
$ rpki-client -vvvf rpkica.twnic.tw/rpki/FET/0/71FA20FC269CE9805B2C67E59B357AA684246D10.mft
File: 71FA20FC269CE9805B2C67E59B357AA684246D10.mft (raw, json)
Hash identifier: YHlfTcLjtjdP8SDQFw8b6QlsU4oJ+KbIe/HYW1qRMI0=
Subject key identifier: BF:F2:BE:8D:A1:15:D3:05:02:33:65:D2:83:27:DB:7F:07:72:F2:18
Authority key identifier: 71:FA:20:FC:26:9C:E9:80:5B:2C:67:E5:9B:35:7A:A6:84:24:6D:10
Certificate issuer: /CN=71FA20FC269CE9805B2C67E59B357AA684246D10
Certificate serial: 4031F4EE3B91E406774ACC52F4F52D1170DB2CB5
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/71FA20FC269CE9805B2C67E59B357AA684246D10.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/FET/0/71FA20FC269CE9805B2C67E59B357AA684246D10.mft
Manifest number: 0208
Signing time: Tue 22 Sep 2026 07:35:15 +0000
Manifest this update: Tue 22 Sep 2026 07:30:15 +0000
Manifest next update: Wed 23 Sep 2026 10:38:15 +0000
Files and hashes: 1: AS131602.roa (hash: bFVVVflXDjtPSgbd2kGD0xptDyu1BbSWXOBLoCefftU=)
2: AS4780.roa (hash: QQJXQiGkHNjYSpuZL3zRgm7fZG1sJGhbPjTUg8rFYY4=)
3: AS24154.roa (hash: 5d9AJsUf5IXX9W/gHPHz7U8Ox7RZTat1L8/CNPchahE=)
4: AS18419.roa (hash: ZCSuzYNR48mOflulSwJ+VbxIrexVtbA8N4ku0JnE5MM=)
5: AS131627.roa (hash: ibdv4KczlUiHuqdxTA5BtcOtsysjG6n663UL3tXWjXQ=)
6: AS9922.roa (hash: IvaQKEdOvWYDileFvmUMVBKXp3pAONy0KannjnRzngo=)
7: AS1131591.roa (hash: IauF2vAXzqx5+FLJ2cLeMJ1xdIINB1w640Q7FBxzL1w=)
8: AS38843.roa (hash: jM7g2m0zCuiB1qlWCZch8/MFHF41yFm0b+Reg/rCla4=)
9: AS18412.roa (hash: CE2zw8LAItHpE4fA47F43M9ZwSlBSQoJHpZ88RXQUI0=)
10: AS7539.roa (hash: lUFNDzGgGVAFEbEBGwiSfQup6Zafx2OuCvROzt5cEzs=)
11: AS9674.roa (hash: 9C5K47ndgW2seC4+CPiDYPqScyiQy8GU6bq7cU4Eugk=)
12: AS7482.roa (hash: bDpHLcVeEJ1yrwmPoAV0hOhONRWieRc4Sv7FCsbg4ec=)
13: AS131597.roa (hash: LsG9a5v2Mc0qNEqxwITDrgC+BMD5jh+oaM6a/pv0ARQ=)
14: AS131591.roa (hash: 2WVqmdm4VP88IWBjb6Gi5Fnp5mAxh+ckRSMyNK+QUJ4=)
15: AS22787.roa (hash: VUbSGazcGTcucPhizMbOyCoMALleK0c8ipJJWzpgI7M=)
16: AS9311.roa (hash: mHZvaMCozjD7f6DphdBIPuH3dfs0ge2AQcsBDnwptRU=)
17: AS24155.roa (hash: B6Wt7WZNXH4dszSEhiREgWBhCZgaFDS2V1pAm4aHp10=)
18: AS131584.roa (hash: 8KFDdQZFyVcMY2+NIJkef5bzRNRq/PwHNYJrezzuxZg=)
19: AS17709.roa (hash: mrpVzxZoxTygt2G+v0bD2ByN8qMV6ZAjQeyWiztjUws=)
20: AS9415.roa (hash: mKFpD5bUU8702FNsEGf/NSEUs3naus85mS1aXRB/EDM=)
21: AS16625.roa (hash: Uw6g+hlQZIZrMW4fK84JNXmuicKWw9wXXtylpvc6Qa4=)
22: AS131142.roa (hash: tweFci1Q2ZNgrPegbCYB4DWzZuIQBECyL1mmHV6V+D4=)
23: AS131601.roa (hash: GCaWtJY9VQL7/LVgzoKj6m7VZWgszoRurN0mGVKVBrM=)
24: AS18049.roa (hash: Bei2X31oyp7s9F9iVIOorTxmFiMUb3zaPgCFCKPZfMc=)
25: AS9919.roa (hash: eeag909kzwe+KHt+mHzcnGmEn6oKbwOTE6rnqH7qwZ8=)
26: 71FA20FC269CE9805B2C67E59B357AA684246D10.crl (hash: UOOmoKUEwkrBOaev4kZ0ZQQSogE+R0slRm35AmFlnuc=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/FET/0/71FA20FC269CE9805B2C67E59B357AA684246D10.crl
