
$ rpki-client -vvf rpkica.twnic.tw/rpki/TIH/0/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.mft
File: 56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.mft (raw, json)
Hash identifier: NdC+0ba4+VYZXuwfluFIGO1+0vzT//5LLvl0y/xehtE=
Subject key identifier: 1C:8F:42:30:19:6A:51:4B:82:31:D0:BE:D4:50:C2:9B:E6:C7:5F:23
Authority key identifier: 56:D2:E2:5E:40:9F:E9:56:A1:4A:8F:5A:5C:0E:EA:69:CC:F5:0E:A3
Certificate issuer: /CN=56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3
Certificate serial: 27DABBB0DA771900F5FDE64144AB465ED9A3F536
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TIH/0/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.mft
Manifest number: 33
Signing time: Fri 12 Jun 2026 18:37:49 +0000
Manifest this update: Fri 12 Jun 2026 18:32:49 +0000
Manifest next update: Sat 13 Jun 2026 22:08:49 +0000
Files and hashes: 1: 323430333a376634303a663030303a3a2f34382d3634203d3e20313331363339.roa (hash: ZRXaYx+Nrn2iAFlJIwnl9HLp8Eud4rItrm9qIQL8K3o=)
2: 3130332e3132392e3134362e302f32342d3234203d3e20313331363339.roa (hash: CBt4aj49jAfK/FkdSCAEmu5FJcJ8ZBpytmS6xaMxItA=)
3: 3130332e3132392e3134372e302f32342d3234203d3e203230343733.roa (hash: jLHkK85y6D6I/P5jhpzcJkW6hQFZ18OruOJ4poV43Y8=)
4: 323430333a376634303a653030303a3a2f33362d3336203d3e203338323534.roa (hash: o6RGuHIfda02+Jk34ePKyhchsrC+xHDAy6BJ51uRReg=)
5: 56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.crl (hash: ZTD2xCT6m0UoMJvH5IyJKwuGRBhxHIGCUyp/b7N++YQ=)
6: 3130332e3132392e3134342e302f32342d3234203d3e2035303635.roa (hash: r6atDIqgperuF3RfaudvB73QXSoXlYlurO9YxRuzsEo=)
7: 3130332e3132392e3134352e302f32342d3234203d3e203338323534.roa (hash: xP411/3P+QncE7UBCG9FjIpMvagWAoQKRii7/7dwrps=)
8: 323430333a376634303a666630303a3a2f34382d3438203d3e203230343733.roa (hash: AfAX13SxCLnlMaK5dhRCuMKxU7A8dV/NgyypCpd1bdY=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TIH/0/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.crl
rsync://rpkica.twnic.tw/rpki/TIH/0/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 22:08:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:da:bb:b0:da:77:19:00:f5:fd:e6:41:44:ab:46:5e:d9:a3:f5:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3
Validity
Not Before: Jun 12 18:32:49 2026 GMT
Not After : Jun 13 22:08:49 2026 GMT
Subject: CN=1C8F4230196A514B8231D0BED450C29BE6C75F23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:67:c1:7f:fe:86:09:61:6d:c4:57:5a:a1:2a:
a8:e9:cb:3f:d4:99:10:12:fc:9d:ba:fd:67:ef:de:
30:55:df:18:79:2b:a7:14:b6:8a:49:85:af:05:f0:
f7:cf:2f:78:bc:e9:0f:6b:60:a7:b9:a1:8b:8e:98:
da:0f:df:fa:aa:db:37:60:95:1c:34:c1:98:28:9f:
42:b3:64:9b:6b:06:eb:8a:8f:24:c2:c3:df:9f:bd:
85:22:f2:1d:d0:17:47:49:55:ac:83:99:d4:b0:d4:
63:6a:3b:70:f5:43:36:8b:19:2b:36:40:9e:90:15:
82:1a:25:f3:df:76:41:87:9a:28:6b:60:3f:45:d2:
7f:07:8c:bf:a0:f4:96:e1:ab:d3:b5:5f:07:53:d0:
14:62:20:b3:53:30:6e:5b:b8:c2:a4:a1:b8:cd:28:
f3:5e:0d:34:db:f6:d2:07:61:dd:6e:bb:9d:5e:de:
9d:f0:df:31:e1:6e:96:73:27:29:d3:96:32:dc:b5:
e6:d7:1e:fb:06:75:bf:c6:ba:73:e4:4f:63:34:5d:
f0:65:08:6a:28:26:82:45:5b:6f:5b:13:7a:13:f2:
1a:ac:6d:22:f8:91:9b:f6:85:f0:e2:7d:8d:a2:46:
2e:18:5f:c7:7e:fd:2b:aa:e7:f1:20:bd:e1:c1:18:
ce:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:8F:42:30:19:6A:51:4B:82:31:D0:BE:D4:50:C2:9B:E6:C7:5F:23
X509v3 Authority Key Identifier:
keyid:56:D2:E2:5E:40:9F:E9:56:A1:4A:8F:5A:5C:0E:EA:69:CC:F5:0E:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TIH/0/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TIH/0/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:54:e9:cd:ef:e0:61:43:c7:f8:93:e8:b2:28:20:3b:bb:5a:
e0:d2:bd:d9:22:ee:03:87:40:e5:ba:7c:2d:c0:40:90:25:9c:
d3:12:cd:75:0b:9b:13:57:86:c2:75:ea:57:71:8a:14:04:58:
99:a1:38:b7:e7:8e:a9:2a:e5:f0:21:e8:ab:16:ee:92:c4:ce:
0c:56:7b:ee:f5:ff:1e:97:96:44:37:10:c8:77:8f:4b:1d:ee:
0e:49:4f:6b:06:0f:b4:2e:e1:6e:c7:c7:c1:85:8c:70:ce:44:
f4:82:38:34:5c:8e:75:ad:99:31:11:e2:2f:9e:63:7a:3e:1c:
54:b8:b9:18:9e:f5:e6:b6:b5:64:7a:ec:af:f3:40:76:2e:5b:
de:48:1d:17:de:12:05:04:d8:5c:ed:1d:71:b2:20:9e:82:ab:
5d:df:28:5b:55:f6:be:e3:a7:05:ff:ae:2c:54:0d:fb:05:f0:
1c:5f:64:93:d9:4b:d0:c5:d6:94:7c:cd:b0:1a:0b:a1:12:94:
ea:1f:eb:f5:75:ce:72:8d:a1:ef:01:c9:38:22:4f:1e:d0:e3:
16:a0:a1:45:f2:e3:0c:5c:0e:c1:80:28:ac:a5:72:e0:40:cd:
62:44:5e:b9:34:99:9e:4d:d5:fb:35:2e:7a:e9:43:7b:b4:63:
02:03:7e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:55:49 2026 by rpki-client