
$ rpki-client -vvvf rpkica.twnic.tw/rpki/NCIC/1/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.mft
File: D5C99016D01EDDE0A4D47C3C948EE8859612C73B.mft (raw, json)
Hash identifier: jkZScAgOANLgJF9Qtq7PySY23eq10jr1MhvVN7OMaK0=
Subject key identifier: 1D:7D:78:1F:7F:2E:5D:B9:5F:EB:D1:2C:59:12:B5:DB:CB:53:C7:84
Authority key identifier: D5:C9:90:16:D0:1E:DD:E0:A4:D4:7C:3C:94:8E:E8:85:96:12:C7:3B
Certificate issuer: /CN=D5C99016D01EDDE0A4D47C3C948EE8859612C73B
Certificate serial: 447D087AFDC300511255A2D7602D5F9C65D3C15B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/NCIC/1/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.mft
Manifest number: 0207
Signing time: Mon 21 Sep 2026 09:26:48 +0000
Manifest this update: Mon 21 Sep 2026 09:21:48 +0000
Manifest next update: Tue 22 Sep 2026 12:44:48 +0000
Files and hashes: 1: 3139322e37322e3235322e302f32342d3234203d3e2039393139.roa (hash: VBtmPKe5I226J9zWpVQAjkGTwQ8c6xfoJIAIP/bSZoI=)
2: 3139322e37322e342e302f32322d3234203d3e2034373830.roa (hash: Ba5i8ude16dQiEfcAiO+btSj/eH4uGS0xcFo7grp3x0=)
3: 3139322e37322e3232342e302f32302d3234203d3e2039393139.roa (hash: IbJvzNWqowT9ss8SkDFFbTJBrs2hceylDNcxXN29XFI=)
4: 3139322e37322e342e302f32322d3234203d3e2039393139.roa (hash: Mc3y+NW93aC6lat66PDBZYR8qmh9c+fZPRpk7bBYllo=)
5: 3139322e37322e3139322e302f31392d3234203d3e2034373830.roa (hash: HDP+weW9NczVRv3tVvCtth7CO+aCW75PFkRxJDjQFGU=)
6: 3139322e37322e3132382e302f31382d3234203d3e2039393139.roa (hash: bXHD2UHkc/GfgCH5hcaP2+voIqd8TOjXlXtoDjGW8JA=)
7: 3139322e37322e3234382e302f32322d3234203d3e2039393139.roa (hash: w2LmOI1eQP3xj9n4sBqRb67lBeJFTEuUVe+BjjWP/g8=)
8: 3139322e37322e382e302f32312d3234203d3e2039393139.roa (hash: GbQSPFutvMmuWccC6y+kxjUSwDJ1ik/mT03jQDCuwD4=)
9: 3139322e37322e36342e302f31382d3234203d3e2039393139.roa (hash: 6ubqZ+h8/1xZM/Z1mXArWRioq7/yui3/nMg9Ngz6hKA=)
10: 3133392e3137352e302e302f31362d3234203d3e2039393139.roa (hash: 3pZVp3TNQ/sRl3TjQTLvkQ3q6JCaq0d/zamjf+77kx8=)
11: 3139322e37322e332e302f32342d3234203d3e2039393139.roa (hash: qMTF96rAy8wZ4NUEpq4S8Q/4tASEMCoJMKXrGLo6KtQ=)
12: 3139322e37322e3234302e302f32312d3234203d3e2039393139.roa (hash: zyCP5RCcYrInB0mG7H3w0fJawxlNECjjYSjAg7D7d1Y=)
13: 3139322e37322e3234382e302f32322d3234203d3e2034373830.roa (hash: 65UG56uDtaduhHckiIsfYUMD5Llwyc25pnJQFOvZ6Bo=)
14: 3139322e37322e382e302f32312d3234203d3e2034373830.roa (hash: 1Hh6x51Jeg1BSF3NwDHjHunpz1y1V3E8ygnYaLHBszo=)
15: 3139322e37322e33322e302f31392d3234203d3e2034373830.roa (hash: IAJDcSfRLpjVsd3ilJuaUqAl0u4sdr8+zfKeB8N1STk=)
16: 3139322e37322e3234302e302f32312d3234203d3e2034373830.roa (hash: w9y6pwWmA3JFdHYwXGU59AkfbSQ5hRF5f8RxZemOXM8=)
17: 3139322e37322e3132382e302f31382d3234203d3e2034373830.roa (hash: LzN8cI51zk5jZy8rEOcECVIZmpi8vie+TUsPNlzdXuc=)
18: 3139322e37322e36342e302f31382d3234203d3e2034373830.roa (hash: IkE5VbWeMMJYwmOD5YW4lS/zGapdsVeaSsB5x46YyVs=)
19: 3139322e37322e3232342e302f32302d3234203d3e2034373830.roa (hash: JFJbmB7cfEuw1iDDZaeMc1QewQMUllS7sHbdWQbrgDc=)
20: 3139322e37322e31362e302f32302d3234203d3e2039393139.roa (hash: YfF/tC6LRnh/bsWMphOM4qUtQ57nFavnsqtfTl2of/U=)
21: 3139322e37322e3235322e302f32342d3234203d3e2034373830.roa (hash: QUCYMabkjkOS3bq4pnYLsjSc27ckRrPNJ8pg8qqNByc=)
