
$ rpki-client -vvvf rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.mft
File: 157D536924EE6C5A7711625C6906CB5139BE6605.mft (raw, json)
Hash identifier: X7NE8WqL78RdBw7vucR594Pa8iXymXvW7xspxa+gnVE=
Subject key identifier: 1C:6D:22:93:CB:0D:FE:82:7D:00:44:85:02:3F:74:7D:20:77:0E:39
Authority key identifier: 15:7D:53:69:24:EE:6C:5A:77:11:62:5C:69:06:CB:51:39:BE:66:05
Certificate issuer: /CN=157D536924EE6C5A7711625C6906CB5139BE6605
Certificate serial: 18005AF139230F6BEE6C600E2F764C0F8FAB50CB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/157D536924EE6C5A7711625C6906CB5139BE6605.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.mft
Manifest number: CF
Signing time: Tue 22 Sep 2026 17:11:06 +0000
Manifest this update: Tue 22 Sep 2026 17:06:06 +0000
Manifest next update: Wed 23 Sep 2026 19:26:06 +0000
Files and hashes: 1: 3131332e32312e3138382e302f32322d3232203d3e2039323434.roa (hash: mj+jG0WgHPI9Z78w1rU1L8re5exbzzfP02Vd4ETlO4I=)
2: 36312e3234372e3136382e302f32312d3231203d3e2039323434.roa (hash: yJYnyLxqCiz6yoVKYK54rTjzmF9VmGcpnqZIG+inTu0=)
3: 36312e35362e38342e302f32342d3234203d3e2039323434.roa (hash: GYR6FspSCdnkcSMZGwxPQmD5bQPvQNdvhgSJGhjts20=)
4: 3131332e32312e3137332e302f32342d3234203d3e2039323434.roa (hash: zad3+2RXzsQ+kKuIVqMfSQyLlU7unW/aAqyPG/mguxY=)
5: 36312e35362e36342e302f32312d3231203d3e2039323434.roa (hash: oYIVd+rx3myxoRGdVrCSUc7g08NdN5+NRwaA2ICa/fc=)
6: 36312e3234372e3136302e302f32302d3234203d3e2039323434.roa (hash: qxXWankg7oia3AZJcligt1FqlLwncBLZ3x0aR/n5a/M=)
7: 3231302e36372e39362e302f32302d3234203d3e2039323434.roa (hash: zHNjCezs8fFWlbXZ3/WOnM3QHIEAmgqdy+ijyA8rKKI=)
8: 36312e35362e38362e302f32342d3234203d3e2039323434.roa (hash: DZQdAc5OZiI1l50V9csTghB0Kp8yJsJBeM5CKzaxzH8=)
9: 36312e3234372e3136302e302f32312d3231203d3e2039323434.roa (hash: nhV3EOJxiTmAffz4Z7cCPeuZbMUl+G2BM8SxTh0pjdM=)
10: 3131332e32312e3136302e302f31392d3234203d3e2039323434.roa (hash: Qo1J6GmDEF02G8LEyX3EsjEFHF0gh33rgqCIM17+ySY=)
11: 36312e35362e38302e302f32302d3230203d3e2039323434.roa (hash: fY0JZskhhOlyqSdfMeP9akHRUU7aeJhuk2izFKgXPNQ=)
12: 36312e35362e38302e302f32302d3234203d3e2039323434.roa (hash: 6H/xsz0QA1bSR/X4dlktPQin25xpMQY3A5kPm3VjeZo=)
13: 3131332e32312e3136302e302f32302d3230203d3e2039323434.roa (hash: zNMmR5ncf64bpLQDMhE/zKkbuo5hWND/v72vA6wBXyc=)
14: 36312e3234372e3136352e302f32342d3234203d3e2039323434.roa (hash: k4BvpqmiGcRTqeEDlHzCRia3WesXP5gUhCWBJ3J9XD0=)
15: 36312e35362e36372e302f32342d3234203d3e2039323434.roa (hash: fIv1TMJeuFOvi9xY2TJoQcWHee5kMAwWsOnDU4no5V8=)
16: 3131332e32312e3137362e302f32312d3231203d3e2039323434.roa (hash: KJODPHzEc1hWKKBkKg9JUc5d7SVmqFSTdy72MVSqi9s=)
17: 36312e3234372e3136302e302f32302d3230203d3e2039323434.roa (hash: SYEKqw4xhnIhxcOUCduJvhjRdzbef1covv+Qeem6MuM=)
18: 36312e35362e36352e302f32342d3234203d3e2039323434.roa (hash: 58eBZJn8dVtEAJDGPa82sE+r7hzziamq/6j0Jux307s=)
19: 3131332e32312e3138342e302f32322d3234203d3e2039353834.roa (hash: JffZ7xaMKxvRLXvyZwq6BE7sU1Ksg43YEW866OsFW/Y=)
20: 3231302e36372e39362e302f32302d3230203d3e2039323434.roa (hash: C02rXsQ6Y93MLpg6oZMwS2YNlT8ftQ8gTIwWkyT1p/c=)
21: 36312e35362e38302e302f32312d3231203d3e2039323434.roa (hash: BtytB4ImCxwmDNMsYcsPUOT+c3DhbJMzf7Pj6Zu2TSA=)
22: 323430333a656530303a3a2f33322d3536203d3e2039323434.roa (hash: 3xt+0tfS9ZpseLYoRn7kbI8U4wMAyjKAyApcX78rnyU=)
