
$ rpki-client -vvf rpkica.twnic.tw/rpki/DCC1223342/0/67919719E801E94CCA89D7569D37B67D252A261F.mft
File: 67919719E801E94CCA89D7569D37B67D252A261F.mft (raw, json)
Hash identifier: OCB672S5KuJgj8Mc8Qd6RAR1Ibf/VSX87XCKcxp+NJ4=
Subject key identifier: 49:36:59:CF:F9:15:86:C8:9B:33:F8:1E:F5:8A:E3:60:EE:E2:59:DE
Authority key identifier: 67:91:97:19:E8:01:E9:4C:CA:89:D7:56:9D:37:B6:7D:25:2A:26:1F
Certificate issuer: /CN=67919719E801E94CCA89D7569D37B67D252A261F
Certificate serial: 778E6C2396FEEDF81AAB6698EC0C710CC1B6EB70
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/67919719E801E94CCA89D7569D37B67D252A261F.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/DCC1223342/0/67919719E801E94CCA89D7569D37B67D252A261F.mft
Manifest number: 2E
Signing time: Fri 12 Jun 2026 17:02:22 +0000
Manifest this update: Fri 12 Jun 2026 16:57:22 +0000
Manifest next update: Sat 13 Jun 2026 20:42:22 +0000
Files and hashes: 1: 67919719E801E94CCA89D7569D37B67D252A261F.crl (hash: u5CHBw4N8svNMprMyojc8RzidVhd0xSIFXeprr5F4Gk=)
2: 323430303a353065303a3a2f33322d3634203d3e203633383933.roa (hash: W+Ffc6VUEComE7wKXCSRqfcLvgJdlvoiPW+6XMV3r6s=)
3: 3130332e3138302e31382e302f32332d3234203d3e203633383933.roa (hash: YHu6xUiyV20ecZfxOWBbvKCz1hQvQ5fZsJlGMsXnUjk=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/DCC1223342/0/67919719E801E94CCA89D7569D37B67D252A261F.crl
rsync://rpkica.twnic.tw/rpki/DCC1223342/0/67919719E801E94CCA89D7569D37B67D252A261F.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/67919719E801E94CCA89D7569D37B67D252A261F.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 20:42:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:8e:6c:23:96:fe:ed:f8:1a:ab:66:98:ec:0c:71:0c:c1:b6:eb:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67919719E801E94CCA89D7569D37B67D252A261F
Validity
Not Before: Jun 12 16:57:22 2026 GMT
Not After : Jun 13 20:42:22 2026 GMT
Subject: CN=493659CFF91586C89B33F81EF58AE360EEE259DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f0:43:8c:a2:ca:26:56:8b:6b:cc:28:41:19:
35:0b:f4:2b:2d:4f:d9:a9:97:7c:fc:90:c7:1a:c3:
c4:63:e0:33:a2:67:9e:f5:00:a9:0c:73:76:08:78:
1d:f3:ef:f3:ec:f7:6f:fb:76:f1:ea:a5:6e:8a:bb:
ea:5a:6e:4e:f7:f3:dd:56:fb:21:31:fb:bb:7c:d7:
e0:4c:7a:f7:3f:d9:35:75:f2:5c:90:ee:78:60:35:
e4:66:a9:3c:0c:79:ca:a7:49:b8:3d:57:3c:20:8b:
49:5a:e2:a0:40:04:97:f5:41:d7:e4:84:e4:ed:ee:
e5:47:a2:e9:9f:8a:bd:55:a2:67:01:b8:cd:b7:b8:
5f:6e:82:ee:02:34:70:66:32:7f:59:5e:13:13:de:
08:cd:f2:f8:a2:9f:7d:18:53:00:9f:f8:f8:05:94:
0c:35:00:22:d7:d0:a3:8c:dc:6e:5f:b4:da:93:af:
f3:22:73:1f:ef:31:d2:3c:88:47:28:a8:ab:01:8c:
51:54:85:f6:bb:a1:28:cb:31:46:4a:7b:e6:5e:63:
fe:82:ba:02:1b:c1:62:ba:f9:be:d7:43:a7:ab:2f:
93:30:d8:66:a6:8d:87:9d:4b:de:ad:ea:4b:a9:f5:
ee:ac:90:e8:44:71:9a:f3:68:86:15:b1:5e:d4:ea:
2c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:36:59:CF:F9:15:86:C8:9B:33:F8:1E:F5:8A:E3:60:EE:E2:59:DE
X509v3 Authority Key Identifier:
