
$ rpki-client -vvvf rpkica.twnic.tw/rpki/SECUNET/0/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.mft
File: 4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.mft (raw, json)
Hash identifier: z5BT6aNSE0H+gnBi6VKvlSJr9/6B9Vk99ipApYfh21o=
Subject key identifier: 76:DE:EF:26:82:A6:9E:44:5E:A3:BD:A9:07:51:CD:BD:F8:FB:FD:AF
Authority key identifier: 4D:4D:BD:28:BB:EB:89:20:B3:7A:A6:04:8A:C2:7D:52:46:6A:C7:E6
Certificate issuer: /CN=4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6
Certificate serial: 27CE57DA0529777A0C16ED6121207671100B9CAD
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SECUNET/0/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.mft
Manifest number: BC
Signing time: Fri 25 Sep 2026 12:43:11 +0000
Manifest this update: Fri 25 Sep 2026 12:38:11 +0000
Manifest next update: Sat 26 Sep 2026 15:22:11 +0000
Files and hashes: 1: 3130332e3139382e3135322e302f32332d3234203d3e2037343833.roa (hash: uG7CGWdeS5uhveRrD2X7qwANEb3T2edbHmVXjF6fXlg=)
2: 4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.crl (hash: 4h1DK8SnmF/NOB98pNYmsIpfLeEiJ0FCqh9hcIAANig=)
3: 3130332e3139382e3135322e302f32332d3234203d3e2037353336.roa (hash: RqA+16NcNPgMT4YMF2BTGjQjH/2+48khaUyObZRFtRE=)
4: 3130332e3139382e3135322e302f32332d3234203d3e203231383539.roa (hash: cAZa+9mLNLRFrGmQjJmou8jCTgH3y1HwgtvgIKtzlGk=)
5: 3130332e3139382e3135322e302f32332d3234203d3e2037353338.roa (hash: lozDj5Lx5lP+vcH1OuWHc2uSVB3sN9/AJEBNfjtjdxc=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/SECUNET/0/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.crl
rsync://rpkica.twnic.tw/rpki/SECUNET/0/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 26 Sep 2026 15:15:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:ce:57:da:05:29:77:7a:0c:16:ed:61:21:20:76:71:10:0b:9c:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6
Validity
Not Before: Sep 25 12:38:11 2026 GMT
Not After : Sep 26 15:22:11 2026 GMT
Subject: CN=76DEEF2682A69E445EA3BDA90751CDBDF8FBFDAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ec:8e:a7:a5:51:63:f3:02:29:15:ea:bf:a5:
6a:d6:ea:9e:c2:fb:e5:88:65:40:69:0a:1c:5f:43:
b8:cd:5f:1d:ab:a8:4d:ea:f1:f5:7b:84:ae:d9:14:
ac:97:49:2f:23:ed:e7:d6:10:2b:f4:a0:e1:8c:63:
ae:fb:06:86:41:32:c8:dd:6b:98:cc:3c:55:31:d4:
21:2c:69:5f:f6:ad:9b:3b:d2:ff:6d:a4:57:78:2f:
aa:59:e0:2c:3a:a6:e7:13:1e:e0:65:fc:ae:d1:64:
74:73:d5:63:9c:25:f3:96:34:c7:a0:5d:c7:4b:e1:
78:84:8a:52:f3:fa:3a:9d:f6:f8:b7:c1:81:16:82:
2b:24:3f:9f:4e:a2:a0:2a:45:97:d0:52:24:59:d8:
30:5a:bf:68:ff:c0:bd:18:77:37:21:6f:fe:9e:1f:
94:00:c5:91:62:15:12:d3:6a:01:97:5d:26:14:e3:
e1:d0:28:04:43:4e:cc:d6:97:fe:c7:b3:53:f0:81:
02:65:2e:8a:13:64:6c:17:04:de:0c:5c:bb:a8:bf:
44:02:12:bf:b8:99:d5:ea:e4:47:43:b4:90:82:b1:
ea:94:1e:89:78:61:dd:71:e0:44:55:c4:51:e5:31:
4d:7b:92:e7:a7:92:eb:01:5d:a5:0d:b0:3b:53:15:
80:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:DE:EF:26:82:A6:9E:44:5E:A3:BD:A9:07:51:CD:BD:F8:FB:FD:AF
X509v3 Authority Key Identifier:
keyid:4D:4D:BD:28:BB:EB:89:20:B3:7A:A6:04:8A:C2:7D:52:46:6A:C7:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SECUNET/0/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SECUNET/0/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:c2:d6:b4:eb:a4:7f:06:09:79:b8:9b:d1:5f:ef:0d:11:2b:
77:76:8c:07:8c:ec:ec:b4:78:22:5a:cd:df:bc:10:3c:1a:2f:
78:1f:a3:69:2b:b1:b5:81:6a:26:a2:82:a7:ec:cc:4e:03:19:
df:e0:14:4b:77:50:68:f2:40:f1:9a:07:02:13:6d:ed:8f:15:
5f:f1:e1:b1:cd:30:96:9e:41:cb:ff:22:8d:7d:9c:6e:04:11:
b5:e2:ad:8a:ab:12:44:3c:61:73:cf:c5:82:df:4d:96:a2:fe:
e5:9c:0c:95:1d:dd:16:94:16:a2:1c:7f:aa:4d:6b:16:a6:39:
d4:76:b9:a6:8a:4a:6b:38:f3:e2:87:78:4f:d3:6b:f9:26:f5:
7e:5a:28:4b:b4:3f:82:fe:57:b7:75:56:fe:bf:18:84:09:0e:
96:b6:c9:c6:22:96:8d:d0:27:92:6e:a1:8a:db:f6:f2:ed:de:
f8:ff:5e:d4:c6:ea:ab:a2:55:a1:49:7c:e1:5e:70:13:6a:c3:
72:5e:96:07:a5:37:82:12:b8:7b:b8:e6:c8:17:47:b8:c1:a4:
a1:be:13:70:1b:71:d5:50:a2:12:3e:89:38:9a:d7:cd:41:c8:
5b:0e:b6:e2:e3:b6:9f:42:0a:bf:99:c8:68:41:c0:59:60:24:
36:c1:4c:6e
-----BEGIN CERTIFICATE-----
MIIE5jCCA86gAwIBAgIUJ85X2gUpd3oMFu1hISB2cRALnK0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEQ0REJEMjhCQkVCODkyMEIzN0FBNjA0OEFDMjdENTI0
NjZBQzdFNjAeFw0yNjA5MjUxMjM4MTFaFw0yNjA5MjYxNTIyMTFaMDMxMTAvBgNV
BAMTKDc2REVFRjI2ODJBNjlFNDQ1RUEzQkRBOTA3NTFDREJERjhGQkZEQUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn7I6npVFj8wIpFeq/pWrW6p7C
++WIZUBpChxfQ7jNXx2rqE3q8fV7hK7ZFKyXSS8j7efWECv0oOGMY677BoZBMsjd
a5jMPFUx1CEsaV/2rZs70v9tpFd4L6pZ4Cw6pucTHuBl/K7RZHRz1WOcJfOWNMeg
XcdL4XiEilLz+jqd9vi3wYEWgiskP59OoqAqRZfQUiRZ2DBav2j/wL0Ydzchb/6e
H5QAxZFiFRLTagGXXSYU4+HQKARDTszWl/7Hs1PwgQJlLooTZGwXBN4MXLuov0QC
Er+4mdXq5EdDtJCCseqUHol4Yd1x4ERVxFHlMU17kuenkusBXaUNsDtTFYAxAgMB
AAGjggHwMIIB7DAdBgNVHQ4EFgQUdt7vJoKmnkReo72pB1HNvfj7/a8wHwYDVR0j
BBgwFoAUTU29KLvriSCzeqYEisJ9UkZqx+YwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0VDVU5F
VC8wLzRENERCRDI4QkJFQjg5MjBCMzdBQTYwNDhBQzI3RDUyNDY2QUM3RTYuY3Js
MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu
aWMudHcvcnBraS9UV05JQ0NBLzEvNEQ0REJEMjhCQkVCODkyMEIzN0FBNjA0OEFD
MjdENTI0NjZBQzdFNi5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy
c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1NFQ1VORVQvMC80RDREQkQyOEJC
RUI4OTIwQjM3QUE2MDQ4QUMyN0Q1MjQ2NkFDN0U2Lm1mdDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADsLWtOuk
fwYJebib0V/vDRErd3aMB4zs7LR4IlrN37wQPBoveB+jaSuxtYFqJqKCp+zMTgMZ
3+AUS3dQaPJA8ZoHAhNt7Y8VX/Hhsc0wlp5By/8ijX2cbgQRteKtiqsSRDxhc8/F
gt9NlqL+5ZwMlR3dFpQWohx/qk1rFqY51Ha5popKazjz4od4T9Nr+Sb1flooS7Q/
gv5Xt3VW/r8YhAkOlrbJxiKWjdAnkm6hitv28u3e+P9e1Mbqq6JVoUl84V5wE2rD
cl6WB6U3ghK4e7jmyBdHuMGkob4TcBtx1VCiEj6JOJrXzUHIWw624uO2n0IKv5nI
aEHAWWAkNsFMbg==
-----END CERTIFICATE-----
Generated at Fri Sep 25 22:08:48 2026 by rpki-client