
$ rpki-client -vvf rpkica.twnic.tw/rpki/MINGXI/1/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.mft
File: D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.mft (raw, json)
Hash identifier: XiYGvUbuJMQaiJv1DZswxFYdeb5YPHKjyoFnbwlp14o=
Subject key identifier: 5E:75:89:70:92:7D:57:DF:D5:AE:96:3B:2C:BE:FB:70:C0:89:9B:C7
Authority key identifier: D9:1F:6B:17:A5:DF:E3:B2:33:6D:1A:E3:E2:33:D1:0B:2D:62:AA:25
Certificate issuer: /CN=D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25
Certificate serial: 677A68E4F6B100A01EBEBECA26DE819E9DCC5BD9
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/MINGXI/1/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.mft
Manifest number: 2F
Signing time: Sat 13 Jun 2026 08:09:22 +0000
Manifest this update: Sat 13 Jun 2026 08:04:22 +0000
Manifest next update: Sun 14 Jun 2026 08:27:22 +0000
Files and hashes: 1: 3133382e3235322e3131362e302f32332d3234203d3e203138343136.roa (hash: 5vM1t1el5nYZJRxVKo6mmnrOcGRvisTj4oU5YWdMajw=)
2: 3133382e3235322e3131362e302f32332d3234203d3e203231383539.roa (hash: sgvshajZGUxIlcU63EqLfebE4wegi3sti647jzuqblg=)
3: D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.crl (hash: 4aouSEkaYRX5pnfGgUaOnTpg5EtPp4xArLxZRI5LbPA=)
4: 3133382e3235322e3131362e302f32332d3234203d3e203234313632.roa (hash: xeGUxts4a0IBuIHgiewir0gp38fQafeLm2d3Cwvi9SE=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/MINGXI/1/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.crl
rsync://rpkica.twnic.tw/rpki/MINGXI/1/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 22:38:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:7a:68:e4:f6:b1:00:a0:1e:be:be:ca:26:de:81:9e:9d:cc:5b:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25
Validity
Not Before: Jun 13 08:04:22 2026 GMT
Not After : Jun 14 08:27:22 2026 GMT
Subject: CN=5E758970927D57DFD5AE963B2CBEFB70C0899BC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:41:53:20:57:be:b1:11:49:fc:48:f1:6f:7f:
3d:4e:3d:8f:8c:c3:0a:5d:f9:26:0e:d5:98:f6:46:
31:aa:dc:24:6a:3b:0e:5c:38:65:a7:3b:ee:8c:9e:
b9:67:3f:34:0a:74:7a:9c:63:a6:01:37:f0:e9:3b:
84:3f:a0:af:40:6d:16:f1:3f:ea:36:75:a1:f4:24:
33:e0:ca:5a:14:da:4c:cc:de:0d:8f:3a:98:ef:b4:
3e:82:f0:a1:5d:70:42:d1:23:b1:be:c0:ba:a0:1a:
91:07:66:7b:11:b1:44:10:91:d0:e2:57:5b:23:e4:
d9:e6:4e:ea:fd:66:76:2c:c3:fb:a0:6c:9a:7c:08:
07:9f:4b:a4:af:e3:db:98:ca:ba:a4:d2:80:d8:89:
e7:fc:dd:45:4f:08:d7:13:0a:b7:35:68:f1:ec:19:
60:94:14:5d:9f:c2:a5:48:1f:4f:3d:ce:08:97:bb:
78:14:36:0c:3d:19:fc:b1:9a:1f:ac:a2:de:2e:3f:
22:17:b5:5d:9b:3d:47:c7:a2:c9:55:ba:06:0e:62:
f0:c1:20:69:c2:d9:c2:ec:2f:cf:b8:02:6b:21:68:
eb:bf:3a:bf:b2:5c:3c:86:9a:22:53:a7:13:f5:b2:
e7:8c:58:d2:13:00:e0:bf:1a:4a:92:f2:16:5b:df:
03:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:75:89:70:92:7D:57:DF:D5:AE:96:3B:2C:BE:FB:70:C0:89:9B:C7
X509v3 Authority Key Identifier:
keyid:D9:1F:6B:17:A5:DF:E3:B2:33:6D:1A:E3:E2:33:D1:0B:2D:62:AA:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/MINGXI/1/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MINGXI/1/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:3e:1b:7d:2f:3e:17:0d:9a:8d:53:d6:55:0f:13:2d:da:d2:
2d:18:f3:1e:56:d5:25:86:d7:d5:19:b0:5e:12:05:9c:ff:53:
c9:fa:c7:8c:21:f0:8d:29:a4:f5:9d:0a:2a:3b:9e:d8:fb:30:
c9:39:1f:f8:8a:6d:cc:2d:0e:5b:bd:09:cc:d0:43:6f:a6:4b:
b7:17:45:17:0a:ed:78:00:11:f3:56:ab:09:92:a7:a5:3a:6d:
9a:8d:7b:63:a7:2b:30:45:74:89:72:e7:4e:7b:fa:f0:8d:1a:
24:8b:3c:b8:91:34:50:55:64:72:b7:e9:5b:0a:0b:1d:38:89:
7d:1b:23:de:8f:35:15:bc:ad:48:d6:0d:51:12:f0:e4:4f:53:
4f:56:ee:f4:94:51:a7:25:f3:65:b8:35:19:91:12:4f:9f:d7:
e0:00:54:1b:e8:d1:f5:89:1b:98:0b:db:91:f9:6b:9f:4f:95:
f1:f5:62:72:61:2f:21:28:6f:3b:dc:07:75:d1:28:2e:95:45:
60:1c:ec:ce:e2:b2:ee:cc:70:f3:53:51:67:ad:96:76:4a:68:
fc:6e:97:e6:db:0b:4f:60:41:a9:16:0e:ff:a8:55:24:21:a4:
eb:36:52:44:77:9f:3d:c2:fb:7f:a9:61:a6:e1:d5:65:03:73:
26:31:e6:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:18:00 2026 by rpki-client