
$ rpki-client -vvvf rpkica.twnic.tw/rpki/HWME1204/0/B76FD1E694797D3247661AEF17ADB42F18FF37F9.mft
File: B76FD1E694797D3247661AEF17ADB42F18FF37F9.mft (raw, json)
Hash identifier: KVIYJ5bYxWgQazcAW6M9W2+JkdbqApHqKeYt7rqSEok=
Subject key identifier: 1D:60:59:2B:4B:A3:83:9B:C0:EE:FC:D0:10:7B:F3:7A:00:D1:B2:9A
Authority key identifier: B7:6F:D1:E6:94:79:7D:32:47:66:1A:EF:17:AD:B4:2F:18:FF:37:F9
Certificate issuer: /CN=B76FD1E694797D3247661AEF17ADB42F18FF37F9
Certificate serial: 2782721CA38FCC234477AD45764EA67454F480F0
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B76FD1E694797D3247661AEF17ADB42F18FF37F9.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/HWME1204/0/B76FD1E694797D3247661AEF17ADB42F18FF37F9.mft
Manifest number: B2
Signing time: Mon 21 Sep 2026 19:37:02 +0000
Manifest this update: Mon 21 Sep 2026 19:32:02 +0000
Manifest next update: Tue 22 Sep 2026 21:20:02 +0000
Files and hashes: 1: 3130332e3132362e3138302e302f32322d3234203d3e203138303436.roa (hash: a8xqBAe2caapH+ozlzEc+y43Zwh4KNtvwAmfNpRDkMo=)
2: B76FD1E694797D3247661AEF17ADB42F18FF37F9.crl (hash: pLpESd89yptvITMnicbEP7Qg3t2rk6VbLAOVJd1IGVM=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/HWME1204/0/B76FD1E694797D3247661AEF17ADB42F18FF37F9.crl
rsync://rpkica.twnic.tw/rpki/HWME1204/0/B76FD1E694797D3247661AEF17ADB42F18FF37F9.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B76FD1E694797D3247661AEF17ADB42F18FF37F9.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 21:20:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:82:72:1c:a3:8f:cc:23:44:77:ad:45:76:4e:a6:74:54:f4:80:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B76FD1E694797D3247661AEF17ADB42F18FF37F9
Validity
Not Before: Sep 21 19:32:02 2026 GMT
Not After : Sep 22 21:20:02 2026 GMT
Subject: CN=1D60592B4BA3839BC0EEFCD0107BF37A00D1B29A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1f:db:72:ef:14:61:7e:10:eb:7e:e2:19:ef:
e9:42:59:d9:06:de:34:57:32:cf:cb:6f:55:df:24:
84:2f:89:ed:b3:d2:e0:56:b1:79:65:16:85:fa:88:
16:d7:bc:34:88:11:30:88:2a:80:fc:ce:cd:b8:40:
ee:6d:5e:02:c1:02:97:2a:40:1c:c1:40:69:67:42:
72:16:6d:97:e3:b8:44:9c:5c:c3:2e:fe:48:6a:8d:
8d:c5:d0:07:ec:d2:69:f3:3e:f8:bb:1d:2e:bc:00:
f5:05:a7:9c:71:4d:53:91:58:25:14:8f:7d:6b:d8:
ee:2e:b6:3e:6c:7c:ba:64:35:1c:05:8f:65:58:31:
3c:e4:9c:fe:bb:83:b0:85:64:36:75:fa:55:9b:23:
99:0c:50:06:db:45:91:76:63:0d:66:de:ea:04:46:
a3:23:60:7d:9d:1c:e2:bc:f3:12:0e:6b:9e:99:8a:
3e:a5:f3:3f:a3:f1:b0:09:b9:48:b4:cb:fb:82:cc:
2f:7c:cc:81:c5:af:a2:27:7f:87:a7:19:e2:11:fc:
24:67:6d:e5:00:d7:cd:f6:62:00:7f:54:4f:d5:54:
75:49:32:c1:d0:c7:09:7f:ca:9e:1f:7c:02:92:d7:
e8:8e:f6:71:34:b2:7d:31:d2:08:ab:14:94:bf:30:
71:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:60:59:2B:4B:A3:83:9B:C0:EE:FC:D0:10:7B:F3:7A:00:D1:B2:9A
X509v3 Authority Key Identifier:
keyid:B7:6F:D1:E6:94:79:7D:32:47:66:1A:EF:17:AD:B4:2F:18:FF:37:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/HWME1204/0/B76FD1E694797D3247661AEF17ADB42F18FF37F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B76FD1E694797D3247661AEF17ADB42F18FF37F9.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HWME1204/0/B76FD1E694797D3247661AEF17ADB42F18FF37F9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:18:7c:c7:3c:26:c8:89:ca:92:1c:fa:8d:06:f0:41:4d:66:
58:0a:a6:ae:8f:d9:df:fb:87:1f:e2:43:48:63:f6:03:8f:9e:
d9:6f:14:51:1d:d5:18:91:f0:67:8a:d9:81:d5:49:98:6e:aa:
3b:c2:d8:fd:15:67:1e:d0:0b:2b:49:7f:3c:7e:93:4e:86:00:
09:28:dd:86:75:26:b3:86:d9:79:2d:30:07:80:22:6b:d1:17:
3c:c6:b9:f0:0c:40:3c:02:c8:72:a3:1e:64:bc:5c:7e:4c:04:
ab:ea:2a:b2:2b:8e:aa:dd:8e:03:33:d8:29:24:45:16:f1:cb:
75:af:66:b5:c7:b0:09:97:d0:e4:3b:d0:38:bc:99:7b:4f:47:
b7:4c:26:92:5a:b0:3b:00:e8:ea:74:0a:c1:a4:29:20:82:68:
91:27:e7:b3:58:b2:f5:82:d6:21:ff:85:6a:a1:8f:5b:c9:54:
9f:76:43:e9:38:2a:58:0e:28:b2:71:9e:c6:bb:e0:01:ab:99:
29:10:0a:93:99:67:71:6d:0e:51:6f:ec:ef:f4:d3:7c:43:67:
1f:eb:02:07:1a:62:0b:a8:2d:04:2d:c1:1e:83:9e:94:0e:e3:
ff:ad:3e:3b:0e:d7:0a:5c:87:71:0a:79:61:b7:cd:4b:75:45:
12:13:f4:30
-----BEGIN CERTIFICATE-----
MIIE6DCCA9CgAwIBAgIUJ4JyHKOPzCNEd61Fdk6mdFT0gPAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjc2RkQxRTY5NDc5N0QzMjQ3NjYxQUVGMTdBREI0MkYx
OEZGMzdGOTAeFw0yNjA5MjExOTMyMDJaFw0yNjA5MjIyMTIwMDJaMDMxMTAvBgNV
BAMTKDFENjA1OTJCNEJBMzgzOUJDMEVFRkNEMDEwN0JGMzdBMDBEMUIyOUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbH9ty7xRhfhDrfuIZ7+lCWdkG
3jRXMs/Lb1XfJIQvie2z0uBWsXllFoX6iBbXvDSIETCIKoD8zs24QO5tXgLBApcq
QBzBQGlnQnIWbZfjuEScXMMu/khqjY3F0Afs0mnzPvi7HS68APUFp5xxTVORWCUU
j31r2O4utj5sfLpkNRwFj2VYMTzknP67g7CFZDZ1+lWbI5kMUAbbRZF2Yw1m3uoE
RqMjYH2dHOK88xIOa56Zij6l8z+j8bAJuUi0y/uCzC98zIHFr6Inf4enGeIR/CRn
beUA1832YgB/VE/VVHVJMsHQxwl/yp4ffAKS1+iO9nE0sn0x0girFJS/MHFpAgMB
AAGjggHyMIIB7jAdBgNVHQ4EFgQUHWBZK0ujg5vA7vzQEHvzegDRspowHwYDVR0j
BBgwFoAUt2/R5pR5fTJHZhrvF620Lxj/N/kwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud
HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSFdNRTEy
MDQvMC9CNzZGRDFFNjk0Nzk3RDMyNDc2NjFBRUYxN0FEQjQyRjE4RkYzN0Y5LmNy
bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3
bmljLnR3L3Jwa2kvVFdOSUNDQS8xL0I3NkZEMUU2OTQ3OTdEMzI0NzY2MUFFRjE3
QURCNDJGMThGRjM3RjkuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU
cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9IV01FMTIwNC8wL0I3NkZEMUU2
OTQ3OTdEMzI0NzY2MUFFRjE3QURCNDJGMThGRjM3RjkubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBlGHzH
PCbIicqSHPqNBvBBTWZYCqauj9nf+4cf4kNIY/YDj57ZbxRRHdUYkfBnitmB1UmY
bqo7wtj9FWce0AsrSX88fpNOhgAJKN2GdSazhtl5LTAHgCJr0Rc8xrnwDEA8Ashy
ox5kvFx+TASr6iqyK46q3Y4DM9gpJEUW8ct1r2a1x7AJl9DkO9A4vJl7T0e3TCaS
WrA7AOjqdArBpCkggmiRJ+ezWLL1gtYh/4VqoY9byVSfdkPpOCpYDiiycZ7Gu+AB
q5kpEAqTmWdxbQ5Rb+zv9NN8Q2cf6wIHGmILqC0ELcEeg56UDuP/rT47DtcKXIdx
Cnlht81LdUUSE/Qw
-----END CERTIFICATE-----
Generated at Tue Sep 22 07:11:32 2026 by rpki-client