
$ rpki-client -vvf rpkica.twnic.tw/rpki/QISDA/1/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.mft
File: 5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.mft (raw, json)
Hash identifier: 1sXIjthkq4O7PGh0mux8D5x6H1v6Lo6rCANkJ9XHnwU=
Subject key identifier: 9D:61:E7:2B:1C:7A:53:A4:21:AD:9C:1C:26:58:6D:A4:17:7E:F7:F2
Authority key identifier: 50:31:E6:5A:98:D8:27:3F:95:79:BF:A5:B8:FE:6C:A5:2D:01:C4:1B
Certificate issuer: /CN=5031E65A98D8273F9579BFA5B8FE6CA52D01C41B
Certificate serial: 0192DE68DE72C9D481705E5B1EE09A7AAFF7B1A5
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/QISDA/1/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.mft
Manifest number: 2D
Signing time: Fri 12 Jun 2026 23:08:21 +0000
Manifest this update: Fri 12 Jun 2026 23:03:21 +0000
Manifest next update: Sun 14 Jun 2026 00:43:21 +0000
Files and hashes: 1: 3136352e39392e3131322e302f32332d3234203d3e20313331363831.roa (hash: WrYPkf0InVKyICQINH//KXuGgao1vX5GBqZA6/+9gHc=)
2: 5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.crl (hash: vA5VaE/XAtRGPU9L69F/m0WFruSgz7rQsQeNnFnuOog=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/QISDA/1/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.crl
rsync://rpkica.twnic.tw/rpki/QISDA/1/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 00:43:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:de:68:de:72:c9:d4:81:70:5e:5b:1e:e0:9a:7a:af:f7:b1:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5031E65A98D8273F9579BFA5B8FE6CA52D01C41B
Validity
Not Before: Jun 12 23:03:21 2026 GMT
Not After : Jun 14 00:43:21 2026 GMT
Subject: CN=9D61E72B1C7A53A421AD9C1C26586DA4177EF7F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:8b:c8:4c:30:52:8e:a1:b4:ee:ca:1d:10:bd:
ff:d3:1a:70:7f:a6:5b:a4:f0:ac:ab:2e:0b:42:73:
78:b5:64:80:3a:26:2a:72:f1:bf:8b:b4:f7:72:ba:
0c:ee:70:e1:78:2d:c8:3a:f0:86:fa:ff:9e:83:8b:
fc:bb:fa:cc:fb:be:97:b3:07:09:e0:2d:db:4e:26:
9a:70:fa:bf:ec:c6:e0:cd:79:2e:12:8f:89:91:38:
24:36:c4:c0:94:67:8c:e3:91:1e:1a:c9:66:9f:34:
c3:8a:95:d2:7a:ab:d8:3d:11:a4:59:a6:9c:e9:0d:
e7:cb:12:d1:c0:3e:20:d4:79:6e:9a:fe:45:c4:ee:
ce:d9:c6:d4:17:bd:c9:ee:58:c8:6e:28:89:0c:e1:
a8:42:aa:4d:40:0f:49:f2:db:80:a4:b2:1a:b2:04:
2d:11:f0:80:84:28:61:8b:10:2c:ed:a3:06:84:9c:
be:7e:2b:a4:21:fc:93:14:ee:3f:5d:73:49:be:4b:
57:f6:8e:da:61:31:f3:48:17:dc:67:78:02:92:3d:
da:6b:e7:8f:cf:a8:0f:b3:74:d1:f7:32:e7:ab:82:
0a:ea:c5:d5:e5:33:2e:30:64:f6:74:44:63:a5:c8:
59:c2:d2:02:8a:e1:ff:77:54:6a:55:b7:8a:c7:2d:
9b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:61:E7:2B:1C:7A:53:A4:21:AD:9C:1C:26:58:6D:A4:17:7E:F7:F2
X509v3 Authority Key Identifier:
keyid:50:31:E6:5A:98:D8:27:3F:95:79:BF:A5:B8:FE:6C:A5:2D:01:C4:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/QISDA/1/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/QISDA/1/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:f3:eb:51:9c:62:db:35:30:78:86:cf:26:5e:0f:4a:96:58:
8f:71:c7:15:8f:e4:b8:27:4a:fa:a3:c8:7a:50:88:f3:75:0e:
98:4e:fd:8b:05:6d:cc:c1:d5:a4:eb:8c:a5:92:b6:7f:d1:89:
18:3f:54:41:81:da:72:04:95:ed:ab:8c:04:c5:0e:de:45:46:
4a:9d:bb:6c:51:ed:8e:01:19:fd:46:31:2c:5b:b4:66:ca:bd:
c0:2b:43:3d:25:50:b9:0d:7c:66:5d:7c:b1:f9:41:f4:a4:5b:
48:37:06:32:07:98:42:aa:6a:7d:25:86:af:8b:24:56:65:a0:
22:9b:0d:7d:ba:02:1f:c7:44:e4:bf:cc:f3:3b:08:ff:1f:4b:
54:7c:aa:ba:f5:be:76:1c:ad:49:2d:d0:c3:4d:a0:d1:02:e4:
3a:50:e6:23:92:b7:4c:db:f7:98:a3:63:2a:88:b2:88:7f:ba:
a2:14:76:fb:f9:22:91:87:78:d0:f5:05:1c:88:46:77:c1:46:
0e:2b:1c:83:f4:e9:79:12:8b:41:8f:1d:41:bc:20:b3:03:69:
90:38:14:32:e6:23:5b:60:ad:e3:13:8d:15:7a:6a:5e:8f:68:
8f:56:52:99:fd:d9:7a:b4:e0:f7:1a:13:f5:60:98:7e:38:ff:
ea:17:67:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:05:23 2026 by rpki-client