rsync://rpkica.twnic.tw/rpki/FET/0/71FA20FC269CE9805B2C67E59B357AA684246D10.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/71FA20FC269CE9805B2C67E59B357AA684246D10.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 23 Sep 2026 10:38:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:31:f4:ee:3b:91:e4:06:77:4a:cc:52:f4:f5:2d:11:70:db:2c:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71FA20FC269CE9805B2C67E59B357AA684246D10
Validity
Not Before: Sep 22 07:30:15 2026 GMT
Not After : Sep 23 10:38:15 2026 GMT
Subject: CN=BFF2BE8DA115D305023365D28327DB7F0772F218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:36:be:b6:cb:e8:38:21:b8:c1:99:bc:1e:d9:
d5:89:26:b5:94:b2:ac:52:de:16:d9:79:54:71:5b:
b5:21:a2:14:89:d1:23:05:26:a1:5f:6e:d2:8e:0d:
e4:57:b6:ee:83:e2:23:2b:88:83:f5:6c:19:6c:fd:
b4:c4:d5:19:71:b0:50:45:4c:52:08:0e:7e:14:d2:
12:8a:75:2d:21:c1:d4:0c:73:b0:13:56:f2:09:88:
0e:6a:b0:42:f8:c8:d7:8d:56:7d:08:3a:94:8a:66:
0f:92:4e:96:43:16:5b:da:de:ad:e0:80:17:9f:9f:
af:71:a6:aa:7a:2c:24:77:e3:10:0e:a2:95:94:cc:
20:58:49:70:af:b7:f2:36:45:bf:ca:f9:6b:b8:c4:
14:6d:18:ae:fa:c1:a5:fb:1c:81:57:27:81:67:7b:
55:9b:d2:7c:b4:ef:25:30:f3:7a:b3:81:25:f2:51:
4e:07:87:42:06:30:f3:7d:50:89:d9:f7:57:6d:83:
49:c8:3c:32:6b:fb:28:17:74:55:0c:b8:12:dd:68:
51:ce:d5:df:61:e9:4d:f2:86:e7:9b:b0:42:e3:ed:
f9:1e:12:52:68:5f:3b:ee:42:8b:b5:a5:58:b5:50:
fe:31:ce:a6:82:c1:da:8b:d9:aa:c0:95:c8:38:4d:
cb:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F2:BE:8D:A1:15:D3:05:02:33:65:D2:83:27:DB:7F:07:72:F2:18
X509v3 Authority Key Identifier:
keyid:71:FA:20:FC:26:9C:E9:80:5B:2C:67:E5:9B:35:7A:A6:84:24:6D:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/FET/0/71FA20FC269CE9805B2C67E59B357AA684246D10.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/71FA20FC269CE9805B2C67E59B357AA684246D10.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/FET/0/71FA20FC269CE9805B2C67E59B357AA684246D10.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:80:3f:aa:4b:3a:e4:e8:ac:6e:99:ca:ad:87:ba:44:0f:fe:
9e:bf:a9:6e:e7:37:92:d4:cf:35:01:ae:31:de:23:4d:9c:5f:
88:16:cd:42:50:2d:74:01:52:98:5f:e8:8f:8c:4a:ce:e4:8b:
53:2c:fd:38:0b:b0:17:4b:5b:db:c6:ff:f5:be:af:64:e0:53:
3f:a9:84:bb:ab:5e:d0:d9:69:41:c8:29:c9:04:b3:2b:49:99:
16:7a:22:5a:7e:f3:2f:60:5d:78:fb:b8:84:e7:c6:04:d7:7a:
98:b1:ad:b8:b5:2b:0c:3a:20:d3:8e:85:ff:3c:56:2a:fb:df:
c6:69:f7:44:1f:b9:2b:09:1b:9b:10:bf:78:ae:d1:10:6a:f4:
12:f6:66:7d:ec:5d:87:df:94:a8:82:af:b1:bf:1a:16:8b:93:
c7:1b:1d:5e:69:d4:44:2e:e2:0b:31:8d:76:58:1d:e0:ff:58:
0f:90:c0:35:9c:6d:92:2d:cd:74:83:64:43:41:27:35:2e:6c:
75:95:a6:21:a6:18:ee:8e:13:fa:13:3d:f0:48:d9:63:69:17:
25:ac:35:dc:7c:5c:9b:7d:c4:5a:a7:6e:17:21:93:fa:41:aa:
21:2f:ca:56:ac:12:9e:fe:b5:5f:41:db:8e:c5:29:de:c6:98:
10:0e:b3:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:35:23 2026 by rpki-client