
$ rpki-client -vvf rpkica.twnic.tw/rpki/EDTNS/0/D31DE8192962A403BB6809455D9C0776F79CC527.mft
File: D31DE8192962A403BB6809455D9C0776F79CC527.mft (raw, json)
Hash identifier: 9xoKwj4AWSUl4y6k2qUwJ+XRlKmp8KRNLSslU7zXkWw=
Subject key identifier: 2A:07:C7:53:D3:18:C0:07:72:68:58:2A:18:6B:5C:41:F0:74:22:54
Authority key identifier: D3:1D:E8:19:29:62:A4:03:BB:68:09:45:5D:9C:07:76:F7:9C:C5:27
Certificate issuer: /CN=D31DE8192962A403BB6809455D9C0776F79CC527
Certificate serial: 58DB57DC037137D0C9EF4B83C58197562AB63893
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D31DE8192962A403BB6809455D9C0776F79CC527.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/EDTNS/0/D31DE8192962A403BB6809455D9C0776F79CC527.mft
Manifest number: 34
Signing time: Sat 13 Jun 2026 02:48:46 +0000
Manifest this update: Sat 13 Jun 2026 02:43:46 +0000
Manifest next update: Sun 14 Jun 2026 05:38:46 +0000
Files and hashes: 1: 36312e35362e32362e302f32342d3234203d3e203138343131.roa (hash: nzkDFeWq9DKB8SnYVh/zKHjUR7e4Y9fE95qdnDZlMiI=)
2: 3131392e33302e31362e302f32302d3234203d3e203138343131.roa (hash: b/aL5o5ZJ2+jJ6WA1q4dCKtGxzeUgsNC1ybEW3+mJZY=)
3: 3131392e33302e31362e302f32302d3230203d3e203138343131.roa (hash: VDIgNrS0Bj4C/eZLO2BtqOoH9/X324CutCA0RmZUaVs=)
4: 36312e35362e32342e302f32342d3234203d3e203138343131.roa (hash: 4W+qJBNLOJOWIRvtB6qDddjGArtbipAJUnwCauAbtiw=)
5: D31DE8192962A403BB6809455D9C0776F79CC527.crl (hash: JKJWOCCoRgVQZceOtSRqQatl9xEX7f44l4RLgBbdja8=)
6: 36312e35362e31362e302f32302d3230203d3e203138343131.roa (hash: cpOU01Iw58/YmjLPrJqeRjungi3bbe0B4tFLVOzxjxc=)
7: 36312e35362e32352e302f32342d3234203d3e203138343131.roa (hash: qLfcOZVogzNc0fPW8DS0BFg+aXm72rn141irJHfF/2A=)
8: 36312e35362e31382e302f32342d3234203d3e203138343131.roa (hash: gjwd7BV9O1873cFPhEXU/7D/wbFE9dSEUv4zzhFHYw8=)
9: 36312e35362e31362e302f32302d3234203d3e203138343131.roa (hash: OaBE8mWI96DAhvnsCUNb1Lo3ZA5eC1WiiVCLBOSaZW4=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/EDTNS/0/D31DE8192962A403BB6809455D9C0776F79CC527.crl
rsync://rpkica.twnic.tw/rpki/EDTNS/0/D31DE8192962A403BB6809455D9C0776F79CC527.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D31DE8192962A403BB6809455D9C0776F79CC527.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 00:20:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:db:57:dc:03:71:37:d0:c9:ef:4b:83:c5:81:97:56:2a:b6:38:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D31DE8192962A403BB6809455D9C0776F79CC527
Validity
Not Before: Jun 13 02:43:46 2026 GMT
Not After : Jun 14 05:38:46 2026 GMT
Subject: CN=2A07C753D318C0077268582A186B5C41F0742254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:af:9f:9c:86:2c:4a:55:5b:d9:c8:a7:18:86:
ff:cb:60:32:72:7f:fe:38:77:15:63:05:a8:eb:98:
e5:4c:13:4c:98:77:ea:90:4a:75:34:18:6e:b0:a9:
26:f8:d6:17:88:3d:9b:27:68:4e:49:07:82:43:eb:
59:79:62:cc:8d:a2:df:ad:8a:74:88:8f:9f:8f:c7:
60:1b:bd:e0:bd:f6:2f:94:8a:26:a9:03:0d:dc:35:
ea:49:21:cb:01:46:43:e3:c7:f4:51:62:51:12:0c:
ce:98:68:fa:04:e4:21:ff:60:bb:47:e2:91:d6:66:
b3:3d:dc:0e:c9:7e:47:01:bf:5a:06:bb:a8:8f:11:
92:d4:15:ed:31:78:dd:f5:90:d1:eb:af:74:91:ce:
e0:3a:ac:b0:d4:cd:7b:c2:bb:b6:ad:54:10:2f:30:
67:d1:42:13:fc:4e:81:80:c3:54:29:e2:66:ef:ed:
ba:e3:15:e2:ff:ea:5a:29:62:fd:cd:7b:0a:cc:6a:
e2:14:c3:90:96:f7:83:f0:10:43:f9:a0:3d:66:68:
