
$ rpki-client -vvvf rpkica.twnic.tw/rpki/TUNGHO/0/4E6E4905B4391CAA73778F5FBBAEAAB686551FA7.mft
File: 4E6E4905B4391CAA73778F5FBBAEAAB686551FA7.mft (raw, json)
Hash identifier: 1KTp1OY+VompJus1Eow6oWO/B4hUgxtCQLNHbgUJsK4=
Subject key identifier: 5C:D9:63:23:93:09:C3:F5:AC:11:B0:79:35:2A:31:86:E5:F5:4D:74
Authority key identifier: 4E:6E:49:05:B4:39:1C:AA:73:77:8F:5F:BB:AE:AA:B6:86:55:1F:A7
Certificate issuer: /CN=4E6E4905B4391CAA73778F5FBBAEAAB686551FA7
Certificate serial: 12C19671543F9F4F437E06E17695F670AA99AFC1
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4E6E4905B4391CAA73778F5FBBAEAAB686551FA7.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TUNGHO/0/4E6E4905B4391CAA73778F5FBBAEAAB686551FA7.mft
Manifest number: 0425
Signing time: Mon 21 Sep 2026 18:31:52 +0000
Manifest this update: Mon 21 Sep 2026 18:26:52 +0000
Manifest next update: Tue 22 Sep 2026 19:00:52 +0000
Files and hashes: 1: AS9924.roa (hash: bkwSawuZlEISvt2gJSPSVFhAB2tzPYpCAUw41HODLHM=)
2: AS18429.roa (hash: 10aEph6hwAmBvlaQZuwUN+fmyRec189ldPt52qQhj9A=)
3: 4E6E4905B4391CAA73778F5FBBAEAAB686551FA7.crl (hash: eABPt2IV/vbtCTXUFN4nl5f5xEo3f9seaTST19iXudE=)
4: AS38841.roa (hash: nSR2wg7tA7lwhCiydNK3tdxmmMgg0xqnd/TCNYtGKs8=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TUNGHO/0/4E6E4905B4391CAA73778F5FBBAEAAB686551FA7.crl
rsync://rpkica.twnic.tw/rpki/TUNGHO/0/4E6E4905B4391CAA73778F5FBBAEAAB686551FA7.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4E6E4905B4391CAA73778F5FBBAEAAB686551FA7.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 19:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:c1:96:71:54:3f:9f:4f:43:7e:06:e1:76:95:f6:70:aa:99:af:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4E6E4905B4391CAA73778F5FBBAEAAB686551FA7
Validity
Not Before: Sep 21 18:26:52 2026 GMT
Not After : Sep 22 19:00:52 2026 GMT
Subject: CN=5CD963239309C3F5AC11B079352A3186E5F54D74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2d:18:63:08:b0:d4:0b:37:ce:67:09:9b:72:
a1:fa:07:0d:92:ab:0c:98:f6:5c:fb:59:30:71:46:
cd:46:0b:b0:29:d1:26:1e:31:fc:4d:b1:aa:ee:e1:
ef:35:17:44:d0:52:c8:a9:b2:e0:7a:94:39:6d:fe:
d7:14:9d:c7:54:c3:02:0c:fb:57:a8:8b:13:6a:70:
99:ef:b4:61:39:7b:0d:ec:38:a7:07:1e:00:21:f4:
18:ec:59:2d:b9:ff:12:44:04:2b:8a:64:6e:72:1b:
71:e8:01:f9:f6:f5:16:9e:60:e5:1f:51:a3:51:a5:
90:aa:b3:5f:1b:4b:45:08:db:48:4a:8f:25:37:a2:
f5:f4:3d:3f:42:2d:95:0d:c6:46:b2:60:6a:20:b4:
06:e1:b0:ff:94:08:b7:01:8a:41:5e:09:3e:69:0b:
0d:d0:9e:28:92:ed:c1:26:d6:41:d0:b2:be:8f:b8:
63:31:92:60:18:b3:63:78:96:a8:03:10:7e:03:83:
64:e9:42:fd:65:97:f0:ed:07:ef:e8:2a:53:08:55:
e9:2f:f7:05:fb:31:b8:23:53:6a:b4:14:a0:2a:cc:
08:dc:f6:dc:2a:60:7e:44:1e:f0:7b:76:42:7f:d9:
33:eb:42:58:15:1a:9b:a1:4b:a8:32:76:3d:76:81:
97:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:D9:63:23:93:09:C3:F5:AC:11:B0:79:35:2A:31:86:E5:F5:4D:74
X509v3 Authority Key Identifier:
keyid:4E:6E:49:05:B4:39:1C:AA:73:77:8F:5F:BB:AE:AA:B6:86:55:1F:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TUNGHO/0/4E6E4905B4391CAA73778F5FBBAEAAB686551FA7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4E6E4905B4391CAA73778F5FBBAEAAB686551FA7.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TUNGHO/0/4E6E4905B4391CAA73778F5FBBAEAAB686551FA7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:ed:4d:00:67:b7:09:51:c7:33:6a:2d:f9:f9:ac:db:c2:af:
c0:5b:08:f8:1a:6a:94:90:56:8d:f2:a0:c5:f7:0c:46:e5:7b:
ad:79:aa:98:20:0a:db:ed:0a:ce:ad:c6:9a:29:b2:8a:c2:87:
68:64:3d:77:28:a1:cc:37:e5:1e:7e:5f:46:9a:19:f8:a4:c7:
4e:a2:63:22:30:b7:28:f8:42:5f:8f:d1:09:5e:c1:96:14:ab:
d9:b3:3e:ee:1c:03:49:65:ae:8b:43:c1:29:31:8f:73:60:77:
71:8f:4d:d2:65:9b:9e:4c:9c:77:7d:05:79:c3:5f:db:c9:bc:
76:8c:c0:ce:94:23:82:90:60:29:cc:ad:42:f0:fc:38:c2:6a:
67:39:00:3d:a4:c8:4f:a2:4c:f3:5b:99:b8:b3:f2:f5:f4:a4:
f1:4f:d0:c7:f3:bf:b7:7e:bb:7a:b1:51:58:6d:a9:50:63:62:
59:58:18:9f:93:8f:3d:3b:55:3f:ef:1c:8e:df:a7:12:b6:a6:
2e:32:b7:8f:ca:e3:fd:00:c6:76:5c:fb:44:c1:b3:91:e3:1d:
20:00:99:6a:5f:83:66:cd:02:b5:57:19:98:f3:4e:07:0a:0f:
3d:d0:61:28:99:03:44:d7:22:77:90:5c:8b:e9:e4:a9:34:94:
da:80:a9:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:30:48 2026 by rpki-client