
$ rpki-client -vvvf rpkica.twnic.tw/rpki/SDCL-TW/0/CE11BDD44F66776624C4D9BE145C499FD144FEAE.mft
File: CE11BDD44F66776624C4D9BE145C499FD144FEAE.mft (raw, json)
Hash identifier: /K6FyesxBlEReKO/S7lcgmJWVUC8tFW7OQeEAxshHKI=
Subject key identifier: 13:CA:E0:5F:DD:A7:04:DB:41:99:96:38:EA:E7:4D:37:72:A8:EE:84
Authority key identifier: CE:11:BD:D4:4F:66:77:66:24:C4:D9:BE:14:5C:49:9F:D1:44:FE:AE
Certificate issuer: /CN=CE11BDD44F66776624C4D9BE145C499FD144FEAE
Certificate serial: 5BD7E8CC5D873476263C00ADE9954B25AE9FD180
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE11BDD44F66776624C4D9BE145C499FD144FEAE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/CE11BDD44F66776624C4D9BE145C499FD144FEAE.mft
Manifest number: D0
Signing time: Sun 20 Sep 2026 18:24:00 +0000
Manifest this update: Sun 20 Sep 2026 18:19:00 +0000
Manifest next update: Mon 21 Sep 2026 22:08:00 +0000
Files and hashes: 1: 3132332e3235332e3134302e302f32332d3234203d3e20313334383233.roa (hash: CrTNs0AH90r7cZBlpSeAIE3vwnetXg/AusPTD3RqShg=)
2: 3130332e3132332e3133342e302f32332d3234203d3e203338303432.roa (hash: M2N3duptFA+bV1Le2KfMm0NhGumIDIKQ5uH8Mkm1Ayk=)
3: 323430323a373165303a3a2f33322d3438203d3e20313334383233.roa (hash: Ezk288EMxD5xtLGFhHQ06ty+ECxin6l3nT7k5oesNiA=)
4: 3231312e37362e3138362e302f32332d3234203d3e20313334383233.roa (hash: frrJ9Ax263gLZQyLPtTtkUx1W9FWOWmh3CFY/OBqnQA=)
5: 3130332e3133372e32322e302f32332d3234203d3e20313334383233.roa (hash: aDavL8rxqoo8KxGhzDJFgULMoFY3AbxQ+AV5uzJ9ekY=)
6: 3231312e37362e3138362e302f32332d3234203d3e203338303432.roa (hash: 3Ay4JL1xheIDlwalZgSaaVSELk/2rTlAgpIQb9jIwnE=)
7: 3230322e3135332e342e302f32332d3234203d3e203338303432.roa (hash: VcodHH9y1x00L8sP0YZKCLZqgzyOTw8vizvrWxB7jj0=)
8: 3130332e3234362e3231382e302f32332d3234203d3e20313334383233.roa (hash: OzJYK1jOl/dVvskD0N+jBQ6FAS7v+8gWPkXtAjUfvn0=)
9: 3230322e3135332e342e302f32332d3234203d3e20313334383233.roa (hash: NsOmt7pVltLDLNJkJQMI9iOFOR3amJKV3SLzyoPvcPU=)
10: 3130332e3133372e32322e302f32332d3234203d3e20313331313531.roa (hash: g4jmTDzhH5yCftN+Hf4jeZwkiWF2fHHHW5/2kNZmhdo=)
11: 3130332e3132332e3133322e302f32322d3234203d3e20313334383233.roa (hash: TWQAxE4TuK638NNKsOzZRvFCTF3qf+yBP5Tq3YLqYEs=)
12: 3130332e3230382e3139362e302f32332d3234203d3e20313334383233.roa (hash: IfSDDsILyDRxAjm+/0ybBUR0UiUpBoakPK/0JXTDCfg=)
13: CE11BDD44F66776624C4D9BE145C499FD144FEAE.crl (hash: CWa2PPG6rH+O10+YOp60g5t+n61EuQduDVYP+SgnqLs=)
14: 3130332e3132332e3133322e302f32322d3234203d3e20313331313531.roa (hash: H4J8aYtZ2lQXywkXl0ThjqAPLa0AaGzOIFqfGA0h3G0=)
15: 3130332e3230382e3139362e302f32342d3234203d3e20313331313531.roa (hash: h+x2L34XmnxLWmEu1m747gZYQB4caW32b27vqV/vxXE=)
16: 3230322e3134382e3232302e302f32332d3234203d3e203338303432.roa (hash: Qf23TJE1nXjdkeX0xoNGfVGqhO6JSGDcdHqoaJWF4Yw=)
17: 323430323a373165303a3130303a3a2f34382d3438203d3e20323034363737.roa (hash: vsm9UGN6tHY0aNAGBXgIpoDTNmnsxdu9OsGwN4Md6uM=)
18: 3132332e3235332e3134302e302f32332d3234203d3e20313331313531.roa (hash: E7oUOAQPwU/1YwrLhJW8yVt6QPbfk9BRh7TbtE2H6S8=)
19: 323430323a373165303a3a2f34302d3438203d3e20313331363738.roa (hash: mTqEC6aiPcWHZSlk2Er8l9ki9WnEV+dwuhfO3oWs108=)
