
$ rpki-client -vvf rpkica.twnic.tw/rpki/DWINS/0/C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93.mft
File: C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93.mft (raw, json)
Hash identifier: vI5scDTLDLVIT5XPstY6GdZ4Q4YzZSVOga0x6QMeNK0=
Subject key identifier: 3A:DD:F8:96:B5:91:E5:05:F8:73:4D:45:3A:12:36:54:27:4F:43:FD
Authority key identifier: C5:DF:31:D9:EE:B5:DA:72:66:8D:58:FB:8D:B0:E7:5E:3A:D7:BF:93
Certificate issuer: /CN=C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93
Certificate serial: 12F57CE4460BF129F36F14DBB1C08A0407C47BDB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/DWINS/0/C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93.mft
Manifest number: 74
Signing time: Tue 28 Jul 2026 18:54:43 +0000
Manifest this update: Tue 28 Jul 2026 18:49:43 +0000
Manifest next update: Wed 29 Jul 2026 18:58:43 +0000
Files and hashes: 1: 3131322e3231332e34382e302f32302d3234203d3e203137343136.roa (hash: IyZ2uNj2Ed2hbTcxfq9Hoz8oXlcjs1V2+SFVtmy0SAo=)
2: 3231312e37382e38302e302f32302d3234203d3e203137343136.roa (hash: e5vDwym6b4PG9xQ/2ko8EBKkmz8V822CH9wDw3sAHbo=)
3: 3130332e34332e35302e302f32342d3234203d3e20313338393135.roa (hash: hTEAAzN0PA9rsWlL7Pu0rf3KFazJnBuaWNIwQ+dbKTo=)
4: 323430353a346430303a3a2f33322d3438203d3e203137343136.roa (hash: iWtECRpcS2tiVOqsLI6rlO0uvEa9pxsE3Sqh+gwayqA=)
5: 34332e3232342e32302e302f32342d3234203d3e20313338393135.roa (hash: qZ1Xl7P/oCReEcW84jHPinXVKHg48mLqWM57olzhxqo=)
6: C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93.crl (hash: vqpWDl+SvWMLQenya31ZsPlxiZxeaEd3W319hd3v9qA=)
7: 34332e3232342e32332e302f32342d3234203d3e20313331363436.roa (hash: 6SGE2td+SruVzE8RTP0oAaYfc3isBgmmTrc/lKGCQhk=)
8: 3130332e34332e35312e302f32342d3234203d3e20313338393135.roa (hash: u+A6v4yEBS5cjQ/+f3BzaST8qU+ycUc8ZtzDC1IbS7s=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/DWINS/0/C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93.crl
rsync://rpkica.twnic.tw/rpki/DWINS/0/C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 07:22:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:f5:7c:e4:46:0b:f1:29:f3:6f:14:db:b1:c0:8a:04:07:c4:7b:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93
Validity
Not Before: Jul 28 18:49:43 2026 GMT
Not After : Jul 29 18:58:43 2026 GMT
Subject: CN=3ADDF896B591E505F8734D453A123654274F43FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:fd:4f:d2:4e:6e:d4:11:5f:bc:26:a0:d0:2c:
65:51:ca:d2:b3:0b:01:78:58:4d:76:ed:af:b6:7b:
a1:97:f6:e1:94:c9:e6:4c:c8:78:73:1c:c4:23:24:
a0:7f:e2:63:ef:c8:2f:82:21:25:18:d5:ba:ac:72:
38:03:c3:16:1f:c3:f2:c7:9b:69:8b:dc:92:79:8c:
c1:f4:fc:41:bb:03:cd:d2:86:c5:04:23:88:af:21:
0d:56:1b:1c:4b:fc:5b:24:e5:84:f0:60:cb:81:53:
07:0d:9c:dd:7d:f9:62:89:d8:66:5b:6b:17:1c:1b:
4a:98:ba:9b:cc:07:76:cd:89:78:72:67:bd:68:2b:
5e:f4:94:cc:43:1d:18:38:8e:c1:b6:51:96:5f:67:
4e:dd:52:a3:f3:33:ae:3f:4f:3c:d8:e8:05:e8:b8:
85:62:c9:90:2c:db:f1:a9:0c:8c:be:1b:a9:10:e9:
eb:94:53:a6:41:3c:48:cb:b4:01:5d:b6:78:05:fb:
1b:0d:90:36:bc:6e:1b:37:59:c2:63:cf:cf:46:50:
f2:27:cc:14:4e:0b:43:6c:02:15:82:2d:14:3f:34:
2f:5f:f2:40:d4:b1:ef:3d:64:83:40:c5:ae:73:58:
fd:19:12:86:79:a4:f7:99:41:27:fe:72:0e:68:c5:
00:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:DD:F8:96:B5:91:E5:05:F8:73:4D:45:3A:12:36:54:27:4F:43:FD
X509v3 Authority Key Identifier:
keyid:C5:DF:31:D9:EE:B5:DA:72:66:8D:58:FB:8D:B0:E7:5E:3A:D7:BF:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/DWINS/0/C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DWINS/0/C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:a6:e1:2c:40:f8:7d:bf:cc:96:b2:cf:93:4c:fc:d8:f6:de:
ce:ad:64:d0:e7:2d:7d:5d:14:f3:37:7c:af:1e:2a:de:c7:73:
09:69:c6:b7:8f:a5:3b:37:ab:41:31:fa:cf:51:ef:77:22:23:
b1:02:7d:50:35:06:9b:ca:e9:27:f5:13:57:85:bc:48:7b:e7:
50:fe:49:96:af:93:40:21:3d:dc:78:e8:e3:bf:b8:39:05:29:
c8:0d:d6:4c:62:9e:c1:ae:66:34:6f:2b:fb:d3:24:71:95:13:
13:ee:30:03:96:65:0f:67:48:ee:de:56:8e:ce:9a:a5:d9:27:
dd:d2:1f:79:f5:3e:6a:69:63:77:87:f1:e5:f2:6f:94:91:2d:
83:d1:76:4c:b8:2b:30:4d:21:b8:74:08:7d:0f:3b:b2:1a:40:
94:8f:30:2f:7b:d1:90:bb:1e:85:12:21:6c:e4:a7:28:d2:22:
d1:43:f9:31:3d:7a:70:77:9b:54:1a:f0:ce:43:60:1a:c8:3e:
3d:da:53:14:86:8c:56:ad:6b:a6:25:9a:ff:c4:a8:5c:88:ab:
52:ad:f1:5e:36:1a:af:7d:56:b6:e7:27:90:ef:2d:a4:d5:ba:
4b:e4:6c:19:c3:c7:7e:4c:7e:58:1f:61:23:aa:6f:f8:bd:a8:
0a:d7:99:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:47:38 2026 by rpki-client