
$ rpki-client -vvvf rpkica.twnic.tw/rpki/M2NIM/1/B5BCB843FC62D50C018D67AAECEC768693B898BB.mft
File: B5BCB843FC62D50C018D67AAECEC768693B898BB.mft (raw, json)
Hash identifier: 1bAWJTdxP+1D8GROWShl2s3JhtlXWsMxtJ4VekNXX24=
Subject key identifier: 9C:66:7B:C1:35:E3:03:BF:1D:0B:A5:8B:C8:99:B2:29:E3:EB:8B:6C
Authority key identifier: B5:BC:B8:43:FC:62:D5:0C:01:8D:67:AA:EC:EC:76:86:93:B8:98:BB
Certificate issuer: /CN=B5BCB843FC62D50C018D67AAECEC768693B898BB
Certificate serial: 40DE4127FEF0D34BA03E4F16E5A0A706906A9387
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B5BCB843FC62D50C018D67AAECEC768693B898BB.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/M2NIM/1/B5BCB843FC62D50C018D67AAECEC768693B898BB.mft
Manifest number: 0100
Signing time: Sat 14 Nov 2026 15:17:42 +0000
Manifest this update: Sat 14 Nov 2026 15:12:42 +0000
Manifest next update: Sun 15 Nov 2026 18:18:42 +0000
Files and hashes: 1: 3135372e32302e3133342e302f32332d3234203d3e203332353935.roa (hash: 2miGNbONfgJVnuMX1O6Xis0X2QHCKO3xHvx8nDoW3Q0=)
2: B5BCB843FC62D50C018D67AAECEC768693B898BB.crl (hash: K3PFGTIdhANqM4887RAU9GMAArA300cb0KakRILjOUQ=)
3: 3135372e32302e3133352e302f32342d3234203d3e20313339333538.roa (hash: NLBte/Xngt5YiZc1cKE0ofpG8JJd20KTmhuGOcBYInE=)
4: 3135372e32302e3133342e302f32342d3234203d3e20343030363138.roa (hash: XXKYaMUQ9ja5C/x9TwazrmKnnlLWSfJb+JMU6MAgrIw=)
5: 3135372e32302e3133352e302f32342d3234203d3e20313431303031.roa (hash: WOYBOovAsDkyK43+ASCyGIyOHFzLI6jt6PTK/EFmDKY=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/M2NIM/1/B5BCB843FC62D50C018D67AAECEC768693B898BB.crl
rsync://rpkica.twnic.tw/rpki/M2NIM/1/B5BCB843FC62D50C018D67AAECEC768693B898BB.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B5BCB843FC62D50C018D67AAECEC768693B898BB.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 15 Nov 2026 15:35:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:de:41:27:fe:f0:d3:4b:a0:3e:4f:16:e5:a0:a7:06:90:6a:93:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B5BCB843FC62D50C018D67AAECEC768693B898BB
Validity
Not Before: Nov 14 15:12:42 2026 GMT
Not After : Nov 15 18:18:42 2026 GMT
Subject: CN=9C667BC135E303BF1D0BA58BC899B229E3EB8B6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7c:30:fa:7b:8b:ae:cf:0e:87:68:75:b8:9b:
f4:67:07:0a:07:e6:60:3b:ce:58:bf:d7:cc:b1:0c:
94:d3:18:bc:1e:69:c7:83:e1:be:ec:24:56:ce:5e:
a3:2b:81:42:36:f2:ba:ac:04:e8:64:50:b5:30:87:
41:c6:ea:f1:e1:18:34:ef:63:56:34:61:69:89:be:
c1:58:f7:e2:f8:32:04:21:df:19:59:dd:94:4a:6d:
92:92:dd:da:72:01:56:94:4c:96:47:d3:39:6d:0f:
95:d8:ab:08:bd:b1:91:e2:7f:6c:76:e3:e1:7d:a5:
27:64:46:e5:ed:b6:56:ce:5a:54:b6:8d:6b:bb:1f:
f2:17:86:e7:e0:ff:8c:d3:d7:49:89:d5:44:1b:36:
69:1d:78:8a:8c:50:a2:04:79:2b:b2:1a:d5:2f:e3:
79:b6:e7:3f:37:7a:4d:b6:f2:ce:17:17:01:e4:36:
3d:84:8a:c1:fd:d1:e1:d9:15:78:e4:6c:76:c0:a0:
df:71:4a:ce:38:b8:b0:34:a9:58:54:d7:fb:ef:56:
69:e7:d1:f0:1c:04:ee:a1:71:e8:ff:a3:9f:74:ee:
56:aa:3a:a1:d9:e8:84:66:83:b4:41:94:ff:70:86:
04:b9:c9:74:03:49:f1:74:11:27:59:72:05:e4:77:
23:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:66:7B:C1:35:E3:03:BF:1D:0B:A5:8B:C8:99:B2:29:E3:EB:8B:6C
X509v3 Authority Key Identifier:
keyid:B5:BC:B8:43:FC:62:D5:0C:01:8D:67:AA:EC:EC:76:86:93:B8:98:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/M2NIM/1/B5BCB843FC62D50C018D67AAECEC768693B898BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B5BCB843FC62D50C018D67AAECEC768693B898BB.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/M2NIM/1/B5BCB843FC62D50C018D67AAECEC768693B898BB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:7d:9c:7a:cf:1c:f3:c9:a8:09:7c:e2:4e:a6:69:5d:3c:3b:
fe:89:80:07:fb:7e:51:8a:43:b2:95:58:e8:5b:e9:04:24:87:
b1:2b:d8:28:5e:95:0b:fb:02:5f:fd:83:1e:1f:df:fd:0e:fa:
f0:9c:6b:ab:7e:54:2c:9b:5b:c7:9f:03:93:83:d1:8b:a2:1c:
59:1c:8c:c6:ce:9f:f8:b3:57:43:34:1c:49:59:09:fe:94:b5:
86:05:fa:48:25:1c:be:84:d6:18:e9:61:2b:aa:bf:6c:5e:0c:
46:4b:55:30:e4:4e:96:74:76:67:d6:93:12:47:9e:b4:46:b7:
74:84:06:21:26:73:c2:d6:3a:30:2c:5d:42:fb:33:02:dc:b7:
b0:b2:47:24:19:ad:6e:ad:14:3b:00:4c:22:55:38:1b:83:07:
30:b9:63:44:73:91:b9:0e:38:4e:d7:9e:c6:a0:18:09:f3:e2:
94:22:81:ba:1f:67:d2:9d:ea:f9:f8:5f:7d:00:a8:c6:0e:c6:
05:e5:f9:5b:ff:f0:20:00:f6:96:85:46:91:ae:8e:6e:1d:ab:
db:d2:92:1a:51:9f:dd:b4:76:5a:85:fd:93:af:1f:d0:d2:11:
57:81:5c:0a:e3:29:df:76:db:7d:1d:47:e3:72:4e:64:b6:12:
cd:41:3f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 23:29:10 2026 by rpki-client