
$ rpki-client -vvvf rpkica.twnic.tw/rpki/DWINS/0/C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93.mft
File: C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93.mft (raw, json)
Hash identifier: ROpf3DRLSmpN0weiDmESeGYuzHaS9rXoRTBPLoBTzsY=
Subject key identifier: F3:17:4C:6E:B8:EB:9D:97:52:D3:2D:60:95:50:A1:C5:9B:D1:0F:03
Authority key identifier: C5:DF:31:D9:EE:B5:DA:72:66:8D:58:FB:8D:B0:E7:5E:3A:D7:BF:93
Certificate issuer: /CN=C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93
Certificate serial: 54FD2B2961DDC87BA888F0CB01ED3A527CB5A44A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/DWINS/0/C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93.mft
Manifest number: BB
Signing time: Sun 20 Sep 2026 12:24:27 +0000
Manifest this update: Sun 20 Sep 2026 12:19:27 +0000
Manifest next update: Mon 21 Sep 2026 14:49:27 +0000
Files and hashes: 1: 3130332e34332e35312e302f32342d3234203d3e20313338393135.roa (hash: u+A6v4yEBS5cjQ/+f3BzaST8qU+ycUc8ZtzDC1IbS7s=)
2: 3131322e3231332e34382e302f32302d3234203d3e203137343136.roa (hash: IyZ2uNj2Ed2hbTcxfq9Hoz8oXlcjs1V2+SFVtmy0SAo=)
3: 3231312e37382e38302e302f32302d3234203d3e203137343136.roa (hash: e5vDwym6b4PG9xQ/2ko8EBKkmz8V822CH9wDw3sAHbo=)
4: C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93.crl (hash: jchbIj3e/ODevovQCFsgm/WL1/825XW3FLZzuH1LdcM=)
5: 34332e3232342e32302e302f32342d3234203d3e20313338393135.roa (hash: qZ1Xl7P/oCReEcW84jHPinXVKHg48mLqWM57olzhxqo=)
6: 323430353a346430303a3a2f33322d3438203d3e203137343136.roa (hash: iWtECRpcS2tiVOqsLI6rlO0uvEa9pxsE3Sqh+gwayqA=)
7: 3130332e34332e35302e302f32342d3234203d3e20313338393135.roa (hash: hTEAAzN0PA9rsWlL7Pu0rf3KFazJnBuaWNIwQ+dbKTo=)
8: 34332e3232342e32332e302f32342d3234203d3e20313331363436.roa (hash: 6SGE2td+SruVzE8RTP0oAaYfc3isBgmmTrc/lKGCQhk=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/DWINS/0/C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93.crl
rsync://rpkica.twnic.tw/rpki/DWINS/0/C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 21 Sep 2026 08:58:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:fd:2b:29:61:dd:c8:7b:a8:88:f0:cb:01:ed:3a:52:7c:b5:a4:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93
Validity
Not Before: Sep 20 12:19:27 2026 GMT
Not After : Sep 21 14:49:27 2026 GMT
Subject: CN=F3174C6EB8EB9D9752D32D609550A1C59BD10F03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:54:9f:d5:0e:55:16:f7:18:e0:73:6c:68:95:
7a:f0:6f:d3:a8:65:bd:cf:f1:56:a8:7c:39:89:69:
d2:2a:9c:2f:9a:d6:1e:da:bc:cd:cd:96:5b:7b:21:
6d:d0:7e:9c:1c:ad:1f:fa:5b:51:10:ab:06:cb:7a:
ed:73:a2:e7:12:62:4f:17:ca:2d:c8:39:0b:be:b3:
32:16:87:58:8e:b9:30:32:00:eb:4e:4c:a7:f2:05:
6e:8b:73:27:9a:02:47:7a:2e:b5:b2:69:1d:30:ca:
83:87:02:a9:46:25:29:d1:e5:21:94:45:2c:70:d9:
8d:e4:be:db:4a:b6:47:83:2a:5d:b4:6d:75:41:b4:
11:14:09:2d:a6:aa:59:20:9d:50:0a:94:50:51:34:
40:66:3a:5c:14:45:3b:78:9b:a8:09:76:58:10:7c:
43:dc:b8:5e:79:09:14:bb:1e:b6:09:64:c4:88:ae:
c7:d6:28:7f:43:13:e6:71:fe:22:ff:ce:fb:3c:e4:
a3:fd:54:e4:ac:2f:fe:ba:77:56:e1:19:1f:4d:eb:
61:72:69:9b:8d:d3:63:f8:62:c1:51:b6:bc:56:78:
4b:36:a4:73:67:61:ee:a5:ca:8a:0e:75:17:15:a6:
21:b8:4c:38:28:ef:5b:d3:a9:9a:50:1c:be:81:2b:
52:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:17:4C:6E:B8:EB:9D:97:52:D3:2D:60:95:50:A1:C5:9B:D1:0F:03
X509v3 Authority Key Identifier:
keyid:C5:DF:31:D9:EE:B5:DA:72:66:8D:58:FB:8D:B0:E7:5E:3A:D7:BF:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/DWINS/0/C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DWINS/0/C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:c1:1b:15:8f:be:17:bf:e0:45:04:ac:d1:51:b1:72:b6:24:
10:26:ba:23:ee:67:98:f4:1e:4a:77:6e:a2:c1:d0:da:69:b3:
87:92:ed:44:13:7b:bd:62:01:b8:f4:dd:0a:18:8e:33:36:85:
48:f3:3e:04:e0:22:fa:00:aa:e5:f6:bf:fb:ed:67:70:00:51:
91:82:d8:19:23:4a:d9:76:f4:2c:fe:26:3f:a7:cc:84:25:f6:
af:ed:75:38:87:2e:fe:37:cb:6d:2c:a5:19:28:04:f4:05:31:
c3:d0:73:b4:2f:fa:cb:b5:53:d0:4f:82:69:b5:f5:45:73:c8:
49:4f:31:f7:87:3e:56:0a:25:38:7e:9f:33:1f:8d:9e:15:ea:
dd:60:7d:a6:87:52:b8:1e:b4:76:b1:4b:fa:14:70:c6:c3:0c:
84:c5:6f:4c:e2:e9:2e:19:d5:18:81:e8:4f:6d:88:3f:b8:74:
64:57:90:0b:e6:fd:8d:da:a8:8d:e2:16:91:95:59:9e:1b:92:
51:9f:21:14:72:4f:01:2c:e4:e6:b2:ef:a6:ba:cf:e7:96:26:
71:6a:59:1a:ec:3d:2c:44:6d:04:c7:e3:8d:99:74:dd:93:85:
63:d7:49:eb:6b:8c:ef:50:d5:18:ba:ea:28:b8:e2:63:92:bb:
ff:72:f3:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:34:51 2026 by rpki-client