
$ rpki-client -vvf rpkica.twnic.tw/rpki/NTCCATV/0/B621735E324046FFFC1DD75D4ED8815E08CD25AE.mft
File: B621735E324046FFFC1DD75D4ED8815E08CD25AE.mft (raw, json)
Hash identifier: pKOtvfv0S8m8SeF+wqlMY0KxOoQ2q9u2qvSYN94AHeY=
Subject key identifier: 84:03:A5:10:2C:82:3E:6E:06:54:D0:6B:4D:99:EC:2E:7A:D7:82:82
Authority key identifier: B6:21:73:5E:32:40:46:FF:FC:1D:D7:5D:4E:D8:81:5E:08:CD:25:AE
Certificate issuer: /CN=B621735E324046FFFC1DD75D4ED8815E08CD25AE
Certificate serial: 5DF66CA876EBCEAF1FEB347F771FE94AB580F704
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B621735E324046FFFC1DD75D4ED8815E08CD25AE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/NTCCATV/0/B621735E324046FFFC1DD75D4ED8815E08CD25AE.mft
Manifest number: 35
Signing time: Sat 13 Jun 2026 04:28:58 +0000
Manifest this update: Sat 13 Jun 2026 04:23:58 +0000
Manifest next update: Sun 14 Jun 2026 04:30:58 +0000
Files and hashes: 1: 3130332e34362e3138382e302f32322d3232203d3e203338383531.roa (hash: IGUXagfNdDGbcIwOiNJB2WILqRSYaabubVYlRzK02WU=)
2: 34332e3232372e32362e302f32332d3233203d3e203338383531.roa (hash: C2usZixthQiIE+xeQ3sCGdfoDlrvv1uF2zFJ8tVVXIc=)
3: 3130332e3133312e3137322e302f32322d3232203d3e203338383531.roa (hash: wAf5rAvxkIVF2EmVrtaklm33SqKTtuxnUU+SmUZADj8=)
4: 3130332e34362e3139302e302f32332d3233203d3e203338383531.roa (hash: s3NIqrucGxxXoVh7k9P2N6l5jBGUlMpH1t4x77/+R9g=)
5: 3130332e3133312e3137322e302f32322d3234203d3e203338383531.roa (hash: gJf9DLGPPpkcFmCRmCzChYMvtlZ7ty7+aorHZQ0RXhY=)
6: 34332e3232372e32342e302f32322d3232203d3e203338383531.roa (hash: Jc0taR/H4saYaDAoJgE+9UiKJq1S+bCLyLdRp8kMM8s=)
7: 3130332e34362e3138382e302f32332d3233203d3e203338383531.roa (hash: mG1ga13lp7MgEJvmiHGi6aFGInKwqgg1PecqbqqFlqE=)
8: B621735E324046FFFC1DD75D4ED8815E08CD25AE.crl (hash: shcEjxvbjlc0XYIVikcy4EPAppvpz9Jcl7SscMwIarE=)
9: 34332e3232372e32342e302f32332d3233203d3e203338383531.roa (hash: sZR2upIjgJ8ucZv/gsPF7tQAoIHfXdof9Y1BIEmdMEk=)
10: 34332e3232372e32352e302f32342d3234203d3e203338383531.roa (hash: AVukq4MJYvCGIAziMbV6ZV4Pe3c02PVGzfhBcKVubb8=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/NTCCATV/0/B621735E324046FFFC1DD75D4ED8815E08CD25AE.crl
rsync://rpkica.twnic.tw/rpki/NTCCATV/0/B621735E324046FFFC1DD75D4ED8815E08CD25AE.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B621735E324046FFFC1DD75D4ED8815E08CD25AE.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 00:20:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:f6:6c:a8:76:eb:ce:af:1f:eb:34:7f:77:1f:e9:4a:b5:80:f7:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B621735E324046FFFC1DD75D4ED8815E08CD25AE
