
$ rpki-client -vvf rpkica.twnic.tw/rpki/HOSTIN/1/BDC7715D29F4E43198D59315B71674EE9F648F6D.mft
File: BDC7715D29F4E43198D59315B71674EE9F648F6D.mft (raw, json)
Hash identifier: Rv25mZJ+M5R9dS9ImqFsdjo5KUY8RMjepTH9gTN3sTE=
Subject key identifier: BA:5E:01:91:3D:0D:07:15:39:5D:BA:6A:5C:F2:E7:14:01:8C:D5:BB
Authority key identifier: BD:C7:71:5D:29:F4:E4:31:98:D5:93:15:B7:16:74:EE:9F:64:8F:6D
Certificate issuer: /CN=BDC7715D29F4E43198D59315B71674EE9F648F6D
Certificate serial: 5F17CEAF9F1593618FF70B33A2A05C689921CA4C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/3/BDC7715D29F4E43198D59315B71674EE9F648F6D.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/HOSTIN/1/BDC7715D29F4E43198D59315B71674EE9F648F6D.mft
Manifest number: 47
Signing time: Sat 13 Jun 2026 04:59:01 +0000
Manifest this update: Sat 13 Jun 2026 04:54:01 +0000
Manifest next update: Sun 14 Jun 2026 07:23:01 +0000
Files and hashes: 1: 322e35382e3234302e302f32342d3234203d3e2039363738.roa (hash: 8WByk8O4kwdnsBSn9Y+LA4Eu51CWVBIY6jyU3fmAQP4=)
2: 322e35382e3234332e302f32342d3234203d3e2039363738.roa (hash: R7ZTnM2GzL6tGXWETAhZV1QG0NLgjbwtPX+n/Lsjjmg=)
3: 322e35382e3234312e302f32342d3234203d3e2039363738.roa (hash: xOi/I/BBtkCDpDsROaS/HLOcxW99pEr4rll9RneIDHw=)
4: 322e35382e3234322e302f32342d3234203d3e2039363738.roa (hash: 20/au47MFkheH0xw2Ry8v40+WXu95ZMOioGimilGBJc=)
5: BDC7715D29F4E43198D59315B71674EE9F648F6D.crl (hash: dZNPVMg9hQee6t86NUnKeNTPrLBgKkUG6rV3y9lMMDQ=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/HOSTIN/1/BDC7715D29F4E43198D59315B71674EE9F648F6D.crl
rsync://rpkica.twnic.tw/rpki/HOSTIN/1/BDC7715D29F4E43198D59315B71674EE9F648F6D.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/3/BDC7715D29F4E43198D59315B71674EE9F648F6D.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 00:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:17:ce:af:9f:15:93:61:8f:f7:0b:33:a2:a0:5c:68:99:21:ca:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDC7715D29F4E43198D59315B71674EE9F648F6D
Validity
Not Before: Jun 13 04:54:01 2026 GMT
Not After : Jun 14 07:23:01 2026 GMT
Subject: CN=BA5E01913D0D0715395DBA6A5CF2E714018CD5BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:7d:4e:d9:98:f1:b1:80:4a:c0:25:a1:cb:71:
18:82:fb:c1:03:eb:21:f2:89:5c:85:84:a2:93:a7:
e5:e8:94:46:a9:01:7b:8e:55:14:92:e3:2e:9b:0c:
8b:82:35:d1:5c:78:b7:1a:06:8c:27:48:58:88:77:
e2:21:c6:52:39:47:b7:c8:1f:98:f8:8e:d4:f0:03:
29:91:f8:17:90:9d:67:06:f7:7a:ca:7a:4d:3d:da:
dc:7f:e0:8e:27:28:41:4d:68:25:fc:c7:9e:f4:08:
df:a9:e6:21:21:22:dc:30:1b:cf:0e:2b:04:5b:35:
a8:b1:f5:37:30:c7:a5:d7:39:01:5b:55:ce:67:db:
30:c4:87:f5:39:b1:11:f0:2f:fa:30:a3:d4:a1:53:
9f:3b:1b:dd:0d:17:55:f3:da:b3:bc:3d:ff:9f:3e:
0c:6f:9e:fa:93:2e:35:da:e7:dc:21:f8:23:87:44:
17:70:e0:48:a2:58:58:70:57:78:02:c7:dd:bb:86:
38:f1:78:f7:31:ab:5d:49:5b:2c:ed:f0:60:4c:eb:
fb:27:ed:05:ba:81:6d:dd:8f:bc:ec:77:e7:05:6b:
03:28:f6:36:c3:03:1e:49:73:d2:04:83:ed:79:ea:
f2:0e:b1:73:76:f1:f4:aa:08:0f:03:c4:05:c7:a1:
6d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:5E:01:91:3D:0D:07:15:39:5D:BA:6A:5C:F2:E7:14:01:8C:D5:BB
