
$ rpki-client -vvvf rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft
File: C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft (raw, json)
Hash identifier: CXQNF/desV8KxfnEtYozAfZHxDZAKl/lVYBPZFpJK3w=
Subject key identifier: 16:04:7A:BF:AA:E9:9D:63:0C:42:CC:1C:6B:D9:4D:A4:C3:64:16:66
Authority key identifier: C4:9B:AE:24:30:BE:EC:35:4C:1B:14:F2:26:E7:61:FC:9B:DC:F0:05
Certificate issuer: /CN=A91BDB290000/serialNumber=C49BAE2430BEEC354C1B14F226E761FC9BDCF005
Certificate serial: 4AEAACEAA05D91486C4D7CD24CC462EC3B9AC9B0
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft
Manifest number: 0293
Signing time: Sun 20 Sep 2026 07:18:58 +0000
Manifest this update: Sun 20 Sep 2026 07:13:58 +0000
Manifest next update: Mon 21 Sep 2026 10:52:58 +0000
Files and hashes: 1: C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl (hash: Kv43mX4GFNyIUqmxN1YPwyfaxkr16mEpYW4GCdQdb7U=)
2: 71E534018547D77B65EBCD0FC4941DC8113FAEE3.cer (hash: e/12Bvs4XBSRwhh9g+zZp9qn/cEuRAq2sYTeeh5SElU=)
3: 5F225958DB67E3418BFBE293BFD25E6F6A9346B9.cer (hash: wYdtix/LDee8ZEJGiTxD5AqF7ZWjOoSZiL6WSmE5qzo=)
4: BDC7715D29F4E43198D59315B71674EE9F648F6D.cer (hash: mHwEYS1tNelL6RV/T7poIrm2xe//+2sBhpMulCadIwE=)
5: 1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.cer (hash: I5RrhNzkFBB9aTAVEwcT8m+Fq6yg/7jrMob8Rgy03bQ=)
6: BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.cer (hash: Wgiiza2OtZGJQUX76W3y7Jpru4jNxqcQx1dg64cWfx0=)
7: 138A054AE20232FE74DA41A7D1FB6684BFF8B631.cer (hash: Zo39dsWqNkolqaKhWzlf8458SfxFo6DnsdWakso6pqc=)
8: 9F397B838061280C2F2A887AC9D64012310492D8.cer (hash: AkAR+lSILTN1pLkO4LJRfr6uv+VMbaYKmt4kHAXjuR0=)
9: 061E60E9FDA5A25EDC961572A4CBA8C539D780AF.cer (hash: etK9ChY/67xJMPxpSS2bELv6+079wOhz5Owjed+7V9s=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 21 Sep 2026 10:52:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:ea:ac:ea:a0:5d:91:48:6c:4d:7c:d2:4c:c4:62:ec:3b:9a:c9:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=C49BAE2430BEEC354C1B14F226E761FC9BDCF005
Validity
Not Before: Sep 20 07:13:58 2026 GMT
Not After : Sep 21 10:52:58 2026 GMT
Subject: CN=16047ABFAAE99D630C42CC1C6BD94DA4C3641666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:83:08:a1:4c:6d:78:58:2f:51:9b:16:d9:77:
99:da:63:5b:52:d5:1e:61:ab:7d:1e:9a:b1:59:f5:
9c:6a:41:4f:49:c1:16:c3:79:d0:bd:d7:47:7d:a1:
ea:0c:35:00:9f:54:86:ce:40:fc:15:e0:37:b7:89:
50:d0:24:62:a1:21:8d:47:6c:ca:40:cc:28:5a:29:
89:aa:bd:d6:1d:0b:10:02:6d:1c:b8:4c:a7:a6:2f:
6b:6c:96:33:b1:bb:7c:2e:57:a0:f9:9d:52:33:59:
1b:8a:74:60:f3:b7:82:eb:51:62:13:a5:aa:42:de:
1f:87:2a:ce:21:15:4f:71:2a:97:a6:fa:c8:cc:76:
cf:f5:fe:1f:5f:0b:81:bc:56:3d:7e:0c:6c:1f:04:
ec:4b:c7:7b:fb:e4:fc:f8:ae:95:40:9d:d2:4d:26:
d1:e1:a7:88:6f:f0:31:6e:73:0b:95:4a:1a:2d:99:
cd:49:df:48:a8:ef:43:08:ce:5e:0e:ad:81:88:7d:
08:6a:1f:8b:e3:95:68:d4:0c:ef:0f:e7:5b:42:84:
35:20:96:51:95:68:dc:85:c9:9f:8e:65:b9:00:94:
e5:48:f7:0c:c0:93:9e:83:02:df:ba:80:0f:4b:8e:
a9:06:c8:21:17:25:62:5b:59:e5:b5:a4:94:c5:6e:
de:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:04:7A:BF:AA:E9:9D:63:0C:42:CC:1C:6B:D9:4D:A4:C3:64:16:66
X509v3 Authority Key Identifier:
keyid:C4:9B:AE:24:30:BE:EC:35:4C:1B:14:F2:26:E7:61:FC:9B:DC:F0:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:e8:92:69:db:f7:fd:a0:41:32:34:02:75:fb:12:c6:ba:4c:
5f:30:66:9c:d5:e8:21:be:76:2a:21:69:56:66:aa:db:c8:5c:
57:15:31:38:40:02:ed:38:59:18:a3:fb:41:3a:3e:43:36:37:
71:17:37:eb:80:bc:e2:a2:26:d6:d6:60:aa:f3:01:ef:43:fd:
51:90:4c:af:2f:73:3c:a3:d2:e3:63:85:86:5b:5e:fb:fe:db:
d9:82:84:e7:68:73:e9:cc:d2:53:e7:55:1e:67:2c:0c:0c:22:
4a:36:69:b5:0d:50:59:fb:60:f3:23:84:a7:83:6b:06:cb:d7:
11:f0:de:2a:a6:00:2b:24:58:0a:3f:2c:65:2b:a0:2b:32:75:
7e:b0:5e:7c:50:f2:d5:e9:4d:18:3c:16:63:99:83:13:87:a8:
f9:ea:de:ce:d6:22:9b:1b:6c:4a:44:3a:c4:12:09:f9:21:45:
d5:78:27:83:76:dd:61:dd:28:d0:9a:27:4b:70:0a:1a:17:f4:
46:9e:85:32:c8:54:08:54:fa:0a:32:ac:48:ea:d0:b7:7f:4e:
e2:18:0e:2a:8c:40:81:a6:c3:30:1a:4e:6e:f7:44:1c:77:a7:
1b:91:ef:7f:ce:4e:e0:51:e4:66:02:28:b2:03:65:31:dc:4e:
31:68:f4:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 01:13:09 2026 by rpki-client