
$ rpki-client -vvvf rpkica.twnic.tw/rpki/MAIFENGTW/0/4461702FD381CAC430A5B19A762A79E9CCBD8D09.mft
File: 4461702FD381CAC430A5B19A762A79E9CCBD8D09.mft (raw, json)
Hash identifier: 82W7s0N/rh4N1irDfAKop3W+5PRl0/4x9XOL0vO8F7s=
Subject key identifier: 41:37:DA:90:B4:1A:8F:85:55:FB:F7:CF:3B:79:3A:19:AE:52:E0:0A
Authority key identifier: 44:61:70:2F:D3:81:CA:C4:30:A5:B1:9A:76:2A:79:E9:CC:BD:8D:09
Certificate issuer: /CN=4461702FD381CAC430A5B19A762A79E9CCBD8D09
Certificate serial: 1FAEF35747AAA50B81B55CBE95BA20C3FB605C16
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4461702FD381CAC430A5B19A762A79E9CCBD8D09.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/MAIFENGTW/0/4461702FD381CAC430A5B19A762A79E9CCBD8D09.mft
Manifest number: B7
Signing time: Thu 24 Sep 2026 23:24:45 +0000
Manifest this update: Thu 24 Sep 2026 23:19:45 +0000
Manifest next update: Sat 26 Sep 2026 00:15:45 +0000
Files and hashes: 1: 3130332e3138392e3130382e302f32332d3234203d3e2037353336.roa (hash: q17bFdqrhMBLjmohT4EXtTiiL79HGPyDIQggw2a0Oyc=)
2: 4461702FD381CAC430A5B19A762A79E9CCBD8D09.crl (hash: 6mt0DRIEm4HmChBz6ZGWHYGQQsSTdjuUfGH6B4lmR+s=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/MAIFENGTW/0/4461702FD381CAC430A5B19A762A79E9CCBD8D09.crl
rsync://rpkica.twnic.tw/rpki/MAIFENGTW/0/4461702FD381CAC430A5B19A762A79E9CCBD8D09.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4461702FD381CAC430A5B19A762A79E9CCBD8D09.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 21:19:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:ae:f3:57:47:aa:a5:0b:81:b5:5c:be:95:ba:20:c3:fb:60:5c:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4461702FD381CAC430A5B19A762A79E9CCBD8D09
Validity
Not Before: Sep 24 23:19:45 2026 GMT
Not After : Sep 26 00:15:45 2026 GMT
Subject: CN=4137DA90B41A8F8555FBF7CF3B793A19AE52E00A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:86:0f:36:a3:71:d4:c5:7b:fe:fe:c0:56:b8:
c6:7e:4f:3c:13:c9:2d:98:1f:df:14:be:c5:2b:1b:
45:4f:86:38:ae:bc:1f:8c:df:07:f7:43:61:6e:84:
e0:9a:e7:0c:f3:1e:62:35:ab:14:8f:e8:c8:87:50:
98:a1:a1:26:c4:4c:5c:b2:a5:19:5c:32:45:f7:1c:
b0:34:8e:c3:7a:10:5d:39:64:20:43:b9:21:a4:4b:
53:22:87:4f:c5:b2:82:3a:26:36:04:22:04:6b:4c:
a7:20:bf:d2:c7:b1:54:68:f1:ad:7a:60:73:63:6f:
cf:2e:98:2e:cd:e1:6d:68:eb:8c:a3:99:89:3a:f2:
8a:09:8b:b1:74:c3:7b:dc:44:ff:29:f7:f0:1f:87:
87:18:a4:69:d1:ba:e6:90:21:37:68:92:23:e1:47:
fb:ca:37:3c:41:60:d8:b7:07:ef:cc:46:8b:d5:96:
58:6b:ee:1d:b9:30:fd:aa:38:68:e8:e2:07:09:d4:
38:dc:b4:b9:8f:90:56:f0:60:78:b8:a6:b6:e8:61:
4a:77:68:f7:8a:c2:3f:d4:bb:63:68:c1:d9:94:a6:
2b:aa:10:a5:9e:f6:d1:35:e7:7c:02:57:bc:8f:02:
85:25:2f:56:21:a3:06:8c:24:2c:03:97:b1:bf:98:
e7:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:37:DA:90:B4:1A:8F:85:55:FB:F7:CF:3B:79:3A:19:AE:52:E0:0A
X509v3 Authority Key Identifier:
keyid:44:61:70:2F:D3:81:CA:C4:30:A5:B1:9A:76:2A:79:E9:CC:BD:8D:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/MAIFENGTW/0/4461702FD381CAC430A5B19A762A79E9CCBD8D09.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4461702FD381CAC430A5B19A762A79E9CCBD8D09.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MAIFENGTW/0/4461702FD381CAC430A5B19A762A79E9CCBD8D09.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:72:8a:8e:e6:f2:54:b2:e0:ce:3e:c6:22:07:09:99:b6:51:
cd:2a:bc:6d:e3:63:52:13:0b:28:3f:8f:fd:23:e4:2e:a9:05:
d3:91:44:5c:4d:1a:8f:b2:5b:fd:82:f7:4a:a6:d6:aa:2d:6c:
f1:25:c0:d7:a2:76:7a:06:0a:a4:e9:b0:07:0b:6a:2f:5d:27:
25:0a:cf:3e:78:c7:9e:d2:97:55:82:2e:41:7c:83:34:14:dc:
db:db:83:11:7e:07:30:a2:04:46:0e:c5:87:d8:bb:e2:3d:1d:
c1:94:02:1c:32:1d:32:18:fc:95:00:ff:3c:48:3b:66:4e:9a:
41:9b:0e:87:bf:e9:b8:af:35:ce:0f:15:85:5d:da:90:0b:a1:
2c:1b:91:5c:d8:1d:82:53:24:24:64:19:27:46:ac:4e:33:d1:
ce:5e:fe:0c:82:11:df:70:6e:34:01:42:58:d2:1f:b1:2e:4f:
49:b7:d9:e2:da:92:62:dd:26:08:06:31:1d:0a:8a:bb:85:1f:
38:2b:db:c8:8d:0c:9c:fa:0d:bd:65:f3:39:6c:a9:e4:07:72:
68:a6:ee:9a:1a:f4:f6:85:c0:84:89:cf:56:cc:77:04:4d:a5:
82:b4:92:de:33:51:13:9f:d2:76:12:dc:55:a6:b6:f8:33:19:
c7:fd:d5:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:32:12 2026 by rpki-client