23: 36312e35362e37322e302f32312d3231203d3e2039323434.roa (hash: neCogx7kiACRIuTdTb4mPlJDa/8XCuRztd8KmEyTXNk=)
24: 157D536924EE6C5A7711625C6906CB5139BE6605.crl (hash: QUjKutQTN8C3XFL60L3CZ+dNR1igOx5kuKf/V7t3MmE=)
25: 36312e35362e36342e302f32302d3230203d3e2039323434.roa (hash: ZKLo/ilTfM+KDgM75kk/lKbUAkojHaOIgyc3I52X5q8=)
26: 3131332e32312e3137352e302f32342d3234203d3e2039323434.roa (hash: whesli0aowOeEwrokq13wIdP2tp0cw9ZGh1XLVuettA=)
27: 36312e35362e36342e302f32302d3234203d3e2039323434.roa (hash: ie+Yaj7K/OCtwgg9fHP4osRhiW67GSidm1dXNt6AjH0=)
28: 36312e35362e38382e302f32312d3231203d3e2039323434.roa (hash: Yv9i1Wf6abh3HnSZnR0KOLnhp4lGY5xfo27UjbSYy+8=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.crl
rsync://rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/157D536924EE6C5A7711625C6906CB5139BE6605.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 23 Sep 2026 12:59:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:00:5a:f1:39:23:0f:6b:ee:6c:60:0e:2f:76:4c:0f:8f:ab:50:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=157D536924EE6C5A7711625C6906CB5139BE6605
Validity
Not Before: Sep 22 17:06:06 2026 GMT
Not After : Sep 23 19:26:06 2026 GMT
Subject: CN=1C6D2293CB0DFE827D004485023F747D20770E39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9e:3f:b8:f4:ab:58:2e:d6:06:99:3b:0d:77:
a6:f5:e7:db:22:db:52:7d:d5:97:a4:6e:62:68:c3:
57:50:21:ea:2c:a3:24:ba:42:54:66:70:04:9d:ee:
79:de:1a:fa:c6:1d:0c:ce:bc:09:e5:6f:a3:56:0c:
04:19:9d:f2:a3:9e:ce:24:75:33:57:66:b6:9c:ed:
be:60:ae:74:8e:e4:a5:e8:92:10:01:f2:7a:a5:5b:
09:41:a5:cf:09:7b:e6:84:24:9a:bd:50:01:83:8b:
12:3c:1c:28:c2:35:68:89:11:90:91:da:23:97:11:
ae:c1:ab:a6:46:04:05:37:05:af:fe:91:4b:01:aa:
82:9e:c9:42:a0:eb:bb:de:0d:3c:de:3e:1a:77:60:
6b:51:97:94:58:4e:ef:a1:03:e5:26:5b:d6:b9:73:
e1:ee:b3:7a:2a:df:88:8f:00:08:59:71:d2:b7:f4:
2a:db:8a:b2:75:5d:56:07:42:a2:8f:b0:d0:ee:a7:
bd:36:eb:10:d4:93:d7:3b:16:6e:2a:48:f1:65:56:
f9:e0:b7:56:39:09:e7:c8:39:b4:95:7c:23:ec:d8:
03:2f:1c:65:98:75:09:5d:5b:60:5c:8e:ab:dd:1f:
ac:32:d2:1f:6b:96:6a:6d:f1:e6:f3:ba:c3:a5:e5:
35:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:6D:22:93:CB:0D:FE:82:7D:00:44:85:02:3F:74:7D:20:77:0E:39
X509v3 Authority Key Identifier:
keyid:15:7D:53:69:24:EE:6C:5A:77:11:62:5C:69:06:CB:51:39:BE:66:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/157D536924EE6C5A7711625C6906CB5139BE6605.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:4b:c5:3a:ab:d8:64:69:d9:35:61:aa:0c:03:f2:9f:28:a1:
78:dc:fe:e9:69:3c:26:6c:09:47:bc:6d:a0:4c:86:57:46:8c:
ab:a0:e4:3e:0e:fa:99:91:66:03:ac:22:71:8a:05:e6:4e:ad:
6b:9a:d3:04:88:21:c6:d3:73:b2:2a:3b:e9:93:fc:fb:20:76:
d5:85:34:ba:61:d1:c4:41:4f:03:5b:4a:25:f4:bc:5d:fa:c5:
fd:31:44:36:be:9f:33:69:01:b5:18:10:7c:15:81:b8:27:72:
98:24:ab:8f:e1:b4:49:75:c8:73:79:07:6f:23:0b:b6:bd:ef:
f6:b6:63:fa:06:ef:d6:35:73:6b:53:f2:08:1b:77:36:65:c1:
67:a2:b4:b4:9f:52:21:44:a0:f8:d9:d4:85:4c:6d:bb:35:78:
bd:7c:2c:94:44:a3:a5:c3:ee:b7:24:40:a4:f5:b2:4c:84:66:
4f:36:6d:ea:31:b6:68:d2:ce:ec:ef:7a:73:ff:46:e8:ff:94:
b4:37:ad:e3:0c:46:6e:30:1e:88:04:b6:0a:e0:7f:d4:41:23:
9f:ea:17:20:c9:5f:d9:72:38:99:c3:da:5e:ae:c7:83:21:1f:
3a:3b:30:50:1d:02:f1:6f:f0:65:2b:03:a6:d9:76:20:3c:7a:
94:01:9b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:42:36 2026 by rpki-client