
$ rpki-client -vvf rpkica.twnic.tw/rpki/ISTVC/0/41BEB65668E1649EDE9728E4FF48591FA0C582BA.mft
File: 41BEB65668E1649EDE9728E4FF48591FA0C582BA.mft (raw, json)
Hash identifier: 65CGJHgSFZIN8c7aeebQ7eS/9iwODFYW7YwjehfMcjM=
Subject key identifier: 76:12:EC:E7:F1:48:CA:5A:FE:54:9C:1C:A6:E1:A1:40:C5:EB:4B:6E
Authority key identifier: 41:BE:B6:56:68:E1:64:9E:DE:97:28:E4:FF:48:59:1F:A0:C5:82:BA
Certificate issuer: /CN=41BEB65668E1649EDE9728E4FF48591FA0C582BA
Certificate serial: 72799F6AAFD015F4C70BCF5986987A1965525CEA
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/41BEB65668E1649EDE9728E4FF48591FA0C582BA.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/ISTVC/0/41BEB65668E1649EDE9728E4FF48591FA0C582BA.mft
Manifest number: 30
Signing time: Fri 12 Jun 2026 18:32:41 +0000
Manifest this update: Fri 12 Jun 2026 18:27:41 +0000
Manifest next update: Sat 13 Jun 2026 19:28:41 +0000
Files and hashes: 1: 3130332e3137332e39342e302f32332d3234203d3e20313532363134.roa (hash: DFwmEzDSWwn1n/LKb3VnZN0eid9zGs6vXBGXUYxrvVE=)
2: 323430373a653463303a3a2f34382d3438203d3e20313532363134.roa (hash: vgzFcwGEYe/SuHzv/bradPPbtlCxt1g9+kfxNVcgqL0=)
3: 41BEB65668E1649EDE9728E4FF48591FA0C582BA.crl (hash: Do4TsACZ/RfhnZ4S4a2rdRrGNAawykO03BCmpQWVAgY=)
4: 3130332e3137332e39342e302f32332d3234203d3e2039393230.roa (hash: 4AY9mKhgxxuuSl6y1Sy2exIP/SFNw2gXcIDmergV1Y0=)
5: 3130332e3137332e39342e302f32342d3234203d3e2039393230.roa (hash: LLLHTnX1lDVfIT/USPcy8uRSK7AEjVy8r3OHlXaKRtA=)
6: 3130332e3137332e39352e302f32342d3234203d3e2039393230.roa (hash: GRWZ7hnM+/dWxb1R4FqblAJoXVc3WKwBr5Lvm8NY3Iw=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/ISTVC/0/41BEB65668E1649EDE9728E4FF48591FA0C582BA.crl
rsync://rpkica.twnic.tw/rpki/ISTVC/0/41BEB65668E1649EDE9728E4FF48591FA0C582BA.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/41BEB65668E1649EDE9728E4FF48591FA0C582BA.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 19:28:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:79:9f:6a:af:d0:15:f4:c7:0b:cf:59:86:98:7a:19:65:52:5c:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41BEB65668E1649EDE9728E4FF48591FA0C582BA
Validity
Not Before: Jun 12 18:27:41 2026 GMT
Not After : Jun 13 19:28:41 2026 GMT
Subject: CN=7612ECE7F148CA5AFE549C1CA6E1A140C5EB4B6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:06:40:d8:b3:e4:63:6a:1d:bb:ec:58:0a:5e:
aa:59:2d:57:97:b7:d5:ae:c6:07:5c:99:d3:dc:cc:
eb:8b:d7:46:82:71:92:31:78:87:bd:7a:67:55:35:
b1:60:13:31:4b:76:5b:72:70:24:a7:78:74:99:6f:
c4:cf:03:83:41:02:9c:a6:c6:07:a3:f2:a4:b6:e6:
24:e6:b5:90:29:85:b2:bf:ca:e6:f7:a9:c0:d1:57:
8d:25:ea:db:c9:5a:fa:06:59:d8:19:fb:d0:d1:f4:
0d:a8:a3:18:95:fb:2a:d5:85:1d:ef:d3:76:7d:99:
65:ec:80:c1:30:61:42:e2:e1:3f:09:44:ca:1d:56:
6e:d8:b8:1b:4c:43:3a:d0:df:57:8e:ea:7c:b2:fc:
e4:1e:50:d5:43:c8:f6:94:07:3d:8a:57:7e:75:43:
33:e4:c9:2b:8e:f8:9c:23:6c:b2:b3:bd:f9:74:63:
96:07:c1:1d:b4:96:40:fd:a1:95:40:44:90:f0:a5:
55:e6:df:01:28:f1:c1:db:0d:8f:e6:66:2d:f9:c0:
cd:f2:7d:fd:ee:53:90:4a:c5:71:da:26:9a:a3:f3:
a6:8b:14:d2:da:04:2e:b5:d7:d5:52:08:8d:58:3b:
78:13:c2:69:27:b3:6b:28:48:78:34:7c:ef:56:40:
e8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:12:EC:E7:F1:48:CA:5A:FE:54:9C:1C:A6:E1:A1:40:C5:EB:4B:6E
X509v3 Authority Key Identifier:
keyid:41:BE:B6:56:68:E1:64:9E:DE:97:28:E4:FF:48:59:1F:A0:C5:82:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/ISTVC/0/41BEB65668E1649EDE9728E4FF48591FA0C582BA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/41BEB65668E1649EDE9728E4FF48591FA0C582BA.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ISTVC/0/41BEB65668E1649EDE9728E4FF48591FA0C582BA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:82:3c:89:8a:c8:43:b3:e7:33:cb:d8:1c:d0:75:a0:1f:ea:
0a:57:30:24:e5:a2:1a:22:82:74:2c:03:88:66:1e:03:8f:8d:
70:65:1b:8f:ea:74:6d:63:ed:85:59:d3:4b:79:1e:7a:ec:19:
45:e3:f3:35:36:48:d5:8c:1e:48:3e:61:dd:69:29:d2:01:d9:
eb:be:25:80:8a:e0:f9:f0:04:2c:14:e9:b8:46:57:bb:7e:6e:
cf:df:f2:9b:ec:93:7f:e5:04:64:1a:ab:1e:9b:e5:b7:6e:d7:
50:b1:88:32:25:49:f7:a9:1a:b2:24:e0:4f:1a:d7:03:3f:1f:
4c:91:dd:52:80:31:56:b9:11:dd:16:8c:29:ac:f3:b3:7c:8f:
e4:f4:59:16:1d:9d:ad:30:98:c2:40:65:5a:4e:d8:f9:94:7a:
f3:98:bb:6d:9d:61:36:a4:68:6f:cd:58:19:5f:a2:94:75:92:
b7:82:ed:0c:f6:d4:5b:d5:0b:0b:f8:a1:53:4f:bf:00:88:4f:
cc:8f:26:33:b5:43:75:49:f9:27:ec:75:b8:22:da:6b:f9:a3:
8c:06:3b:d5:68:65:4f:66:32:bb:ea:d0:e6:c6:59:13:1b:6f:
e1:db:73:77:85:16:ce:59:70:e4:c2:de:13:32:f8:7c:ce:00:
4d:0a:2d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:18:42 2026 by rpki-client