
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNTT/0/866155EC56EF0A61BC489259EA6B444F2596FF9E.mft
File: 866155EC56EF0A61BC489259EA6B444F2596FF9E.mft (raw, json)
Hash identifier: bpVqbe0EFcYuJv/Mh5yhPQfeFvMhAuURRpsi24cXZkk=
Subject key identifier: A4:A3:FD:0B:C3:A1:27:13:3B:DE:8A:1A:E6:D1:4B:15:32:82:7C:AC
Authority key identifier: 86:61:55:EC:56:EF:0A:61:BC:48:92:59:EA:6B:44:4F:25:96:FF:9E
Certificate issuer: /CN=866155EC56EF0A61BC489259EA6B444F2596FF9E
Certificate serial: 6876CDA2FAD4CD23A093508498BD300570044398
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/866155EC56EF0A61BC489259EA6B444F2596FF9E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNTT/0/866155EC56EF0A61BC489259EA6B444F2596FF9E.mft
Manifest number: 73
Signing time: Tue 28 Jul 2026 00:17:01 +0000
Manifest this update: Tue 28 Jul 2026 00:12:01 +0000
Manifest next update: Wed 29 Jul 2026 03:52:01 +0000
Files and hashes: 1: 3132322e3235352e39332e3131322f32382d3238203d3e203138303138.roa (hash: DCuf39QCWplBT1yHKKE16KE93ZquNcCivbp7rdZaTpo=)
2: 3132322e3235352e39342e302f32382d3238203d3e203138303138.roa (hash: 1FyQfERQbzRtqHMN+lCM3804V/dGWG068p//0dtL/f4=)
3: 3132322e3235352e39342e36342f32362d3236203d3e203138303138.roa (hash: 5asE5DvsTfpB1BVRf4zu0Zel18vuQX5T6T90JBepePs=)
4: 36312e35382e33342e302f32352d3235203d3e203138303138.roa (hash: sEbgj8r5BW9LG+uLbdsnQ3mfWS9qyXUgDZxxUrhdajU=)
5: 323030313a6434303a3a2f33322d3332203d3e2032393134.roa (hash: 95cinPFxr6M1UrLSOID8fzCFDcqIv0aWY/wubzGwKoY=)
6: 36312e35382e34312e3137362f32382d3238203d3e2033393439.roa (hash: 8+1bqHrAQFD10kktfKxge62Vv7sjt8foTbNXn1au08A=)
7: 3132322e3235352e39352e3132382f32352d3235203d3e203138303138.roa (hash: QsixafQjwfqu9M7sBGz7C/Kx4ATf5EPodViRplY14v8=)
8: 3132322e3235352e39342e31362f32382d3238203d3e2033393439.roa (hash: jFOqKNSTBrTIV1xUzqrbetFhA6QtKyhxqkPiIbQ8Meo=)
9: 3132322e3235352e38302e302f32302d3234203d3e2032393134.roa (hash: fMdNagEZlOANeSxcOpb3w/TF/IYf3DkNkif0u6p7BJo=)
10: 866155EC56EF0A61BC489259EA6B444F2596FF9E.crl (hash: OIaHLULnTeGDETAsFojSufP4pX6wwLn68pOVtkQcU7s=)
11: 36312e35382e33322e302f32302d3234203d3e2032393134.roa (hash: 5f4R2kruXwvonwhPEwdiJqWNobqGweT9ncTpgiNvvP8=)
12: 36312e35382e34312e3132382f32392d3239203d3e20313331363138.roa (hash: E6IxpTdYXlAMqeX0+c0IU8U2bczaMIO7WYlkAnDJQFE=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNTT/0/866155EC56EF0A61BC489259EA6B444F2596FF9E.crl
