
$ rpki-client -vvvf rpkica.twnic.tw/rpki/MITACMDC/0/F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.mft
File: F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.mft (raw, json)
Hash identifier: pXQp3Rei9PgDDqQUOCE2o1jC5OVewXVhqmQoVQl+lFQ=
Subject key identifier: 5A:4C:1B:77:4F:4B:D0:7D:EB:08:23:5E:8C:82:3D:12:B2:15:43:60
Authority key identifier: F1:CE:AE:4A:E1:3A:71:AF:6A:07:09:A4:C3:00:AD:A4:62:3A:2C:AA
Certificate issuer: /CN=F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA
Certificate serial: 4FA9B18C53EA98F46195E59087A3F1A37E35EC0D
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/MITACMDC/0/F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.mft
Manifest number: BC
Signing time: Fri 25 Sep 2026 17:43:45 +0000
Manifest this update: Fri 25 Sep 2026 17:38:45 +0000
Manifest next update: Sat 26 Sep 2026 18:31:45 +0000
Files and hashes: 1: 323430343a646230303a3a2f33322d3332203d3e203138313739.roa (hash: ScKz5v7qY5jPX8fFHjF9zU3+yWebwV6lUVVjO7sfadI=)
2: 3231312e37382e3234302e302f32302d3232203d3e203138313739.roa (hash: wtDOplvpAqeejc+mSEqtFsj/OGKvnvcOzFKX6zd6nQY=)
3: 3130332e32302e3137362e302f32322d3232203d3e203138313739.roa (hash: PNKjey9tKMdDR4FRuzXEfmnFsMhGJbtdw6pFSO4K0J8=)
4: 3130332e31362e3234342e302f32322d3232203d3e203138313739.roa (hash: 7gfsjGvmdQGtAgO0An6FiUxxSYVdxi5kO9sx5OvgxYQ=)
5: F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.crl (hash: 1c+Wvee13ypXJwlE4bC0xzld1JxjzG9C7DYrFWOwG00=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/MITACMDC/0/F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.crl
rsync://rpkica.twnic.tw/rpki/MITACMDC/0/F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 26 Sep 2026 15:15:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:a9:b1:8c:53:ea:98:f4:61:95:e5:90:87:a3:f1:a3:7e:35:ec:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA
Validity
Not Before: Sep 25 17:38:45 2026 GMT
Not After : Sep 26 18:31:45 2026 GMT
Subject: CN=5A4C1B774F4BD07DEB08235E8C823D12B2154360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:35:f1:85:62:44:0e:ab:63:47:e3:ac:e1:40:
f9:1d:1a:1e:ab:6c:44:1a:33:71:bb:8b:8d:6f:e4:
56:3f:c7:20:ae:05:fe:7e:dc:7f:f1:a6:45:09:a6:
fa:5f:44:84:39:eb:79:9c:06:f5:7a:15:48:43:ee:
ec:a6:9f:93:e5:bc:86:00:bd:7c:db:6c:12:1b:a7:
ac:32:0f:37:35:c6:ba:44:e0:04:99:a9:07:3f:a2:
fd:31:5a:7e:70:5c:c3:eb:ad:c9:85:76:83:83:0c:
cd:8a:fe:cc:8c:e7:e5:40:40:b4:db:84:09:39:bb:
14:a3:6f:d8:d7:c5:f2:10:a3:cf:00:5f:a9:c9:c9:
12:59:2c:86:5d:3d:8a:7f:6b:7e:61:38:5d:19:6c:
2e:bc:94:9d:81:d6:e1:ce:5a:73:62:bc:0c:1e:4c:
f8:89:38:2e:6e:4d:c6:b9:21:af:fd:e3:ea:cb:9f:
08:69:cd:2d:fa:d4:10:b2:d4:06:0b:66:63:64:ef:
c7:6d:3a:c0:06:61:1a:0f:8d:1a:42:11:fe:95:b4:
7b:10:79:fb:31:37:fa:9c:2e:77:55:4f:97:05:af:
76:24:98:15:95:e7:90:af:75:ec:a7:6e:3f:82:d8:
7e:56:eb:39:7c:88:d3:0e:0b:e4:ad:db:43:80:7d:
75:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:4C:1B:77:4F:4B:D0:7D:EB:08:23:5E:8C:82:3D:12:B2:15:43:60
X509v3 Authority Key Identifier:
keyid:F1:CE:AE:4A:E1:3A:71:AF:6A:07:09:A4:C3:00:AD:A4:62:3A:2C:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/MITACMDC/0/F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MITACMDC/0/F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:df:9c:c5:e5:7a:e7:d7:81:33:5b:39:f1:d4:21:15:66:33:
c6:13:a8:2d:b1:0b:60:e1:1c:59:a4:f2:29:a1:2d:01:e6:eb:
c6:86:ad:ee:db:59:df:ed:8c:5b:08:9d:80:6d:72:54:41:d7:
40:52:5e:c8:61:ff:46:eb:5c:d8:b8:dd:eb:5c:34:e7:f0:67:
30:d5:24:f8:e9:af:36:ef:f4:4b:52:67:49:a2:1b:88:b9:db:
83:95:75:fe:d8:34:32:1b:ad:4d:d4:a0:9a:32:9f:d5:19:58:
7b:c8:c0:a1:5c:19:16:51:34:3d:8d:fd:6d:84:a3:ec:42:a2:
52:1b:84:8d:11:8f:c9:37:c3:b9:bf:c3:01:6e:fe:68:75:fa:
ca:9a:ec:25:8b:50:87:76:7a:44:52:75:93:59:0b:b7:33:20:
53:ee:7d:a0:be:b6:9c:62:ba:5a:24:2e:b0:1f:53:eb:ce:d5:
25:5f:59:06:e6:53:46:2e:ea:a7:b0:20:cd:52:0a:36:69:4f:
f6:76:c2:17:ce:99:7a:04:92:33:83:b5:1b:f0:38:39:36:0c:
d3:69:34:f7:ae:6d:b1:2e:85:11:6e:df:11:47:b6:85:39:9e:
2d:bd:25:ef:8c:07:a8:9a:e7:d2:6f:44:d3:5d:92:fb:ec:32:
d5:ef:80:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:55:49 2026 by rpki-client