
$ rpki-client -vvvf rpkica.twnic.tw/rpki/KE-ING/0/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.mft
File: 049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.mft (raw, json)
Hash identifier: pM6OcziU0AfVFmddD1WZ9SZEDtrna5lgvJfb1JzjkAQ=
Subject key identifier: B9:74:2B:D6:AC:E0:17:58:35:04:E4:9E:E9:BC:03:0D:C7:86:43:F6
Authority key identifier: 04:9D:4D:BC:FA:A5:EE:28:A7:9B:F4:9E:62:3E:87:CD:23:32:4E:4B
Certificate issuer: /CN=049D4DBCFAA5EE28A79BF49E623E87CD23324E4B
Certificate serial: 331860A0FC57C62FB8BF50C1F460F1687B929BB9
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/KE-ING/0/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.mft
Manifest number: CE
Signing time: Mon 21 Sep 2026 17:21:42 +0000
Manifest this update: Mon 21 Sep 2026 17:16:42 +0000
Manifest next update: Tue 22 Sep 2026 19:33:42 +0000
Files and hashes: 1: 3132342e3135352e3132382e302f31392d3234203d3e203138303432.roa (hash: IN0+/ooOlPpq110sSFYkiYlC1Kewj2Ug+tzHpY6kPI0=)
2: 3230322e3135312e34382e302f32302d3234203d3e203138303432.roa (hash: 0Sm3TU3ucHMOKOYa+d48jFM4xmkHZ7KXpkQsW/3BXuk=)
3: 3131392e31342e3132382e302f31372d3137203d3e2039343136.roa (hash: etypLFOH/+2ky9YLH0gkWFgtIbtkxf0DGdzRztYvnQ4=)
4: 3132342e3135352e3132382e302f31392d3234203d3e2039343136.roa (hash: 893YGx4CNG5anpdx2bAhSvZbR8KtZI1gTBdgDg7AhWU=)
5: 3232302e3135372e3131322e302f32302d3234203d3e2039343136.roa (hash: MV88dvBez2VEHGQu9vHIsSHLmR+FC/BkqQXgQl6RGGE=)
6: 3232302e3135372e3131322e302f32302d3234203d3e203138303432.roa (hash: wLcmvrG3+9+VQcoGh/RouCPLhBf4BpOjD6kqqbR7944=)
7: 3131352e34332e302e302f31362d3234203d3e2039343136.roa (hash: ccHKYIH1onediXgVYiKh7EHNnwTYWQJoE9EhH+EUTBk=)
8: 3132332e3235322e36342e302f31382d3138203d3e2039343136.roa (hash: pbThQhpNTSnJMBASZ2s2lhxD43G2mkYc9iaYlmcl8J4=)
9: 3132332e3235322e302e302f31372d3234203d3e2039343136.roa (hash: 8JxW+fPG8BWMJ3eQJdeafOLn1uT7L6DDouqnppnhNkg=)
10: 3230322e3135312e34382e302f32302d3234203d3e2039343136.roa (hash: s8f8Uct02N0OIWDDH0xlBcjycL5P1/sP2dObZ84wjW8=)
11: 3132332e3235322e302e302f31382d3138203d3e2039343136.roa (hash: ERhjaQIXwvyOB2XFTJS7sS0ge8NmOyER/FKPC6xegWQ=)
12: 3131352e34332e302e302f31362d3234203d3e203138303432.roa (hash: 8CdvHvNqCGbHptsBsqmVxO/ddNWB2NuNellpQMuTOqQ=)
13: 3131392e31342e302e302f31362d3234203d3e2039343136.roa (hash: ogg05JqGwuh8Rk6w6nYH2L3SIwxm+KuAyegtBtcSZ9I=)
14: 3131392e31342e3132382e302f31372d3137203d3e203138303432.roa (hash: Jdj9OnL+nvn+5vJ82BuOV+iDpLKwfqTLwAmIzmHjSjM=)
15: 3132332e3235322e302e302f31372d3234203d3e203138303432.roa (hash: eh2WLuFL8JfqsgGPL8GnRsMff9j5TtrpXmSa0C/O+SY=)
16: 3131392e31342e302e302f31372d3137203d3e2039343136.roa (hash: E8EzQLG5CgTBVviuAYVjkJ5BeSPp51cZIv1bKC3xlIU=)
17: 3131352e34332e302e302f31372d3137203d3e203138303432.roa (hash: 5gZY3nEfq5SmiFBc4GkzG7kzPKYWP/eJ/0s+gE8A0xM=)
