
$ rpki-client -vvvf rpkica.twnic.tw/rpki/MAGICCUBE/0/707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.mft
File: 707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.mft (raw, json)
Hash identifier: frkyW7mJ9iCp4WwPppjOVubnIluAqBZhq2ujk0w9k8U=
Subject key identifier: 51:09:75:FB:D3:69:DC:24:54:74:F7:55:9B:70:91:3E:E3:83:5C:7B
Authority key identifier: 70:7C:05:DC:06:89:1E:B4:A2:BE:B1:86:A8:BB:61:C4:DC:D6:14:1D
Certificate issuer: /CN=707C05DC06891EB4A2BEB186A8BB61C4DCD6141D
Certificate serial: 256A9DC1D1E338422BA1319463F04853C832A60F
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/MAGICCUBE/0/707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.mft
Manifest number: B4
Signing time: Mon 21 Sep 2026 01:59:58 +0000
Manifest this update: Mon 21 Sep 2026 01:54:58 +0000
Manifest next update: Tue 22 Sep 2026 05:02:58 +0000
Files and hashes: 1: 707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.crl (hash: jYsyAOdJoN9zAaSnDdYkUfnC5ew0U5lDwojZ8Dn7LGE=)
2: 3232332e32362e31342e302f32332d3234203d3e203231383539.roa (hash: BY1QUUCw56EnMeP3kjSRx3onJmeURrOTVkZdX+EuukE=)
3: 3130332e3137352e3139342e302f32332d3234203d3e2037343833.roa (hash: 5l2+J4Wo84X5+Yl5nqEN6UeiO9PszuY1Tb4AzIBJh3U=)
4: 3232332e32362e31342e302f32332d3234203d3e2037343833.roa (hash: EeYUqixDoPSEeN8sw/ZeQjCxnACjgv6gNGFQp+CTsoM=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/MAGICCUBE/0/707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.crl
rsync://rpkica.twnic.tw/rpki/MAGICCUBE/0/707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 03:47:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:6a:9d:c1:d1:e3:38:42:2b:a1:31:94:63:f0:48:53:c8:32:a6:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=707C05DC06891EB4A2BEB186A8BB61C4DCD6141D
Validity
Not Before: Sep 21 01:54:58 2026 GMT
Not After : Sep 22 05:02:58 2026 GMT
Subject: CN=510975FBD369DC245474F7559B70913EE3835C7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:81:80:ba:d3:69:23:ef:b2:59:8e:4a:9e:95:
56:42:ca:58:94:b7:f6:56:33:3d:31:5f:17:d7:6b:
60:07:fe:44:80:fc:4a:69:ef:a1:e3:e8:1f:17:4c:
4b:6b:80:e7:9c:41:44:2f:06:79:a2:c1:b8:b2:13:
2c:a8:a4:a0:4e:c1:74:f3:4c:cf:e2:fb:61:63:17:
dd:0f:aa:df:53:1a:11:b2:2b:75:c4:2d:c4:db:0c:
d6:3d:aa:cc:b6:9d:a1:1d:e2:94:98:c2:43:54:f7:
59:d0:bd:ff:65:d1:3d:62:bd:14:02:96:e2:ee:4d:
c9:fb:db:af:4b:ae:df:1d:bc:20:44:39:96:19:30:
ba:c5:68:f0:2d:05:0f:20:d2:e8:16:d3:11:e7:f3:
63:aa:cf:23:ed:8e:f9:6e:cc:23:71:a6:38:f8:58:
9f:a2:3d:6a:da:bd:16:7c:f6:08:d2:59:ed:cc:84:
7a:42:df:e1:6d:31:73:2f:bf:2a:25:a2:0f:10:65:
30:d3:b3:77:57:78:94:88:ac:ca:c2:eb:c4:df:97:
fb:5b:79:c6:69:d9:b5:c1:bc:b1:0b:58:ed:de:9d:
5b:ba:93:ba:b7:7c:80:5c:f5:83:42:e0:21:95:7a:
4e:e1:3a:0d:cc:ad:71:86:e1:e9:8d:ad:4d:2c:4a:
2e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:09:75:FB:D3:69:DC:24:54:74:F7:55:9B:70:91:3E:E3:83:5C:7B
X509v3 Authority Key Identifier:
keyid:70:7C:05:DC:06:89:1E:B4:A2:BE:B1:86:A8:BB:61:C4:DC:D6:14:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/MAGICCUBE/0/707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MAGICCUBE/0/707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:1d:46:c0:25:cf:f6:c8:b6:fc:4c:ee:1f:af:b8:be:b7:4a:
52:9d:7f:cf:79:1a:81:56:5d:6c:a8:50:5e:05:67:ea:ff:d8:
98:55:d1:56:12:1e:e9:0d:0e:10:4b:b5:f3:02:76:78:3f:b2:
9c:be:01:00:b4:8b:a1:b5:4d:d4:b0:9e:55:c5:29:4a:60:11:
08:48:da:85:cf:3a:c2:b0:93:85:71:82:34:3b:3e:09:ac:b7:
d9:56:b6:f8:7c:eb:80:c4:cd:24:16:d8:32:c1:01:d5:5d:c3:
98:68:05:14:d3:d2:b2:18:ca:ba:d6:fb:dc:7e:c2:7b:c2:ad:
c6:37:f4:37:a1:d1:2c:51:50:51:41:c7:2c:31:2a:56:0c:9c:
ab:7b:ba:1a:82:61:92:32:dc:63:78:cc:8b:27:76:51:2c:9c:
e7:63:e9:67:eb:81:96:86:a8:58:40:b5:6a:a1:d6:73:ad:6b:
06:9e:2b:78:66:c1:35:0a:16:c5:b3:63:a5:f9:39:88:14:1f:
93:9d:fc:28:c3:a5:fa:21:2b:70:9b:3a:35:64:4e:c0:a1:7a:
dd:c1:ff:04:cd:68:f6:b7:2a:15:06:10:b9:28:cd:63:ad:e7:
ab:13:36:69:7a:d6:38:17:32:f4:6e:cf:77:ca:85:df:ac:b0:
21:4b:8f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:39:07 2026 by rpki-client