
$ rpki-client -vvf rpkica.twnic.tw/rpki/FANTASY/0/28E8C034945DF0971A657E251911BBA0B2819562.mft
File: 28E8C034945DF0971A657E251911BBA0B2819562.mft (raw, json)
Hash identifier: jzaV2vgj22ZYQOgVq55WPjFwukD/dFxlTcXHO7PQbUk=
Subject key identifier: 39:03:47:8C:C8:9E:B8:05:A2:98:DE:6A:FF:39:A4:58:B2:F6:64:C1
Authority key identifier: 28:E8:C0:34:94:5D:F0:97:1A:65:7E:25:19:11:BB:A0:B2:81:95:62
Certificate issuer: /CN=28E8C034945DF0971A657E251911BBA0B2819562
Certificate serial: 604328509F1274E28F8FAEEF3BE5D588118E2FDC
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/28E8C034945DF0971A657E251911BBA0B2819562.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/FANTASY/0/28E8C034945DF0971A657E251911BBA0B2819562.mft
Manifest number: 30
Signing time: Sat 13 Jun 2026 00:13:28 +0000
Manifest this update: Sat 13 Jun 2026 00:08:28 +0000
Manifest next update: Sun 14 Jun 2026 02:14:28 +0000
Files and hashes: 1: 28E8C034945DF0971A657E251911BBA0B2819562.crl (hash: h0skVWO8ogeRIBhmqmwo9FMe2jRUgmRGdd/WFzXxbfE=)
2: 3130332e3134362e3231322e302f32342d3234203d3e20313331363731.roa (hash: v0VyC7X7thLb1BBUBYlXdyclFoTUZxEmzXZ1GE31WD8=)
3: 323430353a613063303a3a2f33322d3438203d3e20313331363731.roa (hash: 6HrkEzQ2Yg1WTlAGALA+Lw5WYBWkKQgOUE2P3VYv1e4=)
4: 3130332e3134362e3231322e302f32332d3234203d3e20313331363731.roa (hash: pMS5Ph8mPGJU3UpJ7IjmKfi+Ix8We0Zd68WwZnbms2Y=)
5: 3130332e3134362e3231332e302f32342d3234203d3e20313331363731.roa (hash: LYwHjGxEzckNqePKzYBLQw/Fecl7B+Zct0xOoyvOLzg=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/FANTASY/0/28E8C034945DF0971A657E251911BBA0B2819562.crl
rsync://rpkica.twnic.tw/rpki/FANTASY/0/28E8C034945DF0971A657E251911BBA0B2819562.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/28E8C034945DF0971A657E251911BBA0B2819562.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 00:20:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:43:28:50:9f:12:74:e2:8f:8f:ae:ef:3b:e5:d5:88:11:8e:2f:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28E8C034945DF0971A657E251911BBA0B2819562
Validity
Not Before: Jun 13 00:08:28 2026 GMT
Not After : Jun 14 02:14:28 2026 GMT
Subject: CN=3903478CC89EB805A298DE6AFF39A458B2F664C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e7:c1:d3:ff:dc:d1:15:48:d7:91:50:a6:79:
28:a9:b8:d7:82:bf:8f:6a:6f:b8:f0:56:4c:81:19:
94:16:76:4f:bf:20:20:95:66:61:a8:7d:81:df:af:
99:fc:78:45:32:60:7b:6c:38:2f:57:37:87:fa:7e:
52:3e:94:f4:1f:07:fa:5f:f4:de:3e:7b:89:62:fd:
64:df:f3:84:de:37:04:30:3a:29:41:8f:4b:9a:ed:
0c:33:fe:5b:01:8c:e5:21:9e:49:f5:b4:62:70:18:
af:d9:64:f5:f9:25:de:fe:b8:7b:1f:c3:d9:22:29:
2c:a6:50:07:32:df:59:5e:01:d3:78:5a:00:22:ac:
0d:22:c8:d4:50:e4:a2:d4:52:35:72:45:dd:e3:fa:
72:73:42:26:cb:04:33:35:a1:1b:30:f4:f5:50:fa:
b3:b3:a6:58:27:c1:7a:67:3e:81:0e:64:30:97:89:
6d:2f:94:74:8b:6e:bf:cf:52:cf:b9:da:22:67:ca:
1e:6d:0c:2e:3f:39:88:67:4e:78:7c:19:3d:07:62:
47:62:89:c2:19:34:9d:4e:bd:ee:6c:18:44:b1:63:
8e:46:71:21:03:29:61:41:9a:29:e5:06:fc:8a:24:
69:a1:9b:44:1c:30:16:d0:2f:b1:78:a6:a7:26:b3:
1a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:03:47:8C:C8:9E:B8:05:A2:98:DE:6A:FF:39:A4:58:B2:F6:64:C1
X509v3 Authority Key Identifier:
keyid:28:E8:C0:34:94:5D:F0:97:1A:65:7E:25:19:11:BB:A0:B2:81:95:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/FANTASY/0/28E8C034945DF0971A657E251911BBA0B2819562.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/28E8C034945DF0971A657E251911BBA0B2819562.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/FANTASY/0/28E8C034945DF0971A657E251911BBA0B2819562.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:b0:50:7a:44:9c:29:7e:e7:e3:26:38:f9:e2:c3:78:b0:3c:
52:c2:d0:7c:e4:63:64:5f:d3:6a:56:e9:28:89:aa:bd:4a:73:
ce:f2:a8:b4:7a:ad:a4:6e:f7:a5:0f:89:2e:fe:f7:4d:19:d7:
66:9c:d5:12:c9:17:52:93:1d:f1:f3:52:ea:16:07:cf:03:18:
4e:4d:12:98:f1:39:ee:50:95:f5:69:71:30:3b:97:ea:bc:0c:
b9:75:4d:76:1b:ac:f9:1b:e1:a9:67:4c:fd:c8:59:5f:b1:56:
19:27:37:bb:8d:f1:05:e6:93:72:50:64:7a:fd:50:b3:d7:f8:
f8:87:4f:56:8e:41:94:f6:af:8c:4f:54:3f:e1:6e:a2:3e:7d:
21:6a:78:8e:78:30:f5:07:18:69:59:d2:da:e0:dc:64:81:9c:
7d:37:56:ce:e3:e7:f2:9f:df:df:e1:89:b8:c3:7f:f6:15:4b:
e5:c5:99:0b:b6:0d:e4:bc:10:56:ee:13:56:f8:a7:d0:36:3d:
bd:22:5b:14:0c:74:b7:25:7b:78:81:c3:03:16:94:e1:31:05:
33:73:ed:2a:41:8c:e0:05:db:e3:6a:d0:4a:f4:2e:23:be:93:
95:c9:79:20:1e:6f:a0:90:25:72:2f:38:73:d8:6e:8f:f1:7c:
e0:29:ac:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:17:35 2026 by rpki-client