
$ rpki-client -vvf rpkica.twnic.tw/rpki/VERYFAST/0/4116665BE4ABEC579625EB8F93706D8A5D25D811.mft
File: 4116665BE4ABEC579625EB8F93706D8A5D25D811.mft (raw, json)
Hash identifier: CyTTO55L9+cqxzvcaNT/RvTey11sMwK+uY+8Xng0Gx4=
Subject key identifier: 76:2F:90:6A:E7:19:F1:82:C5:CF:8B:B8:36:89:C1:56:B9:0B:EC:65
Authority key identifier: 41:16:66:5B:E4:AB:EC:57:96:25:EB:8F:93:70:6D:8A:5D:25:D8:11
Certificate issuer: /CN=4116665BE4ABEC579625EB8F93706D8A5D25D811
Certificate serial: 4071577F3DD3E1E24FCFB0A8CE2A0C9937B35047
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4116665BE4ABEC579625EB8F93706D8A5D25D811.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/VERYFAST/0/4116665BE4ABEC579625EB8F93706D8A5D25D811.mft
Manifest number: 70
Signing time: Tue 28 Jul 2026 16:44:26 +0000
Manifest this update: Tue 28 Jul 2026 16:39:26 +0000
Manifest next update: Wed 29 Jul 2026 17:46:26 +0000
Files and hashes: 1: 323430313a653365303a3930303a3a2f34342d3438203d3e20313939323033.roa (hash: 08KENw26rpbLh+PQlIfO2TkhmZXEARMLbNYiVllfdSo=)
2: 323430313a653365303a323a3a2f34382d3438203d3e20313532363139.roa (hash: jCyDqTwyynUAj0Cq2T29ZHOBjRuvY31Wq/Ivps7Y/mI=)
3: 323430313a653365303a313a3a2f34382d3438203d3e20313532363139.roa (hash: Vbn0DlkAIJGfZ7fXrVFA39Q+4YeR+96LAdOV3sxu/Z8=)
4: 323430313a653365303a35333a3a2f34382d3438203d3e20313532363139.roa (hash: inMxOGvmxhpz+t2U+aw17poC114ZD09uaitT0n/sR38=)
5: 323430313a653365303a663a3a2f34382d3438203d3e20313532363139.roa (hash: 2niirm1c1f/SapiThm2nh9vCjN+JRzuRNRhF3OjVLM4=)
6: 323430313a653365303a3a2f34382d3438203d3e20313532363139.roa (hash: EKluDgUWuNPYLOL9EW7U6TRfKnY+emx5Mxp9x96Yono=)
7: 4116665BE4ABEC579625EB8F93706D8A5D25D811.crl (hash: GVZQ4BySwi3VFBYftK8NOhw3cexZF1oDEUJUj3eUBLo=)
8: 323430313a653365303a3330303a3a2f34342d3438203d3e20313938393534.roa (hash: +MPj1+FqsGNNfrSwLB7ceVoBXHWs1y8m+Mu4VImaW80=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/VERYFAST/0/4116665BE4ABEC579625EB8F93706D8A5D25D811.crl
rsync://rpkica.twnic.tw/rpki/VERYFAST/0/4116665BE4ABEC579625EB8F93706D8A5D25D811.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4116665BE4ABEC579625EB8F93706D8A5D25D811.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 17:46:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:71:57:7f:3d:d3:e1:e2:4f:cf:b0:a8:ce:2a:0c:99:37:b3:50:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4116665BE4ABEC579625EB8F93706D8A5D25D811
Validity
Not Before: Jul 28 16:39:26 2026 GMT
Not After : Jul 29 17:46:26 2026 GMT
Subject: CN=762F906AE719F182C5CF8BB83689C156B90BEC65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:de:8f:ba:34:90:2d:51:6a:c8:bb:e7:54:b7:
ba:21:67:7a:2c:db:1a:3b:15:77:f4:aa:72:f4:7e:
ef:9e:50:83:b1:13:27:72:9f:eb:55:dd:17:06:8d:
72:26:3f:ed:95:94:a9:90:0c:a7:9d:6d:2d:b0:0e:
b5:cf:eb:67:d5:f8:f3:97:fd:60:2b:f9:97:59:93:
02:80:57:86:a4:c4:65:7e:a6:4f:78:60:ec:1a:bc:
df:26:ff:09:6f:14:6c:0a:cf:2e:b8:6b:fc:cd:01:
d4:de:30:0e:0b:61:b5:14:38:88:2a:74:01:e1:22:
a8:f8:8f:55:e6:c7:47:20:2c:6c:e6:a0:72:f6:8b:
0d:e3:04:7e:cb:65:3a:2e:2d:12:3d:9e:95:63:89:
cb:b2:91:da:bb:87:01:b9:6a:3f:12:ce:d3:c0:59:
69:58:de:f5:0d:9f:f7:12:30:d3:d8:62:53:e2:f9:
82:d2:d3:25:ac:6d:16:9f:0d:18:b2:c8:e8:ab:a5:
fd:14:2c:58:f0:18:df:7d:9a:6a:74:a5:87:98:c1:
95:c9:56:de:61:5b:b8:f8:69:f3:c8:bb:5f:55:ce:
cb:38:15:91:63:61:20:cb:8c:8f:7f:38:9f:8d:7a:
c7:0d:f0:88:0b:0e:2a:9b:1a:6d:5b:23:58:89:fb:
7a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:2F:90:6A:E7:19:F1:82:C5:CF:8B:B8:36:89:C1:56:B9:0B:EC:65
X509v3 Authority Key Identifier:
keyid:41:16:66:5B:E4:AB:EC:57:96:25:EB:8F:93:70:6D:8A:5D:25:D8:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/VERYFAST/0/4116665BE4ABEC579625EB8F93706D8A5D25D811.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4116665BE4ABEC579625EB8F93706D8A5D25D811.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VERYFAST/0/4116665BE4ABEC579625EB8F93706D8A5D25D811.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:32:72:32:8b:66:e9:31:ed:19:43:97:d5:50:88:5e:9d:4c:
95:26:3b:29:d3:ac:81:cd:61:15:e8:80:bd:cc:8f:5d:08:ab:
6d:0c:65:8a:10:fc:c7:83:9b:3e:ac:99:6a:49:01:2d:e8:4b:
26:f6:0f:43:45:50:3e:03:fb:48:b3:04:dc:bd:bf:e4:b5:21:
56:1e:59:29:e4:17:05:96:93:99:f5:b8:39:da:86:ff:45:45:
1a:eb:b6:ba:b4:92:03:d5:60:aa:86:40:60:3c:2a:24:0f:58:
c0:a4:1d:63:d7:23:26:73:41:79:15:21:7c:9f:70:a3:3e:dd:
34:86:87:17:06:cf:8a:0e:cc:c9:11:c6:e4:25:b2:c4:9d:cd:
52:37:56:b2:4d:f6:9e:bd:28:49:a8:cd:de:93:9a:10:e8:98:
a6:bb:67:16:de:f9:f9:0c:57:b8:63:4a:34:38:aa:37:46:11:
ec:2a:12:2d:6c:31:87:23:e0:71:0c:30:dd:1d:8a:3a:a7:30:
cb:d6:f9:33:36:2a:12:e1:e5:3d:cc:c5:5c:a3:15:15:d4:ff:
67:9d:0a:d1:c4:d9:f5:65:d5:49:2f:29:de:6a:82:ef:02:1a:
9d:ef:40:8a:dc:fe:b5:4d:86:a6:f6:fb:de:87:38:18:65:75:
29:4f:7b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:24:40 2026 by rpki-client