
$ rpki-client -vvvf rpkica.twnic.tw/rpki/NCIC/1/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.mft
File: D5C99016D01EDDE0A4D47C3C948EE8859612C73B.mft (raw, json)
Hash identifier: t4bFZw6a8Z2gULEyrWUJluNTh8TI8F9vtl3EO6uylnM=
Subject key identifier: 3C:DE:C7:AA:06:98:7F:7F:73:B2:B4:80:A5:08:8E:31:31:08:FD:4F
Authority key identifier: D5:C9:90:16:D0:1E:DD:E0:A4:D4:7C:3C:94:8E:E8:85:96:12:C7:3B
Certificate issuer: /CN=D5C99016D01EDDE0A4D47C3C948EE8859612C73B
Certificate serial: 67ED51F074C26884DCF4976689DD4FC7B2FA529B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/NCIC/1/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.mft
Manifest number: 020A
Signing time: Wed 23 Sep 2026 19:37:31 +0000
Manifest this update: Wed 23 Sep 2026 19:32:31 +0000
Manifest next update: Thu 24 Sep 2026 20:55:31 +0000
Files and hashes: 1: 3139322e37322e3235322e302f32342d3234203d3e2034373830.roa (hash: QUCYMabkjkOS3bq4pnYLsjSc27ckRrPNJ8pg8qqNByc=)
2: 3139322e37322e3232342e302f32302d3234203d3e2039393139.roa (hash: IbJvzNWqowT9ss8SkDFFbTJBrs2hceylDNcxXN29XFI=)
3: 3139322e37322e3132382e302f31382d3234203d3e2039393139.roa (hash: bXHD2UHkc/GfgCH5hcaP2+voIqd8TOjXlXtoDjGW8JA=)
4: 3139322e37322e31362e302f32302d3234203d3e2039393139.roa (hash: YfF/tC6LRnh/bsWMphOM4qUtQ57nFavnsqtfTl2of/U=)
5: D5C99016D01EDDE0A4D47C3C948EE8859612C73B.crl (hash: TI1jrNUhvokR6Qwb8gWyQ5/ci+Ec0vMoNFleS3QyWBU=)
6: 3139322e37322e3234382e302f32322d3234203d3e2034373830.roa (hash: 65UG56uDtaduhHckiIsfYUMD5Llwyc25pnJQFOvZ6Bo=)
7: 3139322e37322e33322e302f31392d3234203d3e2039393139.roa (hash: IdXpC8VBeG7nz0JfgL+likpQtKVBBBXtQNRSvEXG1d0=)
8: 3139322e37322e382e302f32312d3234203d3e2039393139.roa (hash: GbQSPFutvMmuWccC6y+kxjUSwDJ1ik/mT03jQDCuwD4=)
9: 3139322e37322e342e302f32322d3234203d3e2039393139.roa (hash: Mc3y+NW93aC6lat66PDBZYR8qmh9c+fZPRpk7bBYllo=)
10: 3139322e37322e3139322e302f31392d3234203d3e2039393139.roa (hash: Ah2jakkWaX8SyRrg2TG3GrlMUxHdK/+BuuzbL3/oW74=)
11: 3139322e37322e3234302e302f32312d3234203d3e2034373830.roa (hash: w9y6pwWmA3JFdHYwXGU59AkfbSQ5hRF5f8RxZemOXM8=)
12: 3139322e37322e3234302e302f32312d3234203d3e2039393139.roa (hash: zyCP5RCcYrInB0mG7H3w0fJawxlNECjjYSjAg7D7d1Y=)
13: 3139322e37322e3132382e302f31382d3234203d3e2034373830.roa (hash: LzN8cI51zk5jZy8rEOcECVIZmpi8vie+TUsPNlzdXuc=)
14: 3139322e37322e332e302f32342d3234203d3e2034373830.roa (hash: hj2bnED2YLfhRnAL+cGxD8mEc2iquoy7i11842ivkl8=)
15: 3139322e37322e33322e302f31392d3234203d3e2034373830.roa (hash: IAJDcSfRLpjVsd3ilJuaUqAl0u4sdr8+zfKeB8N1STk=)
16: 3133392e3137352e302e302f31362d3234203d3e2034373830.roa (hash: /ZgMlJJWHzRz3oSWNjGyPTQH1Mg84+PLKC/H5qUI7Ns=)
17: 3139322e37322e3234382e302f32322d3234203d3e2039393139.roa (hash: w2LmOI1eQP3xj9n4sBqRb67lBeJFTEuUVe+BjjWP/g8=)
18: 3139322e37322e342e302f32322d3234203d3e2034373830.roa (hash: Ba5i8ude16dQiEfcAiO+btSj/eH4uGS0xcFo7grp3x0=)
19: 3139322e37322e36342e302f31382d3234203d3e2039393139.roa (hash: 6ubqZ+h8/1xZM/Z1mXArWRioq7/yui3/nMg9Ngz6hKA=)
20: 3139322e37322e3235322e302f32342d3234203d3e2039393139.roa (hash: VBtmPKe5I226J9zWpVQAjkGTwQ8c6xfoJIAIP/bSZoI=)
21: 3139322e37322e3139322e302f31392d3234203d3e2034373830.roa (hash: HDP+weW9NczVRv3tVvCtth7CO+aCW75PFkRxJDjQFGU=)
