
$ rpki-client -vvvf rpkica.twnic.tw/rpki/M2NIM/0/E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.mft
File: E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.mft (raw, json)
Hash identifier: 7iQOLgs2yAPf+bZAUfGF7hh+7W6Zi+R6V6k+2M7wSl8=
Subject key identifier: 81:0A:43:4F:72:5A:27:2C:5C:6D:28:6B:95:93:61:D6:F0:6D:69:AC
Authority key identifier: E5:AA:3B:0F:9F:58:C9:34:21:C6:48:20:4A:B4:31:A4:AD:C4:B0:CB
Certificate issuer: /CN=E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB
Certificate serial: 1C3BC3B76CD242DBD5AA901183B4F81D23E8A246
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/M2NIM/0/E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.mft
Manifest number: B8
Signing time: Mon 21 Sep 2026 22:22:57 +0000
Manifest this update: Mon 21 Sep 2026 22:17:57 +0000
Manifest next update: Wed 23 Sep 2026 01:24:57 +0000
Files and hashes: 1: 323430313a383432303a3a2f33322d3438203d3e2039393233.roa (hash: mAMCDxxdS5D0xlBjJmg5NjQv1GONdD1Fp7YNezXC9T8=)
2: 323430313a383432303a3a2f33322d3438203d3e203332353935.roa (hash: 7IK6gvzs6uMwoViSpBOdjJrk5WxLH5pe447RiZaITJY=)
3: E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.crl (hash: AEOIDM/fzNtqiiMC/TmsLYSjZPVc0tME7XC83/BeusM=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/M2NIM/0/E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.crl
rsync://rpkica.twnic.tw/rpki/M2NIM/0/E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 23 Sep 2026 01:24:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:3b:c3:b7:6c:d2:42:db:d5:aa:90:11:83:b4:f8:1d:23:e8:a2:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB
Validity
Not Before: Sep 21 22:17:57 2026 GMT
Not After : Sep 23 01:24:57 2026 GMT
Subject: CN=810A434F725A272C5C6D286B959361D6F06D69AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:24:e7:0a:c6:64:b2:dc:6c:f1:f2:1f:75:51:
57:79:c8:32:4f:60:49:f1:2a:23:23:75:a0:39:cd:
93:d9:89:c7:a4:43:4e:fa:e4:b8:19:49:11:36:e6:
80:68:91:73:0e:0b:f4:fe:ad:3b:f6:05:07:a2:3d:
f3:09:dc:fe:54:fc:42:54:58:d8:4f:88:81:2d:6f:
8d:38:ff:54:7c:d7:5d:2d:5d:67:86:c6:f6:54:c1:
4a:73:ae:71:3e:15:5b:c5:85:00:27:c7:a5:26:96:
13:ce:f7:8e:48:e9:47:8e:84:88:88:c4:c3:e0:2c:
94:9c:f3:6a:7a:a4:31:a4:3d:48:3a:a1:bd:dc:c4:
f0:9a:91:2f:46:5c:ca:a8:7e:ed:b2:d9:ae:28:9f:
b7:12:5d:17:cd:76:7d:1a:11:19:aa:98:99:04:dc:
a1:33:28:68:be:be:cf:2d:70:c4:32:d0:e6:39:83:
2f:d5:01:36:4d:df:aa:20:81:55:03:f1:07:70:1a:
e9:75:56:24:77:6d:91:cb:7c:f8:6c:1a:07:78:f2:
f8:3e:e9:9d:b2:9c:4f:36:13:e8:8b:4d:10:9a:40:
e5:91:a1:93:aa:2c:0b:0f:43:81:bb:a9:c9:6e:a6:
65:a6:62:ca:e8:a5:5b:ac:d9:2c:36:78:29:ce:e8:
65:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:0A:43:4F:72:5A:27:2C:5C:6D:28:6B:95:93:61:D6:F0:6D:69:AC
X509v3 Authority Key Identifier:
