
$ rpki-client -vvvf rpkica.twnic.tw/rpki/VERYFAST/1/C3056C5F157A7E7512FC306EFEDEF92FD12C47F1.mft
File: C3056C5F157A7E7512FC306EFEDEF92FD12C47F1.mft (raw, json)
Hash identifier: HgwN9n991YZccUs9bYr1I9Ki+rMkDwQ9DO2XyjbtZL8=
Subject key identifier: 83:CA:0A:53:B8:38:06:E3:62:0F:38:14:C3:1D:7D:9B:B4:83:29:75
Authority key identifier: C3:05:6C:5F:15:7A:7E:75:12:FC:30:6E:FE:DE:F9:2F:D1:2C:47:F1
Certificate issuer: /CN=C3056C5F157A7E7512FC306EFEDEF92FD12C47F1
Certificate serial: 37E9F42F7DD104B6E5F072AF1A49395E27485DC8
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3056C5F157A7E7512FC306EFEDEF92FD12C47F1.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/VERYFAST/1/C3056C5F157A7E7512FC306EFEDEF92FD12C47F1.mft
Manifest number: FB
Signing time: Tue 10 Nov 2026 02:32:08 +0000
Manifest this update: Tue 10 Nov 2026 02:27:08 +0000
Manifest next update: Wed 11 Nov 2026 06:24:08 +0000
Files and hashes: 1: 3136312e3234382e34342e302f32332d3332203d3e20313532363139.roa (hash: 4MovYHgGqWQdyUO1Av8kBHVSUNdImBmxnWEFbBFEyVc=)
2: C3056C5F157A7E7512FC306EFEDEF92FD12C47F1.crl (hash: FHz5MnQoS4uAR3laSTwGhZe7MbQuHLWFrlcHM6IqmN0=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/VERYFAST/1/C3056C5F157A7E7512FC306EFEDEF92FD12C47F1.crl
rsync://rpkica.twnic.tw/rpki/VERYFAST/1/C3056C5F157A7E7512FC306EFEDEF92FD12C47F1.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3056C5F157A7E7512FC306EFEDEF92FD12C47F1.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 11 Nov 2026 06:24:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:e9:f4:2f:7d:d1:04:b6:e5:f0:72:af:1a:49:39:5e:27:48:5d:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3056C5F157A7E7512FC306EFEDEF92FD12C47F1
Validity
Not Before: Nov 10 02:27:08 2026 GMT
Not After : Nov 11 06:24:08 2026 GMT
Subject: CN=83CA0A53B83806E3620F3814C31D7D9BB4832975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ce:de:0b:ec:27:71:80:79:0f:39:b2:8f:e7:
84:90:03:82:72:7b:97:03:bb:e9:44:48:01:f8:69:
1e:30:bc:53:bc:68:4a:7e:af:4e:d3:70:0c:dd:fe:
5c:8f:b8:77:12:82:54:ff:06:c4:49:c7:d8:f0:7e:
ee:5d:98:6c:12:3c:0d:1a:69:73:d7:52:9a:c8:7c:
76:c9:84:e7:2d:28:39:17:39:c1:db:22:3c:11:18:
4c:f1:cb:a2:b3:09:9a:39:24:2f:84:c6:59:91:ef:
e5:6d:2f:73:6b:18:0a:ad:20:02:bf:d2:4d:fa:82:
fd:16:85:13:81:e1:5d:0a:8d:34:b4:12:64:b4:4b:
c9:4b:60:8c:54:c5:a0:8f:c9:db:3b:41:f8:59:e5:
e3:e1:d9:6f:bc:23:ff:2d:64:65:82:fc:11:47:95:
1f:fa:c0:c9:0f:5e:6c:02:47:01:03:bd:21:19:de:
a6:2b:c1:e7:39:12:a9:7d:15:63:15:61:30:fb:cc:
b8:2c:0e:62:90:4e:20:91:68:bd:36:ab:81:3b:fb:
c2:c0:9f:2d:f8:17:5f:42:1d:34:80:c6:8d:e2:dc:
cf:d3:50:72:57:08:59:8e:1d:5e:22:4e:1f:9b:84:
31:23:a9:ee:37:4d:de:e0:f8:b8:8e:bc:1d:40:9f:
dd:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:CA:0A:53:B8:38:06:E3:62:0F:38:14:C3:1D:7D:9B:B4:83:29:75
X509v3 Authority Key Identifier:
keyid:C3:05:6C:5F:15:7A:7E:75:12:FC:30:6E:FE:DE:F9:2F:D1:2C:47:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/VERYFAST/1/C3056C5F157A7E7512FC306EFEDEF92FD12C47F1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3056C5F157A7E7512FC306EFEDEF92FD12C47F1.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VERYFAST/1/C3056C5F157A7E7512FC306EFEDEF92FD12C47F1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:6e:d5:53:30:fa:a2:6d:c4:13:73:90:38:c9:dc:b9:29:f4:
af:88:36:37:f7:20:34:94:ef:ed:0d:f9:3a:81:e8:a4:76:a3:
6d:6c:81:c1:7c:7d:8c:16:17:17:cd:9e:ed:74:f7:fb:82:04:
5f:16:b6:31:fc:07:fb:26:0c:ed:19:7b:5c:52:ea:cc:92:96:
a4:9e:f6:bf:f7:cb:8e:20:cf:c3:b5:fb:5f:cc:cd:1d:0e:18:
a9:11:57:a4:0f:17:38:4d:2a:b7:2e:2a:89:f6:fb:e7:2d:9b:
c6:2c:eb:fc:c1:88:ab:00:4e:57:81:53:10:7d:e2:0d:06:66:
69:20:a9:41:17:a7:1e:34:12:9d:41:28:d3:e9:d8:31:62:c2:
fc:b2:bb:fb:eb:03:eb:fe:6c:dc:8f:bc:5c:b5:09:0d:a7:11:
4c:ae:9f:b1:81:c4:82:0f:f3:3e:ed:1b:62:5b:14:85:aa:10:
12:06:65:6e:4b:3d:b6:a5:6d:2c:b0:cf:89:70:6c:a9:e9:f7:
a6:84:41:43:a9:45:f7:10:a5:31:f6:27:2b:44:09:17:46:92:
d0:e8:ff:bf:e2:9f:ae:2d:3b:92:30:2e:a9:8c:84:71:f1:5b:
97:2a:d1:5b:cb:65:a4:1f:d4:38:88:7d:1f:8b:d9:6d:e2:b3:
a3:ae:f6:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 14:01:15 2026 by rpki-client