18: 3131352e34332e302e302f31372d3137203d3e2039343136.roa (hash: 8sPfy+KBH9Iy3oz6z3pK10IfnFdOzftlkUor0sZFlgE=)
19: 3131352e34332e3132382e302f31372d3137203d3e2039343136.roa (hash: St+0TPB6YfmeZtsKtmzv7EeJUGiMlhWPr0IbfUc/xZE=)
20: 3131392e31342e302e302f31372d3137203d3e203138303432.roa (hash: izV5LKXyRkMjgziCJgXNzX9mmTRUejlC9TqllBbTJjE=)
21: 3230332e3131382e3232342e302f32302d3230203d3e203138303432.roa (hash: 2exWg2jS2ItjCPg0xipUoannDwWvVERhxvaeyMJgPbs=)
22: 3132332e3235322e36342e302f31382d3138203d3e2039393234.roa (hash: yJVJ6C+sbqUiX3chBCIQtUJyWlloqJi99X6AD9sg0ZA=)
23: 3132322e39392e302e302f31382d3234203d3e203138303432.roa (hash: Tz0cSD05i3OCST0PKGEitL9Cea02/7iZZXiFw8rsfjE=)
24: 3230332e3131382e3232342e302f32302d3230203d3e2039343136.roa (hash: P9ySgHddPveY+6EtVJoOuOaViOtED+utlhZfdlH05gM=)
25: 3131392e31342e302e302f31362d3234203d3e203138303432.roa (hash: HbGluHb1NsEVJLOmIp1khnjJQIuZhHoSydxnFJStI9Y=)
26: 049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.crl (hash: FIatl6ccz05PZ97e6zMasYXkVAmBSHGlurlqoMiNaTk=)
27: 3131352e34332e3132382e302f31372d3137203d3e203138303432.roa (hash: kgd4Oaxwu9ubZEjWN6uD3zvpYDcWGuuxHkyqviavhU8=)
28: 3132322e39392e302e302f31382d3234203d3e2039343136.roa (hash: OPSFIJrW3fmKKJ0pvE28KRzPkCAaJ+W8WzXaI+ME20c=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/KE-ING/0/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.crl
rsync://rpkica.twnic.tw/rpki/KE-ING/0/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 19:33:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:18:60:a0:fc:57:c6:2f:b8:bf:50:c1:f4:60:f1:68:7b:92:9b:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=049D4DBCFAA5EE28A79BF49E623E87CD23324E4B
Validity
Not Before: Sep 21 17:16:42 2026 GMT
Not After : Sep 22 19:33:42 2026 GMT
Subject: CN=B9742BD6ACE017583504E49EE9BC030DC78643F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0a:52:91:26:47:7e:66:39:65:d8:d5:53:26:
8a:c1:c5:71:cd:c6:8f:f5:08:e8:31:20:83:70:7a:
25:1f:15:6a:94:ac:26:76:36:f1:e3:91:0f:5e:40:
84:91:00:c5:90:c7:64:24:f9:bc:ba:32:ca:05:49:
af:e3:32:85:96:a3:42:ba:25:80:65:3a:1f:ee:7e:
03:82:6e:5e:a6:4e:31:ad:d6:4b:be:07:c7:f2:30:
77:c2:d5:68:d5:53:a4:f2:75:0a:ff:70:49:ae:db:
5a:a7:2a:fa:84:b4:3a:c5:97:36:56:8d:52:f7:16:
a9:0a:5c:ac:85:91:ef:9c:d4:72:e6:78:a7:60:ea:
f6:08:af:d9:24:dc:21:8c:48:b7:d0:0f:b7:f9:e6:
61:79:5e:84:30:bc:ad:0f:25:70:18:33:3d:39:ff:
b3:9f:ad:96:e9:77:ea:15:fe:2d:3d:c8:e9:2b:65:
9e:17:91:1b:ed:d6:2d:17:34:3b:9b:d3:e4:03:22:
08:d6:c0:eb:6b:d3:5d:c4:c2:72:ff:46:b3:f0:1b:
b7:f9:6c:a6:ad:a8:f1:4f:79:a1:92:4c:78:22:41:
0e:89:06:87:d2:f4:fd:c5:ef:98:b8:d9:09:0c:19:
0b:cb:12:86:cd:9f:96:a5:31:59:0f:68:cb:e5:18:
69:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:74:2B:D6:AC:E0:17:58:35:04:E4:9E:E9:BC:03:0D:C7:86:43:F6
X509v3 Authority Key Identifier:
keyid:04:9D:4D:BC:FA:A5:EE:28:A7:9B:F4:9E:62:3E:87:CD:23:32:4E:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/KE-ING/0/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KE-ING/0/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:e4:19:c6:eb:8c:a1:c4:c7:5f:ff:0e:dd:4b:cd:44:7c:b1:
19:56:ca:1d:85:d0:f0:42:f6:5b:8e:03:70:20:b0:2b:c3:4e:
e1:cb:65:d3:2c:6a:1f:fe:eb:1a:c5:41:51:c8:53:b0:0a:28:
35:a1:80:a7:be:ff:1e:1b:1b:2a:3b:2e:a9:b5:f9:95:14:d1:
71:f2:55:b8:60:b8:0b:3f:c7:bd:42:cb:35:0e:cd:bb:ff:a0:
8b:fa:94:ae:3c:85:9f:30:34:6d:51:d0:53:a9:fe:08:2f:a9:
8f:26:55:b1:79:ff:69:fe:9f:0e:52:f2:50:4d:25:dd:43:ea:
9f:44:28:d2:79:96:fe:69:f9:6b:48:79:83:58:21:05:1e:cc:
ba:d9:52:dd:c6:b1:4d:0e:2c:df:74:ec:68:c3:c0:97:04:4f:
6f:9f:74:27:54:8d:c6:f2:f7:f2:ce:f7:54:51:48:13:8e:38:
cc:a2:42:8c:f2:06:80:0f:e6:36:dc:77:68:85:54:f8:c4:29:
8c:3b:d4:ce:32:fd:ca:14:30:c4:fa:87:b3:95:32:92:9d:7b:
33:59:89:16:bf:81:a8:bc:c4:dc:a4:a5:2c:1d:d9:5d:8e:18:
7e:b3:08:69:29:c8:51:41:5a:56:ab:cd:e4:5e:98:30:a3:0b:
54:da:dc:7f
-----BEGIN CERTIFICATE-----
MIIE5DCCA8ygAwIBAgIUMxhgoPxXxi+4v1DB9GDxaHuSm7kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ5RDREQkNGQUE1RUUyOEE3OUJGNDlFNjIzRTg3Q0Qy
MzMyNEU0QjAeFw0yNjA5MjExNzE2NDJaFw0yNjA5MjIxOTMzNDJaMDMxMTAvBgNV
BAMTKEI5NzQyQkQ2QUNFMDE3NTgzNTA0RTQ5RUU5QkMwMzBEQzc4NjQzRjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgClKRJkd+Zjll2NVTJorBxXHN
xo/1COgxIINweiUfFWqUrCZ2NvHjkQ9eQISRAMWQx2Qk+by6MsoFSa/jMoWWo0K6
JYBlOh/ufgOCbl6mTjGt1ku+B8fyMHfC1WjVU6TydQr/cEmu21qnKvqEtDrFlzZW
jVL3FqkKXKyFke+c1HLmeKdg6vYIr9kk3CGMSLfQD7f55mF5XoQwvK0PJXAYMz05
/7OfrZbpd+oV/i09yOkrZZ4XkRvt1i0XNDub0+QDIgjWwOtr013EwnL/RrPwG7f5
bKatqPFPeaGSTHgiQQ6JBofS9P3F75i42QkMGQvLEobNn5alMVkPaMvlGGllAgMB
AAGjggHuMIIB6jAdBgNVHQ4EFgQUuXQr1qzgF1g1BOSe6bwDDceGQ/YwHwYDVR0j
BBgwFoAUBJ1NvPql7iinm/SeYj6HzSMyTkswDgYDVR0PAQH/BAQDAgeAMGMGA1Ud
HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0UtSU5H
LzAvMDQ5RDREQkNGQUE1RUUyOEE3OUJGNDlFNjIzRTg3Q0QyMzMyNEU0Qi5jcmww
bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p
Yy50dy9ycGtpL1RXTklDQ0EvMS8wNDlENERCQ0ZBQTVFRTI4QTc5QkY0OUU2MjNF
ODdDRDIzMzI0RTRCLmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz
eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0UtSU5HLzAvMDQ5RDREQkNGQUE1
RUUyOEE3OUJGNDlFNjIzRTg3Q0QyMzMyNEU0Qi5tZnQwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG
CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJLkGcbrjKHE
x1//Dt1LzUR8sRlWyh2F0PBC9luOA3AgsCvDTuHLZdMsah/+6xrFQVHIU7AKKDWh
gKe+/x4bGyo7Lqm1+ZUU0XHyVbhguAs/x71CyzUOzbv/oIv6lK48hZ8wNG1R0FOp
/ggvqY8mVbF5/2n+nw5S8lBNJd1D6p9EKNJ5lv5p+WtIeYNYIQUezLrZUt3GsU0O
LN907GjDwJcET2+fdCdUjcby9/LO91RRSBOOOMyiQozyBoAP5jbcd2iFVPjEKYw7
1M4y/coUMMT6h7OVMpKdezNZiRa/gai8xNykpSwd2V2OGH6zCGkpyFFBWlarzeRe
mDCjC1Ta3H8=
-----END CERTIFICATE-----
Generated at Tue Sep 22 02:44:32 2026 by rpki-client