22: 3139322e37322e3139322e302f31392d3234203d3e2039393139.roa (hash: Ah2jakkWaX8SyRrg2TG3GrlMUxHdK/+BuuzbL3/oW74=)
23: 3133392e3137352e302e302f31362d3234203d3e2034373830.roa (hash: /ZgMlJJWHzRz3oSWNjGyPTQH1Mg84+PLKC/H5qUI7Ns=)
24: 3139322e37322e33322e302f31392d3234203d3e2039393139.roa (hash: IdXpC8VBeG7nz0JfgL+likpQtKVBBBXtQNRSvEXG1d0=)
25: 3139322e37322e31362e302f32302d3234203d3e2034373830.roa (hash: 9ZGrNp+VsLlXW7PeBXw8YpqEX/WVDXlTYIwuby9ILk4=)
26: D5C99016D01EDDE0A4D47C3C948EE8859612C73B.crl (hash: cSDJDeqmB319x0w3KBoPxPZvdSCO2b8jF+IoDHnz11c=)
27: 3139322e37322e332e302f32342d3234203d3e2034373830.roa (hash: hj2bnED2YLfhRnAL+cGxD8mEc2iquoy7i11842ivkl8=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/NCIC/1/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.crl
rsync://rpkica.twnic.tw/rpki/NCIC/1/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 08:26:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:7d:08:7a:fd:c3:00:51:12:55:a2:d7:60:2d:5f:9c:65:d3:c1:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D5C99016D01EDDE0A4D47C3C948EE8859612C73B
Validity
Not Before: Sep 21 09:21:48 2026 GMT
Not After : Sep 22 12:44:48 2026 GMT
Subject: CN=1D7D781F7F2E5DB95FEBD12C5912B5DBCB53C784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:17:53:91:0e:6c:09:bd:2b:8e:6b:33:75:47:
1f:d1:24:43:0b:63:ae:47:c1:ed:1c:cc:ce:31:3e:
20:43:83:33:8f:3a:a2:94:ad:17:5f:c3:4a:5b:a1:
94:20:88:c5:50:00:83:47:21:3e:4a:27:81:8c:6e:
92:13:da:7c:7d:b7:70:c0:44:13:d2:3c:5d:22:90:
90:e5:e8:c7:ba:48:81:9d:76:89:73:54:e6:16:99:
98:75:9d:20:14:b7:7a:8d:0f:5e:b7:cc:10:0b:3f:
80:94:de:eb:72:4b:82:2f:f6:43:b9:4a:fd:d2:75:
24:99:94:79:9a:07:a6:17:0c:1a:c5:23:ec:b6:58:
c1:d5:88:51:62:b6:24:5c:70:f3:54:60:d1:3a:33:
69:f3:b8:fa:46:47:f8:5e:89:40:8e:3a:fc:25:18:
99:eb:84:ba:97:62:f5:1d:10:77:16:c9:cd:4b:38:
4e:c6:4a:f1:72:71:bd:b9:25:37:dd:4c:16:51:a4:
90:1b:9c:70:83:c4:7c:ef:38:38:e7:ee:c0:93:3e:
88:7a:12:dd:1d:b3:6c:55:6f:1b:e2:85:57:66:fb:
ab:e8:ea:e6:cf:87:76:98:ef:75:ae:0b:54:15:9e:
d4:04:93:73:2f:48:50:fb:4b:d1:19:ff:bc:ec:cb:
05:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:7D:78:1F:7F:2E:5D:B9:5F:EB:D1:2C:59:12:B5:DB:CB:53:C7:84
X509v3 Authority Key Identifier:
keyid:D5:C9:90:16:D0:1E:DD:E0:A4:D4:7C:3C:94:8E:E8:85:96:12:C7:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/NCIC/1/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NCIC/1/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:6f:9b:19:5a:1d:ad:32:d3:4b:f3:1e:f5:33:df:05:3a:e6:
65:8e:a0:1d:cf:51:c4:d0:2d:26:f8:97:05:1f:c1:5c:02:58:
ac:b9:79:98:95:63:47:0e:af:75:f6:6b:8b:b3:fe:25:d2:93:
a0:e4:83:6b:0a:6b:fb:38:62:a6:62:03:67:0e:cb:f4:a5:0e:
77:73:ad:09:ac:59:16:7a:e5:84:69:89:4d:89:84:2e:bd:dc:
ac:33:64:aa:5f:9e:84:8f:e2:52:53:04:e5:9a:0a:b2:ef:15:
3b:73:cf:8c:97:f3:a2:20:fb:35:38:ca:f8:c4:a0:af:a4:8c:
e6:73:03:96:f0:1f:f1:77:9b:36:15:25:ef:47:8d:02:d5:eb:
5b:59:28:96:4a:14:59:a9:7f:bf:01:05:a5:7c:1d:23:cc:c2:
b6:0b:83:f2:06:27:60:3b:c7:1b:0c:44:ba:ab:91:f5:2c:e7:
50:3b:94:1b:86:32:20:dc:02:16:1b:33:37:f5:57:e3:b8:29:
1b:52:b0:88:2d:d1:8a:d3:ca:1f:d0:94:d7:84:f0:2a:de:fd:
be:34:5d:ee:d6:c9:0b:35:84:d0:b8:e2:de:9e:c6:53:e6:ba:
83:c1:ae:65:03:c1:0d:b7:04:f3:d1:91:4e:a7:4c:16:cb:c9:
32:aa:2b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:06:39 2026 by rpki-client