
$ rpki-client -vvvf rpkica.twnic.tw/rpki/SKIPTECH/1/18D1FE81C173554ED00687499D810AFDA7832B87.mft
File: 18D1FE81C173554ED00687499D810AFDA7832B87.mft (raw, json)
Hash identifier: Fdv0Ydn1ebMohmK1OcTis1ye+ktEnvOBoTdz7XfXlxI=
Subject key identifier: E8:60:50:80:16:12:7B:09:55:C0:97:C8:C0:68:81:21:99:09:E1:5F
Authority key identifier: 18:D1:FE:81:C1:73:55:4E:D0:06:87:49:9D:81:0A:FD:A7:83:2B:87
Certificate issuer: /CN=18D1FE81C173554ED00687499D810AFDA7832B87
Certificate serial: 21BC0220C2DD4D0C080395EA7CC925AF1B2ABEB6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/18D1FE81C173554ED00687499D810AFDA7832B87.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SKIPTECH/1/18D1FE81C173554ED00687499D810AFDA7832B87.mft
Manifest number: BB
Signing time: Mon 21 Sep 2026 05:00:50 +0000
Manifest this update: Mon 21 Sep 2026 04:55:50 +0000
Manifest next update: Tue 22 Sep 2026 05:06:50 +0000
Files and hashes: 1: 3136302e32352e3232312e302f32342d3234203d3e20313334353138.roa (hash: 7IoYQpo1T/5YhDfvSsGkmAx+L0WawF2gleD9NZlKOWc=)
2: 3136302e32352e3232302e302f32342d3234203d3e203134363138.roa (hash: bCnkn2jAVE9KleuH5oDTsZDVKf1Fw7/YQWS5kX1HeTE=)
3: 3136302e32352e3232312e302f32342d3234203d3e2039303032.roa (hash: gW+pn5qU90RDUm4ONMCv1Ozmw5AmvSTZSeKQrZoYYHY=)
4: 3136302e32352e3232312e302f32342d3234203d3e203137343038.roa (hash: DcORFKNZWB0zprz/YGx3XCHKdNb/SVKWG++JjaAt6oM=)
5: 18D1FE81C173554ED00687499D810AFDA7832B87.crl (hash: 6xL8hyEXjbmCXQjud9olJZGucIuBZIV8fpSZQEXYX14=)
6: 3136302e32352e3232312e302f32342d3234203d3e203633393039.roa (hash: n/n7f5FCcDDloN2WuDF05RtVDGH7J0P31AjRZsjOWMI=)
7: 3136302e32352e3232302e302f32342d3234203d3e203136353039.roa (hash: UeyWWy2PunBOombmp3qs5M9kFdAewxzXdUVR+0/0o9A=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/SKIPTECH/1/18D1FE81C173554ED00687499D810AFDA7832B87.crl
rsync://rpkica.twnic.tw/rpki/SKIPTECH/1/18D1FE81C173554ED00687499D810AFDA7832B87.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/18D1FE81C173554ED00687499D810AFDA7832B87.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 05:06:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:bc:02:20:c2:dd:4d:0c:08:03:95:ea:7c:c9:25:af:1b:2a:be:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18D1FE81C173554ED00687499D810AFDA7832B87
Validity
Not Before: Sep 21 04:55:50 2026 GMT
Not After : Sep 22 05:06:50 2026 GMT
Subject: CN=E860508016127B0955C097C8C06881219909E15F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bf:2c:b9:bf:c2:7d:51:37:02:5c:8e:cb:d4:
f7:63:61:c1:62:76:36:85:73:23:ff:be:5e:a4:4a:
1a:e7:d7:57:ef:2b:cf:2f:41:6e:1d:f5:37:8b:af:
51:f1:fa:95:c2:3e:b2:30:36:94:ef:61:4d:63:41:
5c:cb:76:06:5e:3a:43:19:a3:7e:e0:30:ea:9f:e2:
7f:9f:8a:56:32:b9:ce:9d:72:2d:24:d6:7f:41:4c:
98:14:e6:a9:5f:1e:61:77:0f:43:85:6a:cb:b8:ac:
48:11:2c:ac:49:db:83:d7:84:4b:a0:ea:21:a8:cd:
bc:31:cf:3d:af:f9:3c:17:ff:d1:36:6c:49:c6:82:
41:34:d6:72:e2:d1:96:15:d6:2b:76:00:f9:62:37:
07:32:43:d8:a9:d2:1c:28:30:72:d5:e5:83:d0:e1:
8a:09:24:3a:93:92:46:c0:e8:4f:e8:ad:ce:52:c6:
b8:5c:ce:4e:68:2e:52:d2:00:da:9a:bb:28:4f:c9:
cf:c7:5d:4a:09:d7:16:03:2b:fc:c8:05:ce:d1:bb:
31:23:a3:1a:7d:df:71:26:88:12:64:0a:2e:71:f0:
c4:14:8f:bb:0d:f3:2a:29:06:dc:70:0b:60:fc:ce:
ba:94:da:0e:a4:1b:41:04:77:f2:6d:69:fb:de:58:
c0:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:60:50:80:16:12:7B:09:55:C0:97:C8:C0:68:81:21:99:09:E1:5F
X509v3 Authority Key Identifier:
keyid:18:D1:FE:81:C1:73:55:4E:D0:06:87:49:9D:81:0A:FD:A7:83:2B:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SKIPTECH/1/18D1FE81C173554ED00687499D810AFDA7832B87.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/18D1FE81C173554ED00687499D810AFDA7832B87.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SKIPTECH/1/18D1FE81C173554ED00687499D810AFDA7832B87.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:0b:fc:fc:e1:2f:66:0d:1c:16:67:f0:23:38:d3:10:b4:e6:
be:0c:aa:0e:fb:46:a2:41:9d:9e:9c:05:d0:90:eb:81:80:fa:
ff:30:e2:05:47:ae:2f:de:c0:5a:32:4e:da:c6:5a:18:6b:01:
02:1e:1b:d0:09:89:88:a4:d7:74:2b:0a:fe:2b:4f:df:49:b2:
21:70:92:93:ba:ad:bc:96:48:7b:62:b9:af:e0:db:65:a8:e6:
e6:e7:80:da:85:9c:f9:9d:c8:a9:16:30:40:d0:10:3a:5f:74:
7d:64:02:c7:c5:34:cd:e0:13:f5:b8:93:e6:01:bc:32:4a:e9:
ba:4f:43:3c:75:f7:6a:a9:de:f3:21:f4:0a:d4:58:1c:29:b1:
b1:a7:10:cc:04:ad:97:57:58:cb:0f:29:06:17:ef:0c:f1:ce:
2d:fd:68:9d:91:0a:58:3d:58:f8:7d:40:76:f1:8a:07:e1:64:
5a:fc:a3:be:a7:75:4c:7f:8f:48:91:f3:6b:79:8c:fb:3e:90:
8b:f1:39:de:37:dd:60:6b:dd:f1:5f:58:a5:26:0c:b0:96:f7:
b6:d7:3b:75:0f:5c:07:74:12:e7:0f:c8:58:0f:d2:d3:c1:fc:
be:a6:06:db:2b:ab:b4:9f:30:26:3d:76:86:1f:ef:94:47:3b:
68:c9:4a:35
-----BEGIN CERTIFICATE-----
MIIE6DCCA9CgAwIBAgIUIbwCIMLdTQwIA5XqfMklrxsqvrYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMThEMUZFODFDMTczNTU0RUQwMDY4NzQ5OUQ4MTBBRkRB
NzgzMkI4NzAeFw0yNjA5MjEwNDU1NTBaFw0yNjA5MjIwNTA2NTBaMDMxMTAvBgNV
BAMTKEU4NjA1MDgwMTYxMjdCMDk1NUMwOTdDOEMwNjg4MTIxOTkwOUUxNUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6vyy5v8J9UTcCXI7L1PdjYcFi
djaFcyP/vl6kShrn11fvK88vQW4d9TeLr1Hx+pXCPrIwNpTvYU1jQVzLdgZeOkMZ
o37gMOqf4n+filYyuc6dci0k1n9BTJgU5qlfHmF3D0OFasu4rEgRLKxJ24PXhEug
6iGozbwxzz2v+TwX/9E2bEnGgkE01nLi0ZYV1it2APliNwcyQ9ip0hwoMHLV5YPQ
4YoJJDqTkkbA6E/orc5Sxrhczk5oLlLSANqauyhPyc/HXUoJ1xYDK/zIBc7RuzEj
oxp933EmiBJkCi5x8MQUj7sN8yopBtxwC2D8zrqU2g6kG0EEd/JtafveWMBhAgMB
AAGjggHyMIIB7jAdBgNVHQ4EFgQU6GBQgBYSewlVwJfIwGiBIZkJ4V8wHwYDVR0j
BBgwFoAUGNH+gcFzVU7QBodJnYEK/aeDK4cwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud
HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0tJUFRF
Q0gvMS8xOEQxRkU4MUMxNzM1NTRFRDAwNjg3NDk5RDgxMEFGREE3ODMyQjg3LmNy
bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3
bmljLnR3L3Jwa2kvVFdOSUNDQS8wLzE4RDFGRTgxQzE3MzU1NEVEMDA2ODc0OTlE
ODEwQUZEQTc4MzJCODcuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU
cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9TS0lQVEVDSC8xLzE4RDFGRTgx
QzE3MzU1NEVEMDA2ODc0OTlEODEwQUZEQTc4MzJCODcubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA0C/z8
4S9mDRwWZ/AjONMQtOa+DKoO+0aiQZ2enAXQkOuBgPr/MOIFR64v3sBaMk7axloY
awECHhvQCYmIpNd0Kwr+K0/fSbIhcJKTuq28lkh7Yrmv4NtlqObm54DahZz5ncip
FjBA0BA6X3R9ZALHxTTN4BP1uJPmAbwySum6T0M8dfdqqd7zIfQK1FgcKbGxpxDM
BK2XV1jLDykGF+8M8c4t/WidkQpYPVj4fUB28YoH4WRa/KO+p3VMf49IkfNreYz7
PpCL8TneN91ga93xX1ilJgywlve21zt1D1wHdBLnD8hYD9LTwfy+pgbbK6u0nzAm
PXaGH++URztoyUo1
-----END CERTIFICATE-----
Generated at Mon Sep 21 18:51:53 2026 by rpki-client