keyid:E5:AA:3B:0F:9F:58:C9:34:21:C6:48:20:4A:B4:31:A4:AD:C4:B0:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/M2NIM/0/E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/M2NIM/0/E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:4d:87:89:88:6c:6e:74:bc:dd:5b:2a:56:51:13:e0:47:21:
aa:e7:f3:dd:60:de:2a:4f:50:07:2c:8a:31:08:0a:ce:09:53:
e8:15:48:16:b7:7c:b0:b3:87:53:4b:22:25:bb:0a:a1:4d:b3:
8c:b5:84:fa:0d:cf:93:fa:5e:ca:cd:f5:5e:6c:28:bd:8c:e8:
03:76:e0:0e:04:8c:8e:01:b1:a9:3d:c5:d8:9b:16:15:0e:4f:
26:90:60:1b:93:74:eb:fb:51:bf:94:33:73:ba:32:a0:38:8d:
12:34:b6:20:bd:0e:18:7f:41:b6:1d:5e:16:2b:c8:ba:f8:a0:
74:e6:5f:9c:bf:91:fd:18:d3:fa:37:e2:fc:db:9a:8e:90:64:
9f:c5:a6:97:c4:9f:16:16:3a:7f:61:19:f6:85:b7:47:22:d0:
77:9f:f0:25:cc:5b:0c:47:05:2a:6c:10:7e:d2:05:24:a2:af:
ae:7a:32:6e:3a:ab:9d:05:4d:8c:b4:bc:f1:fe:27:c4:4e:63:
ea:61:4b:de:31:c1:64:3e:09:85:cb:aa:e7:22:8b:a4:07:69:
8d:53:b8:40:d3:b5:f7:67:e8:fe:85:b3:6b:12:32:4c:9f:24:
e6:e8:c7:3e:b1:35:74:61:dd:36:de:1a:4e:59:35:6b:7c:e9:
05:7b:78:f0
-----BEGIN CERTIFICATE-----
MIIE4jCCA8qgAwIBAgIUHDvDt2zSQtvVqpARg7T4HSPookYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTVBQTNCMEY5RjU4QzkzNDIxQzY0ODIwNEFCNDMxQTRB
REM0QjBDQjAeFw0yNjA5MjEyMjE3NTdaFw0yNjA5MjMwMTI0NTdaMDMxMTAvBgNV
BAMTKDgxMEE0MzRGNzI1QTI3MkM1QzZEMjg2Qjk1OTM2MUQ2RjA2RDY5QUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAJOcKxmSy3Gzx8h91UVd5yDJP
YEnxKiMjdaA5zZPZicekQ0765LgZSRE25oBokXMOC/T+rTv2BQeiPfMJ3P5U/EJU
WNhPiIEtb404/1R8110tXWeGxvZUwUpzrnE+FVvFhQAnx6UmlhPO945I6UeOhIiI
xMPgLJSc82p6pDGkPUg6ob3cxPCakS9GXMqofu2y2a4on7cSXRfNdn0aERmqmJkE
3KEzKGi+vs8tcMQy0OY5gy/VATZN36oggVUD8QdwGul1ViR3bZHLfPhsGgd48vg+
6Z2ynE82E+iLTRCaQOWRoZOqLAsPQ4G7qclupmWmYsropVus2Sw2eCnO6GUFAgMB
AAGjggHsMIIB6DAdBgNVHQ4EFgQUgQpDT3JaJyxcbShrlZNh1vBtaawwHwYDVR0j
BBgwFoAU5ao7D59YyTQhxkggSrQxpK3EsMswDgYDVR0PAQH/BAQDAgeAMGIGA1Ud
HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTTJOSU0v
MC9FNUFBM0IwRjlGNThDOTM0MjFDNjQ4MjA0QUI0MzFBNEFEQzRCMENCLmNybDBv
BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS8xL0U1QUEzQjBGOUY1OEM5MzQyMUM2NDgyMDRBQjQz
MUE0QURDNEIwQ0IuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5
bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9NMk5JTS8wL0U1QUEzQjBGOUY1OEM5
MzQyMUM2NDgyMDRBQjQzMUE0QURDNEIwQ0IubWZ0MBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA4TYeJiGxudLzd
WypWURPgRyGq5/PdYN4qT1AHLIoxCArOCVPoFUgWt3yws4dTSyIluwqhTbOMtYT6
Dc+T+l7KzfVebCi9jOgDduAOBIyOAbGpPcXYmxYVDk8mkGAbk3Tr+1G/lDNzujKg
OI0SNLYgvQ4Yf0G2HV4WK8i6+KB05l+cv5H9GNP6N+L825qOkGSfxaaXxJ8WFjp/
YRn2hbdHItB3n/AlzFsMRwUqbBB+0gUkoq+uejJuOqudBU2MtLzx/ifETmPqYUve
McFkPgmFy6rnIoukB2mNU7hA07X3Z+j+hbNrEjJMnyTm6Mc+sTV0Yd023hpOWTVr
fOkFe3jw
-----END CERTIFICATE-----
Generated at Tue Sep 22 20:11:27 2026 by rpki-client