rsync://rpkica.twnic.tw/rpki/TWNTT/0/866155EC56EF0A61BC489259EA6B444F2596FF9E.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/866155EC56EF0A61BC489259EA6B444F2596FF9E.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 03:52:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:76:cd:a2:fa:d4:cd:23:a0:93:50:84:98:bd:30:05:70:04:43:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=866155EC56EF0A61BC489259EA6B444F2596FF9E
Validity
Not Before: Jul 28 00:12:01 2026 GMT
Not After : Jul 29 03:52:01 2026 GMT
Subject: CN=A4A3FD0BC3A127133BDE8A1AE6D14B1532827CAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d7:f6:f9:f5:df:bf:5c:94:d7:cf:15:c5:93:
98:24:58:77:7c:b9:7e:f5:35:66:8a:45:9f:0c:1b:
58:db:e0:c9:f0:cf:a2:4a:57:08:15:3e:c1:a8:b5:
c6:6b:76:4a:e3:76:70:38:1a:47:6e:ec:14:fd:4c:
7c:e9:6a:e7:6a:d8:26:42:1c:0e:ba:d8:70:1e:ef:
d4:fc:a7:61:32:33:60:34:d5:a7:5a:c0:94:75:61:
b4:fe:ce:7f:f5:3b:e3:7d:76:0c:4d:36:1a:f0:50:
9d:bd:bf:10:9c:81:bf:a4:5b:37:c1:a1:0e:42:5f:
a6:61:44:21:1f:7d:77:e5:be:ea:c4:35:78:14:f1:
5a:42:31:df:a8:c4:84:e1:ed:3d:57:a5:e6:aa:45:
47:c8:8e:2c:a8:0c:21:de:ef:36:8b:f6:b4:22:1a:
9d:62:5d:ed:45:ce:87:7f:98:ec:b0:73:2c:87:50:
96:e8:b0:c3:c0:2a:c3:ca:89:01:75:61:b8:a3:d0:
59:1e:b1:28:cd:ec:c5:e0:23:f3:72:30:3c:bc:cc:
ed:c1:7b:d9:8c:8e:e0:74:89:43:5f:61:29:83:7b:
52:27:03:dc:ce:b1:57:06:fc:3f:59:84:8b:cf:96:
c4:35:ab:51:0f:6d:4d:41:f3:e3:2e:c1:f7:41:a4:
67:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:A3:FD:0B:C3:A1:27:13:3B:DE:8A:1A:E6:D1:4B:15:32:82:7C:AC
X509v3 Authority Key Identifier:
keyid:86:61:55:EC:56:EF:0A:61:BC:48:92:59:EA:6B:44:4F:25:96:FF:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNTT/0/866155EC56EF0A61BC489259EA6B444F2596FF9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/866155EC56EF0A61BC489259EA6B444F2596FF9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNTT/0/866155EC56EF0A61BC489259EA6B444F2596FF9E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:70:da:c8:24:22:f9:2c:04:ac:78:5d:fc:1a:24:55:fa:da:
c4:74:f0:25:30:4e:3c:d1:e9:90:33:99:bd:ad:c2:bf:27:66:
d9:24:2b:27:65:4c:db:14:23:3b:54:1d:7a:d3:41:2c:f3:87:
f1:93:22:8a:01:d0:59:ac:5c:fb:bb:42:ed:1e:b3:68:1d:45:
a1:e0:44:07:1d:58:5e:5b:fd:33:bd:e5:59:f4:89:fe:fa:35:
2b:ea:5f:7f:5d:05:32:76:3f:6e:34:b0:8e:cd:3b:18:21:9f:
12:53:96:89:31:5a:6c:85:a4:80:b9:1f:8b:e9:66:0d:6e:d1:
d7:7c:d9:8f:93:e6:b6:51:d4:86:22:bb:8b:52:03:72:61:a3:
39:07:0c:61:86:20:23:57:cd:5d:94:61:72:d7:1e:a9:22:92:
7d:f1:f5:bd:ab:61:de:63:57:39:7b:92:41:d8:6e:0b:d9:08:
07:7a:82:71:ea:ea:bb:dc:ec:6e:e4:98:e5:e6:ee:6d:5d:90:
64:d8:b2:9d:df:38:e2:b7:66:e3:de:8d:51:58:83:45:6d:da:
ca:fc:85:85:a1:64:98:83:de:29:5b:ba:99:e7:05:32:98:98:
f8:6b:ab:d0:d6:cf:27:d6:ff:b4:c5:94:d0:2c:a6:1a:6f:65:
01:86:0b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:32:14 2026 by rpki-client