
$ rpki-client -vvf rpkica.twnic.tw/rpki/QISDA/1/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.mft
File: 5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.mft (raw, json)
Hash identifier: AY9v6fRVgizjpZUhPwjtNuZjgBro2+R7nKSlgj8e2FQ=
Subject key identifier: 18:44:76:60:A7:E2:B1:BC:23:4B:5B:48:B3:C7:1A:D0:14:8A:06:1E
Authority key identifier: 50:31:E6:5A:98:D8:27:3F:95:79:BF:A5:B8:FE:6C:A5:2D:01:C4:1B
Certificate issuer: /CN=5031E65A98D8273F9579BFA5B8FE6CA52D01C41B
Certificate serial: 7243810872C46164014A1C5DFBB238F1823D53AD
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/QISDA/1/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.mft
Manifest number: 04
Signing time: Tue 12 May 2026 13:56:20 +0000
Manifest this update: Tue 12 May 2026 13:51:20 +0000
Manifest next update: Wed 13 May 2026 16:14:20 +0000
Files and hashes: 1: 3136352e39392e3131322e302f32332d3234203d3e20313331363831.roa (hash: WrYPkf0InVKyICQINH//KXuGgao1vX5GBqZA6/+9gHc=)
2: 5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.crl (hash: 6VlmRK2k4hsY+7x10gfy1j88TIuyYTuVVPnDyfnrXmU=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/QISDA/1/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.crl
rsync://rpkica.twnic.tw/rpki/QISDA/1/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 16:14:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:43:81:08:72:c4:61:64:01:4a:1c:5d:fb:b2:38:f1:82:3d:53:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5031E65A98D8273F9579BFA5B8FE6CA52D01C41B
Validity
Not Before: May 12 13:51:20 2026 GMT
Not After : May 13 16:14:20 2026 GMT
Subject: CN=18447660A7E2B1BC234B5B48B3C71AD0148A061E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:30:bd:4d:b9:a5:a5:61:a2:f7:31:8d:bf:bc:
ad:8e:41:79:e8:6a:ef:f0:77:5b:3b:b4:f2:f0:c9:
9a:e4:a0:04:d9:03:45:03:2b:0b:6b:cb:1c:bf:1b:
27:50:b4:1e:7d:7a:d1:7c:c2:58:22:fa:48:df:15:
e8:f0:b0:38:c5:2d:63:0d:7a:66:59:a3:1a:8b:59:
68:31:8b:75:0c:ac:ea:58:16:bf:61:c2:7f:65:fe:
47:01:66:3c:a1:a1:06:29:99:03:c5:11:7e:b0:44:
26:03:ae:a1:21:a1:e3:0b:52:83:d6:e3:cd:95:d2:
d8:54:05:7a:e9:28:c8:cf:e5:f6:f8:86:47:64:cc:
59:86:24:00:91:ba:15:59:5c:a7:54:97:7e:98:d9:
0f:8a:38:87:df:e8:d0:34:50:15:4d:07:0f:14:05:
27:a9:1a:1f:32:26:f7:a3:2d:48:af:70:00:cb:7c:
63:38:3b:65:bd:e1:f8:c1:75:f0:f2:ec:99:57:e7:
43:19:44:72:1a:61:af:fa:9e:e3:37:61:55:a0:bb:
86:3f:6b:61:83:80:62:07:87:78:be:50:0a:46:55:
57:59:36:f2:47:3e:9e:03:05:1c:1c:15:64:3c:f8:
9c:4a:2c:28:e8:82:ca:df:79:af:d1:00:b2:2e:a5:
2b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:44:76:60:A7:E2:B1:BC:23:4B:5B:48:B3:C7:1A:D0:14:8A:06:1E
X509v3 Authority Key Identifier:
keyid:50:31:E6:5A:98:D8:27:3F:95:79:BF:A5:B8:FE:6C:A5:2D:01:C4:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/QISDA/1/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/QISDA/1/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:b6:8d:b1:53:a5:f4:4a:40:37:da:28:e6:2e:77:23:d4:e0:
de:dd:6c:e9:d2:ea:0e:00:f0:f2:9c:f2:88:09:db:bd:24:44:
1a:34:37:41:b7:cc:00:55:38:1a:71:12:e0:33:7e:b4:98:c7:
9d:af:a7:f1:c4:a3:94:5d:1e:cd:75:42:84:5e:78:01:d6:07:
c4:92:03:e4:c2:ea:39:a7:38:44:67:81:e7:26:5f:65:9e:fa:
ea:58:71:4b:34:9f:4b:59:5b:30:64:74:46:ba:41:db:a0:74:
2a:52:3d:57:5c:01:8f:13:6d:7a:37:93:67:4a:75:33:2e:e1:
34:98:e4:77:00:f1:06:86:56:0c:d4:19:3b:78:86:90:61:83:
b1:51:6c:6b:75:c0:f5:d3:af:0e:9d:c7:d9:ca:54:98:a6:a2:
db:03:01:d6:f0:52:8a:35:5d:70:9f:55:1e:8e:3c:c4:6c:a1:
95:b7:7b:cf:b2:53:5d:0d:92:7b:82:a5:21:b2:4b:7b:cb:a3:
33:ef:af:dc:35:30:3a:c2:9e:4e:0e:52:06:9c:89:c1:0a:48:
18:73:e2:e7:a7:d7:83:a5:0b:bc:ef:af:a4:e9:1b:3e:de:f8:
ac:47:bd:40:9b:59:b4:af:13:24:b5:2e:db:9b:e8:f4:44:ec:
d8:55:d6:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:55:51 2026 by rpki-client