
$ rpki-client -vvvf rpkica.twnic.tw/rpki/BWIZ/0/71CDDF623ABCE39F41FB6AAC19F81E91F9AD6911.mft
File: 71CDDF623ABCE39F41FB6AAC19F81E91F9AD6911.mft (raw, json)
Hash identifier: T7mkiumhrne5WgKawFMApz8eqp6ky2Wcnq9KKNeKhJI=
Subject key identifier: 28:00:9F:B1:4B:CE:39:3D:0A:84:02:01:46:C0:A3:32:4C:2E:F9:72
Authority key identifier: 71:CD:DF:62:3A:BC:E3:9F:41:FB:6A:AC:19:F8:1E:91:F9:AD:69:11
Certificate issuer: /CN=71CDDF623ABCE39F41FB6AAC19F81E91F9AD6911
Certificate serial: 7AF1ED9A3A9F13A30065F902A8D6C7271400EDF8
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/71CDDF623ABCE39F41FB6AAC19F81E91F9AD6911.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/BWIZ/0/71CDDF623ABCE39F41FB6AAC19F81E91F9AD6911.mft
Manifest number: B7
Signing time: Fri 25 Sep 2026 06:42:12 +0000
Manifest this update: Fri 25 Sep 2026 06:37:12 +0000
Manifest next update: Sat 26 Sep 2026 08:29:12 +0000
Files and hashes: 1: 36312e35372e3234302e302f32302d3234203d3e203138343135.roa (hash: dB5hiO5nyANYzeAWgeX1ND73H/9m/AUcozE5q3e2mrA=)
2: 71CDDF623ABCE39F41FB6AAC19F81E91F9AD6911.crl (hash: efLJWJVTnMNnkl4zLP8SOS4CpVNzVdPud7bycaKTxoA=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/BWIZ/0/71CDDF623ABCE39F41FB6AAC19F81E91F9AD6911.crl
rsync://rpkica.twnic.tw/rpki/BWIZ/0/71CDDF623ABCE39F41FB6AAC19F81E91F9AD6911.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/71CDDF623ABCE39F41FB6AAC19F81E91F9AD6911.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 21:19:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:f1:ed:9a:3a:9f:13:a3:00:65:f9:02:a8:d6:c7:27:14:00:ed:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71CDDF623ABCE39F41FB6AAC19F81E91F9AD6911
Validity
Not Before: Sep 25 06:37:12 2026 GMT
Not After : Sep 26 08:29:12 2026 GMT
Subject: CN=28009FB14BCE393D0A84020146C0A3324C2EF972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:bf:17:da:3e:dc:25:8d:40:63:bb:b7:d5:df:
94:a5:ac:4a:89:fc:b3:9d:4a:36:e8:e7:de:a6:2a:
17:3f:d1:0d:e3:07:9f:46:00:83:9e:89:86:30:f7:
25:b4:ff:ae:9b:f0:29:64:7d:79:4f:9e:50:66:50:
95:fc:54:05:0b:99:b1:f4:59:80:65:cd:ee:1b:61:
24:0b:6b:27:e6:41:08:bc:e6:c4:9c:19:cb:a7:b3:
d9:f3:7c:b0:dc:eb:98:59:17:2b:3a:5f:c2:81:58:
6a:4f:d5:36:fd:9e:6c:42:80:b1:2f:fb:8e:7c:84:
de:4a:8a:fa:28:c6:0b:62:14:4c:20:c5:4a:5a:2e:
ac:fa:1f:5f:83:ab:cf:c2:22:2b:45:da:2b:32:42:
35:95:34:9e:0c:89:32:32:4e:bc:09:c2:b6:e4:7d:
89:bf:a6:14:4d:c7:58:91:2e:ab:17:ec:6b:02:40:
4f:c6:7d:ab:54:4e:82:56:7a:b9:7e:1d:7a:22:b5:
7b:c5:27:6a:89:34:86:34:dd:22:ee:9e:96:5d:31:
2a:26:31:a1:42:58:c2:4a:16:c4:e9:82:77:c7:0b:
43:41:25:96:49:a6:2a:ad:ef:4a:76:86:bd:6c:7f:
02:24:a2:f2:28:3b:31:f1:d4:a0:38:30:20:c1:4f:
63:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:00:9F:B1:4B:CE:39:3D:0A:84:02:01:46:C0:A3:32:4C:2E:F9:72
X509v3 Authority Key Identifier:
keyid:71:CD:DF:62:3A:BC:E3:9F:41:FB:6A:AC:19:F8:1E:91:F9:AD:69:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/BWIZ/0/71CDDF623ABCE39F41FB6AAC19F81E91F9AD6911.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/71CDDF623ABCE39F41FB6AAC19F81E91F9AD6911.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/BWIZ/0/71CDDF623ABCE39F41FB6AAC19F81E91F9AD6911.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:a9:dc:df:cf:c0:92:43:dc:b0:d6:24:d6:c2:44:19:ce:4d:
ee:a2:9e:28:b2:b9:41:3a:4d:e1:10:4a:e5:cf:22:46:09:b6:
fd:fd:16:b0:e0:7e:27:ad:82:71:09:2d:7f:d5:ba:61:87:eb:
54:19:5e:c0:14:01:6c:73:f0:8a:5a:0d:4f:7b:2d:bf:a9:61:
52:31:17:85:c3:81:9b:da:8d:e0:59:ab:53:d4:64:fb:59:3e:
67:38:3d:fe:ac:1e:05:db:fc:5e:1f:ee:ad:68:4c:de:fb:11:
28:3a:15:4f:aa:5f:ae:59:15:e7:0c:bf:b1:29:83:b6:38:f9:
76:c5:e0:37:51:ae:45:0b:15:df:9b:9d:a4:7e:a8:e6:91:1f:
69:86:fe:b6:2f:ba:ec:83:46:f2:8e:46:8c:94:15:51:f2:4e:
2e:c9:4d:f2:cf:49:69:b2:40:bc:f2:1f:72:db:58:2d:7f:1b:
c3:25:ab:da:22:e9:f2:3a:ee:ec:54:50:63:b2:ae:6e:d7:04:
5c:7d:80:c9:6a:d8:f9:1d:09:b4:3f:c1:3b:3a:cb:fb:22:92:
65:ce:ba:4a:e5:d3:e3:15:52:f2:41:59:98:e7:3a:0d:2a:09:
43:ca:b9:22:f6:9d:19:67:4a:aa:b3:25:5a:6b:b7:d9:b4:b4:
1a:dc:3b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:45:17 2026 by rpki-client