
$ rpki-client -vvf rpkica.twnic.tw/rpki/MITACMDC/0/F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.mft
File: F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.mft (raw, json)
Hash identifier: vgn5qycpFZvQha4STAtvF7MTXuj23vYp1oWt9G2dWF0=
Subject key identifier: 4D:25:49:60:FA:BB:63:41:17:1B:19:AB:00:F6:F3:90:92:64:85:9C
Authority key identifier: F1:CE:AE:4A:E1:3A:71:AF:6A:07:09:A4:C3:00:AD:A4:62:3A:2C:AA
Certificate issuer: /CN=F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA
Certificate serial: 29F9A0A2ADED24F9D62DCF36D54E281B1A23C82E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/MITACMDC/0/F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.mft
Manifest number: 6D
Signing time: Tue 28 Jul 2026 06:52:45 +0000
Manifest this update: Tue 28 Jul 2026 06:47:45 +0000
Manifest next update: Wed 29 Jul 2026 09:48:45 +0000
Files and hashes: 1: 3130332e32302e3137362e302f32322d3232203d3e203138313739.roa (hash: PNKjey9tKMdDR4FRuzXEfmnFsMhGJbtdw6pFSO4K0J8=)
2: 3231312e37382e3234302e302f32302d3232203d3e203138313739.roa (hash: wtDOplvpAqeejc+mSEqtFsj/OGKvnvcOzFKX6zd6nQY=)
3: 3130332e31362e3234342e302f32322d3232203d3e203138313739.roa (hash: 7gfsjGvmdQGtAgO0An6FiUxxSYVdxi5kO9sx5OvgxYQ=)
4: F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.crl (hash: 2VjiP0jtmIdNTYlOO6idyAP0MGQqrTQqvawPvlDfqjs=)
5: 323430343a646230303a3a2f33322d3332203d3e203138313739.roa (hash: ScKz5v7qY5jPX8fFHjF9zU3+yWebwV6lUVVjO7sfadI=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/MITACMDC/0/F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.crl
rsync://rpkica.twnic.tw/rpki/MITACMDC/0/F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 07:22:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:f9:a0:a2:ad:ed:24:f9:d6:2d:cf:36:d5:4e:28:1b:1a:23:c8:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA
Validity
Not Before: Jul 28 06:47:45 2026 GMT
Not After : Jul 29 09:48:45 2026 GMT
Subject: CN=4D254960FABB6341171B19AB00F6F3909264859C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2a:b2:d0:5f:f8:5a:2c:06:05:68:e8:fc:a9:
53:cf:30:1e:05:9d:1d:30:36:1f:dc:b3:1f:9d:8a:
15:f9:64:29:37:15:43:73:5c:81:7d:f8:e2:81:a1:
01:6b:3e:14:72:ad:9a:bc:8b:ab:86:06:18:8b:65:
fc:e3:b0:08:b9:c7:8f:73:91:92:a5:47:16:ad:ed:
ce:a8:b6:cd:63:69:45:b3:7f:48:6e:46:64:9f:5d:
35:4b:0f:12:93:87:a0:22:fb:8c:a9:a7:73:39:07:
39:93:01:18:c4:d9:c4:14:38:83:9a:3f:9c:d2:56:
11:9a:48:0c:da:35:6d:a9:f4:1a:57:b0:5f:ed:05:
63:7c:fe:f2:1f:90:ce:14:ac:b1:2e:bd:06:e5:5a:
69:85:88:a0:23:54:d2:9a:a5:35:7e:db:fc:5c:f4:
db:c9:f2:09:cc:b8:93:ab:6e:ec:4a:7c:78:b9:01:
1d:54:73:6b:9b:82:ee:e3:7d:ac:4b:b7:2b:2e:01:
36:f2:a8:23:4d:e6:bb:9e:34:30:63:95:c8:78:43:
42:37:e2:96:d9:c7:e6:ed:d7:be:af:88:c9:ec:e6:
dd:31:31:d3:a9:5c:b1:92:8f:ce:e6:8c:aa:aa:cc:
34:36:24:89:44:98:c6:a1:01:b6:29:99:b0:ac:7b:
f6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:25:49:60:FA:BB:63:41:17:1B:19:AB:00:F6:F3:90:92:64:85:9C
X509v3 Authority Key Identifier:
keyid:F1:CE:AE:4A:E1:3A:71:AF:6A:07:09:A4:C3:00:AD:A4:62:3A:2C:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/MITACMDC/0/F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MITACMDC/0/F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:00:50:31:99:e5:df:ba:4d:1b:79:94:bb:51:21:08:3b:12:
27:6b:5c:8c:74:23:8a:09:b1:41:ec:79:ad:96:9f:5f:fe:93:
e2:f3:9a:5c:09:92:5a:43:bf:5d:06:df:69:a6:1d:74:35:d8:
85:50:78:4a:7d:26:5a:8c:91:5a:a4:0f:ef:3f:db:69:36:b2:
3f:89:bc:fd:4e:56:3f:46:cf:12:cd:dd:58:4a:c2:a2:be:a7:
73:38:d9:37:14:93:4d:4e:22:4f:e1:3a:1c:cb:d2:fb:4e:97:
1b:b7:94:cb:e0:bd:60:0c:db:62:56:92:2f:04:31:cc:de:f1:
00:bc:22:f6:6b:51:bd:2a:94:9c:88:8e:90:b2:d1:1b:80:87:
75:82:cd:40:c6:ac:30:7a:05:19:a1:7e:bb:0b:58:0a:99:a5:
d3:65:73:33:44:19:aa:0f:76:88:13:bd:ed:71:21:9d:d7:52:
9c:a5:85:7f:2d:02:99:f6:32:61:14:a7:e0:83:a7:fd:62:c1:
80:50:d5:55:32:00:ee:06:84:46:ce:e5:e0:7c:09:07:d3:36:
6c:46:63:59:4a:72:64:d6:d0:1c:5e:cd:89:9c:c2:f1:c9:c0:
04:f0:ee:9d:12:5e:a1:b6:2d:84:0b:6b:11:45:56:79:33:91:
93:bd:19:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:39:14 2026 by rpki-client