
$ rpki-client -vvf rpkica.twnic.tw/rpki/NCCC/1/F4194E27E15A4F76E006403795143D4EFDCF022E.mft
File: F4194E27E15A4F76E006403795143D4EFDCF022E.mft (raw, json)
Hash identifier: 4BJk4rOR03uRBYUOqX9doex78/8h58ziIdMXdLunhys=
Subject key identifier: 2B:A4:D9:93:4B:FE:EF:BC:04:DA:67:FE:F2:74:41:24:16:84:1C:1D
Authority key identifier: F4:19:4E:27:E1:5A:4F:76:E0:06:40:37:95:14:3D:4E:FD:CF:02:2E
Certificate issuer: /CN=F4194E27E15A4F76E006403795143D4EFDCF022E
Certificate serial: 70E9D0B8B828BF34867BCD002133079A4084958C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/F4194E27E15A4F76E006403795143D4EFDCF022E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/NCCC/1/F4194E27E15A4F76E006403795143D4EFDCF022E.mft
Manifest number: 71
Signing time: Wed 29 Jul 2026 00:20:18 +0000
Manifest this update: Wed 29 Jul 2026 00:15:18 +0000
Manifest next update: Thu 30 Jul 2026 02:50:18 +0000
Files and hashes: 1: 3135372e32302e3130372e302f32342d3234203d3e203139353531.roa (hash: h885eOx61p3k8wuxUDF9SUB/ZPMTr8/gQVLItFXI4rM=)
2: F4194E27E15A4F76E006403795143D4EFDCF022E.crl (hash: RGZvG2wO29shKqWSkd2mu3bGJZ0euCrOK5ekGKCgDJw=)
3: 3135372e32302e3130362e302f32332d3234203d3e20313530373732.roa (hash: f9osk8atvNFbwzlzm+0pX0JbzGg2b5M3dZ9aT1SRM7Y=)
4: 3135372e32302e3130362e302f32342d3234203d3e203139353531.roa (hash: tj30Mw6SegUb4xqIoH5nsbPbEgFt7VbOqElQZObdRdk=)
5: 3135372e32302e3130372e302f32342d3234203d3e20313530373732.roa (hash: nTtkDIS/9RWSvXhNtKm7NzCRLQuNi0ZYeYDRWbSZUkY=)
6: 3135372e32302e3130362e302f32342d3234203d3e20313530373732.roa (hash: OmqcGxA2rNXj2dFvkkVaw1M6A48OHsdG1EyNXCLdbEU=)
7: 3135372e32302e3130362e302f32332d3233203d3e2033343632.roa (hash: U1maVebHqNxJOM61IipjwHfKGQHfW803fIcL92PP6U4=)
8: 3135372e32302e3130362e302f32332d3234203d3e20313938393439.roa (hash: NsVC+kyCCo5iuf92xRmrMNAeZWnd0GFdv+b5P5erIsw=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/NCCC/1/F4194E27E15A4F76E006403795143D4EFDCF022E.crl
rsync://rpkica.twnic.tw/rpki/NCCC/1/F4194E27E15A4F76E006403795143D4EFDCF022E.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/F4194E27E15A4F76E006403795143D4EFDCF022E.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 00:05:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:e9:d0:b8:b8:28:bf:34:86:7b:cd:00:21:33:07:9a:40:84:95:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F4194E27E15A4F76E006403795143D4EFDCF022E
Validity
Not Before: Jul 29 00:15:18 2026 GMT
Not After : Jul 30 02:50:18 2026 GMT
Subject: CN=2BA4D9934BFEEFBC04DA67FEF274412416841C1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:99:d1:16:bf:b5:1a:2d:d4:df:52:b3:19:e8:
a4:e7:fd:36:d2:47:0d:91:fc:23:df:57:aa:80:76:
44:16:e7:78:36:7c:1b:33:51:15:5b:35:c6:df:df:
32:c5:63:98:ff:11:5e:4c:e7:07:ad:74:7f:31:eb:
e1:56:3a:8e:c6:16:47:49:2b:d6:a6:fd:84:8a:ed:
8d:40:88:00:e3:bb:0a:b9:ea:9f:72:92:df:33:4c:
e9:b5:2f:53:6e:38:9c:23:90:99:65:17:ed:8a:95:
02:5a:54:0a:d8:89:b9:7f:c2:91:2f:ab:80:1a:9e:
e6:30:34:d5:a9:65:a7:46:5a:ee:10:28:de:e7:63:
b7:87:24:d7:d2:7d:b1:f1:c4:12:e2:29:1d:bc:7d:
d2:34:1d:48:3d:84:b0:c6:6d:c8:e8:94:ff:c5:db:
1e:b2:2f:dc:0e:4b:bd:1c:dd:a4:e8:ef:89:ef:16:
24:4a:11:66:89:9c:9d:e3:e0:fd:f7:5a:2a:76:5f:
2e:27:d2:44:11:fc:b7:0a:35:0d:c8:f7:6e:5f:7d:
84:5d:0e:fb:89:96:58:69:a7:dd:44:03:2b:85:00:
