
$ rpki-client -vvf rpkica.twnic.tw/rpki/SECUNET/0/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.mft
File: 4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.mft (raw, json)
Hash identifier: 6jMtc9XDnr2wJhjRxCpTre+yAvHc2Bf30as1Jfdaymo=
Subject key identifier: C1:76:F3:A6:70:84:E2:A9:99:CD:7B:68:29:93:EF:48:A8:CF:E7:C0
Authority key identifier: 4D:4D:BD:28:BB:EB:89:20:B3:7A:A6:04:8A:C2:7D:52:46:6A:C7:E6
Certificate issuer: /CN=4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6
Certificate serial: 483A7228661FA3EFB49D9BA1D88F1189C60E2C64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SECUNET/0/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.mft
Manifest number: 6D
Signing time: Tue 28 Jul 2026 16:04:22 +0000
Manifest this update: Tue 28 Jul 2026 15:59:22 +0000
Manifest next update: Wed 29 Jul 2026 19:57:22 +0000
Files and hashes: 1: 4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.crl (hash: cDiyP6DGcym1NQ60CTSxEt1mLPY1IhJ21aCqQvCtsMI=)
2: 3130332e3139382e3135322e302f32332d3234203d3e2037353338.roa (hash: lozDj5Lx5lP+vcH1OuWHc2uSVB3sN9/AJEBNfjtjdxc=)
3: 3130332e3139382e3135322e302f32332d3234203d3e203231383539.roa (hash: cAZa+9mLNLRFrGmQjJmou8jCTgH3y1HwgtvgIKtzlGk=)
4: 3130332e3139382e3135322e302f32332d3234203d3e2037343833.roa (hash: uG7CGWdeS5uhveRrD2X7qwANEb3T2edbHmVXjF6fXlg=)
5: 3130332e3139382e3135322e302f32332d3234203d3e2037353336.roa (hash: RqA+16NcNPgMT4YMF2BTGjQjH/2+48khaUyObZRFtRE=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/SECUNET/0/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.crl
rsync://rpkica.twnic.tw/rpki/SECUNET/0/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 07:22:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:3a:72:28:66:1f:a3:ef:b4:9d:9b:a1:d8:8f:11:89:c6:0e:2c:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6
Validity
Not Before: Jul 28 15:59:22 2026 GMT
Not After : Jul 29 19:57:22 2026 GMT
Subject: CN=C176F3A67084E2A999CD7B682993EF48A8CFE7C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:20:8a:29:3f:ec:0f:7b:3f:ff:d9:64:30:46:
dd:50:76:04:ab:5c:b8:f4:44:c5:07:6b:1e:8e:fe:
2c:e8:8d:d0:3d:e0:5a:a4:d8:e5:5f:4f:aa:b9:dd:
31:f7:3a:0e:bd:dd:d6:ce:bd:bf:50:e5:a5:7a:4c:
50:a7:f6:86:e9:20:d7:59:9f:13:51:18:fe:8a:a6:
43:83:68:40:46:f1:4d:7c:78:e4:88:62:c5:58:f2:
2e:e1:19:da:2e:79:4f:0c:a0:08:09:32:bc:21:0a:
e9:02:bf:b6:09:be:72:68:c6:94:12:2d:0f:88:6e:
fc:3c:b1:77:db:1b:a1:47:7f:59:12:7e:39:bb:b9:
72:6f:d8:2a:e6:78:15:0f:ae:a5:6f:64:80:77:22:
97:08:6b:c1:57:49:75:9a:1f:16:ee:3b:cb:b5:4b:
9f:bd:71:dc:3f:05:74:cc:7b:46:92:63:d4:11:0b:
70:df:63:ee:6d:2b:0f:b0:75:8f:ce:5b:57:ce:92:
78:7d:28:71:86:51:5c:13:67:b7:26:94:4f:8f:4f:
be:a2:39:29:c7:6a:a6:85:82:63:5d:f8:f3:03:8e:
b6:aa:3e:7a:c7:02:6e:c4:f7:72:1a:ce:f5:3c:d1:
b3:ac:48:6a:42:b3:32:fe:c7:f1:98:81:30:e7:63:
