:c2:e4:
24:af:fb:11:3a:d8:33:d6:9a:f3:4c:10:46:f0:0c:
47:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:40:3A:B4:E8:97:B5:6F:D4:AC:9E:2C:55:8A:6A:0A:8A:BF:CB:08
X509v3 Authority Key Identifier:
keyid:5C:5E:02:2D:4C:A5:59:A4:C6:69:A6:F7:36:49:72:21:9C:8E:4A:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CYCCATV/0/5C5E022D4CA559A4C669A6F7364972219C8E4A09.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5C5E022D4CA559A4C669A6F7364972219C8E4A09.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CYCCATV/0/5C5E022D4CA559A4C669A6F7364972219C8E4A09.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:a3:4d:03:16:90:da:82:79:08:d8:44:e4:5b:51:f4:19:14:
9b:43:b2:84:01:59:5b:36:08:b9:11:66:c2:6e:b2:bf:cc:f4:
de:2c:35:cc:91:d3:62:78:0f:f2:24:31:0c:ea:1f:6b:cf:13:
69:41:86:74:33:97:90:57:ce:c2:7c:3c:a6:90:83:9b:91:5e:
18:09:08:e5:92:2c:cd:7d:a2:86:ec:82:65:0d:9a:59:77:e2:
27:b6:2e:11:1c:f5:97:32:f3:ef:52:eb:9f:7e:0d:ac:19:01:
72:99:9a:d4:1b:8c:48:f2:1c:26:45:98:d5:fa:2a:0c:c4:88:
87:b4:fa:76:d9:1d:17:8a:c3:3a:c5:7d:96:31:26:53:b2:4b:
59:dd:36:f0:db:d7:90:35:ee:5a:b5:f2:50:ed:ad:69:62:6b:
00:71:2e:9f:e2:47:ba:77:3e:ac:2f:a8:07:56:a6:81:8a:f1:
66:6b:8e:1a:38:67:c5:e9:6c:f4:0a:ec:13:9b:d7:4b:80:7c:
a3:2c:33:e9:1d:51:2e:a3:c7:8a:44:87:20:4b:b2:0e:a8:d1:
01:48:71:36:04:17:74:2f:aa:f2:c1:6d:89:b5:03:e9:47:25:
96:f1:45:1c:26:15:d0:24:60:d8:a4:5a:fd:88:10:be:d1:bf:
6c:8b:bd:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:21:08 2026 by rpki-client