
$ rpki-client -vvvf rpkica.twnic.tw/rpki/AIRPAYTW/0/631CA9A6A071EAA65C6D0F9D7533EB8A718E7C74.mft
File: 631CA9A6A071EAA65C6D0F9D7533EB8A718E7C74.mft (raw, json)
Hash identifier: P6mopbElp2J6cfTW6Wv8hz281YlN6RL2Zsy/mWwasdU=
Subject key identifier: 05:64:CA:A4:60:E8:6D:E7:01:03:83:86:8D:6A:BE:28:2D:77:5C:11
Authority key identifier: 63:1C:A9:A6:A0:71:EA:A6:5C:6D:0F:9D:75:33:EB:8A:71:8E:7C:74
Certificate issuer: /CN=631CA9A6A071EAA65C6D0F9D7533EB8A718E7C74
Certificate serial: 680A240B69AA0B4A8A759482AA86D2F1EA25C0A3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/631CA9A6A071EAA65C6D0F9D7533EB8A718E7C74.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/AIRPAYTW/0/631CA9A6A071EAA65C6D0F9D7533EB8A718E7C74.mft
Manifest number: C2
Signing time: Fri 02 Oct 2026 07:16:02 +0000
Manifest this update: Fri 02 Oct 2026 07:11:02 +0000
Manifest next update: Sat 03 Oct 2026 07:37:02 +0000
Files and hashes: 1: 3130332e3132372e3233322e302f32322d3234203d3e20313331363335.roa (hash: J7DWwSASsdA8dD64JOz4sh4t2+e29R0X4AQ/z1Utjq8=)
2: 631CA9A6A071EAA65C6D0F9D7533EB8A718E7C74.crl (hash: t+KJ7RcjhCcIr7UHd9R4gNAlhIQuRztPs6cTh60sasQ=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/AIRPAYTW/0/631CA9A6A071EAA65C6D0F9D7533EB8A718E7C74.crl
rsync://rpkica.twnic.tw/rpki/AIRPAYTW/0/631CA9A6A071EAA65C6D0F9D7533EB8A718E7C74.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/631CA9A6A071EAA65C6D0F9D7533EB8A718E7C74.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 07:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:0a:24:0b:69:aa:0b:4a:8a:75:94:82:aa:86:d2:f1:ea:25:c0:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=631CA9A6A071EAA65C6D0F9D7533EB8A718E7C74
Validity
Not Before: Oct 2 07:11:02 2026 GMT
Not After : Oct 3 07:37:02 2026 GMT
Subject: CN=0564CAA460E86DE7010383868D6ABE282D775C11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ec:4d:c7:d1:f3:c7:4c:0e:76:ad:30:14:c7:
9d:b5:b5:71:37:98:49:de:55:03:0b:b8:35:d2:12:
65:56:6c:74:b9:d6:41:22:e1:ab:6c:1a:7b:2f:b7:
6a:3d:17:4e:3c:30:56:1b:bd:46:d4:80:bc:0c:8f:
a9:bf:30:3d:c0:62:71:ae:35:3e:32:83:de:7b:5a:
da:11:91:7f:c0:d5:86:23:5b:49:b2:6f:f7:13:c8:
d7:97:f1:f4:0c:71:19:fc:f7:f6:90:41:b9:42:1d:
c7:45:fa:97:21:61:72:d4:aa:18:a5:c8:d4:20:1e:
4b:11:57:d3:96:4d:be:27:45:d8:40:f1:9f:a0:38:
a2:31:99:b4:b7:79:c6:d8:25:c3:33:a6:7b:28:d9:
31:39:c3:b6:cd:d0:bd:17:a0:9f:33:06:f0:e7:1d:
99:2d:d6:53:c8:cf:b1:d3:df:05:17:88:90:08:ed:
e4:c4:19:19:09:f0:e4:55:fb:b5:c3:20:f0:a4:cc:
cc:d8:93:40:9d:a9:2f:23:4c:62:db:c1:0c:9f:22:
2f:39:21:04:33:0b:2d:59:e2:56:1f:77:d8:bb:ae:
c3:79:52:7f:7d:6c:29:68:04:da:7c:39:ec:02:8e:
62:17:4c:2f:e4:a6:bd:3e:9a:63:8e:12:af:89:be:
7b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:64:CA:A4:60:E8:6D:E7:01:03:83:86:8D:6A:BE:28:2D:77:5C:11
X509v3 Authority Key Identifier:
keyid:63:1C:A9:A6:A0:71:EA:A6:5C:6D:0F:9D:75:33:EB:8A:71:8E:7C:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/AIRPAYTW/0/631CA9A6A071EAA65C6D0F9D7533EB8A718E7C74.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/631CA9A6A071EAA65C6D0F9D7533EB8A718E7C74.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/AIRPAYTW/0/631CA9A6A071EAA65C6D0F9D7533EB8A718E7C74.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:35:e0:c6:f4:1c:5b:eb:88:86:58:50:d9:a9:64:43:fa:92:
e4:9c:a8:0b:08:2a:b4:d2:48:3c:18:d9:06:cd:ff:f9:22:52:
d6:67:d6:8c:cc:e2:93:a5:13:de:15:a4:42:26:09:5b:34:3b:
e3:65:2b:c2:c7:55:af:22:c9:aa:40:76:71:a7:55:1e:2f:aa:
f6:09:c8:0f:e7:de:93:6c:8f:58:12:4d:e3:27:99:01:bd:d4:
a1:64:8a:3e:6a:c7:ef:95:cc:09:2e:05:91:64:19:3d:bb:e6:
ce:b7:c8:f7:f9:3b:bb:e4:16:09:05:c9:16:2f:7d:00:82:5c:
8a:82:4d:eb:65:61:dc:8e:ee:ed:df:43:dd:5f:46:bb:16:84:
30:71:a3:5e:c5:cc:95:f3:d8:9e:df:81:8e:08:87:7a:e9:35:
41:0c:ad:3b:8b:0f:54:8d:2e:da:18:4f:fd:c0:f8:1e:08:97:
cc:aa:1c:73:81:ce:d8:04:6d:92:58:0f:02:eb:03:ad:99:1c:
61:0c:69:b4:09:a0:12:90:82:31:e8:eb:c8:6f:3f:e1:cc:f1:
41:92:c0:ec:c0:11:56:a5:c9:41:7f:10:07:9e:03:35:2e:c4:
71:58:89:8f:58:ae:db:b2:66:66:a8:a0:38:13:75:a2:9b:4b:
32:c8:76:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 17:45:07 2026 by rpki-client