
$ rpki-client -vvf rpkica.twnic.tw/rpki/NCIC/1/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.mft
File: D5C99016D01EDDE0A4D47C3C948EE8859612C73B.mft (raw, json)
Hash identifier: f0CwouydA7opHesx5l9Tvs8yri56mYA+sB4G0PHmSaU=
Subject key identifier: E5:58:18:96:D1:7F:47:AF:2D:A4:C9:B8:A6:18:67:70:F4:B2:7D:72
Authority key identifier: D5:C9:90:16:D0:1E:DD:E0:A4:D4:7C:3C:94:8E:E8:85:96:12:C7:3B
Certificate issuer: /CN=D5C99016D01EDDE0A4D47C3C948EE8859612C73B
Certificate serial: 3FDDFF992B2F561F31A16248CA40B7515FA521F8
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/NCIC/1/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.mft
Manifest number: 01BD
Signing time: Tue 28 Jul 2026 06:52:45 +0000
Manifest this update: Tue 28 Jul 2026 06:47:45 +0000
Manifest next update: Wed 29 Jul 2026 08:52:45 +0000
Files and hashes: 1: 3139322e37322e342e302f32322d3234203d3e2034373830.roa (hash: Ba5i8ude16dQiEfcAiO+btSj/eH4uGS0xcFo7grp3x0=)
2: D5C99016D01EDDE0A4D47C3C948EE8859612C73B.crl (hash: sVwzuQZqgw+DMFXe3Z7gRapNj7AtOBAYNkf4FK/VmMc=)
3: 3139322e37322e3235322e302f32342d3234203d3e2039393139.roa (hash: VBtmPKe5I226J9zWpVQAjkGTwQ8c6xfoJIAIP/bSZoI=)
4: 3139322e37322e332e302f32342d3234203d3e2039393139.roa (hash: qMTF96rAy8wZ4NUEpq4S8Q/4tASEMCoJMKXrGLo6KtQ=)
5: 3139322e37322e3234302e302f32312d3234203d3e2034373830.roa (hash: w9y6pwWmA3JFdHYwXGU59AkfbSQ5hRF5f8RxZemOXM8=)
6: 3139322e37322e382e302f32312d3234203d3e2034373830.roa (hash: 1Hh6x51Jeg1BSF3NwDHjHunpz1y1V3E8ygnYaLHBszo=)
7: 3139322e37322e3235322e302f32342d3234203d3e2034373830.roa (hash: QUCYMabkjkOS3bq4pnYLsjSc27ckRrPNJ8pg8qqNByc=)
8: 3139322e37322e3139322e302f31392d3234203d3e2034373830.roa (hash: HDP+weW9NczVRv3tVvCtth7CO+aCW75PFkRxJDjQFGU=)
9: 3139322e37322e36342e302f31382d3234203d3e2039393139.roa (hash: 6ubqZ+h8/1xZM/Z1mXArWRioq7/yui3/nMg9Ngz6hKA=)
10: 3139322e37322e3132382e302f31382d3234203d3e2034373830.roa (hash: LzN8cI51zk5jZy8rEOcECVIZmpi8vie+TUsPNlzdXuc=)
11: 3139322e37322e342e302f32322d3234203d3e2039393139.roa (hash: Mc3y+NW93aC6lat66PDBZYR8qmh9c+fZPRpk7bBYllo=)
12: 3139322e37322e31362e302f32302d3234203d3e2034373830.roa (hash: 9ZGrNp+VsLlXW7PeBXw8YpqEX/WVDXlTYIwuby9ILk4=)
13: 3139322e37322e36342e302f31382d3234203d3e2034373830.roa (hash: IkE5VbWeMMJYwmOD5YW4lS/zGapdsVeaSsB5x46YyVs=)
14: 3139322e37322e3234302e302f32312d3234203d3e2039393139.roa (hash: zyCP5RCcYrInB0mG7H3w0fJawxlNECjjYSjAg7D7d1Y=)
15: 3139322e37322e3139322e302f31392d3234203d3e2039393139.roa (hash: Ah2jakkWaX8SyRrg2TG3GrlMUxHdK/+BuuzbL3/oW74=)
16: 3139322e37322e3232342e302f32302d3234203d3e2034373830.roa (hash: JFJbmB7cfEuw1iDDZaeMc1QewQMUllS7sHbdWQbrgDc=)
17: 3139322e37322e3234382e302f32322d3234203d3e2034373830.roa (hash: 65UG56uDtaduhHckiIsfYUMD5Llwyc25pnJQFOvZ6Bo=)
