
$ rpki-client -vvf rpkica.twnic.tw/rpki/HEALTHNET/0/4D7FACF5E4861DAF455F31BCAEBB761339B8145F.mft
File: 4D7FACF5E4861DAF455F31BCAEBB761339B8145F.mft (raw, json)
Hash identifier: 5kX8utw56s1KPLIamAxsRQtC+3J+rByOjkfb/LqxoJ4=
Subject key identifier: 6C:08:3C:D9:46:0E:DD:A4:EC:57:97:9C:95:EC:69:BD:10:56:DF:69
Authority key identifier: 4D:7F:AC:F5:E4:86:1D:AF:45:5F:31:BC:AE:BB:76:13:39:B8:14:5F
Certificate issuer: /CN=4D7FACF5E4861DAF455F31BCAEBB761339B8145F
Certificate serial: 7D43692536FEEFE8E1754CCD16BD6F9522F5BC89
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4D7FACF5E4861DAF455F31BCAEBB761339B8145F.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/HEALTHNET/0/4D7FACF5E4861DAF455F31BCAEBB761339B8145F.mft
Manifest number: 2E
Signing time: Sat 13 Jun 2026 01:13:36 +0000
Manifest this update: Sat 13 Jun 2026 01:08:36 +0000
Manifest next update: Sun 14 Jun 2026 02:24:36 +0000
Files and hashes: 1: 4D7FACF5E4861DAF455F31BCAEBB761339B8145F.crl (hash: DOsXkUXto87DwaGQGxuhIuZPLzkYC5+JCVEJGE8QBG8=)
2: 3230332e36352e3132382e302f31392d3139203d3e2034373832.roa (hash: mjDMiNdATFHdMEjP66ppJ/Z0/1InOOtWemdYwazOi5A=)
3: 3230332e36352e302e302f31372d3137203d3e2034373832.roa (hash: aPv3bOG1weQWYPDGkDtRVOrTNA4jAzlE7y9bBkzaAf8=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/HEALTHNET/0/4D7FACF5E4861DAF455F31BCAEBB761339B8145F.crl
rsync://rpkica.twnic.tw/rpki/HEALTHNET/0/4D7FACF5E4861DAF455F31BCAEBB761339B8145F.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4D7FACF5E4861DAF455F31BCAEBB761339B8145F.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 00:20:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:43:69:25:36:fe:ef:e8:e1:75:4c:cd:16:bd:6f:95:22:f5:bc:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4D7FACF5E4861DAF455F31BCAEBB761339B8145F
Validity
Not Before: Jun 13 01:08:36 2026 GMT
Not After : Jun 14 02:24:36 2026 GMT
Subject: CN=6C083CD9460EDDA4EC57979C95EC69BD1056DF69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cd:47:65:72:9a:40:05:e8:7d:b4:83:65:94:
b1:62:93:17:e8:59:ca:ca:47:a6:33:12:cd:c7:32:
57:a3:76:0d:8e:e5:d6:2f:07:4e:4d:09:23:0e:11:
e1:dd:44:b1:ed:de:0c:8a:4d:30:fe:54:40:49:29:
ac:a8:64:aa:86:25:fa:e9:89:b4:bf:97:ba:c1:54:
68:4d:32:4b:6c:26:10:3e:9d:99:72:68:d1:a9:ff:
4d:d8:f8:54:7c:54:83:04:86:6a:92:13:66:7f:36:
7f:90:6f:d0:da:5e:8d:47:82:8f:83:06:8b:3e:4d:
eb:20:05:03:9d:22:00:ff:59:1d:a7:0c:b4:53:b7:
0c:c4:8d:fc:d9:43:62:86:db:9a:84:0f:6c:38:e5:
d2:ab:c7:f7:bd:6e:ae:6c:f7:61:f3:72:c8:67:05:
19:82:5a:18:49:f0:b4:a8:be:00:1e:8d:77:56:97:
f7:5d:a4:23:6a:f9:c9:ae:45:61:b7:58:f4:af:2e:
58:05:f0:9e:32:18:0c:aa:c8:7a:8f:19:33:49:4a:
5c:2c:a4:a3:2b:e7:c1:75:5e:fa:af:90:88:cc:41:
39:b8:1d:86:0f:e8:64:fb:b2:f8:33:fd:18:2a:8b:
9b:eb:62:de:65:d9:c5:f8:42:8f:b2:e9:8a:d8:d9:
b1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:08:3C:D9:46:0E:DD:A4:EC:57:97:9C:95:EC:69:BD:10:56:DF:69
X509v3 Authority Key Identifier:
keyid:4D:7F:AC:F5:E4:86:1D:AF:45:5F:31:BC:AE:BB:76:13:39:B8:14:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/HEALTHNET/0/4D7FACF5E4861DAF455F31BCAEBB761339B8145F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4D7FACF5E4861DAF455F31BCAEBB761339B8145F.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HEALTHNET/0/4D7FACF5E4861DAF455F31BCAEBB761339B8145F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:36:be:40:61:61:d9:8f:e3:7d:98:9c:e7:b8:ea:05:63:fa:
d8:52:f1:53:5e:f5:95:f2:d6:92:48:a3:a3:38:00:f0:87:e9:
fa:c9:8e:13:2f:12:61:9e:a7:a2:58:a2:20:2b:88:df:76:96:
81:62:0c:2f:05:4a:82:b3:f5:46:3a:36:fe:31:f7:e2:1e:22:
87:a8:33:08:be:98:d0:fe:c8:35:89:a4:4b:27:69:e2:da:07:
2b:4e:2f:af:51:67:6f:e1:1f:be:d2:37:6e:11:ad:1c:26:ff:
22:ef:5d:19:ea:6a:57:9c:d5:dd:b9:67:42:09:16:62:f4:f7:
5c:f2:4d:e8:b6:be:2a:8f:24:8b:b1:13:c2:16:6c:e2:0d:df:
c3:82:2c:50:64:f9:c7:be:fb:da:1a:ab:ae:04:90:b3:dc:78:
7c:a8:29:bd:25:09:88:56:e6:08:1c:8c:cc:d3:3d:bd:eb:ef:
01:87:61:11:be:6b:b5:15:a3:c2:7f:62:4a:03:42:b7:94:e1:
fe:4e:07:6c:7f:e8:82:a2:d6:6e:e9:e2:17:9c:d7:d3:5c:b4:
af:78:c8:e8:2f:cf:cb:38:38:a9:2b:e9:ed:04:a8:14:75:b0:
74:73:3a:0a:b1:8f:0c:45:13:83:49:2a:cb:33:5d:f4:ff:b3:
dd:b8:b1:f8
-----BEGIN CERTIFICATE-----
MIIE6jCCA9KgAwIBAgIUfUNpJTb+7+jhdUzNFr1vlSL1vIkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEQ3RkFDRjVFNDg2MURBRjQ1NUYzMUJDQUVCQjc2MTMz
OUI4MTQ1RjAeFw0yNjA2MTMwMTA4MzZaFw0yNjA2MTQwMjI0MzZaMDMxMTAvBgNV
BAMTKDZDMDgzQ0Q5NDYwRUREQTRFQzU3OTc5Qzk1RUM2OUJEMTA1NkRGNjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuzUdlcppABeh9tINllLFikxfo
WcrKR6YzEs3HMlejdg2O5dYvB05NCSMOEeHdRLHt3gyKTTD+VEBJKayoZKqGJfrp
ibS/l7rBVGhNMktsJhA+nZlyaNGp/03Y+FR8VIMEhmqSE2Z/Nn+Qb9DaXo1Hgo+D
Bos+TesgBQOdIgD/WR2nDLRTtwzEjfzZQ2KG25qED2w45dKrx/e9bq5s92Hzcshn
BRmCWhhJ8LSovgAejXdWl/ddpCNq+cmuRWG3WPSvLlgF8J4yGAyqyHqPGTNJSlws
pKMr58F1XvqvkIjMQTm4HYYP6GT7svgz/Rgqi5vrYt5l2cX4Qo+y6YrY2bGNAgMB
AAGjggH0MIIB8DAdBgNVHQ4EFgQUbAg82UYO3aTsV5eclexpvRBW32kwHwYDVR0j
BBgwFoAUTX+s9eSGHa9FXzG8rrt2Ezm4FF8wDgYDVR0PAQH/BAQDAgeAMGYGA1Ud
HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSEVBTFRI
TkVULzAvNEQ3RkFDRjVFNDg2MURBRjQ1NUYzMUJDQUVCQjc2MTMzOUI4MTQ1Ri5j
cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvMS80RDdGQUNGNUU0ODYxREFGNDU1RjMxQkNB
RUJCNzYxMzM5QjgxNDVGLmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG
VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSEVBTFRITkVULzAvNEQ3RkFD
RjVFNDg2MURBRjQ1NUYzMUJDQUVCQjc2MTMzOUI4MTQ1Ri5tZnQwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBADk2
vkBhYdmP432YnOe46gVj+thS8VNe9ZXy1pJIo6M4APCH6frJjhMvEmGep6JYoiAr
iN92loFiDC8FSoKz9UY6Nv4x9+IeIoeoMwi+mND+yDWJpEsnaeLaBytOL69RZ2/h
H77SN24RrRwm/yLvXRnqalec1d25Z0IJFmL091zyTei2viqPJIuxE8IWbOIN38OC
LFBk+ce++9oaq64EkLPceHyoKb0lCYhW5ggcjMzTPb3r7wGHYRG+a7UVo8J/YkoD
QreU4f5OB2x/6IKi1m7p4hec19NctK94yOgvz8s4OKkr6e0EqBR1sHRzOgqxjwxF
E4NJKsszXfT/s924sfg=
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:03:15 2026 by rpki-client