
$ rpki-client -vvf rpkica.twnic.tw/rpki/MERCYCAT/0/C4FE0149FC774090A5B6304E8968380A1F1B0426.mft
File: C4FE0149FC774090A5B6304E8968380A1F1B0426.mft (raw, json)
Hash identifier: Yi9uRznVIflAqTvR/K+q1E4736+JY9R+6m1x3I/eJ+o=
Subject key identifier: 7C:60:40:9C:1B:F9:82:A6:66:2A:BF:18:8D:4E:BD:46:50:E1:15:D6
Authority key identifier: C4:FE:01:49:FC:77:40:90:A5:B6:30:4E:89:68:38:0A:1F:1B:04:26
Certificate issuer: /CN=C4FE0149FC774090A5B6304E8968380A1F1B0426
Certificate serial: 071A213D7914E213AA06663E754F11D5165528C6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C4FE0149FC774090A5B6304E8968380A1F1B0426.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/MERCYCAT/0/C4FE0149FC774090A5B6304E8968380A1F1B0426.mft
Manifest number: 65
Signing time: Thu 23 Jul 2026 14:27:40 +0000
Manifest this update: Thu 23 Jul 2026 14:22:40 +0000
Manifest next update: Fri 24 Jul 2026 14:30:40 +0000
Files and hashes: 1: 323430373a643234303a3a2f33322d3438203d3e203138343238.roa (hash: rBUhV/xvRZeEelrs2jyNJogNIGW8G/cMNY2z96YxdgM=)
2: C4FE0149FC774090A5B6304E8968380A1F1B0426.crl (hash: 6vPkn8Gf0Efs2aW351haZN1/l7m1mMFC79QYA+5iCio=)
3: 3130332e3137322e3132362e302f32332d3234203d3e203138343238.roa (hash: RmocfnFYGeRr/aQ5L4jWeV+BcjwmA5Wox7nbUvuA0XQ=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/MERCYCAT/0/C4FE0149FC774090A5B6304E8968380A1F1B0426.crl
rsync://rpkica.twnic.tw/rpki/MERCYCAT/0/C4FE0149FC774090A5B6304E8968380A1F1B0426.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C4FE0149FC774090A5B6304E8968380A1F1B0426.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 14:30:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:1a:21:3d:79:14:e2:13:aa:06:66:3e:75:4f:11:d5:16:55:28:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C4FE0149FC774090A5B6304E8968380A1F1B0426
Validity
Not Before: Jul 23 14:22:40 2026 GMT
Not After : Jul 24 14:30:40 2026 GMT
Subject: CN=7C60409C1BF982A6662ABF188D4EBD4650E115D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5a:28:5c:16:f7:fd:2c:ad:ff:52:99:d8:0b:
ab:5b:f5:0e:ed:e5:5e:4d:b6:a4:d7:0a:b7:70:8d:
43:37:39:d7:49:37:08:92:b4:b9:94:bf:55:3b:24:
b5:63:25:05:ef:fb:b7:62:20:14:03:ef:4a:c9:ed:
7e:8e:c9:57:9c:6f:76:d8:7b:11:a1:c3:b1:cb:ff:
c6:b2:8b:b3:b2:80:15:2a:04:6b:49:a6:4d:8a:72:
23:ee:32:ee:55:77:1c:e8:9c:c0:4c:86:56:98:d8:
ba:e9:cb:56:20:9a:66:72:45:43:bb:6a:88:54:d8:
23:ba:cd:40:46:ac:1b:98:68:f4:f6:ab:81:01:b9:
bc:25:79:ab:43:73:60:ec:85:fa:4a:b0:88:96:d9:
ea:57:ba:6b:8c:5b:6e:2c:a9:73:47:f5:d6:f4:f9:
60:03:25:04:db:bc:a5:53:ea:5f:50:1b:ca:ca:c9:
16:5d:cb:f6:d6:ad:4d:30:ce:3e:1b:1d:2e:52:c2:
15:ee:7c:5c:80:d2:62:b9:ef:11:ee:f6:5d:45:0d:
60:22:ef:b3:30:22:6d:4b:3d:43:cc:60:d8:c1:b5:
a8:e0:c0:f6:bc:e8:49:30:67:46:3d:25:b2:49:87:
f6:81:6e:e7:c5:e0:8a:d4:5d:85:ca:e3:22:f2:68:
45:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:60:40:9C:1B:F9:82:A6:66:2A:BF:18:8D:4E:BD:46:50:E1:15:D6
X509v3 Authority Key Identifier:
keyid:C4:FE:01:49:FC:77:40:90:A5:B6:30:4E:89:68:38:0A:1F:1B:04:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/MERCYCAT/0/C4FE0149FC774090A5B6304E8968380A1F1B0426.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C4FE0149FC774090A5B6304E8968380A1F1B0426.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MERCYCAT/0/C4FE0149FC774090A5B6304E8968380A1F1B0426.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:60:ca:45:a3:da:8a:5f:2c:97:5b:34:1b:c1:75:00:54:ba:
bd:e4:48:1f:32:3c:f6:ea:f3:de:22:63:b2:21:3b:73:cb:f2:
fa:dd:38:54:92:6a:1d:34:ea:63:ea:46:62:0a:74:0e:24:06:
67:71:78:5d:e2:dd:3c:ff:a0:e4:5e:69:17:57:98:4e:0b:59:
a0:e8:2b:5b:56:8d:ac:5b:59:cf:58:5d:70:8d:81:d0:2f:11:
be:e2:87:87:c3:92:04:ae:12:43:97:9f:c6:67:b2:a3:78:58:
f4:36:d4:97:45:e4:9b:8a:24:ee:83:fa:a0:f0:08:19:ab:31:
49:fe:f5:ce:60:21:f2:5d:9e:0c:98:53:37:35:e1:e9:0e:10:
0e:4e:af:41:f2:03:30:dd:c7:7d:8c:c2:aa:88:5d:7f:00:03:
73:a2:56:96:21:49:a3:c6:d4:d4:65:13:5d:e4:62:41:98:fa:
fb:78:37:dc:f7:9e:b4:90:f7:13:1d:44:e5:8e:45:43:7b:98:
46:d1:c7:4f:d5:1b:40:e6:76:c2:38:23:14:c8:cd:17:40:af:
31:d2:28:3b:d6:c3:d3:a5:72:a6:b8:c1:e4:4b:3a:2c:a3:1d:
1f:86:7f:ad:8b:35:56:d5:e8:75:98:bd:b5:73:6d:be:5e:de:
87:f7:84:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:13:06 2026 by rpki-client