
$ rpki-client -vvf rpkica.twnic.tw/rpki/MLYTICS/0/2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F.mft
File: 2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F.mft (raw, json)
Hash identifier: 2kb3s1xNckGhyOjhhm+xQc/J5YHxpmBnx0L4UOytbfo=
Subject key identifier: A9:5A:2E:07:B2:E5:D2:6E:A0:42:18:A4:9E:C7:7B:F5:0A:EC:85:A3
Authority key identifier: 29:23:BD:96:C7:B3:D4:BC:AA:10:BA:99:CE:29:DC:15:BC:10:18:3F
Certificate issuer: /CN=2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F
Certificate serial: 5E079679A27FCEA76DF6FB551084C19735DA09CD
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/MLYTICS/0/2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F.mft
Manifest number: 38
Signing time: Wed 17 Jun 2026 08:57:09 +0000
Manifest this update: Wed 17 Jun 2026 08:52:09 +0000
Manifest next update: Thu 18 Jun 2026 10:00:09 +0000
Files and hashes: 1: 3231312e37392e3130372e302f32342d3234203d3e203136353039.roa (hash: CjGMLe+Z4zl3oKhMgAnUNX5Qzo2hJu6hNiBeWrjbWr8=)
2: 3130332e3132352e3232372e302f32342d3234203d3e203136353039.roa (hash: KGP6KIcV9P6yWvdW9RIZNoookZNci1EPcCE5EkDPzQg=)
3: 3231312e37392e3130362e302f32342d3234203d3e203136353039.roa (hash: ChYOUadKkOPkyOsEvqDqF4mp00sueJFLaUXSsLjiDAw=)
4: 3130332e3132352e3232362e302f32342d3234203d3e203136353039.roa (hash: 5Tf8/6KeNcrgy6JUvG6HFw++mwSYoU/UPstq8SkHoNA=)
5: 3130332e3132352e3232352e302f32342d3234203d3e203136353039.roa (hash: FmHmQMwwJ/NNx1Ea23G9M1I2l9BOeklXW28LFaNMNeA=)
6: 2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F.crl (hash: YLIa0ViTQip42sKM/f9PTl3FZziGa5YWUMrMCqSeQcI=)
7: 3130332e3132352e3232342e302f32342d3234203d3e20333936393832.roa (hash: Uem5Q3NCsbS+pBiksFlyOVkJAZV5kyuPM0+iiLLcI/A=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/MLYTICS/0/2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F.crl
rsync://rpkica.twnic.tw/rpki/MLYTICS/0/2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 18:58:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:07:96:79:a2:7f:ce:a7:6d:f6:fb:55:10:84:c1:97:35:da:09:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F
Validity
Not Before: Jun 17 08:52:09 2026 GMT
Not After : Jun 18 10:00:09 2026 GMT
Subject: CN=A95A2E07B2E5D26EA04218A49EC77BF50AEC85A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:23:c3:47:7e:9a:f3:76:2b:a8:ea:96:25:1f:
89:8a:5b:dc:81:40:ae:cd:5e:94:ad:a1:5e:41:17:
b4:57:e8:90:ca:79:78:51:21:da:88:d3:36:22:cb:
76:d4:ab:e4:29:fb:0f:54:6d:8a:c7:3d:e0:18:bc:
d3:7f:24:ed:04:dc:79:d9:cd:d8:c2:91:d1:4a:64:
90:c2:f2:24:59:f6:ac:db:2c:a5:6b:5d:6c:8b:4a:
ec:05:4f:e8:f0:24:26:51:ee:e5:fb:d0:2f:ab:c3:
ed:70:ef:a0:52:c8:1c:d6:7e:91:ad:8d:01:d3:68:
12:88:f2:3b:42:03:7c:c8:32:99:84:1a:74:a2:f6:
65:7d:df:08:32:3d:53:18:b2:55:03:1b:7d:27:2b:
0c:09:cb:e0:44:6a:19:01:6d:d3:42:44:bd:d4:36:
af:d8:3e:d0:21:3f:43:f1:55:d6:2b:ce:b0:71:8c:
8d:9f:85:a2:d4:f9:f5:ca:ea:ac:23:ba:8b:1e:4d:
6e:d1:c7:b9:aa:c6:a5:c0:e0:ee:95:b8:34:53:7a:
e5:82:cb:90:77:5b:ee:ce:52:24:15:62:3b:f0:15:
59:7f:f1:33:70:98:a0:ec:37:36:e4:3a:8c:64:e5:
26:e3:20:be:16:3d:55:98:c9:2e:45:c2:70:83:63:
92:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:5A:2E:07:B2:E5:D2:6E:A0:42:18:A4:9E:C7:7B:F5:0A:EC:85:A3
X509v3 Authority Key Identifier:
keyid:29:23:BD:96:C7:B3:D4:BC:AA:10:BA:99:CE:29:DC:15:BC:10:18:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/MLYTICS/0/2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MLYTICS/0/2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:48:58:55:a6:12:35:6d:96:ad:27:a2:23:a5:0f:a6:83:df:
f6:e9:53:78:26:d2:5b:39:b8:e8:98:8f:17:5e:2c:50:54:72:
65:c9:08:de:77:b7:a7:93:a2:70:57:b8:0c:b0:19:b0:78:cb:
74:cf:64:e8:a2:af:ad:69:e8:ea:98:ef:10:54:05:ac:52:1a:
93:0c:43:96:17:8a:9b:3a:0f:f6:09:11:34:34:2d:72:7a:3c:
2d:ee:ce:97:7b:ab:07:14:11:5a:e2:ab:34:57:ae:32:0a:4a:
a6:a1:16:ca:e2:bb:a5:92:24:e7:a7:16:08:be:8e:72:89:56:
1c:8a:ed:67:09:e6:1f:1c:33:3b:ad:1e:83:32:c9:9c:35:cf:
45:c0:97:20:7a:a4:f8:37:fb:9f:4f:d7:b4:02:1c:2b:d7:5a:
b0:e5:72:72:fa:e8:79:45:21:4e:64:5c:f4:ba:5c:de:67:9d:
57:15:a5:7f:0e:5c:c4:8e:d4:69:b9:8e:10:f6:f4:13:9e:32:
d9:af:47:8a:69:7e:37:79:76:59:b0:26:d0:0e:71:c3:97:f5:
45:2f:6e:e9:1b:18:a7:d2:15:d9:5f:81:12:6f:55:0e:61:70:
0a:87:63:ae:fe:2b:ab:7a:12:ee:c2:51:ad:7b:14:df:b7:40:
72:51:54:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:49:16 2026 by rpki-client