
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.mft
File: DflKsHKMejjFDw1hVU1J1lHzOqI.mft (raw, json)
Hash identifier: N+oYUl/veWSfB07Homu4qKKh+u5/0asJBtSXY+SatsU=
Subject key identifier: 81:FA:7E:95:6A:B6:3F:A1:3D:CA:0C:18:3E:63:3F:AB:55:C9:31:EF
Authority key identifier: 0D:F9:4A:B0:72:8C:7A:38:C5:0F:0D:61:55:4D:49:D6:51:F3:3A:A2
Certificate issuer: /CN=0DF94AB0728C7A38C50F0D61554D49D651F33AA2
Certificate serial: 0E51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.mft
Manifest number: 0DEE
Signing time: Sat 28 Feb 2026 23:22:32 +0000
Manifest this update: Sat 28 Feb 2026 23:22:32 +0000
Manifest next update: Mon 02 Mar 2026 23:22:32 +0000
Files and hashes: 1: DflKsHKMejjFDw1hVU1J1lHzOqI.crl (hash: 182eyIuIoArvl86mrQm6iRML/ExHNoUAzkxesZa2y2M=)
2: GZELNOyiVAmLDRR2MW7N8EqLGzE.roa (hash: +EXDQYZC6+0QrGxIPFf4wAysxyAMaPNfctcq9J3KzE0=)
3: Iz5tKcDQZYWT7RYRtjtU31bpn1U.roa (hash: UdokJe6o3UAr2iwc7KOVDMq9BMQTJLTIBPmYAE3iizM=)
4: Jns9QRoKa1WsqmtDocwMDtdMlT0.roa (hash: uEWgzsrUcLvTRdErDyt4Wd2xyJyx9lowSbRb3k5cKSY=)
5: OGy6Nryhc67bLXM5hzr3IRIPEvo.roa (hash: NW//Y5fISaHzjJncfP+fD1Q3i+EyT55jEXflSG250R8=)
6: XQN6OxMUcoAGxpGLooiky-tL7gc.roa (hash: KYlnunaZYM8trExSsCQ39CrmyKf/rWIHR1sdiY7IVHE=)
7: ejBKtQZTLyrE8vnIU0j-t5mEfXs.roa (hash: M2tdeDZvesGE0AAyqOJ1wnm+0nXVcRNFnYM1zMZ0F6E=)
8: f9BkDcTc0Qu7WyPYLc2LkngjCFE.roa (hash: jB+5fmaJQKDYqoyiYqbwVRiRXZtlcUXQIP6LnXyYQY0=)
9: fLu6sD6p_HtqeTeRSjHY_HQ9dr4.roa (hash: 6zwT+S23JAwSbfsfFnx6e0nfZI+pAYVSDBgx4gzVQdk=)
10: sy-areQ-4siOMM_blCu0RxNQJzA.roa (hash: 0IhdcJ+VJpYWoXAKgo1BqUgbH8152ChHGcRjK7P2cdE=)
11: ywiNVIZ1QQ4bfkFXC-tAivsHjzI.roa (hash: Q9oQftJcQcvSuPxuHL/R+AP9rCVRyQWOrSl1DN5ds9g=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Mar 2026 07:54:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3665 (0xe51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0DF94AB0728C7A38C50F0D61554D49D651F33AA2
Validity
Not Before: Feb 28 23:22:32 2026 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=81FA7E956AB63FA13DCA0C183E633FAB55C931EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7e:52:76:a2:e8:51:c1:e7:ab:b3:ef:f9:a1:
c4:97:2f:e0:e1:62:81:25:88:34:b3:8d:64:08:9d:
5d:b4:32:cd:06:05:74:a4:fa:a3:fa:8c:f9:f7:93:
7d:86:f8:b3:91:3a:1b:b6:b3:7a:bd:a5:bf:5f:02:
f7:76:7a:e5:cf:49:1c:9e:43:2b:a5:5d:bb:9d:9e:
1a:53:26:29:5b:f8:e5:64:3e:52:f1:44:74:29:a0:
81:fe:b9:16:6a:ff:94:fe:2e:52:57:d7:83:11:36:
03:3a:7a:67:a7:c7:58:3c:f7:42:31:14:0f:90:93:
60:91:ac:60:06:42:3c:7b:6d:88:df:b4:37:2c:df:
1d:90:16:44:ff:5a:6f:28:9e:a6:d1:93:48:b3:34:
42:b1:ff:22:86:9a:51:5f:cc:a1:13:e7:fc:78:c2:
c8:e7:75:bc:e7:6f:77:0c:07:0d:95:15:bd:90:39:
83:f9:e9:0a:3f:32:11:ed:80:d4:ee:d1:80:6d:c7:
96:3e:ae:cf:52:bd:b7:51:e9:a4:b2:9e:a0:b0:93:
1a:73:37:62:42:ce:67:45:39:53:df:65:eb:55:0d:
07:fb:ba:42:66:7d:1a:2d:a2:d7:92:1f:93:9c:85:
4c:72:ce:4c:28:5a:b3:7f:38:42:d9:18:39:88:bf:
7f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:FA:7E:95:6A:B6:3F:A1:3D:CA:0C:18:3E:63:3F:AB:55:C9:31:EF
X509v3 Authority Key Identifier:
keyid:0D:F9:4A:B0:72:8C:7A:38:C5:0F:0D:61:55:4D:49:D6:51:F3:3A:A2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:c6:5a:bf:bf:75:14:a1:dd:13:da:3d:6f:fc:55:43:91:77:
f0:53:be:19:d8:84:fc:ea:ec:3e:1e:e8:f1:e1:ba:38:9e:0f:
83:70:8f:cf:66:75:96:a7:7d:a9:7c:89:8c:bb:45:fb:94:33:
05:e1:5c:d6:1d:69:87:e2:d0:2d:de:4f:f3:92:8d:49:ab:c0:
71:cb:d3:2e:33:7a:ca:fc:aa:c0:20:ea:29:4c:fd:59:78:d8:
f1:47:35:6b:9f:90:57:ea:8c:fd:5c:e5:f3:8a:8a:93:57:fb:
9a:bd:b1:70:b4:ad:da:6e:19:9a:7a:57:c5:1c:ee:e4:28:a5:
6e:99:df:a7:ac:2e:52:ea:33:fc:85:f1:97:67:e7:08:c4:05:
19:5d:41:57:39:f1:54:f1:45:fa:07:6c:ff:eb:21:d1:f3:bb:
73:8a:3a:12:09:e7:62:20:e6:26:03:38:ed:a0:87:75:47:ee:
c8:42:2d:f8:66:3c:dd:f1:4d:f9:1f:c7:f8:d2:52:60:07:b6:
aa:e4:c4:e4:c7:93:52:73:e7:14:fe:a8:b7:73:3e:1e:01:14:
c8:db:7d:75:5b:4e:01:03:43:7a:bb:ee:2a:6a:0f:12:27:cd:
82:99:ba:1c:cb:c3:af:56:ff:75:6e:19:38:2a:49:d1:c6:6a:
36:86:fa:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:26:44 2026 by rpki-client