
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WANIN/wNLIw9TC-7ok09g1CKsULy1JQn0.mft
File: wNLIw9TC-7ok09g1CKsULy1JQn0.mft (raw, json)
Hash identifier: 6f/1vqkFxgFFS1gnnrBVYXHk6rqAzQV5OI6KOz36OFo=
Subject key identifier: B7:A0:72:FF:D5:A0:F5:D2:70:56:47:B6:60:24:DB:B3:C4:3B:95:BC
Authority key identifier: C0:D2:C8:C3:D4:C2:FB:BA:24:D3:D8:35:08:AB:14:2F:2D:49:42:7D
Certificate issuer: /CN=C0D2C8C3D4C2FBBA24D3D83508AB142F2D49427D
Certificate serial: 14B4
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/wNLIw9TC-7ok09g1CKsULy1JQn0.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/wNLIw9TC-7ok09g1CKsULy1JQn0.mft
Manifest number: 1475
Signing time: Thu 16 Apr 2026 11:34:42 +0000
Manifest this update: Thu 16 Apr 2026 11:34:42 +0000
Manifest next update: Sat 18 Apr 2026 11:34:42 +0000
Files and hashes: 1: FLAncUewSF6hei4RPk49VjC_PQg.roa (hash: 8fZqIG/MMfhI6s+b0ATJTXxQ4tAwF4sO0Th4u13XmXk=)
2: LC_aFhBz7fd7C6FebQLwmHV3t9I.roa (hash: 8QLVAAyFdZwfuwuj45MZA7t9fieWo6P6SMjDJo6pGeM=)
3: LgggCVwPbNdcnrCqVMduXlIqpsw.roa (hash: 4ju6mocONKVH9JpMBsRARsenKxMgM5gKSyN495Ilqg0=)
4: VunfuzJ7FKNptif6Q8gzb0wR95E.roa (hash: OTzSlzlxAlVbWUDG/GkIkODkIAkRsiSwSYY13w3XFEM=)
5: XIhWOlBKRqMagkzqFrODB_R8sI8.roa (hash: 9l8Iouic8Gg8mE30CkufgikNUXR5oK1+0q+hXl9OL1g=)
6: aN1MRs9ky_ae4kbv2Ws0Wicbi94.roa (hash: sFRpEdz/RLn0u4unDaARJlbqPIW1CDZKiuTdFbZiM/M=)
7: aytBevsakWW2oNPJfb9kF-YHitU.roa (hash: Lps8rcvk2vL+W/b6q00wg4AJ2PHp3UoZgX8QZBHYtBY=)
8: wNLIw9TC-7ok09g1CKsULy1JQn0.crl (hash: oO3hJB7dDTzAanGyo4u7UOQyro/uieV64e8CsND7V6w=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/wNLIw9TC-7ok09g1CKsULy1JQn0.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/wNLIw9TC-7ok09g1CKsULy1JQn0.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/wNLIw9TC-7ok09g1CKsULy1JQn0.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 17 Apr 2026 11:03:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5300 (0x14b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C0D2C8C3D4C2FBBA24D3D83508AB142F2D49427D
Validity
Not Before: Apr 16 11:34:42 2026 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=B7A072FFD5A0F5D2705647B66024DBB3C43B95BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9b:62:44:b4:9e:d6:69:a1:7c:5f:31:b7:69:
c1:b2:10:9d:9e:b2:99:07:6a:82:b5:03:07:6d:c9:
55:f4:2e:18:dd:c8:21:13:16:f9:e9:d9:38:68:16:
d4:24:24:5d:83:53:c4:ad:79:42:0a:ce:6c:af:cd:
f9:78:da:7d:18:fb:00:53:d8:b4:06:1d:75:3e:06:
25:c1:2e:35:59:b5:b1:83:30:50:58:cb:1f:19:5b:
63:46:d1:aa:21:e6:a8:76:8e:d7:72:46:26:86:51:
1d:bf:1f:90:6d:a8:5b:fb:73:79:81:da:0e:29:95:
be:29:d4:22:e8:b1:b9:c4:3a:22:a0:b3:30:c4:18:
a0:94:f4:c2:f2:bb:96:1f:ac:c0:81:7b:8c:49:3f:
e9:94:a7:c2:a1:1e:77:db:74:8f:40:92:85:1c:ad:
67:62:49:d0:fd:c2:32:48:7e:df:67:b8:46:34:cb:
53:6d:d7:ea:ed:fa:af:0c:47:6d:07:a5:12:ed:76:
1d:2d:b6:2a:d6:99:f9:5a:bb:35:5a:b6:89:63:bc:
43:cf:09:c0:cb:a5:50:d1:25:5c:b2:38:a0:e2:a8:
4f:e1:ff:32:25:5c:26:a5:32:ef:28:36:0c:10:84:
ba:81:4b:74:6d:0e:c5:90:56:6b:35:eb:4c:aa:51:
39:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:A0:72:FF:D5:A0:F5:D2:70:56:47:B6:60:24:DB:B3:C4:3B:95:BC
X509v3 Authority Key Identifier:
keyid:C0:D2:C8:C3:D4:C2:FB:BA:24:D3:D8:35:08:AB:14:2F:2D:49:42:7D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/wNLIw9TC-7ok09g1CKsULy1JQn0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/wNLIw9TC-7ok09g1CKsULy1JQn0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/wNLIw9TC-7ok09g1CKsULy1JQn0.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:59:7e:02:03:91:79:d7:c9:15:ba:bb:32:a6:f0:e8:2a:fa:
24:67:d1:d7:a6:bd:8e:71:c6:b3:2e:26:e5:11:77:08:40:d4:
e1:85:d1:82:a8:3b:60:eb:64:42:55:99:83:0c:fa:cc:c4:e0:
75:a0:f9:06:88:86:e1:c7:e9:30:83:a8:ec:05:c0:c1:17:f6:
45:78:0f:e8:62:3f:f8:67:1b:70:2d:30:f4:d3:61:e2:48:11:
6f:50:52:33:27:4e:c3:4f:77:15:a0:52:86:0c:ba:40:3e:a8:
a5:48:b0:64:b4:e2:b7:d5:7e:62:5e:5c:27:c0:bb:db:40:73:
68:68:1d:58:f6:b4:15:a2:99:a9:13:9f:3f:d1:61:cb:c7:c1:
17:e9:d1:31:d1:f2:83:5b:25:8a:d5:e4:54:b0:9f:84:36:50:
38:99:dc:1c:d8:0e:1d:99:e9:b9:39:ec:4a:98:11:e8:81:0d:
35:ce:52:bb:03:e9:4e:86:43:42:32:6e:69:25:ff:18:5b:42:
72:44:18:99:2e:cb:ac:89:16:d9:b8:60:1e:ae:87:01:5b:85:
52:0d:11:d8:f0:33:4d:c8:00:07:d9:cb:72:6b:f3:80:7f:22:
88:36:c0:5a:64:64:81:0b:b5:af:72:f4:a3:9e:0f:27:ee:1e:
9b:d4:c3:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:44:47 2026 by rpki-client