
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WANIN/wNLIw9TC-7ok09g1CKsULy1JQn0.mft
File: wNLIw9TC-7ok09g1CKsULy1JQn0.mft (raw, json)
Hash identifier: jZo2uUOr+hcuC2Kf2LPjw5RJyaGe4ywIrtwp8jfnaa8=
Subject key identifier: B7:A0:72:FF:D5:A0:F5:D2:70:56:47:B6:60:24:DB:B3:C4:3B:95:BC
Authority key identifier: C0:D2:C8:C3:D4:C2:FB:BA:24:D3:D8:35:08:AB:14:2F:2D:49:42:7D
Certificate issuer: /CN=C0D2C8C3D4C2FBBA24D3D83508AB142F2D49427D
Certificate serial: 1495
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/wNLIw9TC-7ok09g1CKsULy1JQn0.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/wNLIw9TC-7ok09g1CKsULy1JQn0.mft
Manifest number: 1456
Signing time: Sat 28 Feb 2026 22:54:53 +0000
Manifest this update: Sat 28 Feb 2026 22:54:53 +0000
Manifest next update: Mon 02 Mar 2026 22:54:53 +0000
Files and hashes: 1: FLAncUewSF6hei4RPk49VjC_PQg.roa (hash: 8fZqIG/MMfhI6s+b0ATJTXxQ4tAwF4sO0Th4u13XmXk=)
2: LC_aFhBz7fd7C6FebQLwmHV3t9I.roa (hash: 8QLVAAyFdZwfuwuj45MZA7t9fieWo6P6SMjDJo6pGeM=)
3: LgggCVwPbNdcnrCqVMduXlIqpsw.roa (hash: 4ju6mocONKVH9JpMBsRARsenKxMgM5gKSyN495Ilqg0=)
4: VunfuzJ7FKNptif6Q8gzb0wR95E.roa (hash: OTzSlzlxAlVbWUDG/GkIkODkIAkRsiSwSYY13w3XFEM=)
5: XIhWOlBKRqMagkzqFrODB_R8sI8.roa (hash: 9l8Iouic8Gg8mE30CkufgikNUXR5oK1+0q+hXl9OL1g=)
6: aN1MRs9ky_ae4kbv2Ws0Wicbi94.roa (hash: sFRpEdz/RLn0u4unDaARJlbqPIW1CDZKiuTdFbZiM/M=)
7: aytBevsakWW2oNPJfb9kF-YHitU.roa (hash: Lps8rcvk2vL+W/b6q00wg4AJ2PHp3UoZgX8QZBHYtBY=)
8: wNLIw9TC-7ok09g1CKsULy1JQn0.crl (hash: kYfft9fk8JIRAZRnpphDPSXyt2Ko83U5Q+I2GpskfIA=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/wNLIw9TC-7ok09g1CKsULy1JQn0.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/wNLIw9TC-7ok09g1CKsULy1JQn0.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/wNLIw9TC-7ok09g1CKsULy1JQn0.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Mar 2026 12:24:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5269 (0x1495)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C0D2C8C3D4C2FBBA24D3D83508AB142F2D49427D
Validity
Not Before: Feb 28 22:54:53 2026 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=B7A072FFD5A0F5D2705647B66024DBB3C43B95BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9b:62:44:b4:9e:d6:69:a1:7c:5f:31:b7:69:
c1:b2:10:9d:9e:b2:99:07:6a:82:b5:03:07:6d:c9:
55:f4:2e:18:dd:c8:21:13:16:f9:e9:d9:38:68:16:
d4:24:24:5d:83:53:c4:ad:79:42:0a:ce:6c:af:cd:
f9:78:da:7d:18:fb:00:53:d8:b4:06:1d:75:3e:06:
25:c1:2e:35:59:b5:b1:83:30:50:58:cb:1f:19:5b:
63:46:d1:aa:21:e6:a8:76:8e:d7:72:46:26:86:51:
1d:bf:1f:90:6d:a8:5b:fb:73:79:81:da:0e:29:95:
be:29:d4:22:e8:b1:b9:c4:3a:22:a0:b3:30:c4:18:
a0:94:f4:c2:f2:bb:96:1f:ac:c0:81:7b:8c:49:3f:
e9:94:a7:c2:a1:1e:77:db:74:8f:40:92:85:1c:ad:
67:62:49:d0:fd:c2:32:48:7e:df:67:b8:46:34:cb:
53:6d:d7:ea:ed:fa:af:0c:47:6d:07:a5:12:ed:76:
1d:2d:b6:2a:d6:99:f9:5a:bb:35:5a:b6:89:63:bc:
43:cf:09:c0:cb:a5:50:d1:25:5c:b2:38:a0:e2:a8:
4f:e1:ff:32:25:5c:26:a5:32:ef:28:36:0c:10:84:
ba:81:4b:74:6d:0e:c5:90:56:6b:35:eb:4c:aa:51:
39:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:A0:72:FF:D5:A0:F5:D2:70:56:47:B6:60:24:DB:B3:C4:3B:95:BC
X509v3 Authority Key Identifier:
keyid:C0:D2:C8:C3:D4:C2:FB:BA:24:D3:D8:35:08:AB:14:2F:2D:49:42:7D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/wNLIw9TC-7ok09g1CKsULy1JQn0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/wNLIw9TC-7ok09g1CKsULy1JQn0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/wNLIw9TC-7ok09g1CKsULy1JQn0.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:06:3e:76:e5:3e:6e:18:a0:89:77:3b:aa:48:89:62:06:72:
d5:7c:0b:26:1a:f1:69:44:c4:23:55:f0:53:63:42:57:d6:b6:
21:c4:72:f0:64:ca:b7:f3:d4:4e:9c:a0:cd:8a:a6:3e:2a:da:
42:f5:c8:f8:2e:35:ce:0c:86:35:9f:32:02:be:2f:39:60:5f:
ca:6c:1e:5d:14:65:0e:99:f1:1d:18:80:66:09:73:a7:d2:3b:
46:91:c6:7a:94:65:39:19:c6:76:68:f8:c4:57:10:6a:d6:be:
e5:ed:05:4f:f7:0a:9d:9a:17:24:e6:c9:12:ec:03:b6:fc:60:
a7:c6:4c:e4:a2:19:ca:b2:9b:b4:b6:fc:d0:21:ae:1d:62:fd:
8c:14:ea:6b:39:79:ee:ce:ad:ba:9b:00:92:bd:9a:19:39:81:
f1:55:1b:4f:3b:5b:c0:7e:2e:ae:a6:c0:01:bb:b8:66:95:fc:
9f:4e:0b:66:37:a0:3c:da:d8:c0:14:55:46:82:b0:31:5f:c0:
26:26:13:aa:31:50:0e:cb:db:42:7d:ed:1c:09:a7:3c:11:53:
95:a0:07:3b:e4:07:55:2e:04:7c:ec:db:92:ed:26:26:11:59:
35:f9:62:ff:88:4f:09:88:a6:75:15:51:56:88:42:35:6f:d9:
9c:72:7a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:07:17 2026 by rpki-client