02:c0:0f:e1:e0:d8:4d:ae:6a:4b:7a:ce:12:53:4f:
35:29:15:0d:e3:79:71:d0:ee:c0:14:08:0a:d7:f9:
7c:75:3e:b4:b1:6e:7d:8e:a0:9a:54:a7:ec:8e:e6:
01:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:07:C7:53:D3:18:C0:07:72:68:58:2A:18:6B:5C:41:F0:74:22:54
X509v3 Authority Key Identifier:
keyid:D3:1D:E8:19:29:62:A4:03:BB:68:09:45:5D:9C:07:76:F7:9C:C5:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/EDTNS/0/D31DE8192962A403BB6809455D9C0776F79CC527.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D31DE8192962A403BB6809455D9C0776F79CC527.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/EDTNS/0/D31DE8192962A403BB6809455D9C0776F79CC527.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:f3:2f:c1:ae:a3:a7:18:1e:c7:11:0a:80:25:0e:1c:84:7f:
64:cd:72:4a:f8:06:b2:ca:b6:ad:35:ce:7f:2e:d1:81:0c:8f:
49:c3:26:3a:43:4f:4c:01:ec:f4:1a:c0:cd:38:ce:5e:43:04:
b6:bb:da:6e:6f:4d:d7:1c:70:a1:9c:65:43:0e:bf:04:88:cc:
94:5b:3c:ea:c6:69:45:fe:49:9a:7a:77:16:66:eb:85:f1:2a:
07:b7:8f:e2:de:a7:86:e1:fc:24:25:8b:f7:ab:40:e2:da:50:
6f:92:aa:da:6b:23:26:00:c3:2e:06:97:19:65:e4:c7:fe:41:
2c:60:31:8a:17:98:da:08:5e:db:e6:a7:4a:fd:be:56:22:59:
6c:7a:4a:15:b5:ed:6e:3c:19:2e:f4:22:e3:f5:9e:37:96:b6:
15:42:49:b3:06:00:67:81:7d:5c:ed:b8:45:86:a9:08:f6:b2:
c4:76:f4:6c:bf:a5:2f:a8:0b:67:69:4a:f9:3c:d0:d7:32:aa:
a8:4a:aa:7e:34:ce:51:ed:aa:2f:a4:db:b2:8c:9b:5e:fd:e9:
00:2b:60:8e:b9:c8:e7:0b:31:58:b0:2f:f5:1a:b8:a8:d2:ed:
b0:22:6f:18:82:7a:2b:c8:68:8e:b1:e6:81:80:05:79:7f:a4:
ba:98:64:c6
-----BEGIN CERTIFICATE-----
MIIE4jCCA8qgAwIBAgIUWNtX3ANxN9DJ70uDxYGXViq2OJMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDMxREU4MTkyOTYyQTQwM0JCNjgwOTQ1NUQ5QzA3NzZG
NzlDQzUyNzAeFw0yNjA2MTMwMjQzNDZaFw0yNjA2MTQwNTM4NDZaMDMxMTAvBgNV
BAMTKDJBMDdDNzUzRDMxOEMwMDc3MjY4NTgyQTE4NkI1QzQxRjA3NDIyNTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMr5+chixKVVvZyKcYhv/LYDJy
f/44dxVjBajrmOVME0yYd+qQSnU0GG6wqSb41heIPZsnaE5JB4JD61l5YsyNot+t
inSIj5+Px2AbveC99i+UiiapAw3cNepJIcsBRkPjx/RRYlESDM6YaPoE5CH/YLtH
4pHWZrM93A7JfkcBv1oGu6iPEZLUFe0xeN31kNHrr3SRzuA6rLDUzXvCu7atVBAv
MGfRQhP8ToGAw1Qp4mbv7brjFeL/6lopYv3NewrMauIUw5CW94PwEEP5oD1maALA
D+Hg2E2uakt6zhJTTzUpFQ3jeXHQ7sAUCArX+Xx1PrSxbn2OoJpUp+yO5gEVAgMB
AAGjggHsMIIB6DAdBgNVHQ4EFgQUKgfHU9MYwAdyaFgqGGtcQfB0IlQwHwYDVR0j
BBgwFoAU0x3oGSlipAO7aAlFXZwHdvecxScwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud
HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRURUTlMv
MC9EMzFERTgxOTI5NjJBNDAzQkI2ODA5NDU1RDlDMDc3NkY3OUNDNTI3LmNybDBv
BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS8xL0QzMURFODE5Mjk2MkE0MDNCQjY4MDk0NTVEOUMw
Nzc2Rjc5Q0M1MjcuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5
bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9FRFROUy8wL0QzMURFODE5Mjk2MkE0
MDNCQjY4MDk0NTVEOUMwNzc2Rjc5Q0M1MjcubWZ0MBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDF8y/BrqOnGB7H
EQqAJQ4chH9kzXJK+AayyratNc5/LtGBDI9JwyY6Q09MAez0GsDNOM5eQwS2u9pu
b03XHHChnGVDDr8EiMyUWzzqxmlF/kmaencWZuuF8SoHt4/i3qeG4fwkJYv3q0Di
2lBvkqraayMmAMMuBpcZZeTH/kEsYDGKF5jaCF7b5qdK/b5WIllsekoVte1uPBku
9CLj9Z43lrYVQkmzBgBngX1c7bhFhqkI9rLEdvRsv6UvqAtnaUr5PNDXMqqoSqp+
NM5R7aovpNuyjJte/ekAK2COucjnCzFYsC/1Grio0u2wIm8YgnoryGiOseaBgAV5
f6S6mGTG
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:07:32 2026 by rpki-client