
$ rpki-client -vvf rpkica.twnic.tw/rpki/VERYFAST/1/C3056C5F157A7E7512FC306EFEDEF92FD12C47F1.mft
File: C3056C5F157A7E7512FC306EFEDEF92FD12C47F1.mft (raw, json)
Hash identifier: mJL6pklSeu6zQAq8PF55NwtX2gJajqVdAha0B6+c3H0=
Subject key identifier: 84:A4:05:EC:44:35:58:D4:BC:14:EB:35:23:DD:8F:F9:09:67:57:CB
Authority key identifier: C3:05:6C:5F:15:7A:7E:75:12:FC:30:6E:FE:DE:F9:2F:D1:2C:47:F1
Certificate issuer: /CN=C3056C5F157A7E7512FC306EFEDEF92FD12C47F1
Certificate serial: 1153C58C7EA4B80398E05F7CCF51555B5F17FA28
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3056C5F157A7E7512FC306EFEDEF92FD12C47F1.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/VERYFAST/1/C3056C5F157A7E7512FC306EFEDEF92FD12C47F1.mft
Manifest number: 71
Signing time: Tue 28 Jul 2026 22:04:59 +0000
Manifest this update: Tue 28 Jul 2026 21:59:59 +0000
Manifest next update: Wed 29 Jul 2026 23:03:59 +0000
Files and hashes: 1: 3136312e3234382e34342e302f32332d3332203d3e20313532363139.roa (hash: 4MovYHgGqWQdyUO1Av8kBHVSUNdImBmxnWEFbBFEyVc=)
2: C3056C5F157A7E7512FC306EFEDEF92FD12C47F1.crl (hash: HqUeU+nBiaSq7uiFuKKseaB1H5ivBH8OJtt+GzLN8ig=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/VERYFAST/1/C3056C5F157A7E7512FC306EFEDEF92FD12C47F1.crl
rsync://rpkica.twnic.tw/rpki/VERYFAST/1/C3056C5F157A7E7512FC306EFEDEF92FD12C47F1.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3056C5F157A7E7512FC306EFEDEF92FD12C47F1.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 23:03:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:53:c5:8c:7e:a4:b8:03:98:e0:5f:7c:cf:51:55:5b:5f:17:fa:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3056C5F157A7E7512FC306EFEDEF92FD12C47F1
Validity
Not Before: Jul 28 21:59:59 2026 GMT
Not After : Jul 29 23:03:59 2026 GMT
Subject: CN=84A405EC443558D4BC14EB3523DD8FF9096757CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fe:7b:77:c0:bb:60:d8:a9:95:1e:7f:6b:f4:
6b:5b:27:3d:87:71:b8:02:1e:d3:b6:35:bb:b2:52:
44:8a:1c:bc:2b:55:46:7a:29:ea:4f:5d:ea:88:6e:
8a:83:25:2d:a2:cb:cc:2f:29:09:a5:f7:3e:db:67:
f4:dc:2c:f3:be:70:73:bb:dd:41:ec:8f:14:95:38:
8d:07:d1:4e:ca:ae:34:8d:0f:d0:bb:52:ca:d5:20:
97:97:7c:37:54:53:d1:ef:cf:0b:57:88:fa:e7:e9:
d8:89:f5:10:76:06:5f:f1:e5:62:6a:4c:08:95:1f:
9a:42:ec:3a:4b:2b:d7:a0:1e:da:0d:c8:dd:d8:76:
f0:f9:0a:ee:82:e5:34:1c:7c:0b:63:f3:2c:1c:03:
8d:d3:11:67:f8:b4:60:3b:06:18:08:c1:23:70:03:
a0:e4:68:05:05:f7:a9:80:6c:f2:ec:38:4d:8f:53:
3d:76:c8:85:d6:6b:5d:a6:66:1c:b3:fc:87:d7:46:
ef:c8:05:53:87:49:ee:6e:71:e8:1b:4c:0c:0c:bc:
da:ba:47:1b:1e:e5:ea:85:84:6d:b1:52:ac:c3:7b:
b8:a7:1a:6a:58:73:aa:ba:66:71:88:8e:27:35:48:
af:11:82:b7:f4:9a:19:2e:df:2f:96:18:be:d6:f6:
64:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A4:05:EC:44:35:58:D4:BC:14:EB:35:23:DD:8F:F9:09:67:57:CB
X509v3 Authority Key Identifier:
keyid:C3:05:6C:5F:15:7A:7E:75:12:FC:30:6E:FE:DE:F9:2F:D1:2C:47:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/VERYFAST/1/C3056C5F157A7E7512FC306EFEDEF92FD12C47F1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3056C5F157A7E7512FC306EFEDEF92FD12C47F1.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VERYFAST/1/C3056C5F157A7E7512FC306EFEDEF92FD12C47F1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:80:2c:58:99:6b:74:70:b8:83:8c:9d:8b:41:6d:39:dc:ae:
57:b1:1d:6d:4a:ec:78:48:cc:6d:8a:4e:c8:bd:88:66:4d:6a:
8d:59:29:1f:a9:05:90:86:f7:bf:ed:61:80:d9:0c:21:3b:fb:
04:57:bf:6f:fa:9f:b5:57:d2:06:d8:07:f6:b9:77:1b:25:66:
a3:af:ae:fb:b0:92:64:94:8e:03:1c:2e:ae:18:0a:ff:96:d8:
3a:69:4a:0a:60:6d:ce:5b:ca:e3:3d:40:3a:d5:d3:c1:23:57:
cb:4c:d3:63:82:1b:30:da:fe:c3:03:d5:d3:89:f6:7c:c1:1a:
1f:ec:4d:59:7c:02:84:d6:8e:2d:ad:4e:7c:c0:c3:63:bd:0b:
61:87:3f:b4:5a:fc:2d:81:76:f9:f6:12:95:8c:15:25:c8:fe:
7b:1c:6c:b5:cb:b8:05:83:f4:d6:dd:46:b5:ab:0a:3d:29:9a:
78:d8:ec:00:1e:7d:a4:16:22:54:8a:08:41:8f:6c:db:07:ce:
23:62:73:5d:82:11:44:9c:55:97:42:5a:d1:1b:5b:f5:f2:2d:
32:38:e9:b4:56:68:3b:a4:d2:90:4c:47:09:a7:b6:de:ab:89:
e4:69:ba:a4:62:f0:53:31:ad:7b:c7:04:59:fc:48:7f:9c:b5:
a7:34:70:06
-----BEGIN CERTIFICATE-----
MIIE6DCCA9CgAwIBAgIUEVPFjH6kuAOY4F98z1FVW18X+igwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzMwNTZDNUYxNTdBN0U3NTEyRkMzMDZFRkVERUY5MkZE
MTJDNDdGMTAeFw0yNjA3MjgyMTU5NTlaFw0yNjA3MjkyMzAzNTlaMDMxMTAvBgNV
BAMTKDg0QTQwNUVDNDQzNTU4RDRCQzE0RUIzNTIzREQ4RkY5MDk2NzU3Q0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI/nt3wLtg2KmVHn9r9GtbJz2H
cbgCHtO2NbuyUkSKHLwrVUZ6KepPXeqIboqDJS2iy8wvKQml9z7bZ/TcLPO+cHO7
3UHsjxSVOI0H0U7KrjSND9C7UsrVIJeXfDdUU9HvzwtXiPrn6diJ9RB2Bl/x5WJq
TAiVH5pC7DpLK9egHtoNyN3YdvD5Cu6C5TQcfAtj8ywcA43TEWf4tGA7BhgIwSNw
A6DkaAUF96mAbPLsOE2PUz12yIXWa12mZhyz/IfXRu/IBVOHSe5ucegbTAwMvNq6
Rxse5eqFhG2xUqzDe7inGmpYc6q6ZnGIjic1SK8Rgrf0mhku3y+WGL7W9mTNAgMB
AAGjggHyMIIB7jAdBgNVHQ4EFgQUhKQF7EQ1WNS8FOs1I92P+QlnV8swHwYDVR0j
BBgwFoAUwwVsXxV6fnUS/DBu/t75L9EsR/EwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud
HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVkVSWUZB
U1QvMS9DMzA1NkM1RjE1N0E3RTc1MTJGQzMwNkVGRURFRjkyRkQxMkM0N0YxLmNy
bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3
bmljLnR3L3Jwa2kvVFdOSUNDQS8wL0MzMDU2QzVGMTU3QTdFNzUxMkZDMzA2RUZF
REVGOTJGRDEyQzQ3RjEuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU
cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9WRVJZRkFTVC8xL0MzMDU2QzVG
MTU3QTdFNzUxMkZDMzA2RUZFREVGOTJGRDEyQzQ3RjEubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAzgCxY
mWt0cLiDjJ2LQW053K5XsR1tSux4SMxtik7IvYhmTWqNWSkfqQWQhve/7WGA2Qwh
O/sEV79v+p+1V9IG2Af2uXcbJWajr677sJJklI4DHC6uGAr/ltg6aUoKYG3OW8rj
PUA61dPBI1fLTNNjghsw2v7DA9XTifZ8wRof7E1ZfAKE1o4trU58wMNjvQthhz+0
WvwtgXb59hKVjBUlyP57HGy1y7gFg/TW3Ua1qwo9KZp42OwAHn2kFiJUighBj2zb
B84jYnNdghFEnFWXQlrRG1v18i0yOOm0Vmg7pNKQTEcJp7beq4nkabqkYvBTMa17
xwRZ/Eh/nLWnNHAG
-----END CERTIFICATE-----
Generated at Wed Jul 29 11:10:07 2026 by rpki-client