
$ rpki-client -vvf rpkica.twnic.tw/rpki/QISDA/1/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.mft
File: 5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.mft (raw, json)
Hash identifier: C0Y9yzhIzE7j0rfRN/8AZ6Vb+14iJ9GSWA11RdDkJaU=
Subject key identifier: 8C:0E:ED:54:5A:89:BB:C5:5D:DE:5C:AA:EB:E3:4D:22:B8:0F:53:BF
Authority key identifier: 50:31:E6:5A:98:D8:27:3F:95:79:BF:A5:B8:FE:6C:A5:2D:01:C4:1B
Certificate issuer: /CN=5031E65A98D8273F9579BFA5B8FE6CA52D01C41B
Certificate serial: 54FE07B55402035F04A732ED91759C2CA2799E8B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/QISDA/1/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.mft
Manifest number: 6A
Signing time: Tue 28 Jul 2026 10:58:14 +0000
Manifest this update: Tue 28 Jul 2026 10:53:14 +0000
Manifest next update: Wed 29 Jul 2026 13:05:14 +0000
Files and hashes: 1: 3136352e39392e3131322e302f32332d3234203d3e20313331363831.roa (hash: WrYPkf0InVKyICQINH//KXuGgao1vX5GBqZA6/+9gHc=)
2: 5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.crl (hash: aps3MeJgllVJPHI+nPg9N+P98BtPXKCyu+2+CvDI7C0=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/QISDA/1/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.crl
rsync://rpkica.twnic.tw/rpki/QISDA/1/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 07:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:fe:07:b5:54:02:03:5f:04:a7:32:ed:91:75:9c:2c:a2:79:9e:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5031E65A98D8273F9579BFA5B8FE6CA52D01C41B
Validity
Not Before: Jul 28 10:53:14 2026 GMT
Not After : Jul 29 13:05:14 2026 GMT
Subject: CN=8C0EED545A89BBC55DDE5CAAEBE34D22B80F53BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4a:a6:25:d9:45:c6:ba:fc:e9:f1:bc:5a:3a:
57:1f:d0:94:ce:9f:7f:b8:95:1e:17:78:17:57:92:
bd:58:ae:e9:38:d6:de:fa:2e:e2:40:d7:2b:28:98:
5c:d5:85:00:ad:d7:bf:e9:ff:2f:9a:c8:8d:61:7f:
77:1d:71:2d:69:e1:83:e9:f1:bd:a1:cd:9e:ec:bb:
9a:f3:6e:ed:83:71:ce:dc:2d:6d:b9:6e:56:c0:3a:
a3:81:93:ad:62:5c:12:df:73:59:d0:ae:61:d8:8c:
58:0e:cb:ab:a5:a8:78:df:da:2b:35:15:09:ad:f5:
5e:5b:79:bf:b4:ee:26:68:92:18:6d:55:12:62:37:
7e:2a:f5:bb:3c:5c:c3:e5:bd:6d:e3:ed:3a:fa:18:
43:1c:2a:fe:f0:66:6b:d9:a7:b0:8f:49:27:75:19:
93:8c:b7:81:a0:29:85:9e:85:b8:73:da:84:c1:41:
a5:9a:32:eb:8b:33:7f:19:55:c0:bb:7e:c4:35:0e:
ec:fc:5a:45:4c:85:06:cf:f1:96:cb:51:7e:d9:f5:
7b:17:1c:75:d4:ad:a6:e8:cb:14:cf:01:73:ed:22:
6b:09:86:d8:b9:31:2d:8a:d1:4e:99:e1:1f:13:57:
00:b6:5c:2a:e6:52:d4:d3:2b:e9:ca:06:18:cb:1d:
f7:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:0E:ED:54:5A:89:BB:C5:5D:DE:5C:AA:EB:E3:4D:22:B8:0F:53:BF
X509v3 Authority Key Identifier:
keyid:50:31:E6:5A:98:D8:27:3F:95:79:BF:A5:B8:FE:6C:A5:2D:01:C4:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/QISDA/1/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/QISDA/1/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:68:1e:be:4f:14:95:ac:76:be:88:b2:86:75:bb:aa:c3:1e:
02:a3:bd:55:0f:10:3a:6c:d6:14:f6:1f:26:ee:0a:f3:e1:4b:
58:5d:f8:08:41:62:79:ef:ce:ac:43:40:e7:c4:36:1a:68:6a:
cc:2e:ac:e5:07:7e:8b:4d:96:87:19:4e:a5:f5:b4:3a:f1:d8:
e4:29:d6:ff:78:72:c2:3b:6d:98:c7:ac:d1:f8:85:6c:52:51:
4e:9f:c8:7d:78:6e:d3:16:67:9c:1e:c1:86:30:c6:6a:1a:4e:
12:bd:a5:88:61:65:b4:56:86:fd:ad:cf:c0:ee:a0:d8:a9:36:
ce:c5:fb:1b:28:f7:f4:fc:05:d5:fb:e5:55:be:32:43:40:a8:
9a:37:97:7d:db:66:37:78:f6:43:74:1c:04:11:b4:46:31:73:
c1:e2:91:1c:93:13:29:53:a8:9e:5b:36:40:66:e2:15:5c:ba:
ef:bd:94:22:81:36:ca:89:72:47:d4:b7:0c:72:bc:e2:33:b5:
9a:a5:3d:2d:1d:5f:df:04:2e:aa:c4:80:fb:8e:f1:12:2b:36:
6b:2b:b1:f6:3f:95:61:d6:7d:9d:7c:a2:77:4f:59:6b:43:ff:
0b:29:6f:be:ec:a7:87:db:d0:eb:81:0e:5c:42:03:6f:63:76:
81:76:09:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:24:26 2026 by rpki-client