
$ rpki-client -vvvf rpkica.twnic.tw/rpki/VERYFAST/0/4116665BE4ABEC579625EB8F93706D8A5D25D811.mft
File: 4116665BE4ABEC579625EB8F93706D8A5D25D811.mft (raw, json)
Hash identifier: WY/LIgmZR0Nv9RR66MYMtPxJ8UqVVFQXOvDHt8elYs8=
Subject key identifier: 3C:65:7D:1C:1D:8E:66:69:9E:22:C7:76:03:43:B3:F4:45:E5:90:82
Authority key identifier: 41:16:66:5B:E4:AB:EC:57:96:25:EB:8F:93:70:6D:8A:5D:25:D8:11
Certificate issuer: /CN=4116665BE4ABEC579625EB8F93706D8A5D25D811
Certificate serial: 60C80B5E2A76E8839D7E881851795EE75ED1F1CC
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4116665BE4ABEC579625EB8F93706D8A5D25D811.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/VERYFAST/0/4116665BE4ABEC579625EB8F93706D8A5D25D811.mft
Manifest number: B9
Signing time: Mon 21 Sep 2026 08:41:41 +0000
Manifest this update: Mon 21 Sep 2026 08:36:41 +0000
Manifest next update: Tue 22 Sep 2026 10:03:41 +0000
Files and hashes: 1: 323430313a653365303a313a3a2f34382d3438203d3e20313532363139.roa (hash: Vbn0DlkAIJGfZ7fXrVFA39Q+4YeR+96LAdOV3sxu/Z8=)
2: 4116665BE4ABEC579625EB8F93706D8A5D25D811.crl (hash: 4RGeRvaFvKLk0xJjoXUMLTi3WGemsb87bh5ikMD3UVI=)
3: 323430313a653365303a3930303a3a2f34342d3438203d3e20313939323033.roa (hash: 08KENw26rpbLh+PQlIfO2TkhmZXEARMLbNYiVllfdSo=)
4: 323430313a653365303a3a2f34382d3438203d3e20313532363139.roa (hash: EKluDgUWuNPYLOL9EW7U6TRfKnY+emx5Mxp9x96Yono=)
5: 323430313a653365303a3330303a3a2f34342d3438203d3e20313938393534.roa (hash: +MPj1+FqsGNNfrSwLB7ceVoBXHWs1y8m+Mu4VImaW80=)
6: 323430313a653365303a323a3a2f34382d3438203d3e20313532363139.roa (hash: jCyDqTwyynUAj0Cq2T29ZHOBjRuvY31Wq/Ivps7Y/mI=)
7: 323430313a653365303a35333a3a2f34382d3438203d3e20313532363139.roa (hash: inMxOGvmxhpz+t2U+aw17poC114ZD09uaitT0n/sR38=)
8: 323430313a653365303a663a3a2f34382d3438203d3e20313532363139.roa (hash: 2niirm1c1f/SapiThm2nh9vCjN+JRzuRNRhF3OjVLM4=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/VERYFAST/0/4116665BE4ABEC579625EB8F93706D8A5D25D811.crl
rsync://rpkica.twnic.tw/rpki/VERYFAST/0/4116665BE4ABEC579625EB8F93706D8A5D25D811.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4116665BE4ABEC579625EB8F93706D8A5D25D811.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 03:47:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:c8:0b:5e:2a:76:e8:83:9d:7e:88:18:51:79:5e:e7:5e:d1:f1:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4116665BE4ABEC579625EB8F93706D8A5D25D811
Validity
Not Before: Sep 21 08:36:41 2026 GMT
Not After : Sep 22 10:03:41 2026 GMT
Subject: CN=3C657D1C1D8E66699E22C7760343B3F445E59082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:50:17:52:6f:cf:9d:40:9a:7f:9e:48:1a:45:
f8:4b:a9:05:4d:a3:a5:e8:08:83:83:0f:e0:35:17:
69:5d:9f:95:c7:dc:04:fa:c1:cb:36:e6:a1:ab:6c:
d9:61:1d:d0:cb:72:85:d3:93:dc:07:ee:db:0e:70:
3a:5b:96:ee:9c:6c:62:ba:c4:38:90:a4:e5:40:5d:
69:97:d2:e4:49:43:ae:8a:13:15:d7:8f:a9:dc:69:
86:0b:21:6c:88:b7:fd:f6:0e:fb:75:e2:72:9f:6b:
d2:87:07:68:19:a1:5d:bd:7c:dc:4d:59:28:0f:8d:
6c:3f:c2:76:39:4b:45:1b:94:68:af:72:e6:49:ec:
ff:7a:4b:9c:ce:3e:fc:99:53:95:70:b0:99:96:d2:
41:e8:57:1a:84:cf:92:42:ee:c6:07:08:18:a6:da:
84:1e:95:d1:98:eb:d4:d6:7a:01:03:14:76:a6:aa:
d1:de:f0:11:a6:ec:63:22:64:63:b7:df:e2:b0:30:
2a:f8:ae:01:2d:e2:00:ae:20:03:f7:30:83:27:13:
4b:74:11:e9:82:74:e6:ae:18:59:ba:d6:bd:27:99:
75:dc:4e:10:61:78:53:df:7f:ef:bd:76:ac:25:6d:
20:6a:52:b2:f9:df:a2:7f:34:ad:11:7c:d8:3c:c6:
ca:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:65:7D:1C:1D:8E:66:69:9E:22:C7:76:03:43:B3:F4:45:E5:90:82
X509v3 Authority Key Identifier:
keyid:41:16:66:5B:E4:AB:EC:57:96:25:EB:8F:93:70:6D:8A:5D:25:D8:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/VERYFAST/0/4116665BE4ABEC579625EB8F93706D8A5D25D811.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4116665BE4ABEC579625EB8F93706D8A5D25D811.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VERYFAST/0/4116665BE4ABEC579625EB8F93706D8A5D25D811.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:41:e1:3f:0a:2c:90:c6:d2:ab:ca:04:9c:1e:7b:9d:11:f8:
b9:2b:65:b9:d3:7b:df:34:84:7e:ef:c5:bd:68:a4:1f:76:95:
a8:e5:5e:c2:3e:b8:71:0d:45:37:44:b8:09:3a:58:84:77:03:
11:1d:05:0c:0d:c2:19:73:ef:ad:61:5a:2b:0c:25:23:61:30:
be:d2:42:ac:d5:d1:af:ac:fd:c4:7b:ae:f4:d5:e2:8d:ca:ec:
7c:b5:db:ec:1a:ea:40:b5:ab:fc:9e:08:3e:ab:33:b0:68:e7:
37:d6:36:13:77:df:f7:fc:4c:7d:59:08:ad:f0:87:e7:55:38:
e9:bb:db:52:76:dd:b8:ce:01:55:29:58:b9:a8:31:e1:2d:d7:
a2:b9:09:93:6d:56:d6:44:da:e3:e9:f8:73:86:58:74:7c:e0:
dc:33:43:44:f9:8d:5a:b5:0b:93:f7:91:6d:6c:cb:0c:d5:4a:
8c:fb:60:54:6a:77:ff:80:fa:06:86:fd:c3:b8:c8:b5:91:3a:
b2:c1:96:6e:1c:e4:9e:dc:ea:8a:7a:f2:57:c0:ae:c2:01:0f:
31:e3:f0:89:2b:8a:6c:12:64:83:f3:3c:e2:30:14:a1:8e:6d:
eb:90:2f:bd:66:7b:78:72:ba:67:36:32:18:49:4a:52:26:17:
35:54:cd:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:36:04 2026 by rpki-client