
$ rpki-client -vvvf rpkica.twnic.tw/rpki/CATVISP/0/F1F518BDB5085DA9DAA281C529D23491A72DA248.mft
File: F1F518BDB5085DA9DAA281C529D23491A72DA248.mft (raw, json)
Hash identifier: PSLTpNxaJXL2+NigFwS4vsxu1yAXb6un85BqeHH1EeA=
Subject key identifier: 95:CC:83:AF:B2:8F:F8:9F:07:EA:12:36:71:40:B9:77:F8:25:CE:95
Authority key identifier: F1:F5:18:BD:B5:08:5D:A9:DA:A2:81:C5:29:D2:34:91:A7:2D:A2:48
Certificate issuer: /CN=F1F518BDB5085DA9DAA281C529D23491A72DA248
Certificate serial: 75F62D84306CDB07723381DA965EDE7ABA5CD862
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F1F518BDB5085DA9DAA281C529D23491A72DA248.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CATVISP/0/F1F518BDB5085DA9DAA281C529D23491A72DA248.mft
Manifest number: B8
Signing time: Wed 23 Sep 2026 21:02:38 +0000
Manifest this update: Wed 23 Sep 2026 20:57:38 +0000
Manifest next update: Thu 24 Sep 2026 23:40:38 +0000
Files and hashes: 1: 3130332e3233332e36382e302f32322d3234203d3e20313331363733.roa (hash: IQqTvMCBIJY6Msoqpe6u+k/x2PQIXfWBUEMY1IOks9o=)
2: 3130332e3233332e36382e302f32322d3234203d3e203138303436.roa (hash: ORpDWMmcXvXNpOQL2dVJ9nUGlzM0OrO03KuyZerYMOU=)
3: 34332e3234382e31362e302f32322d3234203d3e203138303436.roa (hash: xJeTRYFTpaj0Hh3mWQfQMb0S7i3UbraCF9VeCrKQmyI=)
4: F1F518BDB5085DA9DAA281C529D23491A72DA248.crl (hash: X1IoASUF3FwSe+O5mXfa1zETjnCqFvlRuJS401pQFj0=)
5: 34332e3234382e31362e302f32322d3234203d3e20313331363733.roa (hash: yT6GkUFctFjsYfjkimVCCoYgqHwh9a8wPuU6HRbCaVY=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/CATVISP/0/F1F518BDB5085DA9DAA281C529D23491A72DA248.crl
rsync://rpkica.twnic.tw/rpki/CATVISP/0/F1F518BDB5085DA9DAA281C529D23491A72DA248.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F1F518BDB5085DA9DAA281C529D23491A72DA248.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:40:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:f6:2d:84:30:6c:db:07:72:33:81:da:96:5e:de:7a:ba:5c:d8:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F1F518BDB5085DA9DAA281C529D23491A72DA248
Validity
Not Before: Sep 23 20:57:38 2026 GMT
Not After : Sep 24 23:40:38 2026 GMT
Subject: CN=95CC83AFB28FF89F07EA12367140B977F825CE95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b9:77:2d:15:85:dd:5a:97:9a:e4:26:f6:29:
bb:b0:2d:c4:82:68:3c:8e:50:a2:6d:e9:8d:02:e2:
37:24:71:20:d1:99:67:85:d1:e8:62:ea:54:9a:b6:
a5:10:68:89:5c:88:d8:b9:22:0d:b8:fe:11:d3:9e:
b8:ad:f9:00:19:9c:d2:77:ea:04:91:3e:52:e9:ae:
a7:4c:8e:8d:74:20:0b:21:35:7c:b4:54:4d:04:dc:
92:8b:b4:a0:e6:d6:95:52:64:26:03:e7:05:ad:8a:
a7:23:b7:58:5e:a1:b4:8c:6c:10:28:17:13:b5:5d:
36:56:35:4f:ba:ed:65:21:9c:bb:32:61:78:08:26:
e0:b0:3a:2a:46:ee:4a:67:83:2a:5f:08:53:98:51:
69:db:76:39:f4:b6:e4:84:cc:d2:3f:27:43:46:2a:
ef:44:b2:15:d3:5d:f6:fa:04:dc:96:e9:4a:1a:ab:
41:49:eb:9a:1a:1e:f6:d1:20:a5:ff:5c:e6:0e:dd:
75:36:8b:12:92:ea:b5:13:3a:db:c6:ba:ed:3b:29:
11:ee:24:96:10:b9:ad:f0:d2:ec:92:05:e1:1e:d4:
07:29:59:9e:ed:de:b4:95:4e:8b:a6:58:38:8b:dc:
be:89:c3:ca:f8:a3:14:0a:e1:79:7f:1d:56:6f:f4:
77:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:CC:83:AF:B2:8F:F8:9F:07:EA:12:36:71:40:B9:77:F8:25:CE:95
X509v3 Authority Key Identifier:
keyid:F1:F5:18:BD:B5:08:5D:A9:DA:A2:81:C5:29:D2:34:91:A7:2D:A2:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CATVISP/0/F1F518BDB5085DA9DAA281C529D23491A72DA248.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F1F518BDB5085DA9DAA281C529D23491A72DA248.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CATVISP/0/F1F518BDB5085DA9DAA281C529D23491A72DA248.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:6b:a0:98:8b:1c:7e:20:75:cc:44:13:3b:95:5d:ab:87:03:
45:81:9e:f7:ac:64:55:1e:88:20:35:1a:1e:d7:99:c1:75:30:
82:87:a1:80:6c:b4:33:bd:bb:a9:47:50:75:62:6b:48:b3:c9:
86:a8:e4:6f:98:fe:77:56:50:0b:31:3f:37:e2:c3:93:7f:be:
73:79:88:12:ea:ec:b9:28:07:00:29:4a:a7:e6:ac:35:bf:ad:
f7:95:c7:54:22:96:d2:90:85:f2:a1:8d:96:4f:1c:02:c3:68:
45:09:09:0e:02:96:0f:de:64:25:e8:3c:7a:d7:08:e6:c3:66:
ba:10:82:33:2d:3c:9a:d0:0c:04:db:8a:d5:8b:6a:1d:43:5e:
e3:e6:be:ec:4a:cc:cf:86:01:40:9b:b5:9d:68:37:e7:e7:bd:
97:18:7f:ec:9a:ca:6f:24:57:6e:c4:1b:6e:50:e2:25:3e:f7:
34:dd:76:bf:2b:4e:79:7c:5d:14:6d:1c:8c:3b:b3:28:e8:e9:
62:07:23:bf:44:ed:a7:71:ce:1f:ac:04:a6:d3:90:aa:8a:93:
5b:98:3e:1a:e6:1f:24:39:ea:65:01:29:bf:5c:09:49:63:d7:
02:ab:3c:cd:e0:35:8e:64:5d:26:96:50:64:a8:1c:ba:57:19:
d5:39:67:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:24:15 2026 by rpki-client