
$ rpki-client -vvf rpkica.twnic.tw/rpki/NKBNET/0/5A2BEE24395B36F4FFA95753F6731515C588BA9E.mft
File: 5A2BEE24395B36F4FFA95753F6731515C588BA9E.mft (raw, json)
Hash identifier: bZ2OeflKDegCWhUrQ1TbF4MBMXTfsQTn19n7FFDRqXE=
Subject key identifier: C5:8C:41:C0:BF:D8:BE:33:DB:E2:C7:04:98:84:7A:F8:99:C6:38:44
Authority key identifier: 5A:2B:EE:24:39:5B:36:F4:FF:A9:57:53:F6:73:15:15:C5:88:BA:9E
Certificate issuer: /CN=5A2BEE24395B36F4FFA95753F6731515C588BA9E
Certificate serial: 7407C61F02BD0A5BBC3541759F242F8FFDA86125
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5A2BEE24395B36F4FFA95753F6731515C588BA9E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/NKBNET/0/5A2BEE24395B36F4FFA95753F6731515C588BA9E.mft
Manifest number: 30
Signing time: Fri 12 Jun 2026 21:23:08 +0000
Manifest this update: Fri 12 Jun 2026 21:18:08 +0000
Manifest next update: Sun 14 Jun 2026 00:51:08 +0000
Files and hashes: 1: 323430333a623334303a3a2f33322d3332203d3e2037343832.roa (hash: hiAMshIFeOvfI56eDRx+E/hRaz9fkWvi1Lc3t0AuAEM=)
2: 3130332e3133302e34382e302f32322d3234203d3e2037343832.roa (hash: 1XWO79v70d0DECH7Xj/kPutEjOsPSVEabfarX+KunFQ=)
3: 5A2BEE24395B36F4FFA95753F6731515C588BA9E.crl (hash: BcIH2fqRQ35CLyU0Xheb28BZNDzscig6mzPu1B+FIwc=)
4: 323430333a623334303a3a2f33322d3332203d3e2039393232.roa (hash: gstqBh9leADrly9mEk8JDvYH97tC5t4YGpfgybnlAak=)
5: 3130332e3133302e34382e302f32322d3234203d3e2039393232.roa (hash: aCIxecjNLFEVzEOiCgmZ0K9yJGY1pe87ewnv5AFzkXs=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/NKBNET/0/5A2BEE24395B36F4FFA95753F6731515C588BA9E.crl
rsync://rpkica.twnic.tw/rpki/NKBNET/0/5A2BEE24395B36F4FFA95753F6731515C588BA9E.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5A2BEE24395B36F4FFA95753F6731515C588BA9E.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 00:20:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:07:c6:1f:02:bd:0a:5b:bc:35:41:75:9f:24:2f:8f:fd:a8:61:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5A2BEE24395B36F4FFA95753F6731515C588BA9E
Validity
Not Before: Jun 12 21:18:08 2026 GMT
Not After : Jun 14 00:51:08 2026 GMT
Subject: CN=C58C41C0BFD8BE33DBE2C70498847AF899C63844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:18:9c:62:f4:5d:07:ab:05:2a:b0:4b:a7:6f:
94:5c:99:bb:40:d8:e3:39:32:89:5b:e9:b7:33:96:
29:df:67:73:67:95:68:03:ff:10:df:c3:d2:83:22:
15:4f:9d:48:df:97:b8:48:67:5e:d6:78:d8:01:73:
74:f2:1b:4b:02:6e:26:ad:94:d5:3b:13:20:b4:9e:
27:f5:64:5e:e7:01:48:03:f3:b5:01:36:f7:63:2a:
f2:17:83:cd:0f:d8:d3:09:d2:8a:3b:3c:be:d3:00:
78:7f:73:dd:98:23:06:f0:4b:ca:62:9f:46:64:07:
37:0d:b0:6f:9c:4f:06:7f:fe:6d:5f:43:e9:c0:63:
ed:4a:d7:6f:c7:d0:4a:38:d6:05:c2:9a:0c:81:91:
33:69:83:ff:22:63:8c:7f:3d:3f:a4:66:6b:26:58:
fc:fe:eb:74:3b:bd:14:6d:3d:b6:61:eb:af:79:68:
6e:ee:d7:b9:4f:d6:4e:f6:9c:0f:e9:fa:82:f8:2b:
b4:b3:06:f9:74:2e:6f:f2:bd:cd:75:f2:3e:3f:ee:
6c:d0:f6:85:a9:88:43:45:15:15:ca:fe:bf:d7:99:
5f:d6:82:99:31:9e:e0:1e:f5:d6:d9:c4:88:41:24:
53:e1:32:df:c3:cc:f6:78:83:a6:e1:e3:cc:5b:d6:
cf:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:8C:41:C0:BF:D8:BE:33:DB:E2:C7:04:98:84:7A:F8:99:C6:38:44
X509v3 Authority Key Identifier:
keyid:5A:2B:EE:24:39:5B:36:F4:FF:A9:57:53:F6:73:15:15:C5:88:BA:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/NKBNET/0/5A2BEE24395B36F4FFA95753F6731515C588BA9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5A2BEE24395B36F4FFA95753F6731515C588BA9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NKBNET/0/5A2BEE24395B36F4FFA95753F6731515C588BA9E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:77:b8:1b:b7:ed:27:e3:19:68:c1:90:e9:fa:b5:26:cc:fb:
49:0e:0a:19:b0:72:77:67:03:a6:28:4c:04:7b:1b:40:85:21:
fb:ee:60:fc:8f:fb:11:bc:ce:b4:5a:90:0f:dd:00:30:41:34:
96:97:13:49:04:e0:0b:10:67:87:1c:66:f6:89:fc:b2:c9:a7:
20:7f:80:04:7a:7a:e6:1a:d7:98:b4:95:92:b5:2a:b8:af:8f:
07:ff:70:c8:dd:4a:dc:a7:17:86:08:de:54:f5:eb:0b:1e:95:
a6:dd:44:b4:b1:45:86:71:74:5e:96:80:73:ff:37:91:b5:02:
0c:7a:7a:ce:72:e3:5b:39:8f:8d:2b:44:57:37:61:7b:db:e9:
79:ae:ca:57:28:98:a7:03:19:6f:fd:d9:15:ff:df:3a:ba:e8:
5f:80:c3:82:3e:71:95:5b:e7:73:b8:4b:fe:d7:02:fa:39:cd:
bd:4b:a1:6e:cf:0f:a6:2a:57:08:9d:f7:cc:20:7f:cb:ff:4b:
a5:41:50:ba:58:01:7a:8a:43:8d:04:96:4a:07:94:36:21:fc:
9c:5d:6f:64:66:44:60:a3:4a:e2:7d:e9:9e:2a:9e:e6:18:b7:
71:09:28:d3:76:0a:a9:d8:eb:d0:96:f4:9e:cb:52:e8:29:00:
df:b5:c3:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:16:32 2026 by rpki-client