
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft
File: C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft (raw, json)
Hash identifier: d1WfKa/35QtLBcG8e3HqNompZWcv2gxU6/IsPOlS3uk=
Subject key identifier: 02:07:C8:84:BE:28:5A:76:01:62:91:13:51:E8:C5:06:9B:69:CB:73
Authority key identifier: C4:9B:AE:24:30:BE:EC:35:4C:1B:14:F2:26:E7:61:FC:9B:DC:F0:05
Certificate issuer: /CN=A91BDB290000/serialNumber=C49BAE2430BEEC354C1B14F226E761FC9BDCF005
Certificate serial: 69DD41F3D54773BE01C2FEB3E5E19001F9129233
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft
Manifest number: 021F
Signing time: Tue 28 Jul 2026 06:04:03 +0000
Manifest this update: Tue 28 Jul 2026 05:59:03 +0000
Manifest next update: Wed 29 Jul 2026 09:41:03 +0000
Files and hashes: 1: 9F397B838061280C2F2A887AC9D64012310492D8.cer (hash: AkAR+lSILTN1pLkO4LJRfr6uv+VMbaYKmt4kHAXjuR0=)
2: 5F225958DB67E3418BFBE293BFD25E6F6A9346B9.cer (hash: wYdtix/LDee8ZEJGiTxD5AqF7ZWjOoSZiL6WSmE5qzo=)
3: C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl (hash: n+Nw7eyTR3QiFihuODYAW51n1Hsis2MA5lvMCNArA68=)
4: 061E60E9FDA5A25EDC961572A4CBA8C539D780AF.cer (hash: etK9ChY/67xJMPxpSS2bELv6+079wOhz5Owjed+7V9s=)
5: 138A054AE20232FE74DA41A7D1FB6684BFF8B631.cer (hash: Zo39dsWqNkolqaKhWzlf8458SfxFo6DnsdWakso6pqc=)
6: BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.cer (hash: Wgiiza2OtZGJQUX76W3y7Jpru4jNxqcQx1dg64cWfx0=)
7: BDC7715D29F4E43198D59315B71674EE9F648F6D.cer (hash: mHwEYS1tNelL6RV/T7poIrm2xe//+2sBhpMulCadIwE=)
8: 1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.cer (hash: I5RrhNzkFBB9aTAVEwcT8m+Fq6yg/7jrMob8Rgy03bQ=)
9: 71E534018547D77B65EBCD0FC4941DC8113FAEE3.cer (hash: e/12Bvs4XBSRwhh9g+zZp9qn/cEuRAq2sYTeeh5SElU=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 09:41:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:dd:41:f3:d5:47:73:be:01:c2:fe:b3:e5:e1:90:01:f9:12:92:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=C49BAE2430BEEC354C1B14F226E761FC9BDCF005
Validity
Not Before: Jul 28 05:59:03 2026 GMT
Not After : Jul 29 09:41:03 2026 GMT
Subject: CN=0207C884BE285A760162911351E8C5069B69CB73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6f:56:27:a8:72:37:2c:61:50:d2:58:fd:2c:
f8:9a:7e:3c:23:83:ca:b3:50:82:d8:dc:3b:c4:76:
f2:f3:77:3a:85:3f:26:a2:17:94:7d:3e:1e:ba:28:
d8:fa:06:7a:99:9f:43:cf:9f:32:1a:e7:ba:50:65:
52:59:bb:ed:d1:f7:be:a3:dc:55:ec:75:ee:33:6d:
13:a9:f7:51:45:c0:0c:6a:20:c8:c8:f8:7e:a1:9b:
1e:f2:ea:6e:43:53:46:64:75:05:e5:fe:b9:d5:a1:
66:8b:bf:df:7a:7a:99:34:97:e7:8b:f0:b0:51:5c:
6e:27:8f:3b:cd:22:4b:ec:3d:92:e0:ea:58:db:20:
6d:65:79:a5:76:1c:52:7d:69:e3:f0:60:3f:e8:f2:
08:22:8d:f8:2f:94:0c:37:6c:8e:08:a6:02:e6:f6:
20:0a:f0:92:ea:6d:15:55:2d:56:ca:0c:ea:a2:22:
ce:20:ac:91:14:51:bb:7c:d1:e1:86:f6:c8:ed:29:
53:3e:7a:26:05:5a:3a:98:dd:85:df:ba:25:ab:db:
10:31:45:05:9e:c7:ca:77:9a:cf:23:3e:8b:5f:13:
37:5c:21:e0:67:00:d7:64:4d:c2:df:7d:81:ac:e1:
ff:97:2f:e0:e2:94:8d:73:cd:9e:ae:e1:f9:1b:83:
2d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:07:C8:84:BE:28:5A:76:01:62:91:13:51:E8:C5:06:9B:69:CB:73
X509v3 Authority Key Identifier:
keyid:C4:9B:AE:24:30:BE:EC:35:4C:1B:14:F2:26:E7:61:FC:9B:DC:F0:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:75:fc:77:e5:2d:3b:74:e6:b9:16:61:05:47:e8:bd:f4:5a:
c0:f0:69:63:d7:57:7d:91:8f:db:2a:36:ab:3c:1b:8a:69:b1:
ac:4e:d1:15:10:f7:8a:fd:10:b6:24:23:f5:09:0c:6b:7f:4e:
81:92:2b:7e:63:83:74:f0:22:86:63:53:06:23:f3:9f:9c:0c:
86:e4:9f:ff:5b:01:13:2e:5c:9c:af:06:14:f5:0f:47:f3:5c:
0a:1e:9c:d4:56:d0:9c:8e:eb:69:ce:e5:bb:11:fe:b1:de:ba:
6d:a4:dc:bf:67:12:dc:71:97:ec:22:c6:60:75:b2:dc:3c:6d:
8f:5c:71:e1:00:cd:c7:da:96:74:b8:c9:a4:06:60:79:7b:42:
e4:c9:a3:46:4d:14:b8:07:99:d3:74:09:83:d6:70:03:b7:4a:
9a:c5:46:5a:68:13:27:76:ad:8e:4d:e8:34:c1:62:03:e7:d5:
ea:c1:40:83:5a:b7:ec:bb:90:26:c1:57:fe:5d:04:15:5a:6d:
c1:56:0d:3d:ed:39:55:1b:a9:8b:fd:cc:ea:69:dd:ff:b4:fd:
ee:f5:f4:e8:6f:d8:f6:02:f9:56:6d:73:21:4a:ea:e3:bb:32:
1f:a8:e2:b6:dd:3d:95:6c:03:39:f2:12:c1:fe:66:ab:e9:b9:
43:77:2e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:35:39 2026 by rpki-client