f2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:76:F3:A6:70:84:E2:A9:99:CD:7B:68:29:93:EF:48:A8:CF:E7:C0
X509v3 Authority Key Identifier:
keyid:4D:4D:BD:28:BB:EB:89:20:B3:7A:A6:04:8A:C2:7D:52:46:6A:C7:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SECUNET/0/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SECUNET/0/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:b9:f7:3f:9a:2d:f1:b9:30:dc:7c:5d:40:fa:8b:1c:81:f7:
dd:77:da:16:4c:c0:45:be:67:42:24:8d:f6:07:a9:df:e3:ca:
e9:fa:40:53:19:09:2e:e4:3d:c2:36:10:b2:d0:06:fa:46:db:
4d:77:9d:ae:ae:83:f1:2a:03:81:2e:59:5c:a8:56:d8:47:a8:
9d:10:0b:34:b3:aa:ea:33:04:5a:94:be:3a:e6:09:97:bb:24:
96:d1:44:23:f7:37:db:24:65:0f:a3:38:28:9e:2a:65:28:a2:
d3:22:b1:b4:7b:93:94:0b:68:8b:46:fe:ff:cd:74:14:44:7d:
d4:f4:cb:a7:78:70:24:71:fc:ec:90:0a:0b:b9:3e:e2:9f:9d:
68:b6:84:85:ff:b3:c4:fe:06:79:c5:05:69:8c:a5:b8:93:8f:
15:ab:55:be:4f:91:06:97:0a:7b:4b:11:ab:b1:13:9f:77:fd:
d4:5f:ed:54:34:14:1b:75:ed:83:c5:33:9e:90:9d:da:e9:84:
47:e5:7b:e9:a9:48:5e:6c:62:7b:46:09:c0:dc:2b:89:92:6f:
93:87:a1:be:04:78:30:cd:0b:fa:cc:a4:6e:98:f8:24:fa:78:
6c:01:54:3f:75:2f:d8:2b:2e:19:2d:3c:90:a5:a2:48:d2:6f:
c6:88:75:16
-----BEGIN CERTIFICATE-----
MIIE5jCCA86gAwIBAgIUSDpyKGYfo++0nZuh2I8RicYOLGQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEQ0REJEMjhCQkVCODkyMEIzN0FBNjA0OEFDMjdENTI0
NjZBQzdFNjAeFw0yNjA3MjgxNTU5MjJaFw0yNjA3MjkxOTU3MjJaMDMxMTAvBgNV
BAMTKEMxNzZGM0E2NzA4NEUyQTk5OUNEN0I2ODI5OTNFRjQ4QThDRkU3QzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjIIopP+wPez//2WQwRt1QdgSr
XLj0RMUHax6O/izojdA94Fqk2OVfT6q53TH3Og693dbOvb9Q5aV6TFCn9obpINdZ
nxNRGP6KpkODaEBG8U18eOSIYsVY8i7hGdoueU8MoAgJMrwhCukCv7YJvnJoxpQS
LQ+Ibvw8sXfbG6FHf1kSfjm7uXJv2CrmeBUPrqVvZIB3IpcIa8FXSXWaHxbuO8u1
S5+9cdw/BXTMe0aSY9QRC3DfY+5tKw+wdY/OW1fOknh9KHGGUVwTZ7cmlE+PT76i
OSnHaqaFgmNd+PMDjraqPnrHAm7E93IazvU80bOsSGpCszL+x/GYgTDnY/KNAgMB
AAGjggHwMIIB7DAdBgNVHQ4EFgQUwXbzpnCE4qmZzXtoKZPvSKjP58AwHwYDVR0j
BBgwFoAUTU29KLvriSCzeqYEisJ9UkZqx+YwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0VDVU5F
VC8wLzRENERCRDI4QkJFQjg5MjBCMzdBQTYwNDhBQzI3RDUyNDY2QUM3RTYuY3Js
MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu
aWMudHcvcnBraS9UV05JQ0NBLzEvNEQ0REJEMjhCQkVCODkyMEIzN0FBNjA0OEFD
MjdENTI0NjZBQzdFNi5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy
c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1NFQ1VORVQvMC80RDREQkQyOEJC
RUI4OTIwQjM3QUE2MDQ4QUMyN0Q1MjQ2NkFDN0U2Lm1mdDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKrn3P5ot
8bkw3HxdQPqLHIH33XfaFkzARb5nQiSN9gep3+PK6fpAUxkJLuQ9wjYQstAG+kbb
TXedrq6D8SoDgS5ZXKhW2EeonRALNLOq6jMEWpS+OuYJl7skltFEI/c32yRlD6M4
KJ4qZSii0yKxtHuTlAtoi0b+/810FER91PTLp3hwJHH87JAKC7k+4p+daLaEhf+z
xP4GecUFaYyluJOPFatVvk+RBpcKe0sRq7ETn3f91F/tVDQUG3Xtg8UznpCd2umE
R+V76alIXmxie0YJwNwriZJvk4ehvgR4MM0L+sykbpj4JPp4bAFUP3Uv2CsuGS08
kKWiSNJvxoh1Fg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:24:21 2026 by rpki-client