X509v3 Authority Key Identifier:
keyid:BD:C7:71:5D:29:F4:E4:31:98:D5:93:15:B7:16:74:EE:9F:64:8F:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/HOSTIN/1/BDC7715D29F4E43198D59315B71674EE9F648F6D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/BDC7715D29F4E43198D59315B71674EE9F648F6D.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HOSTIN/1/BDC7715D29F4E43198D59315B71674EE9F648F6D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:ab:f5:0e:73:0d:7e:40:cf:2c:1d:52:7b:8b:c9:01:dc:7a:
6c:3a:88:ca:61:1e:28:0d:7d:bb:93:24:51:38:28:4e:af:92:
6d:c2:bc:85:ca:bf:d0:c5:f1:93:eb:89:6f:30:05:2d:87:9a:
21:3d:b9:6e:da:82:37:9a:e0:5e:3f:8d:7c:30:4e:17:c3:f9:
ea:be:6a:11:ac:27:13:e4:d2:1b:d4:a2:25:92:18:2f:75:61:
c2:06:c5:8e:a5:e4:ca:aa:98:7f:fc:05:88:8e:c0:a1:4d:93:
9a:63:e5:71:f0:50:c4:6c:98:45:0e:17:6e:05:cf:8b:40:71:
d6:92:57:aa:ff:ed:94:74:b3:2a:f4:79:03:88:4b:b0:5c:ea:
ef:00:52:b8:df:fa:07:66:f3:34:91:29:62:37:82:30:af:ea:
5f:3b:ff:b9:52:63:e1:9e:88:f7:62:a4:f6:18:3f:ab:64:40:
62:82:fe:6d:f8:3d:2e:7e:9f:b0:e2:57:70:8a:eb:8b:a5:1c:
0b:92:10:a1:96:ea:e7:c2:3c:04:44:db:45:3c:a0:fb:48:f3:
a3:86:77:b1:e6:46:b1:52:63:e2:94:79:01:ee:d2:cb:b5:1c:
c3:09:dc:a5:45:42:3e:6b:ed:87:7d:9c:02:5b:6c:51:ca:15:
2a:04:17:f1
-----BEGIN CERTIFICATE-----
MIIE5DCCA8ygAwIBAgIUXxfOr58Vk2GP9wszoqBcaJkhykwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkRDNzcxNUQyOUY0RTQzMTk4RDU5MzE1QjcxNjc0RUU5
RjY0OEY2RDAeFw0yNjA2MTMwNDU0MDFaFw0yNjA2MTQwNzIzMDFaMDMxMTAvBgNV
BAMTKEJBNUUwMTkxM0QwRDA3MTUzOTVEQkE2QTVDRjJFNzE0MDE4Q0Q1QkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjfU7ZmPGxgErAJaHLcRiC+8ED
6yHyiVyFhKKTp+XolEapAXuOVRSS4y6bDIuCNdFceLcaBownSFiId+IhxlI5R7fI
H5j4jtTwAymR+BeQnWcG93rKek092tx/4I4nKEFNaCX8x570CN+p5iEhItwwG88O
KwRbNaix9Tcwx6XXOQFbVc5n2zDEh/U5sRHwL/owo9ShU587G90NF1Xz2rO8Pf+f
PgxvnvqTLjXa59wh+COHRBdw4EiiWFhwV3gCx927hjjxePcxq11JWyzt8GBM6/sn
7QW6gW3dj7zsd+cFawMo9jbDAx5Jc9IEg+156vIOsXN28fSqCA8DxAXHoW0jAgMB
AAGjggHuMIIB6jAdBgNVHQ4EFgQUul4BkT0NBxU5XbpqXPLnFAGM1bswHwYDVR0j
BBgwFoAUvcdxXSn05DGY1ZMVtxZ07p9kj20wDgYDVR0PAQH/BAQDAgeAMGMGA1Ud
HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSE9TVElO
LzEvQkRDNzcxNUQyOUY0RTQzMTk4RDU5MzE1QjcxNjc0RUU5RjY0OEY2RC5jcmww
bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p
Yy50dy9ycGtpL1RXTklDQ0EvMy9CREM3NzE1RDI5RjRFNDMxOThENTkzMTVCNzE2
NzRFRTlGNjQ4RjZELmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz
eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSE9TVElOLzEvQkRDNzcxNUQyOUY0
RTQzMTk4RDU5MzE1QjcxNjc0RUU5RjY0OEY2RC5tZnQwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG
CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAFCr9Q5zDX5A
zywdUnuLyQHcemw6iMphHigNfbuTJFE4KE6vkm3CvIXKv9DF8ZPriW8wBS2HmiE9
uW7agjea4F4/jXwwThfD+eq+ahGsJxPk0hvUoiWSGC91YcIGxY6l5MqqmH/8BYiO
wKFNk5pj5XHwUMRsmEUOF24Fz4tAcdaSV6r/7ZR0syr0eQOIS7Bc6u8AUrjf+gdm
8zSRKWI3gjCv6l87/7lSY+GeiPdipPYYP6tkQGKC/m34PS5+n7DiV3CK64ulHAuS
EKGW6ufCPARE20U8oPtI86OGd7HmRrFSY+KUeQHu0su1HMMJ3KVFQj5r7Yd9nAJb
bFHKFSoEF/E=
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:38:40 2026 by rpki-client