keyid:67:91:97:19:E8:01:E9:4C:CA:89:D7:56:9D:37:B6:7D:25:2A:26:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/DCC1223342/0/67919719E801E94CCA89D7569D37B67D252A261F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/67919719E801E94CCA89D7569D37B67D252A261F.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DCC1223342/0/67919719E801E94CCA89D7569D37B67D252A261F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:14:95:28:19:6d:df:6f:28:db:11:61:7a:5f:be:c6:a4:ee:
ba:e3:91:6e:76:59:61:3f:00:f4:34:c9:f0:db:3a:a8:18:e5:
73:c6:09:86:b4:11:be:94:8b:e8:12:b2:41:07:61:fa:2e:ad:
b8:37:6d:8d:d8:24:49:d8:38:30:39:7e:82:43:f5:05:13:4b:
a7:34:b8:07:e6:4a:49:2e:fa:33:54:5a:7c:aa:ff:ca:13:57:
36:e8:61:7a:a5:c8:6e:0e:07:47:1b:45:ee:d4:db:b3:d2:28:
af:8b:40:e9:a6:ca:81:ec:ee:3e:37:10:ac:c1:f3:89:b6:f7:
42:4f:47:af:4f:52:5a:a6:aa:3e:42:52:8f:56:ee:e5:35:d8:
23:8c:70:e7:ce:04:62:fb:17:2d:d8:e6:60:dd:09:f8:55:d4:
1f:83:0a:7c:7b:58:27:e5:d1:26:ca:63:ee:ff:87:65:53:e0:
77:bf:60:68:2c:8b:a3:b4:a0:ea:40:fb:a5:9e:49:49:bf:06:
3b:f8:1a:57:6a:28:25:d6:15:d4:6c:8e:bd:29:3e:4a:58:54:
ce:a0:81:8a:db:f2:20:41:79:27:36:74:c7:30:87:82:91:31:
55:e6:ad:13:ad:35:a9:4e:f5:25:4c:68:48:2f:46:0a:da:1f:
eb:91:73:96
-----BEGIN CERTIFICATE-----
MIIE7DCCA9SgAwIBAgIUd45sI5b+7fgaq2aY7AxxDMG263AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjc5MTk3MTlFODAxRTk0Q0NBODlENzU2OUQzN0I2N0Qy
NTJBMjYxRjAeFw0yNjA2MTIxNjU3MjJaFw0yNjA2MTMyMDQyMjJaMDMxMTAvBgNV
BAMTKDQ5MzY1OUNGRjkxNTg2Qzg5QjMzRjgxRUY1OEFFMzYwRUVFMjU5REUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe8EOMosomVotrzChBGTUL9Cst
T9mpl3z8kMcaw8Rj4DOiZ571AKkMc3YIeB3z7/Ps92/7dvHqpW6Ku+pabk73891W
+yEx+7t81+BMevc/2TV18lyQ7nhgNeRmqTwMecqnSbg9Vzwgi0la4qBABJf1Qdfk
hOTt7uVHoumfir1VomcBuM23uF9ugu4CNHBmMn9ZXhMT3gjN8viin30YUwCf+PgF
lAw1ACLX0KOM3G5ftNqTr/Micx/vMdI8iEcoqKsBjFFUhfa7oSjLMUZKe+ZeY/6C
ugIbwWK6+b7XQ6erL5Mw2GamjYedS96t6kup9e6skOhEcZrzaIYVsV7U6iwvAgMB
AAGjggH2MIIB8jAdBgNVHQ4EFgQUSTZZz/kVhsibM/ge9YrjYO7iWd4wHwYDVR0j
BBgwFoAUZ5GXGegB6UzKiddWnTe2fSUqJh8wDgYDVR0PAQH/BAQDAgeAMGcGA1Ud
HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRENDMTIy
MzM0Mi8wLzY3OTE5NzE5RTgwMUU5NENDQTg5RDc1NjlEMzdCNjdEMjUyQTI2MUYu
Y3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBLzEvNjc5MTk3MTlFODAxRTk0Q0NBODlENzU2
OUQzN0I2N0QyNTJBMjYxRi5jZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzAL
hlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0RDQzEyMjMzNDIvMC82Nzkx
OTcxOUU4MDFFOTRDQ0E4OUQ3NTY5RDM3QjY3RDI1MkEyNjFGLm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
JRSVKBlt328o2xFhel++xqTuuuORbnZZYT8A9DTJ8Ns6qBjlc8YJhrQRvpSL6BKy
QQdh+i6tuDdtjdgkSdg4MDl+gkP1BRNLpzS4B+ZKSS76M1RafKr/yhNXNuhheqXI
bg4HRxtF7tTbs9Ior4tA6abKgezuPjcQrMHzibb3Qk9Hr09SWqaqPkJSj1bu5TXY
I4xw584EYvsXLdjmYN0J+FXUH4MKfHtYJ+XRJspj7v+HZVPgd79gaCyLo7Sg6kD7
pZ5JSb8GO/gaV2ooJdYV1GyOvSk+SlhUzqCBitvyIEF5JzZ0xzCHgpExVeatE601
qU71JUxoSC9GCtof65Fzlg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:01:16 2026 by rpki-client