
$ rpki-client -vvvf rpkica.twnic.tw/rpki/PAGIC/0/130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.mft
File: 130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.mft (raw, json)
Hash identifier: BV+6AcLXwHuTWI4rNJ6+maqgtfOMqnavGSpGAD74uHk=
Subject key identifier: 95:DE:D9:C7:01:81:E3:16:42:82:EE:25:87:34:43:D2:86:EE:98:28
Authority key identifier: 13:0A:AF:47:5B:CC:02:CD:BB:DB:4C:97:44:EB:E3:1C:EE:EE:30:6D
Certificate issuer: /CN=130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D
Certificate serial: 4CE91436B540AED1A78A257DBD5690A2CC645B01
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/PAGIC/0/130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.mft
Manifest number: BF
Signing time: Sun 20 Sep 2026 19:19:10 +0000
Manifest this update: Sun 20 Sep 2026 19:14:10 +0000
Manifest next update: Mon 21 Sep 2026 23:01:10 +0000
Files and hashes: 1: 323430333a396630303a3a2f33322d3634203d3e203137343230.roa (hash: ZPdza9V56kgRWx9pLYMA7jGn3u5jYbB10LgeaN0WcCQ=)
2: 3231302e3234312e3132382e302f31392d3234203d3e203137343230.roa (hash: Gn/fHHBtwdv7hHePUEwx/lr5HmaDD6xMFsK7vYN8rnI=)
3: 3231302e36332e39382e302f32342d3234203d3e2034373831.roa (hash: LZZyhIKiYAfs1G4qbQO9LGz3ToSYlMJ9OrfP9EV4Tq0=)
4: 3231302e36332e3130312e302f32342d3234203d3e2034373831.roa (hash: rav3k+J92cWvzcc/ldmfewXrmmg5PcEqAibF1/Kptew=)
5: 3231302e36332e39392e302f32342d3234203d3e2034373831.roa (hash: T9nAzYG428WNrvrKTVaRKbbeakEvkID730VDFwUgjT8=)
6: 3231312e37332e3232342e302f31392d3234203d3e203137343230.roa (hash: Mz9dS+q6MYbQtEVWX6Nls31KboSIBf4MyRv3x177YkY=)
7: 3231302e36332e39362e302f32342d3234203d3e2034373831.roa (hash: r+gVK2VfItvXfc9D/hoEHWAKfJ3x7gerduTgXg2N2hk=)
8: 3231302e36372e36342e302f31392d3234203d3e203137343230.roa (hash: XPhUbdwzkXKd7wyZA9mIWolSBc8w6j6pnxuPa4iOEgM=)
9: 3231312e37332e3139322e302f31392d3234203d3e203137343230.roa (hash: Ng7pjPxIKkFqYQdz2HZ68PejD4I0wBx9Difg1QRxlvg=)
10: 3231302e36332e3130302e302f32342d3234203d3e2034373831.roa (hash: YllPOK/7S6GtVHlW+VD5R39QA4TYAM62jJfvSP4GAY4=)
11: 3230332e36352e3139322e302f31392d3234203d3e203137343230.roa (hash: y3u8qB85VptzA5YlFGsJbIfVWF77aJR7UfYTg6yAcZo=)
12: 130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.crl (hash: OiyTTK+Uh5P3RZwdrwpW2AzYnyW7IJnzdP1GnejtbVQ=)
13: 3231302e36332e39372e302f32342d3234203d3e2034373831.roa (hash: pn2cv1epz4+YzcODeVJzoApSmnZhAv8mJu1ha3dn6eA=)
14: 3231302e36332e3130322e302f32342d3234203d3e2034373831.roa (hash: GHaw+CjnUR7UTaF17geosdaWBptieeQMfmtnq2Q4EgQ=)
15: 3231302e36332e3130332e302f32342d3234203d3e2034373831.roa (hash: 5LuanoUO4a6xeqWaLxN/SZeaOAGLuEEwfSAJPqh7eLs=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/PAGIC/0/130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.crl
