
$ rpki-client -vvvf rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.mft
File: B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.mft (raw, json)
Hash identifier: LTom/3Rt1Bul8Cmrhr9umrpb1mKLF9x0BOvc3Pz7K/Q=
Subject key identifier: 33:E5:A5:B0:14:9D:4B:2C:91:3E:A8:2E:96:B5:05:48:F8:31:42:26
Authority key identifier: B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A
Certificate issuer: /CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
Certificate serial: 7C8E80FFAF1403E8193DA7EF741D0710C9DC9535
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.mft
Manifest number: 029E
Signing time: Tue 22 Sep 2026 06:44:05 +0000
Manifest this update: Tue 22 Sep 2026 06:39:05 +0000
Manifest next update: Wed 23 Sep 2026 07:02:05 +0000
Files and hashes: 1: AS17713.roa (hash: LQ6EfaCsflHu4QRHUvkVyF9PGfNlVYNPlWt5InYVNtY=)
2: AS9264.roa (hash: QLmbG5wa3NxY4bLQDawo02KSEx9V2mKqt+zSToKsIXw=)
3: AS9916.roa (hash: VmKEplDioE9dRbG+IqWy+ORyQkpVQi8turUDPKdrc2Q=)
4: AS38845.roa (hash: cBg+wWm1codz3x4d8coFCdbCh9JGi9zzO0X1xsE2hc0=)
5: AS18047.roa (hash: 19MTy8wCYv2FBhBBghHo9w6JAaEzVOI6LdAVH3Rlg5Y=)
6: AS17716.roa (hash: a/i12ZDZd4PdO/FM3dk8C6At59pShqCqeD+uHBMGx6s=)
7: AS18177.roa (hash: JXd4kw1h0DUqkVz+WM6nOf/irwZe99z7YhtvoDc+f38=)
8: AS17711.roa (hash: m0HPSs1Iwy9qB3mv37WVtid5LeyQRcfLwoUhzXI5emM=)
9: AS1659.roa (hash: a9JF70ttylpg+T9TOGnj3tVWmGB1CnSM61mc0bVSBuE=)
10: AS18217.roa (hash: CBxkgnpykTRk9QIRMbL2x3TUBYEyue7/dUYQoccL57k=)
11: AS17712.roa (hash: yj06hI79Weqj0lNXdwRX13x+5jtyeGXUVFzjIzWVW0A=)
12: B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl (hash: KWoPqhp/RHmo4t8LhBM64QpiVafxJxmwrH0R8yRgGK0=)
13: AS18420.roa (hash: PXf9Qhwo15Y5emliO+pnlr0GJR0383jI4wLPlz9cZTg=)
14: AS7539.roa (hash: 6fbm1TR+0zsapj8wMHiV2+RkmfeJg5iudxoqZFriHfU=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl
rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 23 Sep 2026 07:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:8e:80:ff:af:14:03:e8:19:3d:a7:ef:74:1d:07:10:c9:dc:95:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
Validity
Not Before: Sep 22 06:39:05 2026 GMT
Not After : Sep 23 07:02:05 2026 GMT
Subject: CN=33E5A5B0149D4B2C913EA82E96B50548F8314226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:8f:05:ea:77:6a:64:fc:5d:23:17:5d:55:8e:
4f:73:a1:6d:60:82:cd:ef:c6:05:64:bf:b4:15:12:
36:ca:b5:c7:d3:65:46:64:2d:ba:6a:20:4c:bd:c3:
7a:73:8f:31:f9:72:10:b9:9e:4f:7a:05:54:af:13:
78:d5:e6:82:eb:2b:42:e0:75:6e:cf:cd:e4:31:ae:
5c:a1:d7:b9:b0:ba:97:fc:61:13:4e:7b:95:75:06:
54:3b:f5:dc:62:96:cd:f8:a4:75:3f:f4:62:17:f2:
30:a5:3a:79:78:b2:dc:37:fc:69:8e:9d:d3:5c:eb:
d2:15:d2:7a:49:94:79:c7:20:bb:2c:c9:f0:79:7c:
77:c0:ab:e5:93:50:03:3c:cb:4f:91:cb:e0:55:39:
b7:c9:08:b0:6a:cc:4a:bd:4f:eb:e6:72:c3:8f:8a:
58:25:ea:6e:08:61:3d:ae:da:4d:ba:e9:7a:01:31:
7f:76:36:4e:94:8c:c0:50:59:5c:df:13:67:a8:f9:
33:b7:e4:68:5a:e0:6c:f7:d2:3f:75:2b:95:8a:22:
8c:84:11:1a:19:cc:81:1f:d4:9a:20:91:36:b9:e0:
65:c3:c7:7a:6f:cf:bb:ce:79:c4:c7:97:1b:5b:92:
89:59:5f:d1:fb:90:71:be:d6:64:58:e2:75:81:2b:
58:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E5:A5:B0:14:9D:4B:2C:91:3E:A8:2E:96:B5:05:48:F8:31:42:26
X509v3 Authority Key Identifier:
keyid:B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:2b:b8:20:f0:71:75:6a:46:f0:23:a5:df:9e:e7:be:f0:98:
83:3c:12:5b:6c:a6:8c:ef:58:46:88:11:3a:1c:6d:fb:9a:dd:
92:9a:85:27:5b:f0:a8:68:86:69:79:38:e4:f8:d7:d3:d6:54:
cb:9a:fd:da:ae:6b:4f:17:d3:03:a5:50:da:29:f6:53:0e:60:
7b:f8:b9:31:5c:1b:39:22:4b:2c:3d:3b:f5:ab:3a:e1:45:c1:
4b:12:b1:be:31:46:f1:fa:15:d1:d2:ff:67:77:3f:be:ce:71:
a8:9f:d4:5a:84:fd:53:d7:24:3a:62:71:50:d4:0e:e8:78:be:
6a:7b:98:5b:81:80:25:53:b1:04:22:09:26:52:d1:12:40:b1:
e7:c7:6f:b9:fd:12:41:7e:d8:cf:d8:a4:46:c4:2e:d6:fe:24:
04:58:60:a5:14:99:d6:63:45:b0:65:be:4b:1a:9f:42:1a:6b:
fb:fa:74:ca:27:72:a1:25:36:e7:76:64:71:37:d1:5b:95:39:
6f:9b:c0:23:7f:a0:c5:82:c8:36:4e:cf:68:a7:27:f3:13:35:
4a:b7:12:c5:c6:a6:35:f1:6f:15:ee:e9:4a:b0:bc:6a:c7:a0:
ae:da:d0:db:34:f5:47:fa:b4:10:e5:34:dd:18:4e:2c:fc:02:
51:7e:72:bb
-----BEGIN CERTIFICATE-----
MIIE4jCCA8qgAwIBAgIUfI6A/68UA+gZPafvdB0HEMnclTUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjdGMUExMkE1OUY5RTAyNDRDNDQ1RDE5NkQzM0NGNTA3
NkIzQ0Y2QTAeFw0yNjA5MjIwNjM5MDVaFw0yNjA5MjMwNzAyMDVaMDMxMTAvBgNV
BAMTKDMzRTVBNUIwMTQ5RDRCMkM5MTNFQTgyRTk2QjUwNTQ4RjgzMTQyMjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHjwXqd2pk/F0jF11Vjk9zoW1g
gs3vxgVkv7QVEjbKtcfTZUZkLbpqIEy9w3pzjzH5chC5nk96BVSvE3jV5oLrK0Lg
dW7PzeQxrlyh17mwupf8YRNOe5V1BlQ79dxils34pHU/9GIX8jClOnl4stw3/GmO
ndNc69IV0npJlHnHILssyfB5fHfAq+WTUAM8y0+Ry+BVObfJCLBqzEq9T+vmcsOP
ilgl6m4IYT2u2k266XoBMX92Nk6UjMBQWVzfE2eo+TO35Gha4Gz30j91K5WKIoyE
ERoZzIEf1JogkTa54GXDx3pvz7vOecTHlxtbkolZX9H7kHG+1mRY4nWBK1gnAgMB
AAGjggHsMIIB6DAdBgNVHQ4EFgQUM+WlsBSdSyyRPqgulrUFSPgxQiYwHwYDVR0j
BBgwFoAUt/GhKln54CRMRF0ZbTPPUHazz2owDgYDVR0PAQH/BAQDAgeAMGIGA1Ud
HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVEFORVQv
MS9CN0YxQTEyQTU5RjlFMDI0NEM0NDVEMTk2RDMzQ0Y1MDc2QjNDRjZBLmNybDBv
BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS8wL0I3RjFBMTJBNTlGOUUwMjQ0QzQ0NUQxOTZEMzND
RjUwNzZCM0NGNkEuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5
bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UQU5FVC8xL0I3RjFBMTJBNTlGOUUw
MjQ0QzQ0NUQxOTZEMzNDRjUwNzZCM0NGNkEubWZ0MBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCXK7gg8HF1akbw
I6Xfnue+8JiDPBJbbKaM71hGiBE6HG37mt2SmoUnW/CoaIZpeTjk+NfT1lTLmv3a
rmtPF9MDpVDaKfZTDmB7+LkxXBs5IkssPTv1qzrhRcFLErG+MUbx+hXR0v9ndz++
znGon9RahP1T1yQ6YnFQ1A7oeL5qe5hbgYAlU7EEIgkmUtESQLHnx2+5/RJBftjP
2KRGxC7W/iQEWGClFJnWY0WwZb5LGp9CGmv7+nTKJ3KhJTbndmRxN9FblTlvm8Aj
f6DFgsg2Ts9opyfzEzVKtxLFxqY18W8V7ulKsLxqx6Cu2tDbNPVH+rQQ5TTdGE4s
/AJRfnK7
-----END CERTIFICATE-----
Generated at Tue Sep 22 14:49:38 2026 by rpki-client