
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ONEDEGREE/9aRLXgeIZbrvk1E2nZYda6JVbUc.mft
File: 9aRLXgeIZbrvk1E2nZYda6JVbUc.mft (raw, json)
Hash identifier: RjR/H51iEs0BUVt49dSflYsDO1TUZxaP4jyHsoPS03o=
Subject key identifier: 78:C6:26:45:6B:AE:94:BA:36:46:6B:D1:ED:B2:D7:98:BF:FF:01:7C
Authority key identifier: F5:A4:4B:5E:07:88:65:BA:EF:93:51:36:9D:96:1D:6B:A2:55:6D:47
Certificate issuer: /CN=F5A44B5E078865BAEF9351369D961D6BA2556D47
Certificate serial: 033E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/9aRLXgeIZbrvk1E2nZYda6JVbUc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ONEDEGREE/9aRLXgeIZbrvk1E2nZYda6JVbUc.mft
Manifest number: 032D
Signing time: Sat 28 Feb 2026 22:54:23 +0000
Manifest this update: Sat 28 Feb 2026 22:54:23 +0000
Manifest next update: Mon 02 Mar 2026 22:54:23 +0000
Files and hashes: 1: 9aRLXgeIZbrvk1E2nZYda6JVbUc.crl (hash: SOJaI8WlRk+96s5kFsh4i2+UbnV+yfPxyQlY8u5ap0U=)
2: Fn_SwMpljpxFXXkEr0N3Tnom6l0.roa (hash: J8NqRwUakfp20kauS9hO5Z6ALEpdTtWVeeb6uoJlqi4=)
3: H07fZhQO_Q3aLfPPmvyYIFeRwGw.roa (hash: gJFfn7EGGkpzbinWsWT20Cv8c18u4ouHFdJoO33imR0=)
4: dZZ1tLqfRCfsc9yQ3sZh0Ekjhbw.roa (hash: ozHd0L+pcha4PL1xuqajnr/AbCxPZE/RVw2HVfQ6ddk=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ONEDEGREE/9aRLXgeIZbrvk1E2nZYda6JVbUc.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ONEDEGREE/9aRLXgeIZbrvk1E2nZYda6JVbUc.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/9aRLXgeIZbrvk1E2nZYda6JVbUc.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Mar 2026 07:54:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 830 (0x33e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F5A44B5E078865BAEF9351369D961D6BA2556D47
Validity
Not Before: Feb 28 22:54:23 2026 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=78C626456BAE94BA36466BD1EDB2D798BFFF017C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d2:a1:96:40:32:ef:af:64:da:c6:70:cd:e5:
42:ce:86:f9:47:4a:20:bb:49:3a:e0:39:71:3a:e3:
82:0d:d6:09:bf:c6:fa:b6:6e:89:79:fc:ee:b7:0f:
73:6b:5b:e8:3e:1e:c6:f9:03:f5:e5:59:ba:8b:2b:
b0:13:41:63:52:26:bf:34:d4:ed:13:62:42:8e:9c:
0a:ab:de:43:8b:df:92:61:a3:6a:7a:10:02:56:8f:
87:27:ca:b9:16:e7:5a:77:c1:89:3b:6f:fa:3c:ab:
25:47:5c:ed:7a:86:a0:f0:d4:23:e4:e9:ce:b9:b3:
1f:82:98:57:6d:05:51:1a:d9:48:17:79:e7:82:f2:
8e:b1:37:76:d4:ad:dd:40:19:0d:fc:8e:ed:2a:a6:
37:bb:2b:a8:72:f5:e4:0a:b4:0a:7e:07:12:2b:5c:
cb:d7:90:6b:21:4f:73:12:64:dd:ec:40:84:c8:5f:
ca:a0:a7:49:09:36:02:ba:d5:d8:67:f8:48:e2:00:
54:dc:b8:c1:34:db:01:17:58:a8:8d:03:d2:78:78:
06:f8:0f:1a:2b:07:4c:18:23:43:c8:05:89:43:d2:
a9:fb:06:3d:35:71:ec:8b:8a:e6:37:7b:bd:52:81:
83:3c:e4:39:8f:2f:97:b3:8a:d1:3b:f1:b8:82:76:
f3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:C6:26:45:6B:AE:94:BA:36:46:6B:D1:ED:B2:D7:98:BF:FF:01:7C
X509v3 Authority Key Identifier:
keyid:F5:A4:4B:5E:07:88:65:BA:EF:93:51:36:9D:96:1D:6B:A2:55:6D:47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ONEDEGREE/9aRLXgeIZbrvk1E2nZYda6JVbUc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/9aRLXgeIZbrvk1E2nZYda6JVbUc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ONEDEGREE/9aRLXgeIZbrvk1E2nZYda6JVbUc.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:2a:ca:d7:6b:4d:a6:10:e8:f6:cc:f2:88:4a:8d:f3:a1:22:
d5:04:9f:90:7e:e8:dc:3e:97:70:17:7c:c9:ef:46:b2:67:dd:
a5:bd:af:cd:53:d2:e4:83:da:97:53:e2:09:5c:54:fa:59:b7:
8b:d0:02:16:ad:be:e1:33:87:f4:f1:f7:46:7f:f9:c9:b3:8a:
41:db:05:eb:70:21:74:79:06:0f:2a:2a:ac:91:03:f4:79:19:
a9:85:be:fb:56:35:ef:5a:89:81:67:17:c3:b5:fd:7c:1b:44:
f4:22:34:83:49:75:03:97:e7:d8:e2:30:96:89:c5:e0:35:59:
6d:76:ff:9a:aa:ff:e1:75:c5:fa:73:ce:5f:50:ec:93:8a:30:
68:87:d1:c9:9a:1d:73:28:a8:ac:b0:ba:77:fe:84:91:9b:68:
1d:85:43:ce:5f:b7:36:b9:74:39:94:84:c1:dd:e8:bf:02:55:
04:8f:27:01:ef:f5:dd:06:01:a8:72:52:c7:31:d8:da:08:40:
88:2f:04:90:0c:43:e7:d3:8b:8b:86:87:78:c5:5f:c9:6d:2d:
77:b0:a0:6c:e4:69:bb:85:fa:8c:59:e5:ba:d8:86:05:3d:66:
f3:9f:d9:66:0c:4a:a1:73:9a:47:47:cf:21:86:56:f6:9c:c5:
d4:bd:f8:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:29:34 2026 by rpki-client