20: 3230322e3134382e3232302e302f32332d3234203d3e20313334383233.roa (hash: jOramKZ+p8IwNeLLsXerl9TVbe7RADM835SAcBWesfU=)
21: 3130332e3234362e3231382e302f32332d3234203d3e20313331313531.roa (hash: uFajU2b2waTlSxMDI+/JBL3cx222mORnPfMwxN2souI=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/CE11BDD44F66776624C4D9BE145C499FD144FEAE.crl
rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/CE11BDD44F66776624C4D9BE145C499FD144FEAE.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE11BDD44F66776624C4D9BE145C499FD144FEAE.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 21 Sep 2026 22:08:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:d7:e8:cc:5d:87:34:76:26:3c:00:ad:e9:95:4b:25:ae:9f:d1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CE11BDD44F66776624C4D9BE145C499FD144FEAE
Validity
Not Before: Sep 20 18:19:00 2026 GMT
Not After : Sep 21 22:08:00 2026 GMT
Subject: CN=13CAE05FDDA704DB41999638EAE74D3772A8EE84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d4:a3:84:05:3d:82:e5:c8:b5:e8:68:e4:d7:
2b:78:4c:4f:e6:0f:83:be:ae:78:c4:c0:bd:51:bb:
d9:f1:73:7f:20:23:ae:ff:b0:56:d3:72:7d:46:e3:
82:e7:b1:4a:83:c6:20:99:49:81:ca:9f:40:7d:78:
ed:6c:00:a4:9a:0f:f6:8e:35:cc:30:83:ab:7f:61:
0d:90:81:2e:e9:46:ed:29:41:24:a0:c5:bf:cf:02:
56:c7:bd:11:9d:94:f0:de:76:60:52:a6:89:c3:9a:
60:fe:da:d2:4b:a5:4f:5f:e2:70:1a:6a:33:38:dd:
cf:9c:38:9d:56:2a:5d:d0:8e:a6:1f:1d:94:62:81:
d7:9c:fd:a0:ba:d2:7a:2b:4f:43:76:3c:62:6a:aa:
e6:a5:ce:bd:24:e4:18:9d:34:13:14:bc:52:f1:69:
7b:ea:46:28:86:a5:52:27:3f:04:c6:4f:5a:21:df:
37:bf:8c:74:7d:c2:be:a7:7e:a3:49:f2:ce:48:94:
e7:a8:37:ef:42:67:19:6e:66:5d:06:c6:32:8a:e6:
a0:4e:0f:17:a8:52:46:4e:b3:37:7b:41:ea:f8:3b:
3f:16:26:78:ea:96:b0:36:5f:42:ee:af:54:0c:22:
da:a7:bc:ee:d9:43:e5:94:ea:87:4a:a3:29:95:f7:
b5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:CA:E0:5F:DD:A7:04:DB:41:99:96:38:EA:E7:4D:37:72:A8:EE:84
X509v3 Authority Key Identifier:
keyid:CE:11:BD:D4:4F:66:77:66:24:C4:D9:BE:14:5C:49:9F:D1:44:FE:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/CE11BDD44F66776624C4D9BE145C499FD144FEAE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE11BDD44F66776624C4D9BE145C499FD144FEAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/CE11BDD44F66776624C4D9BE145C499FD144FEAE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:68:4b:2a:1c:e8:72:a0:c4:e1:d6:34:11:d2:50:b3:dd:b3:
4e:86:3c:88:56:4b:d5:a3:a0:82:dc:a2:50:a9:e1:55:7c:b3:
2a:ee:85:38:2c:8d:31:3f:c1:75:8c:b9:42:09:df:09:31:d2:
25:5b:c7:96:a7:7c:9f:d8:c1:9d:d0:27:78:11:ea:5d:bc:6a:
63:a0:ee:6b:03:a7:b8:5e:2e:e0:fd:eb:f6:6d:ba:ce:96:53:
56:9d:e8:4b:44:df:81:56:b5:b9:4a:68:90:72:a3:10:73:41:
a2:4c:0f:d8:c7:57:f6:83:5d:2e:da:79:a1:59:75:12:fa:40:
ab:eb:71:0a:f9:18:e5:ab:0a:a4:57:7d:fb:0c:cd:e8:ea:af:
a1:f7:4b:32:71:ae:cb:27:d4:0b:3f:c1:f7:60:0d:f9:f9:49:
a9:14:29:6f:d8:83:6b:64:d7:5d:af:e3:9f:16:2f:d4:df:dd:
42:02:da:14:a7:dc:63:8d:bf:ed:e3:12:e1:8e:46:7c:de:5a:
96:36:d1:e4:69:4b:6d:af:70:40:20:af:e8:1b:1b:d1:ff:4b:
1f:26:cb:c5:53:3a:4f:a3:d0:9e:ad:10:34:70:1c:a0:2d:ca:
b1:5f:2c:16:7d:ba:72:45:19:6f:d1:db:21:b0:ef:02:a7:9c:
b4:0b:b1:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:02:56 2026 by rpki-client