26:76:5b:78:c7:4d:bf:2e:b5:88:19:95:9b:d4:f4:
c9:cd:a2:4c:73:08:93:f1:17:57:fb:4d:92:14:db:
ce:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A4:D9:93:4B:FE:EF:BC:04:DA:67:FE:F2:74:41:24:16:84:1C:1D
X509v3 Authority Key Identifier:
keyid:F4:19:4E:27:E1:5A:4F:76:E0:06:40:37:95:14:3D:4E:FD:CF:02:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/NCCC/1/F4194E27E15A4F76E006403795143D4EFDCF022E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/F4194E27E15A4F76E006403795143D4EFDCF022E.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NCCC/1/F4194E27E15A4F76E006403795143D4EFDCF022E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:e8:44:dd:10:73:f2:16:c1:a0:45:78:88:80:da:cc:d6:c1:
70:6e:fd:ce:45:3a:de:2b:67:bb:4c:af:73:1b:89:98:59:cd:
73:92:50:15:24:40:3c:3e:96:88:4d:0f:3a:3c:63:bc:00:35:
a0:3d:ed:ed:c6:52:08:3a:b2:17:7d:76:c9:81:ae:82:88:60:
f8:ff:3d:9c:d7:82:91:8e:6f:50:2f:5a:6b:62:95:51:22:2b:
d9:ec:82:c9:c1:96:5f:df:f6:33:d1:1a:98:dc:1e:04:12:0c:
31:27:89:88:2a:56:2a:b1:52:71:b6:ec:9b:a8:d2:1b:a8:46:
9d:1c:0a:e8:49:59:3e:6c:4a:9b:f9:7f:cc:63:69:19:27:10:
53:ff:21:b0:89:23:2b:1b:ae:b5:5f:f1:4e:99:1c:03:1d:73:
bb:e4:ce:10:f8:3c:cc:f4:4d:43:b2:c7:5a:12:32:f4:5b:03:
2a:e0:9f:4f:24:93:bc:30:6a:b3:49:6d:da:ac:10:5c:21:a4:
eb:bc:97:2d:a5:f0:14:a9:ef:96:a3:21:03:93:60:63:a8:82:
8f:dd:66:2f:5a:f1:71:7f:2c:5f:17:af:7a:f9:ed:e8:d2:5f:
e0:d5:ee:2f:3b:32:ec:4d:31:cd:57:3f:1e:de:aa:60:32:b9:
fb:84:e1:32
-----BEGIN CERTIFICATE-----
MIIE4DCCA8igAwIBAgIUcOnQuLgovzSGe80AITMHmkCElYwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjQxOTRFMjdFMTVBNEY3NkUwMDY0MDM3OTUxNDNENEVG
RENGMDIyRTAeFw0yNjA3MjkwMDE1MThaFw0yNjA3MzAwMjUwMThaMDMxMTAvBgNV
BAMTKDJCQTREOTkzNEJGRUVGQkMwNERBNjdGRUYyNzQ0MTI0MTY4NDFDMUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9mdEWv7UaLdTfUrMZ6KTn/TbS
Rw2R/CPfV6qAdkQW53g2fBszURVbNcbf3zLFY5j/EV5M5wetdH8x6+FWOo7GFkdJ
K9am/YSK7Y1AiADjuwq56p9ykt8zTOm1L1NuOJwjkJllF+2KlQJaVArYibl/wpEv
q4AanuYwNNWpZadGWu4QKN7nY7eHJNfSfbHxxBLiKR28fdI0HUg9hLDGbcjolP/F
2x6yL9wOS70c3aTo74nvFiRKEWaJnJ3j4P33Wip2Xy4n0kQR/LcKNQ3I925ffYRd
DvuJllhpp91EAyuFACZ2W3jHTb8utYgZlZvU9MnNokxzCJPxF1f7TZIU284DAgMB
AAGjggHqMIIB5jAdBgNVHQ4EFgQUK6TZk0v+77wE2mf+8nRBJBaEHB0wHwYDVR0j
BBgwFoAU9BlOJ+FaT3bgBkA3lRQ9Tv3PAi4wDgYDVR0PAQH/BAQDAgeAMGEGA1Ud
HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTkNDQy8x
L0Y0MTk0RTI3RTE1QTRGNzZFMDA2NDAzNzk1MTQzRDRFRkRDRjAyMkUuY3JsMG8G
CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu
dHcvcnBraS9UV05JQ0NBLzAvRjQxOTRFMjdFMTVBNEY3NkUwMDY0MDM3OTUxNDNE
NEVGRENGMDIyRS5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu
YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05DQ0MvMS9GNDE5NEUyN0UxNUE0Rjc2
RTAwNjQwMzc5NTE0M0Q0RUZEQ0YwMjJFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG
AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG+hE3RBz8hbBoEV4
iIDazNbBcG79zkU63itnu0yvcxuJmFnNc5JQFSRAPD6WiE0POjxjvAA1oD3t7cZS
CDqyF312yYGugohg+P89nNeCkY5vUC9aa2KVUSIr2eyCycGWX9/2M9EamNweBBIM
MSeJiCpWKrFScbbsm6jSG6hGnRwK6ElZPmxKm/l/zGNpGScQU/8hsIkjKxuutV/x
TpkcAx1zu+TOEPg8zPRNQ7LHWhIy9FsDKuCfTySTvDBqs0lt2qwQXCGk67yXLaXw
FKnvlqMhA5NgY6iCj91mL1rxcX8sXxevevnt6NJf4NXuLzsy7E0xzVc/Ht6qYDK5
+4ThMg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:28:13 2026 by rpki-client