
$ rpki-client -vvf rpkica.twnic.tw/rpki/MINGJINGEN/0/FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6.mft
File: FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6.mft (raw, json)
Hash identifier: LMVhlLAfkZJsfkHjYWRYoPReToZ9P38lzINHcmTkWW0=
Subject key identifier: 5C:81:00:DC:15:54:AC:71:97:17:3E:B1:25:C5:9A:8D:EE:C5:80:D9
Authority key identifier: FD:6E:1D:F6:0D:EF:D4:38:47:09:30:6D:E6:F6:2F:96:FE:1C:5B:A6
Certificate issuer: /CN=FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6
Certificate serial: 4E2C102058BFEB4A3EBE1FE3315D9D399EA22FF3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/MINGJINGEN/0/FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6.mft
Manifest number: 7C
Signing time: Tue 28 Jul 2026 06:12:41 +0000
Manifest this update: Tue 28 Jul 2026 06:07:41 +0000
Manifest next update: Wed 29 Jul 2026 07:07:41 +0000
Files and hashes: 1: 3130332e3133352e32302e302f32322d3232203d3e20313331363333.roa (hash: JgeKv43zj2I8mn+V1L9xsA2666IYScxWd+2UEJ5XPhc=)
2: FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6.crl (hash: oDfC9137kyiqq0xIHZKpXUvwIkoLRsycoQnZcT1sE7k=)
3: 3130332e3133352e32322e302f32332d3234203d3e20313331363333.roa (hash: QJpakj5AI9RKVWG2PgQIpjIivIC60des2reJiowl4os=)
4: 3130332e3133352e32302e302f32322d3234203d3e20323033303133.roa (hash: /BkzGnIADOG5q6v5Jcjt5hTu07e9hGlwOm8KNG5UzOI=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/MINGJINGEN/0/FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6.crl
rsync://rpkica.twnic.tw/rpki/MINGJINGEN/0/FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 07:07:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:2c:10:20:58:bf:eb:4a:3e:be:1f:e3:31:5d:9d:39:9e:a2:2f:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6
Validity
Not Before: Jul 28 06:07:41 2026 GMT
Not After : Jul 29 07:07:41 2026 GMT
Subject: CN=5C8100DC1554AC7197173EB125C59A8DEEC580D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ee:6b:89:d4:f5:a1:0b:e8:93:81:11:ea:1a:
47:dd:67:d3:4d:8e:78:07:d7:15:6a:ab:d1:eb:bf:
58:8e:b7:31:ba:8c:c7:24:9d:8e:7f:99:20:df:c8:
bf:86:8e:50:3f:92:fc:19:5c:5e:f9:a4:2f:ee:7b:
f1:d0:72:01:24:6e:f7:a0:6c:a2:5f:f7:20:68:e3:
64:89:ec:16:17:26:d2:28:0b:f0:fa:c0:40:6c:72:
a5:cb:d3:a3:d2:48:d0:dc:ba:9a:e6:20:17:a6:ff:
7e:55:3e:85:27:a4:df:68:6c:3f:df:67:db:a8:42:
7d:75:22:f4:b3:ac:a1:29:ad:42:95:8d:b6:69:d5:
f7:23:d1:d7:92:af:d5:95:b7:53:56:2b:d9:e8:03:
ce:18:6e:54:1c:ba:d5:c1:9b:59:98:55:9d:83:3f:
0b:7d:1d:d5:c4:18:28:50:0d:ef:6f:33:38:93:95:
76:1f:27:69:93:72:d9:cc:c6:d1:e3:64:aa:67:09:
71:b6:f2:ba:95:4b:82:79:d9:14:05:9d:43:cc:df:
9a:a7:bf:cb:15:f0:2e:ca:a6:81:26:36:f4:cf:94:
84:9c:37:4e:51:61:58:04:e4:92:8b:91:f2:84:e8:
c0:b7:08:9b:61:25:02:9a:d9:04:68:ab:a0:74:12:
82:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:81:00:DC:15:54:AC:71:97:17:3E:B1:25:C5:9A:8D:EE:C5:80:D9
X509v3 Authority Key Identifier:
keyid:FD:6E:1D:F6:0D:EF:D4:38:47:09:30:6D:E6:F6:2F:96:FE:1C:5B:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/MINGJINGEN/0/FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MINGJINGEN/0/FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:59:b8:a9:66:71:c9:6e:a2:9f:af:70:d7:cd:a9:dc:37:a7:
8e:7f:5b:a5:5d:aa:77:b5:22:a8:5c:02:38:f2:8e:9c:ec:6f:
d4:08:3f:d8:8c:63:9d:41:b2:d3:58:0e:b8:4d:70:8b:70:ab:
24:81:07:f6:8d:82:b3:6d:9d:e1:7e:65:44:db:2e:45:c5:bf:
15:dc:02:21:f6:5e:14:ab:ae:92:e2:34:cb:d7:50:0e:cf:22:
74:b4:2f:55:04:4f:03:16:df:30:f3:74:6c:b7:76:86:e2:4a:
cd:b3:a3:59:d6:e8:d2:9a:76:09:c0:e4:6a:06:aa:bb:96:94:
01:29:96:aa:58:36:84:43:95:7d:56:6c:f3:37:91:8e:a2:69:
7e:cf:af:76:06:2f:d2:07:0b:35:88:63:fd:38:66:f7:12:b1:
36:7d:93:e7:b3:8e:a0:df:fc:4f:32:a5:b0:0c:d9:fd:e8:a3:
fe:17:e0:6e:4a:ae:8e:bf:01:50:eb:b7:b2:fd:78:e7:39:26:
c6:62:a2:01:66:01:f5:a4:8d:35:3e:1a:e4:9c:24:4f:01:1b:
2f:63:e1:1d:3c:a8:75:49:ee:74:2b:2e:26:6f:1b:9c:94:21:
53:d7:b5:a6:fe:a9:c2:74:fd:24:b1:62:57:8d:8b:73:e1:b6:
ff:12:60:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:22:59 2026 by rpki-client