
$ rpki-client -vvf rpkica.twnic.tw/rpki/DONGFONG/1/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.mft
File: 65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.mft (raw, json)
Hash identifier: zv5cM7fFggEc7pVecPvrR26k0+8rcC+516TTM9Mu7sU=
Subject key identifier: 03:15:B8:BD:FD:9C:EB:88:57:4D:1A:3F:C7:8E:01:94:5C:BE:5B:3E
Authority key identifier: 65:E9:4C:77:89:AD:A7:E5:F5:40:FD:BE:95:82:D8:EA:7A:A4:6A:94
Certificate issuer: /CN=65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94
Certificate serial: 794B0E3D45FEF5E9FAA9F02CC4F7B67EED7391DF
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/DONGFONG/1/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.mft
Manifest number: 76
Signing time: Tue 28 Jul 2026 13:49:04 +0000
Manifest this update: Tue 28 Jul 2026 13:44:04 +0000
Manifest next update: Wed 29 Jul 2026 16:47:04 +0000
Files and hashes: 1: 3135392e3131372e36342e302f31392d3234203d3e203138303436.roa (hash: BnOw5LV6cVAcgowH1P0wBRFgURzOj7EomMXHxAWHT28=)
2: 3135392e3131372e38342e302f32342d3234203d3e203138303436.roa (hash: k6/jJKCg7k9igf9mXdOBVLZ2L1gd68NXx+o3im+bxhY=)
3: 65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.crl (hash: bYSPCQVKbALSJNhVgoB55de0oe3ofw4XzcrEzK8pHLE=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/DONGFONG/1/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.crl
rsync://rpkica.twnic.tw/rpki/DONGFONG/1/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 16:47:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:4b:0e:3d:45:fe:f5:e9:fa:a9:f0:2c:c4:f7:b6:7e:ed:73:91:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94
Validity
Not Before: Jul 28 13:44:04 2026 GMT
Not After : Jul 29 16:47:04 2026 GMT
Subject: CN=0315B8BDFD9CEB88574D1A3FC78E01945CBE5B3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b5:19:f2:58:3e:6f:cf:ab:5c:73:1f:00:f8:
38:24:c7:af:46:b2:f6:f1:c6:f8:07:52:14:a2:97:
49:f8:a5:6d:55:01:80:4a:d6:94:9c:d2:fa:00:41:
72:ed:cc:1b:74:b8:f6:40:ff:14:2c:e7:5f:a9:6a:
9d:cf:76:72:7b:69:d1:08:66:68:46:fd:f9:f3:2f:
df:13:6e:97:68:dd:3a:ba:47:6a:4e:e7:05:c8:0d:
4c:ac:88:1c:a7:13:ca:f7:b0:4f:df:28:42:7d:01:
19:1a:b7:3b:a9:a9:70:4a:77:25:51:9e:f1:40:e1:
2e:29:0b:20:40:7d:7e:1d:b7:0d:05:cf:41:2b:4f:
71:80:cf:85:1f:9f:4c:8c:8e:b6:68:60:40:c2:df:
1f:73:86:c1:d3:d7:c7:e2:b8:8c:dd:75:aa:44:35:
e9:18:10:37:39:c7:f8:70:3c:77:1b:21:86:df:91:
2f:df:a6:ce:ed:ee:01:4e:ee:51:3f:97:63:98:98:
96:15:b5:2d:12:6e:e8:10:90:3e:d5:9f:4a:a8:d9:
68:a2:8b:bd:61:29:93:72:0e:54:c2:95:fd:5d:5f:
4b:e6:b2:0c:26:a3:f9:10:a7:96:8b:ba:a9:68:00:
78:73:f5:0d:46:3b:91:59:85:f7:14:61:7a:5a:7c:
07:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:15:B8:BD:FD:9C:EB:88:57:4D:1A:3F:C7:8E:01:94:5C:BE:5B:3E
X509v3 Authority Key Identifier:
keyid:65:E9:4C:77:89:AD:A7:E5:F5:40:FD:BE:95:82:D8:EA:7A:A4:6A:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/DONGFONG/1/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DONGFONG/1/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:9e:05:16:fe:ea:f3:7b:1d:78:86:0f:63:51:8d:9a:ed:c9:
6d:0a:70:d3:95:66:e5:33:6e:59:c3:c8:5f:6d:44:0f:aa:7f:
d9:57:d2:ca:cb:04:f5:18:f0:6c:79:e8:b2:4b:7a:4c:67:50:
d2:8a:73:8a:63:37:fd:69:be:f5:ab:0d:20:27:a5:28:a1:e6:
f9:43:05:fd:1f:21:94:ab:99:39:2c:f3:95:98:c6:57:8b:3c:
c4:d7:72:15:10:f9:54:5a:8c:85:18:51:33:b8:f1:a3:b2:2b:
f7:89:6e:ca:c7:2b:81:4e:82:af:2c:0b:26:d4:87:51:49:17:
aa:aa:97:20:9c:34:0d:99:8a:9d:32:d9:91:4c:af:0f:a1:62:
79:51:0a:7e:81:e7:ee:39:c1:8f:bb:5c:a4:9e:b9:c3:78:78:
9d:fa:8b:63:2c:0a:f3:af:b0:dd:20:36:c5:a4:40:1e:2b:5a:
01:d3:fb:ec:82:fe:c9:90:c2:fb:97:21:a6:05:13:86:f7:e4:
91:a8:26:53:4b:89:6e:8d:3f:37:fb:28:37:a6:9d:df:a7:82:
25:ff:3c:f8:5d:6a:d1:9b:85:24:4a:c3:9a:4d:7c:a9:d6:bc:
ac:02:59:31:90:0e:a8:0f:e5:34:2e:5b:56:e1:1d:0c:0c:e9:
44:05:dc:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:38:00 2026 by rpki-client