
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/tDIP1437ak0ckjIveUlmuFJd_dI.mft
File: tDIP1437ak0ckjIveUlmuFJd_dI.mft (raw, json)
Hash identifier: AB8ivDzAQWiUQtwIWscf6C5F9eFN1doTJ2T5QPkufZ0=
Subject key identifier: 1F:A6:EC:AF:83:C3:9B:5F:FD:E3:AC:1D:AF:FC:A2:78:0F:9A:71:E9
Authority key identifier: B4:32:0F:D7:8D:FB:6A:4D:1C:92:32:2F:79:49:66:B8:52:5D:FD:D2
Certificate issuer: /CN=B4320FD78DFB6A4D1C92322F794966B8525DFDD2
Certificate serial: 5AFF
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tDIP1437ak0ckjIveUlmuFJd_dI.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/tDIP1437ak0ckjIveUlmuFJd_dI.mft
Manifest number: 5ABA
Signing time: Sat 28 Feb 2026 22:52:37 +0000
Manifest this update: Sat 28 Feb 2026 22:52:37 +0000
Manifest next update: Mon 02 Mar 2026 22:52:37 +0000
Files and hashes: 1: A-Mpo5lGCGkiCmz2I75EzH7H4Pg.roa (hash: Xat3W8LVqfZIhGVNVDHM1dDtTgwgqAiYNdM45DXgQB8=)
2: DR2DukQY8qyY5rWH2leFHpGYhCE.roa (hash: lmDldo1DiQ9RvynogVmjoFQu2/tJB6dTCeqcCQCjMEg=)
3: Zp_zK3yrpptl8yExI7ivKZWT6yM.roa (hash: Zd3y1rYmCImc+X1REx1omkY972AZTE3lvPFRqs70r2w=)
4: cE-KGBoHDTDeIuel3Xtkm7uaLVk.roa (hash: ClROMiwNwkqKR8uZXhFrlJraar+33eQ4u1saXlpDUnQ=)
5: dl7xpka3J9MfVrzjVNhbhRkuO4s.roa (hash: CRltAB2hxU5SgHTDYMJE7teti6QORSUNLMkXG1AL/EM=)
6: qPtRE2RicqHDIIbRUceeq1G248Q.roa (hash: yIg2xc4B5GY4bxs3VGyvaguCdyC26v0DOu6EzgrdFM8=)
7: ru6lQnJqGBo31IH4LvVZaH4Fwcs.roa (hash: O5zSbWgxSDvr/PYw+u1eZVycS8QVwm6W/x93U3VHz/8=)
8: tDIP1437ak0ckjIveUlmuFJd_dI.crl (hash: CtIBu4m9EMBy9U9QG/awd4LSn6lq81sX6/0xOCErcyA=)
9: xE4mgJV7Dl0DKrKZQnlm-Lm5TpQ.roa (hash: bp0fEUFJXcyG52ugspAPP08M7fvGLZZfr6eVOmgym6M=)
10: zezNjefkzhHpsDqT36XUHnURy6A.roa (hash: I4t6BAkQAP5xEbjKi3E04Npy81/CKcNmTeF/polgEx8=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/tDIP1437ak0ckjIveUlmuFJd_dI.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/tDIP1437ak0ckjIveUlmuFJd_dI.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/tDIP1437ak0ckjIveUlmuFJd_dI.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Mar 2026 12:24:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23295 (0x5aff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B4320FD78DFB6A4D1C92322F794966B8525DFDD2
Validity
Not Before: Feb 28 22:52:37 2026 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=1FA6ECAF83C39B5FFDE3AC1DAFFCA2780F9A71E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a2:13:73:54:80:9b:39:15:8d:ff:0d:64:6a:
90:d9:41:d9:ad:16:31:95:96:25:c1:98:68:d7:a8:
b5:50:a9:f6:8a:81:4f:87:18:dc:40:89:24:8c:09:
cb:ab:94:b2:e0:a6:73:1c:3a:e4:e9:bc:45:69:95:
8d:61:db:a0:64:cc:68:b2:f5:d6:29:cd:96:51:fa:
8d:f9:64:84:f8:ce:06:d5:42:79:4e:f1:50:f4:91:
9d:69:6e:68:9b:46:08:4b:fd:46:73:c8:79:31:2b:
41:7a:fd:d7:c4:b5:e3:93:b2:6a:75:0f:16:76:ef:
7e:26:51:96:60:6d:48:c3:49:5c:17:68:a6:1a:b9:
f0:e3:7e:ac:c3:fd:7b:64:4d:ff:0d:f0:52:cb:fe:
bc:b7:9d:73:40:ac:32:ff:4b:64:b5:db:f7:f9:21:
25:30:6e:3b:61:23:0c:1c:5b:f1:f5:f2:86:ff:84:
59:30:21:6a:11:ac:17:fb:f7:d5:1b:6c:76:94:81:
d9:72:1d:b4:8a:a6:48:75:95:72:66:f1:25:41:c0:
75:82:45:8d:b6:ef:f7:07:a7:fd:e3:a6:e1:63:19:
29:d1:30:69:57:49:e3:36:07:c8:5e:ac:b0:12:3a:
64:35:fc:33:02:9f:c1:29:d7:c5:20:4e:eb:82:a2:
66:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:A6:EC:AF:83:C3:9B:5F:FD:E3:AC:1D:AF:FC:A2:78:0F:9A:71:E9
X509v3 Authority Key Identifier:
keyid:B4:32:0F:D7:8D:FB:6A:4D:1C:92:32:2F:79:49:66:B8:52:5D:FD:D2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/tDIP1437ak0ckjIveUlmuFJd_dI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tDIP1437ak0ckjIveUlmuFJd_dI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/tDIP1437ak0ckjIveUlmuFJd_dI.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:83:71:62:96:e1:7d:38:57:fc:ac:ee:d0:e1:76:b4:34:30:
bc:22:b9:f5:dc:e0:e4:58:df:3a:72:67:c8:16:63:a1:7a:37:
86:a7:43:99:dd:56:17:d3:1a:17:dc:e9:54:2b:bf:35:4e:76:
9b:1d:f3:4d:01:2f:f7:04:90:7f:78:c7:c4:c9:6c:f9:cb:9a:
e6:ef:10:a1:6d:85:a2:68:13:10:ae:e5:95:e4:12:0c:a5:d6:
d5:7f:42:88:16:81:d9:f1:ab:e0:ce:f7:7f:12:f4:74:c2:bb:
28:99:6c:66:9e:0b:8a:4d:55:5b:d3:b5:43:9f:8f:90:f7:77:
69:9c:db:0e:9c:fc:23:89:7f:7c:7d:f8:c7:7b:f2:25:9d:2f:
7f:b7:9a:7f:b9:da:71:e7:96:6b:d1:7c:e0:31:04:b1:bb:2b:
3d:5b:6b:ca:b6:d7:f8:4d:58:4b:5c:d6:4a:df:43:c2:05:a0:
fb:43:e0:8c:d6:38:e4:b5:ce:35:cf:6e:84:e3:82:3c:10:10:
ec:82:6a:61:aa:31:bb:cb:63:6c:e0:54:92:4a:8a:e1:31:73:
dc:a2:65:4c:27:5d:bc:2c:b8:f8:16:eb:3f:64:f8:91:19:e5:
af:91:c5:70:70:e4:3f:45:c0:83:a7:40:e1:6e:86:9a:5b:b3:
e5:43:d2:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:50:12 2026 by rpki-client