18: 3133392e3137352e302e302f31362d3234203d3e2039393139.roa (hash: 3pZVp3TNQ/sRl3TjQTLvkQ3q6JCaq0d/zamjf+77kx8=)
19: 3139322e37322e3232342e302f32302d3234203d3e2039393139.roa (hash: IbJvzNWqowT9ss8SkDFFbTJBrs2hceylDNcxXN29XFI=)
20: 3133392e3137352e302e302f31362d3234203d3e2034373830.roa (hash: /ZgMlJJWHzRz3oSWNjGyPTQH1Mg84+PLKC/H5qUI7Ns=)
21: 3139322e37322e3234382e302f32322d3234203d3e2039393139.roa (hash: w2LmOI1eQP3xj9n4sBqRb67lBeJFTEuUVe+BjjWP/g8=)
22: 3139322e37322e332e302f32342d3234203d3e2034373830.roa (hash: hj2bnED2YLfhRnAL+cGxD8mEc2iquoy7i11842ivkl8=)
23: 3139322e37322e33322e302f31392d3234203d3e2039393139.roa (hash: IdXpC8VBeG7nz0JfgL+likpQtKVBBBXtQNRSvEXG1d0=)
24: 3139322e37322e382e302f32312d3234203d3e2039393139.roa (hash: GbQSPFutvMmuWccC6y+kxjUSwDJ1ik/mT03jQDCuwD4=)
25: 3139322e37322e31362e302f32302d3234203d3e2039393139.roa (hash: YfF/tC6LRnh/bsWMphOM4qUtQ57nFavnsqtfTl2of/U=)
26: 3139322e37322e33322e302f31392d3234203d3e2034373830.roa (hash: IAJDcSfRLpjVsd3ilJuaUqAl0u4sdr8+zfKeB8N1STk=)
27: 3139322e37322e3132382e302f31382d3234203d3e2039393139.roa (hash: bXHD2UHkc/GfgCH5hcaP2+voIqd8TOjXlXtoDjGW8JA=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/NCIC/1/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.crl
rsync://rpkica.twnic.tw/rpki/NCIC/1/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 08:52:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:dd:ff:99:2b:2f:56:1f:31:a1:62:48:ca:40:b7:51:5f:a5:21:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D5C99016D01EDDE0A4D47C3C948EE8859612C73B
Validity
Not Before: Jul 28 06:47:45 2026 GMT
Not After : Jul 29 08:52:45 2026 GMT
Subject: CN=E5581896D17F47AF2DA4C9B8A6186770F4B27D72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:83:b3:33:0f:78:67:13:af:a7:ca:f3:fb:fa:
20:1f:7c:38:df:6f:ec:36:fe:61:f5:cc:44:ea:0a:
03:2c:8c:35:d6:28:1d:b9:aa:8d:05:07:ee:8d:d5:
34:ef:a2:8e:7d:b3:fa:95:96:bb:9f:ff:a0:16:8f:
55:e3:6d:2b:06:4e:45:94:b5:2b:0a:9f:b0:27:da:
c2:09:ea:9b:bd:9d:58:e2:14:70:c4:b9:ea:77:d3:
8b:b6:24:44:79:db:e2:03:fb:0d:f4:43:03:47:ca:
09:74:fe:0b:bc:1e:82:45:1a:93:30:5e:aa:74:7e:
00:5a:ec:ba:0e:c1:f8:c7:63:b1:5d:ec:27:53:ec:
81:ff:95:b1:b6:01:c7:be:ff:a6:58:ef:f3:ac:bc:
e2:bf:25:5c:a4:6a:27:4c:a8:67:80:4c:87:fc:c6:
00:59:f2:d1:4c:e8:86:ac:e3:ea:d4:03:f7:df:2f:
c9:fe:e5:75:27:83:37:94:d2:42:a9:da:22:ad:ed:
29:74:5a:5a:0b:a1:75:1e:26:3a:1c:30:c0:3c:0c:
29:5d:88:e8:93:8c:c6:4c:60:b5:d6:77:3c:db:f2:
ce:9b:94:46:a7:a1:2a:10:60:92:ce:58:92:c3:ca:
bc:52:fb:41:9f:76:ec:15:f2:78:55:23:c2:78:22:
13:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:58:18:96:D1:7F:47:AF:2D:A4:C9:B8:A6:18:67:70:F4:B2:7D:72
X509v3 Authority Key Identifier:
keyid:D5:C9:90:16:D0:1E:DD:E0:A4:D4:7C:3C:94:8E:E8:85:96:12:C7:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/NCIC/1/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NCIC/1/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:5f:a3:8f:88:73:0a:02:ef:14:cd:cd:06:73:95:20:bc:c1:
de:44:57:29:0d:0b:c6:a2:1d:5d:02:c1:e6:a8:e0:c1:16:69:
2b:91:79:b0:af:4e:2f:74:df:c6:26:2f:c3:17:29:14:94:4b:
c5:7c:d8:28:ce:60:9d:98:3a:d0:28:9d:55:61:d0:87:74:01:
26:22:75:c4:d5:0e:c0:ae:df:85:12:56:eb:0e:a6:05:d0:fc:
ca:35:8a:ff:d9:b2:d9:b8:c0:58:2a:77:ce:cc:c6:d1:9a:a1:
a0:5f:08:6a:f6:09:2c:32:99:64:61:f5:50:8d:75:2b:e9:a5:
55:48:80:c9:6d:33:8a:5b:bb:8f:15:74:3e:0c:46:be:29:8e:
fa:0e:e0:63:c1:15:04:b0:c0:71:d5:72:41:7c:98:78:47:e5:
bd:b4:5a:b4:f6:fb:e4:2a:45:d0:fe:aa:ef:ad:c0:8d:f8:4d:
16:96:99:7e:36:4c:db:24:86:38:0b:58:ff:3b:9d:d6:95:fa:
5d:6d:f6:02:c0:e0:1d:a9:74:b6:4d:56:40:17:7c:e8:10:d9:
7c:90:10:56:7b:77:57:dc:35:26:d9:95:d1:bb:87:2c:78:5b:
bb:fd:da:75:44:94:72:d2:29:0e:70:cc:90:62:56:d9:6b:b8:
b6:d1:d9:e7
-----BEGIN CERTIFICATE-----
MIIE4DCCA8igAwIBAgIUP93/mSsvVh8xoWJIykC3UV+lIfgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDVDOTkwMTZEMDFFRERFMEE0RDQ3QzNDOTQ4RUU4ODU5
NjEyQzczQjAeFw0yNjA3MjgwNjQ3NDVaFw0yNjA3MjkwODUyNDVaMDMxMTAvBgNV
BAMTKEU1NTgxODk2RDE3RjQ3QUYyREE0QzlCOEE2MTg2NzcwRjRCMjdENzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVg7MzD3hnE6+nyvP7+iAffDjf
b+w2/mH1zETqCgMsjDXWKB25qo0FB+6N1TTvoo59s/qVlruf/6AWj1XjbSsGTkWU
tSsKn7An2sIJ6pu9nVjiFHDEuep304u2JER52+ID+w30QwNHygl0/gu8HoJFGpMw
Xqp0fgBa7LoOwfjHY7Fd7CdT7IH/lbG2Ace+/6ZY7/OsvOK/JVykaidMqGeATIf8
xgBZ8tFM6Ias4+rUA/ffL8n+5XUngzeU0kKp2iKt7Sl0WloLoXUeJjocMMA8DCld
iOiTjMZMYLXWdzzb8s6blEanoSoQYJLOWJLDyrxS+0GfduwV8nhVI8J4IhP5AgMB
AAGjggHqMIIB5jAdBgNVHQ4EFgQU5VgYltF/R68tpMm4phhncPSyfXIwHwYDVR0j
BBgwFoAU1cmQFtAe3eCk1Hw8lI7ohZYSxzswDgYDVR0PAQH/BAQDAgeAMGEGA1Ud
HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTkNJQy8x
L0Q1Qzk5MDE2RDAxRURERTBBNEQ0N0MzQzk0OEVFODg1OTYxMkM3M0IuY3JsMG8G
CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu
dHcvcnBraS9UV05JQ0NBLzAvRDVDOTkwMTZEMDFFRERFMEE0RDQ3QzNDOTQ4RUU4
ODU5NjEyQzczQi5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu
YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05DSUMvMS9ENUM5OTAxNkQwMUVEREUw
QTRENDdDM0M5NDhFRTg4NTk2MTJDNzNCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG
AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApF+jj4hzCgLvFM3N
BnOVILzB3kRXKQ0LxqIdXQLB5qjgwRZpK5F5sK9OL3TfxiYvwxcpFJRLxXzYKM5g
nZg60CidVWHQh3QBJiJ1xNUOwK7fhRJW6w6mBdD8yjWK/9my2bjAWCp3zszG0Zqh
oF8IavYJLDKZZGH1UI11K+mlVUiAyW0zilu7jxV0PgxGvimO+g7gY8EVBLDAcdVy
QXyYeEflvbRatPb75CpF0P6q763AjfhNFpaZfjZM2ySGOAtY/zud1pX6XW32AsDg
Hal0tk1WQBd86BDZfJAQVnt3V9w1JtmV0buHLHhbu/3adUSUctIpDnDMkGJW2Wu4
ttHZ5w==
-----END CERTIFICATE-----
Generated at Wed Jul 29 02:03:43 2026 by rpki-client