
$ rpki-client -vvvf rpkica.twnic.tw/rpki/IMCRS/0/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.mft
File: A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.mft (raw, json)
Hash identifier: eFATHzNoJvLw5ZWy7UfVqtkQjRwLaojYa4T+HSQsmUg=
Subject key identifier: 54:6E:79:EC:8A:0D:91:BF:D0:04:B5:18:7C:B6:34:BB:74:82:C3:28
Authority key identifier: A7:82:7E:4E:53:BA:51:7B:BC:5C:79:8C:F0:D3:AF:87:03:75:C0:B0
Certificate issuer: /CN=A7827E4E53BA517BBC5C798CF0D3AF870375C0B0
Certificate serial: 6184B08B57F4352B91B368826B13190FB37AD883
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/IMCRS/0/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.mft
Manifest number: BD
Signing time: Thu 24 Sep 2026 03:56:22 +0000
Manifest this update: Thu 24 Sep 2026 03:51:22 +0000
Manifest next update: Fri 25 Sep 2026 05:06:22 +0000
Files and hashes: 1: A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.crl (hash: MBhejyZOIsNPFZUKyU+Kr4FRqFix7Wg+0l16fr6R54I=)
2: 3130332e3137372e33322e302f32342d3234203d3e20323133363037.roa (hash: cQkjcrDW6Cw958N6gtJjxyd/adphXQyJjpPcfgZ5xG4=)
3: 3130332e3232372e3232352e302f32342d3234203d3e20313438393936.roa (hash: 3Fs3YXCHVhPim686QjSLVypvleRfB5cNa4r0sVni22s=)
4: 3130332e3232372e3232342e302f32342d3234203d3e20313438393936.roa (hash: qkqrj9/N2V1M+ri4JRAjh2Xtl5l0eXftPC6OL0jPaCQ=)
5: 3130332e3232372e3232342e302f32332d3234203d3e20313438393936.roa (hash: Pe+GfCAU9CJUhyX0GcmCiKMiXy/uVxymKcKinAclsuQ=)
6: 3130332e3137372e33322e302f32342d3234203d3e20323134343332.roa (hash: 2YaoD0V9MTmYaytjBdN3g/2JltFPIOscJRsxuw7e/EQ=)
7: 3130332e3137372e33322e302f32332d3234203d3e203338303432.roa (hash: xPDyINdFmufQbNbHGWy0zvLscglHenPHYxlwfT+v00s=)
8: 3130332e3232372e3232342e302f32332d3234203d3e20313334383233.roa (hash: GuzN1ophfvX5EgHLKpJRkwlqpD4JGNW35OZ+ZCoqD78=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/IMCRS/0/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.crl
rsync://rpkica.twnic.tw/rpki/IMCRS/0/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 02:19:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:84:b0:8b:57:f4:35:2b:91:b3:68:82:6b:13:19:0f:b3:7a:d8:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A7827E4E53BA517BBC5C798CF0D3AF870375C0B0
Validity
Not Before: Sep 24 03:51:22 2026 GMT
Not After : Sep 25 05:06:22 2026 GMT
Subject: CN=546E79EC8A0D91BFD004B5187CB634BB7482C328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2b:e9:86:9f:33:61:d0:13:16:62:29:bc:b0:
d4:94:ab:59:6a:8e:d0:d7:81:44:87:55:f7:1b:ce:
79:5b:38:90:54:ce:6f:84:cb:a8:14:fb:c1:4c:9f:
2d:10:8d:fe:12:7f:1b:91:e0:a5:88:17:8f:82:22:
af:ee:e1:c8:31:1a:7c:0f:fb:a2:b0:2f:08:11:06:
c2:ea:84:48:b5:48:1f:51:2b:e1:cc:80:5c:70:ab:
c9:1e:41:b2:2e:24:db:fa:76:53:e0:74:60:ba:37:
5c:c1:a2:d4:79:13:00:31:d5:7f:c4:75:d9:7d:b9:
12:9b:5d:14:11:55:e5:0b:59:c2:e7:e7:56:e7:bd:
1d:bd:a5:66:24:f2:02:cb:0f:96:d6:e3:95:59:79:
6b:fd:44:95:0f:2f:86:00:75:21:af:9b:af:cc:10:
6e:5d:f3:48:e3:e3:bc:c8:57:2f:65:e0:f6:bb:a3:
cd:37:da:d8:09:ad:3b:a5:a2:66:bf:d0:b8:9e:20:
77:f4:a9:7f:9a:33:84:e9:d9:2f:6f:87:20:8d:cd:
36:b2:7b:54:0f:f3:79:fb:23:43:2b:2b:27:d1:27:
fb:ee:a7:fb:b0:03:34:ce:da:87:f1:cc:1e:b0:a2:
52:56:06:93:f4:78:13:7a:9a:f9:9f:28:64:c7:a3:
b4:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:6E:79:EC:8A:0D:91:BF:D0:04:B5:18:7C:B6:34:BB:74:82:C3:28
X509v3 Authority Key Identifier:
keyid:A7:82:7E:4E:53:BA:51:7B:BC:5C:79:8C:F0:D3:AF:87:03:75:C0:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/IMCRS/0/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/IMCRS/0/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:10:53:cc:9f:2b:c8:d3:a5:68:ec:9f:73:7f:59:6a:fe:2b:
1f:a8:d3:8a:07:f4:3d:28:f2:56:9b:af:65:1d:cd:6d:8a:77:
30:b7:00:36:4c:97:91:6d:d3:e7:5d:b9:bc:5e:50:e1:c0:be:
a3:73:6f:70:95:ba:92:7c:da:9e:54:9c:85:ac:4e:b1:06:51:
b0:94:69:37:23:a7:ac:8f:7a:2e:ae:2f:f8:b2:a2:42:6f:eb:
93:3e:9a:d7:a4:95:da:f8:c5:e7:60:5e:91:61:45:ae:62:2c:
00:61:52:4a:38:7b:7d:cb:ba:75:01:1e:1c:65:83:f0:67:11:
5f:20:a1:32:00:15:82:06:83:61:34:72:9c:a8:8a:00:94:00:
f8:f5:1d:16:40:2f:5c:90:0b:f3:fe:07:8a:07:c9:08:cb:34:
24:f6:20:33:c7:47:a7:3b:f2:8d:39:d1:98:01:57:06:c2:10:
69:82:ec:9e:9b:03:be:ce:16:aa:14:51:fa:3f:6b:7a:67:36:
e4:30:42:fa:96:24:e7:9f:32:8b:b4:93:8c:84:c9:e7:ed:c9:
2a:06:88:a0:d3:ea:21:2d:66:c1:55:d8:02:ff:1b:38:00:aa:
77:0b:91:22:5c:89:ef:35:4b:c5:ab:c9:c7:49:cb:2d:fa:a0:
58:f5:2c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:40:55 2026 by rpki-client