
$ rpki-client -vvf rpkica.twnic.tw/rpki/CENTROID/0/8B6578CFFA2564370C947633B4222B38FBE04787.mft
File: 8B6578CFFA2564370C947633B4222B38FBE04787.mft (raw, json)
Hash identifier: YvHMQJEciyT76ECAnBf4fDA5Zilsh/2yfhj/pF9Ar64=
Subject key identifier: 3B:C0:74:C2:7C:84:95:9D:04:73:4D:E5:73:F5:3D:1D:3B:11:5A:52
Authority key identifier: 8B:65:78:CF:FA:25:64:37:0C:94:76:33:B4:22:2B:38:FB:E0:47:87
Certificate issuer: /CN=8B6578CFFA2564370C947633B4222B38FBE04787
Certificate serial: 74614655B7FF682B339C444D1C41445E63CF467E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8B6578CFFA2564370C947633B4222B38FBE04787.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CENTROID/0/8B6578CFFA2564370C947633B4222B38FBE04787.mft
Manifest number: 69
Signing time: Thu 23 Jul 2026 17:21:16 +0000
Manifest this update: Thu 23 Jul 2026 17:16:16 +0000
Manifest next update: Fri 24 Jul 2026 19:55:16 +0000
Files and hashes: 1: 3130332e3130342e3134382e302f32342d3332203d3e20313331363137.roa (hash: 3HCjGtrVeXk0xOR0uuHBiqXc7pJZ9osCCcWRgAc2u0I=)
2: 3130332e3130342e3134392e302f32342d3332203d3e20313331363137.roa (hash: OZwQnvVk4yetwjei/3UcgDl7U/wG9KFLqEYavrhzVlI=)
3: 3130332e3130342e3134382e302f32332d3332203d3e20313338343135.roa (hash: iG/RKgeK0WnHEYeyY7HDeBCF1wwyNY/516KS8KYs4xI=)
4: 8B6578CFFA2564370C947633B4222B38FBE04787.crl (hash: 2gnwize846C/Z1S0+A6Ajxa5EQIZacjKszYp/d2snQA=)
5: 3130332e3130342e3135302e302f32342d3234203d3e20313335323933.roa (hash: h1zDSRZ3TRJlhR+U4wVbJzjHTzTePNMp3oBDSC21x4k=)
6: 3130332e3130342e3135312e302f32342d3234203d3e20313530323838.roa (hash: OVmj6wqpCDoCVGv/wnIQ7J+KG2IP7XidmU+Gbdn+nyQ=)
7: 3130332e3130342e3134382e302f32332d3332203d3e20313331363137.roa (hash: ptYVo8fcmKCNY0SB5M4EFl0tfitQ5lFpdJDuUwWLs1E=)
8: 3130332e3130342e3135312e302f32342d3234203d3e20313331363138.roa (hash: XPIZKI0b+STshE1jyzyv6vzwTCkp1FigGgVTYDae6lY=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/CENTROID/0/8B6578CFFA2564370C947633B4222B38FBE04787.crl
rsync://rpkica.twnic.tw/rpki/CENTROID/0/8B6578CFFA2564370C947633B4222B38FBE04787.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8B6578CFFA2564370C947633B4222B38FBE04787.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 19:55:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:61:46:55:b7:ff:68:2b:33:9c:44:4d:1c:41:44:5e:63:cf:46:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8B6578CFFA2564370C947633B4222B38FBE04787
Validity
Not Before: Jul 23 17:16:16 2026 GMT
Not After : Jul 24 19:55:16 2026 GMT
Subject: CN=3BC074C27C84959D04734DE573F53D1D3B115A52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:80:ec:c0:1c:ad:2a:22:e8:3e:ec:f1:4b:af:
72:72:dc:16:cf:6c:b7:f9:76:24:20:86:0d:36:75:
8d:82:1f:bf:e3:63:92:c3:35:72:7f:da:25:0c:ab:
f0:af:0e:7c:69:01:88:8b:e6:3d:ea:f5:74:d6:0f:
d4:77:ed:fa:82:f2:53:5b:82:6a:25:e0:e6:ec:53:
fb:a4:b2:cf:b0:f3:ed:94:16:aa:18:5d:33:c5:41:
1e:ea:d6:ea:c0:b8:b1:1f:ef:00:c0:4b:41:94:1d:
7c:76:5e:41:08:b8:35:ee:53:53:33:35:28:8a:13:
e9:61:f6:94:d6:c7:75:fc:98:19:a4:31:65:5f:5e:
87:f5:4f:d9:e8:e3:88:b3:a0:76:ae:fc:75:7c:2b:
08:37:46:b0:e2:8b:29:9c:53:29:b3:41:cd:54:45:
0f:86:3b:74:e5:e2:cd:33:14:46:39:69:c7:c1:bb:
12:bc:81:c6:a4:77:b1:1e:40:08:b1:9f:f4:29:77:
8a:e1:6b:c1:ca:0c:66:75:f9:ce:c8:2e:b9:e5:33:
fd:82:2f:7b:9d:d2:22:8d:f9:4e:ec:89:73:95:47:
80:47:70:e8:5f:f6:84:5d:d1:c9:e7:9a:ac:b4:5d:
86:bb:00:75:d9:2f:2e:63:c0:dc:c1:53:cf:56:9f:
5d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:C0:74:C2:7C:84:95:9D:04:73:4D:E5:73:F5:3D:1D:3B:11:5A:52
X509v3 Authority Key Identifier:
keyid:8B:65:78:CF:FA:25:64:37:0C:94:76:33:B4:22:2B:38:FB:E0:47:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CENTROID/0/8B6578CFFA2564370C947633B4222B38FBE04787.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8B6578CFFA2564370C947633B4222B38FBE04787.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CENTROID/0/8B6578CFFA2564370C947633B4222B38FBE04787.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:2f:b6:e6:60:e6:e3:01:89:87:72:1d:f6:1b:18:7e:d1:02:
e4:40:0a:f8:5a:0c:b3:45:89:2c:13:52:f7:67:ee:11:08:59:
cb:74:84:83:98:a2:6d:9b:1d:87:93:6c:65:23:8b:b0:db:c1:
15:4f:b8:bb:36:0d:06:3b:2d:3c:50:66:d1:77:2f:61:58:21:
43:e8:e6:83:69:8b:5a:30:18:04:d2:1c:dc:46:10:12:10:2b:
06:2b:b8:9e:d4:1a:5a:a9:b1:f7:e1:3b:b4:20:43:f8:f3:50:
24:4a:15:f9:0b:f1:3d:c1:20:a1:73:66:2c:56:07:64:c3:bd:
7e:19:57:86:a6:79:8d:58:3b:3b:2f:00:22:06:15:5f:d5:aa:
03:dc:1d:60:16:d8:af:fc:5f:5f:53:72:21:d7:8e:ca:3b:8b:
c3:aa:95:30:43:a8:f6:c5:ee:26:c9:1d:fd:1d:24:5f:14:e9:
a7:a9:6f:ca:40:e9:11:c6:ea:66:46:22:2e:aa:a1:d3:bf:1b:
8e:b5:97:b4:29:ef:e8:8a:01:77:1d:f9:5e:6b:06:8f:17:c3:
c1:b0:3a:5b:69:aa:ad:94:85:43:e9:36:d3:6f:a3:62:ab:e7:
8c:0d:01:08:d2:05:ea:b3:d9:e3:c3:2f:fc:11:9e:ec:f0:6c:
76:ab:f7:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:33:38 2026 by rpki-client