
$ rpki-client -vvf rpkica.twnic.tw/rpki/MKY/0/AAED3548B647C9B95804411BAB19736F229C5A54.mft
File: AAED3548B647C9B95804411BAB19736F229C5A54.mft (raw, json)
Hash identifier: JiUD4R0nAO27kOcYkWYu7t18eMEeMhz58y0V6mW/7/Y=
Subject key identifier: 1F:FC:8E:C7:DB:F5:06:3D:6C:AB:25:77:75:62:DA:DB:D3:D4:75:89
Authority key identifier: AA:ED:35:48:B6:47:C9:B9:58:04:41:1B:AB:19:73:6F:22:9C:5A:54
Certificate issuer: /CN=AAED3548B647C9B95804411BAB19736F229C5A54
Certificate serial: 5979F907217550C430E5E7352B9A93D125ADAFE3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AAED3548B647C9B95804411BAB19736F229C5A54.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/MKY/0/AAED3548B647C9B95804411BAB19736F229C5A54.mft
Manifest number: 64
Signing time: Thu 23 Jul 2026 15:33:06 +0000
Manifest this update: Thu 23 Jul 2026 15:28:06 +0000
Manifest next update: Fri 24 Jul 2026 17:44:06 +0000
Files and hashes: 1: 3231302e3234342e3139322e302f31392d3230203d3e2037343738.roa (hash: W335AiMtYbmtyFJ/6qInNtRm+Ld5a3fuzl0Q/nTZ7Xs=)
2: 3231312e37362e302e302f31392d3139203d3e2037343738.roa (hash: kS4UeB9bSZUO5PaEgviQEGNKSk9y0LCLxXLeAUQgMz0=)
3: AAED3548B647C9B95804411BAB19736F229C5A54.crl (hash: RAlmsU7CL7bCIJmiXMPf5ntWUIc8LuJjFRPNFdhz5OQ=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/MKY/0/AAED3548B647C9B95804411BAB19736F229C5A54.crl
rsync://rpkica.twnic.tw/rpki/MKY/0/AAED3548B647C9B95804411BAB19736F229C5A54.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AAED3548B647C9B95804411BAB19736F229C5A54.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 17:44:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:79:f9:07:21:75:50:c4:30:e5:e7:35:2b:9a:93:d1:25:ad:af:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AAED3548B647C9B95804411BAB19736F229C5A54
Validity
Not Before: Jul 23 15:28:06 2026 GMT
Not After : Jul 24 17:44:06 2026 GMT
Subject: CN=1FFC8EC7DBF5063D6CAB25777562DADBD3D47589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1b:ea:04:f2:a8:cd:93:54:a7:ba:a0:a6:a4:
50:88:21:ec:0c:c4:ad:f1:7f:98:52:bc:2f:b3:b0:
47:ab:96:f7:eb:46:e9:74:fb:8a:5d:f6:7b:ea:8a:
e9:3e:39:4c:bf:99:d8:1d:23:d4:b3:60:4d:ec:83:
01:17:cd:af:0f:ee:20:44:88:2e:bb:d9:82:97:ef:
8e:c1:7b:6a:11:dc:89:d2:6a:e8:f4:12:b7:28:c8:
27:c3:db:65:45:10:3f:e7:f7:87:0d:fe:12:0a:7d:
51:f0:21:bf:88:c7:eb:c0:14:fb:25:d7:58:0c:9f:
8c:13:5f:6a:af:f2:ad:b9:cc:37:e5:19:cc:a1:77:
8a:9a:0f:1b:88:ea:b1:84:b3:8d:c7:ac:1f:d8:ef:
35:08:d3:f6:99:79:14:d1:7d:68:1a:88:ea:dd:6a:
87:39:ec:c4:fc:ad:e3:08:e2:c0:be:a3:8b:2d:71:
b1:08:2c:3a:ee:0c:73:7a:04:a7:34:c5:2b:9a:5f:
eb:06:91:61:a8:d5:af:2f:22:51:18:05:07:78:f1:
dc:5d:ee:c4:ac:8b:77:55:76:2e:32:63:99:62:02:
7e:c2:7c:83:b7:e5:4a:1e:69:c4:d0:e9:25:5e:a3:
28:dc:fa:b2:fb:fb:b5:4e:54:19:28:c6:8e:55:10:
83:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:FC:8E:C7:DB:F5:06:3D:6C:AB:25:77:75:62:DA:DB:D3:D4:75:89
X509v3 Authority Key Identifier:
keyid:AA:ED:35:48:B6:47:C9:B9:58:04:41:1B:AB:19:73:6F:22:9C:5A:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/MKY/0/AAED3548B647C9B95804411BAB19736F229C5A54.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AAED3548B647C9B95804411BAB19736F229C5A54.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MKY/0/AAED3548B647C9B95804411BAB19736F229C5A54.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:1d:aa:51:1f:37:2d:4b:6a:11:e0:cc:a6:cc:7d:8e:3e:c8:
2f:fd:91:2e:e9:29:d9:bd:78:c2:f9:16:33:56:24:08:5a:be:
cd:62:68:bb:bb:2a:34:27:7e:b5:e5:6d:79:ae:f2:55:eb:ac:
39:bb:b0:e3:2a:51:6c:fe:21:bf:88:97:8f:79:01:c9:b8:e6:
9e:88:72:6d:3f:aa:00:03:40:26:91:54:a6:b1:a3:eb:6c:43:
30:a7:4f:9b:6d:e4:49:17:8e:29:a5:5a:0f:db:40:9e:2e:ef:
e1:61:f2:7e:0d:6c:3e:ef:f3:21:84:13:a9:41:8a:3c:c8:6f:
5c:bf:a7:6f:fc:a2:ba:2d:23:7b:6b:5d:6c:dc:02:27:c6:cb:
42:0b:62:a7:af:16:0c:fd:fd:f7:00:fe:8a:3c:f7:09:be:e5:
ed:99:cf:c0:82:48:eb:5d:a0:e8:36:6c:98:4c:50:e2:8d:a8:
df:6e:28:83:ac:bd:6b:ed:9b:d5:fe:33:21:4d:0f:d2:9a:da:
08:47:1b:1c:7a:54:ca:4a:99:66:3e:7c:37:ea:77:0b:30:c0:
06:19:07:f9:33:88:67:df:e1:25:b7:55:2f:0e:47:f1:b8:19:
59:5b:e9:10:ae:0d:aa:e0:f4:d0:4a:a7:08:6e:22:70:96:21:
ad:1f:3b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:13:19 2026 by rpki-client