
$ rpki-client -vvvf rpkica.twnic.tw/rpki/ISHISH/0/D82B42B328967B86227F939C5515F94575F4B06F.mft
File: D82B42B328967B86227F939C5515F94575F4B06F.mft (raw, json)
Hash identifier: fgzn3Z3WDNySR4t3fCWeQupTwLSFybtvKdxg2WApToI=
Subject key identifier: A8:06:F1:A7:EF:4F:4B:9C:00:DB:65:0D:42:1D:53:49:4D:79:A7:84
Authority key identifier: D8:2B:42:B3:28:96:7B:86:22:7F:93:9C:55:15:F9:45:75:F4:B0:6F
Certificate issuer: /CN=D82B42B328967B86227F939C5515F94575F4B06F
Certificate serial: 64534CB86FA1F8448D6D4E0F395AF225FB2CFBC5
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D82B42B328967B86227F939C5515F94575F4B06F.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/ISHISH/0/D82B42B328967B86227F939C5515F94575F4B06F.mft
Manifest number: BA
Signing time: Wed 23 Sep 2026 12:22:50 +0000
Manifest this update: Wed 23 Sep 2026 12:17:50 +0000
Manifest next update: Thu 24 Sep 2026 15:59:50 +0000
Files and hashes: 1: D82B42B328967B86227F939C5515F94575F4B06F.crl (hash: 9PPdTJl38WArhbxmoYfLT8R/VuNRnclkBGANZ+kx92A=)
2: 3130332e3138322e3232362e302f32332d3234203d3e203338303437.roa (hash: ch8TVAmEXCXjUTAuH5nyFd+HdgqLgn/SgJ/gOzlYJJI=)
3: 3130332e3138322e3232362e302f32342d3234203d3e203338303437.roa (hash: 25yex/qT7YxrERGE78pkAh9KYkatXRj3Tu2Yf5HTxNk=)
4: 323430303a356561303a383532613a3a2f34382d3438203d3e203338303437.roa (hash: pFKhsyWHL1AlVyOC8vWZezSMKe3dVHyGr7QtI3wqO1k=)
5: 3130332e3138322e3232372e302f32342d3234203d3e203338303437.roa (hash: nJAddoJePmW+I41VLLi8R/yYga55INaidv/tPytPNOc=)
6: 323430303a356561303a3a2f33322d3438203d3e203338303437.roa (hash: O+ZSz165chMSG9TTTLbDA5gMMFC44YPDzN30YRcNezw=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/ISHISH/0/D82B42B328967B86227F939C5515F94575F4B06F.crl
rsync://rpkica.twnic.tw/rpki/ISHISH/0/D82B42B328967B86227F939C5515F94575F4B06F.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D82B42B328967B86227F939C5515F94575F4B06F.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 15:59:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:53:4c:b8:6f:a1:f8:44:8d:6d:4e:0f:39:5a:f2:25:fb:2c:fb:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D82B42B328967B86227F939C5515F94575F4B06F
Validity
Not Before: Sep 23 12:17:50 2026 GMT
Not After : Sep 24 15:59:50 2026 GMT
Subject: CN=A806F1A7EF4F4B9C00DB650D421D53494D79A784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:2f:f4:f8:cf:dc:cc:19:1a:f8:2f:4d:a4:b8:
9a:dd:c6:e3:6c:67:70:50:c8:74:aa:be:2d:84:0c:
9c:58:1a:ad:86:ea:1a:20:0a:71:71:6c:eb:a5:d8:
1b:1f:82:c3:36:a7:92:e4:59:1a:fd:a7:ae:16:af:
cb:bf:00:26:09:17:64:2d:17:03:90:0b:fd:fb:06:
c6:6f:7b:4c:53:05:c7:fb:49:ff:88:bb:b8:04:13:
ec:03:d3:44:61:64:fb:a7:6d:85:4c:f9:23:e6:6a:
98:92:c2:c4:4b:19:6e:73:ab:07:31:98:04:de:24:
20:26:44:88:21:46:f9:c7:20:6e:c3:67:14:fc:65:
ad:23:e4:3b:9c:a0:78:51:bc:70:ab:45:10:dd:2a:
14:e6:73:a4:08:8a:03:52:5c:8c:93:62:13:2b:ef:
0e:ec:56:f0:72:71:a5:87:48:54:e7:d3:d4:8c:35:
9b:e6:13:46:25:12:3c:61:87:aa:01:e4:c7:c2:ed:
3e:94:d1:42:3c:b8:d6:51:c7:85:23:1f:ea:09:c6:
43:80:17:c8:49:48:97:1a:66:64:b6:c1:d9:b0:cd:
36:e2:e3:50:d1:c4:ac:9d:ea:aa:0e:b3:9a:74:ba:
d8:b6:d6:fa:d8:77:f4:a7:38:db:e6:92:d4:a0:9b:
84:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:06:F1:A7:EF:4F:4B:9C:00:DB:65:0D:42:1D:53:49:4D:79:A7:84
X509v3 Authority Key Identifier:
keyid:D8:2B:42:B3:28:96:7B:86:22:7F:93:9C:55:15:F9:45:75:F4:B0:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/ISHISH/0/D82B42B328967B86227F939C5515F94575F4B06F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D82B42B328967B86227F939C5515F94575F4B06F.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ISHISH/0/D82B42B328967B86227F939C5515F94575F4B06F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:48:20:2e:db:3c:5c:c0:7b:c1:1a:45:86:f7:30:01:13:89:
82:b5:5d:0e:3a:d5:b9:93:17:59:a2:56:8c:8e:13:d4:89:e1:
c5:de:89:eb:91:56:d8:ac:4d:80:db:e1:e0:fc:0e:c5:40:dc:
e3:da:ac:9e:f3:33:02:51:4c:e1:ac:42:cb:c2:6a:db:f2:6f:
02:3c:eb:7c:56:13:63:dd:3e:04:c6:0f:7f:e5:b5:ed:aa:76:
ce:73:49:15:05:c7:64:f3:1d:3b:bb:cb:6d:0d:49:07:15:03:
9a:b4:bf:6e:c6:f6:84:0d:8e:22:9f:8f:41:06:d9:af:31:90:
c2:7c:dd:cc:af:50:50:63:a7:02:ae:95:81:ae:0f:96:f8:a8:
6e:a6:02:d2:26:92:af:fb:e1:76:f4:71:85:49:84:e7:08:69:
5c:71:92:b6:1d:6d:08:ed:25:62:88:07:5a:f6:03:89:b5:76:
69:75:4e:5b:e1:58:b3:e8:56:8c:97:79:9b:a7:04:40:79:13:
fc:b3:2f:f3:7a:25:cb:02:51:dc:82:89:d9:55:47:80:82:48:
1c:82:47:1a:03:0b:d8:77:c4:93:0e:aa:ec:df:5c:c9:df:6e:
7c:69:bc:22:84:69:b5:40:73:34:23:fd:6c:78:36:51:f8:58:
bc:49:21:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:32:28 2026 by rpki-client