22: 3133392e3137352e302e302f31362d3234203d3e2039393139.roa (hash: 3pZVp3TNQ/sRl3TjQTLvkQ3q6JCaq0d/zamjf+77kx8=)
23: 3139322e37322e31362e302f32302d3234203d3e2034373830.roa (hash: 9ZGrNp+VsLlXW7PeBXw8YpqEX/WVDXlTYIwuby9ILk4=)
24: 3139322e37322e332e302f32342d3234203d3e2039393139.roa (hash: qMTF96rAy8wZ4NUEpq4S8Q/4tASEMCoJMKXrGLo6KtQ=)
25: 3139322e37322e3232342e302f32302d3234203d3e2034373830.roa (hash: JFJbmB7cfEuw1iDDZaeMc1QewQMUllS7sHbdWQbrgDc=)
26: 3139322e37322e382e302f32312d3234203d3e2034373830.roa (hash: 1Hh6x51Jeg1BSF3NwDHjHunpz1y1V3E8ygnYaLHBszo=)
27: 3139322e37322e36342e302f31382d3234203d3e2034373830.roa (hash: IkE5VbWeMMJYwmOD5YW4lS/zGapdsVeaSsB5x46YyVs=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/NCIC/1/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.crl
rsync://rpkica.twnic.tw/rpki/NCIC/1/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 20:55:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:ed:51:f0:74:c2:68:84:dc:f4:97:66:89:dd:4f:c7:b2:fa:52:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D5C99016D01EDDE0A4D47C3C948EE8859612C73B
Validity
Not Before: Sep 23 19:32:31 2026 GMT
Not After : Sep 24 20:55:31 2026 GMT
Subject: CN=3CDEC7AA06987F7F73B2B480A5088E313108FD4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:67:df:b4:51:bb:ea:f2:b4:66:78:8c:1c:e6:
f8:66:4c:2d:6e:3b:39:42:f6:7f:c9:58:97:54:2d:
0c:64:66:97:5a:9e:ac:f9:63:56:0e:76:d5:44:f5:
65:8e:b2:e4:39:22:35:2c:b1:43:ef:df:f8:e4:e4:
e0:8b:2d:d0:2a:20:02:e0:7e:6c:13:7c:12:fe:10:
34:0d:82:83:1b:78:2f:fc:af:f4:c0:05:3d:a0:8b:
69:de:45:14:7b:a7:fd:77:4c:ea:6f:35:c6:8a:bb:
c7:66:27:60:68:cf:58:df:ab:5e:3e:33:e3:5a:ce:
d1:9f:b0:2f:85:0c:4e:13:56:30:66:0f:f5:4e:97:
81:3d:44:9e:e2:8a:00:2e:6f:c0:34:ef:9b:e4:18:
71:2b:88:b0:cf:4b:c4:cc:b6:01:dc:a9:f1:fe:fb:
23:6c:73:45:1d:ba:c6:57:7b:76:bd:2d:01:4e:c6:
8d:01:3d:c6:00:83:ff:04:21:07:fe:78:47:c6:31:
10:fd:ee:8f:3e:ba:bb:00:c5:43:2e:8a:00:e1:b3:
ed:18:7d:22:9c:19:95:57:17:32:d8:9f:df:bf:a0:
f9:5c:fd:e6:3b:a2:ff:8a:ca:4b:f7:d8:85:68:49:
7c:d4:eb:7f:83:cf:da:30:1d:5a:74:55:e0:ce:74:
86:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:DE:C7:AA:06:98:7F:7F:73:B2:B4:80:A5:08:8E:31:31:08:FD:4F
X509v3 Authority Key Identifier:
keyid:D5:C9:90:16:D0:1E:DD:E0:A4:D4:7C:3C:94:8E:E8:85:96:12:C7:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/NCIC/1/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NCIC/1/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:11:0d:39:ec:27:cc:05:85:20:c4:c6:9c:ca:1e:74:d5:67:
d2:90:c8:0c:ac:7d:88:fb:4e:b5:a0:0b:76:e7:b9:9c:19:57:
bc:fa:bb:37:6d:8e:0e:16:5d:28:8d:c3:ab:b8:d2:8b:37:50:
c8:80:ea:37:a7:5e:88:49:ef:93:68:96:d6:36:89:fb:43:3f:
c9:9a:98:85:e4:67:8f:cf:bf:01:5b:ee:bb:88:ae:94:f9:21:
45:d5:ba:a7:94:a3:f0:7a:cf:b4:5e:43:ab:08:c7:7f:40:1f:
91:61:9e:64:59:d4:02:dd:de:cf:d4:e8:82:df:92:25:eb:04:
df:ba:d9:56:b4:a9:51:f6:05:ef:bd:48:6a:88:12:59:41:bf:
bd:1e:0a:32:fd:65:fb:c2:dd:cb:c1:af:c3:fc:6c:19:31:4c:
d8:03:f1:2f:2f:49:fb:af:94:55:90:52:86:43:8b:c7:ed:ea:
d1:16:96:05:1e:96:7e:62:c2:9c:e1:a5:60:6b:52:99:61:52:
bc:02:aa:28:85:1a:39:6f:9f:4d:a7:9c:59:d3:ff:25:36:73:
51:2c:89:f5:c4:5c:47:ca:98:d3:b5:b9:8e:ae:ef:f6:bc:39:
10:74:69:de:10:19:1e:0d:9d:98:23:b1:1e:1d:66:3e:fc:79:
7c:41:98:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:25:14 2026 by rpki-client