Validity
Not Before: Jun 13 04:23:58 2026 GMT
Not After : Jun 14 04:30:58 2026 GMT
Subject: CN=8403A5102C823E6E0654D06B4D99EC2E7AD78282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b8:86:02:87:42:b3:64:39:58:68:a3:01:35:
3d:b0:7b:3f:e3:59:11:12:ad:45:35:53:8c:ce:11:
a0:b6:69:ce:6a:21:88:9f:e5:77:43:4b:05:6e:eb:
1a:19:25:ed:35:3f:e8:a2:8d:d4:b5:fb:91:de:c8:
62:bd:df:f6:76:c8:90:f1:10:db:64:8c:c1:2b:c7:
86:da:3a:d5:1e:cb:a8:7c:cd:df:7c:8b:91:f8:02:
72:42:34:7f:ef:58:f5:1c:0b:7b:1f:ca:48:d0:c8:
ce:76:bb:aa:a2:e5:d9:50:b7:51:be:58:8a:01:48:
27:67:7f:5d:03:ce:d0:25:b2:9e:ad:b8:11:ae:0e:
9a:4d:6e:02:24:70:65:98:59:f5:51:b4:11:6b:c4:
fb:f7:0a:37:a9:72:26:37:3c:7f:b6:94:db:99:5e:
bb:cf:58:be:10:d9:50:02:6b:d1:f6:23:4b:e4:42:
de:05:d9:07:99:85:a7:a9:fa:cd:6b:41:38:48:b4:
29:e3:7c:94:b0:58:42:5a:53:ff:f9:7e:09:60:a0:
52:77:ea:70:8e:d9:c5:f5:cf:d5:d7:82:ef:74:aa:
3f:4e:ad:79:90:8d:4a:f5:90:9c:71:31:4b:e9:89:
ba:73:01:ff:41:49:17:81:10:1d:8b:8e:59:62:c2:
9b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:03:A5:10:2C:82:3E:6E:06:54:D0:6B:4D:99:EC:2E:7A:D7:82:82
X509v3 Authority Key Identifier:
keyid:B6:21:73:5E:32:40:46:FF:FC:1D:D7:5D:4E:D8:81:5E:08:CD:25:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/NTCCATV/0/B621735E324046FFFC1DD75D4ED8815E08CD25AE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B621735E324046FFFC1DD75D4ED8815E08CD25AE.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NTCCATV/0/B621735E324046FFFC1DD75D4ED8815E08CD25AE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:ca:1d:0e:21:37:85:c4:57:b7:f1:96:10:4b:ed:11:fc:b3:
b1:35:67:0c:70:a0:82:ae:af:ce:2c:19:14:1a:83:99:42:6a:
ae:73:77:d1:c3:a3:bc:ac:de:b6:22:51:08:14:2f:af:21:fe:
99:5e:fe:bd:89:3c:05:c2:21:c3:b4:b8:b2:ba:74:f2:7a:0d:
84:78:29:23:fd:8a:6d:8d:5e:00:fd:10:69:a9:ef:14:4a:c6:
85:a4:d4:08:e4:08:77:6c:cf:a9:dd:cb:e2:bd:f2:f4:c4:6c:
53:72:42:f5:c3:80:fa:c5:4d:72:a5:b3:59:9e:a5:e7:7e:d1:
b8:52:58:b3:14:b4:24:e6:4b:8f:a0:61:47:a0:91:e8:72:9e:
d1:2f:65:96:9d:5d:7f:2f:01:3a:3e:1e:a7:66:90:a9:58:e0:
bb:9d:12:a5:d2:9c:1f:38:52:ce:8d:c8:a0:f7:4e:da:8e:f2:
c3:b4:a3:dc:29:fd:45:07:7c:45:05:8f:3c:13:af:78:61:00:
5b:37:95:fb:a4:90:c0:b2:9c:f5:33:65:e7:60:b9:40:89:fc:
c2:cb:48:45:0c:8f:0e:24:29:67:57:a7:fc:8c:16:de:50:51:
fb:c5:1a:5f:45:c0:8f:e1:75:92:47:93:13:b9:90:dc:03:b4:
d9:9a:6c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:05:22 2026 by rpki-client