
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CATHDD/Q1FPSF7AHJ0PMRvqYdk71iwjaZI.mft
File: Q1FPSF7AHJ0PMRvqYdk71iwjaZI.mft (raw, json)
Hash identifier: clpoFn0bMu0STpr1xHQ49xHZlmFCMYVia3HlzCJDq6Q=
Subject key identifier: B7:1D:B0:70:54:D3:D6:3E:B1:D7:3C:F6:DA:82:C0:1F:7D:FD:F1:37
Authority key identifier: 43:51:4F:48:5E:C0:1C:9D:0F:31:1B:EA:61:D9:3B:D6:2C:23:69:92
Certificate issuer: /CN=43514F485EC01C9D0F311BEA61D93BD62C236992
Certificate serial: 03E3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Q1FPSF7AHJ0PMRvqYdk71iwjaZI.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CATHDD/Q1FPSF7AHJ0PMRvqYdk71iwjaZI.mft
Manifest number: 03DD
Signing time: Sat 28 Feb 2026 21:22:22 +0000
Manifest this update: Sat 28 Feb 2026 21:22:22 +0000
Manifest next update: Mon 02 Mar 2026 21:22:22 +0000
Files and hashes: 1: Q1FPSF7AHJ0PMRvqYdk71iwjaZI.crl (hash: sULMvkfscUGSFa45SJXvRrcP06DB8nIf8adLuSnLmU4=)
2: UfKOZ2h5hVDq-J996AWvgJuf74k.roa (hash: ReuDPJcG6dTbXoELLRs6cHJyN6jJYQ3PmHw4NoD0Z9M=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CATHDD/Q1FPSF7AHJ0PMRvqYdk71iwjaZI.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/CATHDD/Q1FPSF7AHJ0PMRvqYdk71iwjaZI.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/Q1FPSF7AHJ0PMRvqYdk71iwjaZI.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Mar 2026 07:54:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 995 (0x3e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43514F485EC01C9D0F311BEA61D93BD62C236992
Validity
Not Before: Feb 28 21:22:22 2026 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=B71DB07054D3D63EB1D73CF6DA82C01F7DFDF137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:73:98:9c:ce:be:e2:9d:bb:4c:70:4a:fc:73:
3c:29:ba:79:69:9d:91:ad:b3:33:59:41:c7:be:15:
69:bd:87:da:03:8d:27:e5:d9:7c:0a:ce:de:12:f2:
4f:fb:e5:87:85:5c:7d:6f:42:6d:32:e9:ee:c4:3a:
d2:0b:05:ed:91:22:5e:53:ae:16:ba:3d:98:ff:37:
29:c0:c1:40:f8:4e:ad:47:da:34:e2:aa:0b:16:16:
0f:b7:d5:0b:70:2c:44:59:56:fd:55:56:12:bc:aa:
a7:c0:09:2a:c8:9f:ac:f7:4c:be:63:86:b8:ce:3a:
7c:59:ef:40:81:0a:99:1b:a7:e1:a0:98:9a:c7:47:
5b:e2:f6:00:22:8e:f0:5b:54:51:17:5c:78:bc:5b:
f3:d7:1b:ca:34:64:2c:40:2e:c4:01:8a:32:81:05:
e5:f5:b9:84:33:5b:00:57:4e:fb:2d:dd:8a:93:1d:
66:88:ec:75:62:b5:47:f9:ea:1c:b0:2f:91:85:03:
a4:af:f0:b8:7c:1f:b4:3b:b2:d4:e9:1d:36:08:85:
cc:a9:23:39:91:d7:1b:5c:ac:ea:05:0e:cd:00:fc:
6f:80:88:92:f4:55:28:37:fe:dc:f5:e2:36:3c:2e:
bf:68:76:c1:60:34:ef:99:b1:98:82:92:d4:02:e1:
64:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:1D:B0:70:54:D3:D6:3E:B1:D7:3C:F6:DA:82:C0:1F:7D:FD:F1:37
X509v3 Authority Key Identifier:
keyid:43:51:4F:48:5E:C0:1C:9D:0F:31:1B:EA:61:D9:3B:D6:2C:23:69:92
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CATHDD/Q1FPSF7AHJ0PMRvqYdk71iwjaZI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Q1FPSF7AHJ0PMRvqYdk71iwjaZI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CATHDD/Q1FPSF7AHJ0PMRvqYdk71iwjaZI.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:3b:9f:a1:fd:32:e8:e4:6b:77:62:2e:63:06:52:29:00:01:
8a:51:61:dd:3a:66:74:9d:c2:1a:af:36:6d:0c:a9:60:24:52:
4d:7d:9d:45:15:e6:e8:76:07:26:a0:e3:d0:fb:18:90:82:1d:
07:01:37:93:c4:3a:a2:30:5e:18:a7:00:6c:d8:98:6d:1c:ff:
84:09:22:1d:e3:0f:3f:e7:e0:9c:a4:43:b4:9c:10:b0:5a:8c:
58:d8:35:1b:ca:fc:96:2b:bd:c8:37:64:de:26:42:04:25:45:
41:cc:ce:4d:b7:24:75:08:c7:8b:33:74:9f:ba:68:10:26:ba:
cf:46:9b:be:f7:57:b7:74:df:ce:0b:1b:59:f0:e6:f6:1e:b3:
6c:9f:6b:47:f7:6a:f7:34:8f:20:a5:46:a5:65:5b:a4:ce:c2:
dd:84:5a:f7:cd:90:15:b0:ec:8a:f3:b6:1b:ca:5b:dd:73:20:
b7:8d:69:7c:c6:c9:86:af:4f:9d:3d:22:6c:a9:1f:54:9d:50:
da:5e:68:d8:09:f9:9b:31:f6:e0:66:a1:29:02:ef:b5:5d:14:
3a:45:3f:00:af:0e:5e:68:4a:4e:50:73:f0:96:1a:69:01:79:
42:12:be:6c:07:6f:39:8c:ed:a1:a6:d5:94:0b:bd:1c:67:e9:
2b:da:b6:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:21:36 2026 by rpki-client