rsync://rpkica.twnic.tw/rpki/PAGIC/0/130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 21 Sep 2026 23:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:e9:14:36:b5:40:ae:d1:a7:8a:25:7d:bd:56:90:a2:cc:64:5b:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D
Validity
Not Before: Sep 20 19:14:10 2026 GMT
Not After : Sep 21 23:01:10 2026 GMT
Subject: CN=95DED9C70181E3164282EE25873443D286EE9828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2e:79:be:ef:16:5a:59:3d:5d:03:3e:61:ab:
db:00:af:93:b9:f1:1d:e4:1c:fb:63:bb:9c:03:9e:
ef:fe:0a:0a:d4:a3:8b:4f:3e:87:4f:ef:46:28:a0:
17:7b:21:9d:36:c5:d9:e3:98:ef:4b:93:09:a7:b2:
b4:5d:a8:9e:68:bc:7a:df:cd:60:7c:c7:c4:2c:5b:
14:54:d0:62:d1:ae:3c:24:f7:9e:37:cd:d7:20:6d:
f2:c2:e6:ad:01:bc:3a:0b:56:a7:50:63:2e:7f:d2:
ea:01:44:41:ed:a7:f8:cf:9d:e2:13:bb:87:f8:01:
d0:34:6e:1c:d9:4a:be:cd:02:e6:57:a9:b6:b1:16:
90:35:c9:b6:eb:1f:53:fc:e7:da:ee:ce:15:8a:bc:
e2:5f:c8:1a:91:65:88:0a:2b:49:0f:df:d6:8c:f9:
95:ab:c6:5a:51:e6:a1:03:a3:d7:e2:d3:56:a5:f7:
10:95:07:f2:ec:21:13:e2:57:ee:8c:28:e0:18:86:
1b:1c:0a:ab:81:e4:42:21:20:c7:5e:af:04:4e:88:
31:a5:64:d5:09:70:2e:c5:db:83:23:e6:66:fb:e2:
85:b3:47:5f:9e:0f:01:e9:a2:aa:13:1f:f9:c2:f2:
93:07:12:a6:e8:37:84:32:33:b8:5e:f0:dc:72:aa:
eb:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:DE:D9:C7:01:81:E3:16:42:82:EE:25:87:34:43:D2:86:EE:98:28
X509v3 Authority Key Identifier:
keyid:13:0A:AF:47:5B:CC:02:CD:BB:DB:4C:97:44:EB:E3:1C:EE:EE:30:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/PAGIC/0/130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PAGIC/0/130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:73:01:30:09:9d:ea:4d:a3:87:1f:6d:00:69:22:48:eb:4e:
ec:e4:5a:d0:bb:90:27:15:f1:bb:2d:6a:9d:3d:c9:3e:c1:07:
99:8f:22:75:f2:c3:41:9b:34:b4:14:84:00:14:de:2c:9d:27:
94:eb:25:ea:ae:b6:50:11:6e:13:0d:67:95:82:54:06:06:31:
02:6e:4b:08:0f:1b:97:06:6e:69:80:83:76:26:ca:3b:38:65:
0c:7e:81:49:d5:41:8a:27:67:ee:6f:fa:59:c5:1e:9f:08:1d:
ce:cd:bc:73:8a:27:9e:bc:93:3c:2d:ba:17:1c:af:dd:b6:11:
f6:99:04:49:c3:7b:d6:ae:6d:e1:5f:1b:38:96:76:24:fd:ef:
bb:5a:5b:bb:13:f9:15:ba:25:95:83:97:69:39:d5:50:7e:c3:
20:34:b3:7d:cb:47:e1:27:43:6a:50:ff:27:53:fb:8b:f1:b1:
04:cf:84:a5:19:fd:d6:b6:e7:8b:f7:ac:59:b4:4c:0c:fc:25:
5d:da:ab:c8:8f:41:03:d6:ee:a4:5d:c2:88:ce:08:92:fe:c8:
86:74:c1:ad:15:47:fa:ef:78:b0:ed:0c:70:f2:87:be:dd:4e:
f6:fa:22:0f:39:09:26:92:9e:07:ae:8d:d0:a9:ae:aa:b7:c3:
ec:52:40:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:49:55 2026 by rpki-client