
$ rpki-client -vvf rpkica.twnic.tw/rpki/IMCRS/0/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.mft
File: A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.mft (raw, json)
Hash identifier: XQVAN5xFySHNmWrHaqTQ6OPCYDM52cOiWJL6iqWTEwo=
Subject key identifier: 98:F9:72:B1:35:84:C6:45:E9:72:1A:67:76:B1:D1:3A:DA:8D:15:92
Authority key identifier: A7:82:7E:4E:53:BA:51:7B:BC:5C:79:8C:F0:D3:AF:87:03:75:C0:B0
Certificate issuer: /CN=A7827E4E53BA517BBC5C798CF0D3AF870375C0B0
Certificate serial: 44B4A84202A55905DD170636D1726853EB7A8921
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/IMCRS/0/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.mft
Manifest number: 70
Signing time: Tue 28 Jul 2026 09:38:06 +0000
Manifest this update: Tue 28 Jul 2026 09:33:06 +0000
Manifest next update: Wed 29 Jul 2026 10:22:06 +0000
Files and hashes: 1: 3130332e3232372e3232342e302f32332d3234203d3e20313438393936.roa (hash: Pe+GfCAU9CJUhyX0GcmCiKMiXy/uVxymKcKinAclsuQ=)
2: 3130332e3232372e3232352e302f32342d3234203d3e20313438393936.roa (hash: 3Fs3YXCHVhPim686QjSLVypvleRfB5cNa4r0sVni22s=)
3: 3130332e3137372e33322e302f32332d3234203d3e203338303432.roa (hash: xPDyINdFmufQbNbHGWy0zvLscglHenPHYxlwfT+v00s=)
4: 3130332e3232372e3232342e302f32332d3234203d3e20313334383233.roa (hash: GuzN1ophfvX5EgHLKpJRkwlqpD4JGNW35OZ+ZCoqD78=)
5: A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.crl (hash: sdyjt1oV1/E0hrgiOYituBsjAf32KAHK6j5bs/PKdxw=)
6: 3130332e3137372e33322e302f32342d3234203d3e20323134343332.roa (hash: 2YaoD0V9MTmYaytjBdN3g/2JltFPIOscJRsxuw7e/EQ=)
7: 3130332e3232372e3232342e302f32342d3234203d3e20313438393936.roa (hash: qkqrj9/N2V1M+ri4JRAjh2Xtl5l0eXftPC6OL0jPaCQ=)
8: 3130332e3137372e33322e302f32342d3234203d3e20323133363037.roa (hash: cQkjcrDW6Cw958N6gtJjxyd/adphXQyJjpPcfgZ5xG4=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/IMCRS/0/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.crl
rsync://rpkica.twnic.tw/rpki/IMCRS/0/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 07:22:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:b4:a8:42:02:a5:59:05:dd:17:06:36:d1:72:68:53:eb:7a:89:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A7827E4E53BA517BBC5C798CF0D3AF870375C0B0
Validity
Not Before: Jul 28 09:33:06 2026 GMT
Not After : Jul 29 10:22:06 2026 GMT
Subject: CN=98F972B13584C645E9721A6776B1D13ADA8D1592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:06:18:4a:12:3f:72:91:9b:70:91:14:8a:eb:
1c:8b:54:74:98:49:01:95:ae:d1:6a:5d:ad:ab:54:
65:e2:b9:d7:39:cb:01:7f:c7:3c:84:2f:00:ec:57:
d8:66:36:3f:2c:d9:e1:a8:e3:9d:52:b1:ef:12:dc:
af:0e:88:97:ce:76:5b:c1:99:9e:60:34:b2:01:25:
f4:34:b2:f4:5e:b6:7a:10:90:2d:b2:25:78:26:e1:
b4:70:cf:56:94:82:9e:3d:ce:01:f8:55:7c:63:db:
84:f0:f8:4c:59:9f:2a:09:e6:97:19:8a:82:d9:97:
e6:f0:e1:dd:e5:68:d5:f0:58:3c:57:e2:fd:81:b3:
4d:09:0e:01:23:a4:97:ae:79:58:55:b9:21:3d:37:
79:38:e2:81:c8:7b:6d:3e:40:6c:f5:7d:28:6e:71:
7c:43:07:e2:62:22:20:bb:ee:fa:84:19:36:36:df:
8e:eb:49:db:5d:e0:d7:05:7a:42:f5:d0:36:24:d4:
fc:cc:9a:99:c9:4c:33:37:6f:ca:8a:84:c3:2d:59:
7f:21:ac:47:bc:d6:d5:14:e3:9c:8b:94:ec:ff:8b:
c7:51:4d:94:09:a7:3d:34:ee:3a:6b:da:1e:35:a0:
c9:61:4a:02:5a:92:6e:b1:56:42:d9:7c:ed:1b:99:
ef:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:F9:72:B1:35:84:C6:45:E9:72:1A:67:76:B1:D1:3A:DA:8D:15:92
X509v3 Authority Key Identifier:
keyid:A7:82:7E:4E:53:BA:51:7B:BC:5C:79:8C:F0:D3:AF:87:03:75:C0:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/IMCRS/0/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/IMCRS/0/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:0f:1e:6f:ee:b2:0e:46:01:e8:3e:dd:83:6a:34:15:a2:53:
8a:28:35:99:90:1a:0c:e2:40:a2:f6:4b:39:5b:4c:06:bd:ec:
22:ff:cc:d4:e2:b0:76:4f:94:ef:3b:de:85:a3:27:9b:df:1c:
5f:56:72:21:05:5d:20:bb:8b:8f:62:f9:7b:37:8f:16:e2:a1:
63:e3:b8:93:85:42:0a:af:b5:ae:ed:76:91:ed:23:e8:c3:a2:
d3:45:09:ce:38:e2:2d:b6:4e:5e:c0:89:48:6f:5f:85:98:2e:
3d:74:d0:b2:05:b3:91:ee:e1:fe:aa:e2:c5:5c:ef:9e:ea:0d:
e0:ea:5f:45:25:ae:9f:14:b8:a4:0b:91:ad:8e:98:5e:93:f9:
80:bd:c7:d2:97:dd:65:2b:50:f5:09:36:ed:d3:57:91:0a:e7:
32:01:a1:d6:5f:cc:43:c2:2c:b8:2e:e9:db:43:57:da:5e:ea:
d7:10:0c:b1:fa:9a:be:b1:4f:32:51:c4:73:c3:a4:58:ab:45:
38:37:c8:dc:8c:7c:66:b8:c2:1c:69:c4:d8:04:b1:ab:a2:4b:
ed:0f:d9:46:9d:c5:99:26:64:81:8b:6f:6f:a7:4f:61:69:84:
c8:ab:05:3a:cb:b2:b5:a7:b8:e4:da:08:23:d5:8f:50:12:74:
e3:43:78:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:35:48 2026 by rpki-client