
$ rpki-client -vvf rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.mft
File: DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.mft (raw, json)
Hash identifier: LV9epeaOLTR8c93fgIBR77P8QPm1VtshGDufY8AFaCM=
Subject key identifier: D1:10:A4:56:26:E0:53:9C:C6:C3:3E:E3:E0:84:15:3F:C2:AD:B2:63
Authority key identifier: DF:AD:87:73:5B:96:E3:8C:5B:16:45:0D:06:F1:E3:F0:5D:1C:0B:50
Certificate issuer: /CN=DFAD87735B96E38C5B16450D06F1E3F05D1C0B50
Certificate serial: 37F230815D99469C947F24EE0DFFC21F1E3B75F0
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/2/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.mft
Manifest number: 7F
Signing time: Tue 28 Jul 2026 17:39:36 +0000
Manifest this update: Tue 28 Jul 2026 17:34:36 +0000
Manifest next update: Wed 29 Jul 2026 18:05:36 +0000
Files and hashes: 1: 3138372e37392e3234382e302f32312d3234203d3e203338303432.roa (hash: /1olUNUta2jWsipkUXWKP+uzfj0Zi5YxacKqhx693kk=)
2: 3138372e37392e3234382e302f32312d3234203d3e20313331313531.roa (hash: 3vADVgqIF+DMqXN/Slxe4U6QenJyre1e9qbCennjH4s=)
3: 3138372e37392e3139322e302f31392d3234203d3e20313334383233.roa (hash: a8CleYW3Fkq8o8fjYWlYdkD+yxdQ7vmQublJvofR+u0=)
4: 3138372e37392e3139322e302f31392d3234203d3e203338303432.roa (hash: L/E0Yfp/GwgZgFh8cWkW12iwkjBxZmoDDFi3H0v3pY8=)
5: DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.crl (hash: MTagR+qK5Y2YedizFzt78RoHDBkMiwrM345yK0Mf+AI=)
6: 3138372e37392e3139322e302f31392d3234203d3e20313331313531.roa (hash: 05w0uJce6h2DLQWt4ZdfTjMtpIegQ9tImqKoarYiRe8=)
7: 3138372e37392e3234382e302f32312d3234203d3e20313334383233.roa (hash: Zz9CvLm2AJx5rpKaFfW4V3557O2rIHrGg/E64B0gDkE=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.crl
rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/2/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 18:05:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:f2:30:81:5d:99:46:9c:94:7f:24:ee:0d:ff:c2:1f:1e:3b:75:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFAD87735B96E38C5B16450D06F1E3F05D1C0B50
Validity
Not Before: Jul 28 17:34:36 2026 GMT
Not After : Jul 29 18:05:36 2026 GMT
Subject: CN=D110A45626E0539CC6C33EE3E084153FC2ADB263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f2:f0:16:1f:25:79:27:7d:52:4f:4e:ff:0a:
9a:d0:77:0e:e2:74:18:05:61:96:15:49:27:87:d1:
fa:88:b6:dc:ef:69:00:c8:a3:1b:b0:fb:e1:be:08:
71:e6:2e:f8:84:ec:06:49:9c:88:22:69:d5:1d:92:
cb:8c:13:23:33:d7:54:fc:28:3a:28:8d:ab:d5:f0:
c7:d6:f6:eb:f2:68:40:99:c1:c3:2a:c9:01:52:d2:
97:e2:1c:61:ec:d3:ae:d3:cb:69:02:a5:f1:4e:b8:
5d:05:9d:45:b3:25:fa:cf:c1:78:4e:9e:9b:1e:15:
99:12:5c:42:64:65:a4:13:4a:69:b1:78:fd:f9:7f:
48:ed:81:f3:e1:b1:52:8d:9f:87:2d:da:2a:61:49:
87:1c:46:63:ca:db:20:d3:d7:76:12:b9:4c:15:59:
70:7b:d4:af:a8:3e:dc:93:3a:a7:d6:81:f8:53:4f:
96:93:a8:b7:fa:45:c3:77:6b:6d:d4:fe:16:81:64:
ca:8a:ce:d6:4f:5a:68:07:f9:51:03:3d:0d:41:64:
df:48:ae:37:9a:fa:75:2b:93:63:22:11:17:82:bd:
de:10:07:6d:fc:84:72:c0:6b:25:d7:45:6f:2a:33:
d1:75:69:cb:c7:9a:45:2a:ab:41:23:71:51:90:60:
9d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:10:A4:56:26:E0:53:9C:C6:C3:3E:E3:E0:84:15:3F:C2:AD:B2:63
X509v3 Authority Key Identifier:
keyid:DF:AD:87:73:5B:96:E3:8C:5B:16:45:0D:06:F1:E3:F0:5D:1C:0B:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:a1:be:11:e8:2a:db:e2:00:64:c5:3c:58:56:7d:ea:3f:a5:
76:39:fb:42:ee:5a:6f:cc:37:ac:da:0c:1b:03:12:fd:6a:d3:
41:ee:e3:64:07:f8:51:8a:ad:dc:0c:a4:aa:00:5a:39:53:b0:
b5:a1:19:da:05:99:50:02:40:6d:81:45:ff:c7:56:83:da:2c:
b6:6b:14:d7:06:f6:ec:35:e1:dc:84:cb:8b:69:a5:0a:be:a7:
14:a4:5e:e2:fa:66:7f:fe:5f:ab:89:02:02:bd:92:7d:a2:3e:
aa:a3:a1:c2:9f:dd:2d:6f:91:df:ad:ec:d9:35:1f:9e:a9:75:
0c:1c:d3:30:f4:c0:7b:03:b7:48:a8:f9:87:9b:ca:8b:93:e0:
b8:b5:1f:77:6d:65:35:9f:a9:f1:4e:a4:31:06:58:7e:69:a1:
c9:f0:3b:35:02:cc:d3:e7:4b:55:eb:d9:df:3e:35:15:3e:1e:
6b:e4:3c:02:f6:21:17:93:91:2b:a8:f2:11:8c:97:d8:c8:de:
f3:29:be:8c:0e:49:1e:d8:77:3c:42:7c:fd:1e:4d:30:6c:e7:
d2:a5:76:0e:44:e1:df:74:f1:ce:ae:2f:93:a2:1a:5d:1b:46:
c1:a5:27:00:d4:c8:e5:a1:03:16:70:04:33:4d:06:c7:c6:84:
62:a3:65:68
-----BEGIN CERTIFICATE-----
MIIE5jCCA86gAwIBAgIUN/IwgV2ZRpyUfyTuDf/CHx47dfAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREZBRDg3NzM1Qjk2RTM4QzVCMTY0NTBEMDZGMUUzRjA1
RDFDMEI1MDAeFw0yNjA3MjgxNzM0MzZaFw0yNjA3MjkxODA1MzZaMDMxMTAvBgNV
BAMTKEQxMTBBNDU2MjZFMDUzOUNDNkMzM0VFM0UwODQxNTNGQzJBREIyNjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf8vAWHyV5J31ST07/CprQdw7i
dBgFYZYVSSeH0fqIttzvaQDIoxuw++G+CHHmLviE7AZJnIgiadUdksuMEyMz11T8
KDoojavV8MfW9uvyaECZwcMqyQFS0pfiHGHs067Ty2kCpfFOuF0FnUWzJfrPwXhO
npseFZkSXEJkZaQTSmmxeP35f0jtgfPhsVKNn4ct2iphSYccRmPK2yDT13YSuUwV
WXB71K+oPtyTOqfWgfhTT5aTqLf6RcN3a23U/haBZMqKztZPWmgH+VEDPQ1BZN9I
rjea+nUrk2MiEReCvd4QB238hHLAayXXRW8qM9F1acvHmkUqq0EjcVGQYJ07AgMB
AAGjggHwMIIB7DAdBgNVHQ4EFgQU0RCkVibgU5zGwz7j4IQVP8KtsmMwHwYDVR0j
BBgwFoAU362Hc1uW44xbFkUNBvHj8F0cC1AwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0RDTC1U
Vy8xL0RGQUQ4NzczNUI5NkUzOEM1QjE2NDUwRDA2RjFFM0YwNUQxQzBCNTAuY3Js
MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu
aWMudHcvcnBraS9UV05JQ0NBLzIvREZBRDg3NzM1Qjk2RTM4QzVCMTY0NTBEMDZG
MUUzRjA1RDFDMEI1MC5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy
c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1NEQ0wtVFcvMS9ERkFEODc3MzVC
OTZFMzhDNUIxNjQ1MEQwNkYxRTNGMDVEMUMwQjUwLm1mdDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPKG+Eegq
2+IAZMU8WFZ96j+ldjn7Qu5ab8w3rNoMGwMS/WrTQe7jZAf4UYqt3AykqgBaOVOw
taEZ2gWZUAJAbYFF/8dWg9ostmsU1wb27DXh3ITLi2mlCr6nFKRe4vpmf/5fq4kC
Ar2SfaI+qqOhwp/dLW+R363s2TUfnql1DBzTMPTAewO3SKj5h5vKi5PguLUfd21l
NZ+p8U6kMQZYfmmhyfA7NQLM0+dLVevZ3z41FT4ea+Q8AvYhF5ORK6jyEYyX2Mje
8ym+jA5JHth3PEJ8/R5NMGzn0qV2DkTh33Txzq4vk6IaXRtGwaUnANTI5aEDFnAE
M00Gx8aEYqNlaA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:40:59 2026 by rpki-client