
$ rpki-client -vvf rpkica.twnic.tw/rpki/SHIJICOLTD/0/1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.mft
File: 1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.mft (raw, json)
Hash identifier: MuXnsQNbNG3u1ln7+UVO213Q4W/ibB8jqXUkv6a+XzU=
Subject key identifier: 03:E1:B4:CA:2B:B6:B8:50:74:3E:2F:1F:E2:93:FD:83:46:8D:2C:21
Authority key identifier: 1A:5D:E0:B5:C7:2E:02:E2:A2:38:0C:A2:7C:ED:A3:32:99:59:C5:32
Certificate issuer: /CN=1A5DE0B5C72E02E2A2380CA27CEDA3329959C532
Certificate serial: 2F1929973A86AF8232FDB14902173D6EC6129495
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SHIJICOLTD/0/1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.mft
Manifest number: 0B
Signing time: Tue 12 May 2026 12:00:50 +0000
Manifest this update: Tue 12 May 2026 11:55:50 +0000
Manifest next update: Wed 13 May 2026 12:36:50 +0000
Files and hashes: 1: 323430313a356632303a663030303a3a2f34382d313237203d3e20323136313233.roa (hash: kbqJXOVL+rIVgTjXmyOflW5aA5dujQIMdG/ncqD3NDM=)
2: 323430313a356632303a313030303a3a2f33362d3438203d3e2039393233.roa (hash: 7Q4Gr2Sw3gVQE2N5T2sDzOwrlfIUZjCRsL8QVX+lTmo=)
3: 323430313a356632303a3a2f33322d313237203d3e20313530373637.roa (hash: Ej9DwCYeyuTCZ174KTX54oaUVIPTu6XH7JZcj5XxBwo=)
4: 33362e35302e3234382e302f32332d3332203d3e20323035333239.roa (hash: kvKFidKAXKAwaMmiIgXnzcK5auO8ISz5aFkcmjUeP2E=)
5: 33362e35302e3234382e302f32332d3332203d3e20313530373637.roa (hash: h3JWwr2HmitnfBr13BTu4JXUXE3E10XdIu4AZ17neQQ=)
6: 323430313a356632303a313030303a3a2f33362d313237203d3e203332353935.roa (hash: sExiRNuVZ6Y/PqJdBLwrUGBsgr3jsRNlzqkEQKoiTeI=)
7: 323430313a356632303a3a2f33322d313237203d3e20323035333239.roa (hash: 8yGamJRav/ZDHTFcB9LQPl8vcZJDC9UL92XjkdKbALk=)
8: 1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.crl (hash: 1lIGm8i0q7W7Yc+2tALQMNTtfej7hFdH1wSXIHaqdPs=)
9: 33362e35302e3234392e302f32342d3332203d3e203332353935.roa (hash: 4YC2Q76asHyydDpwY4AZWbAq0mphU7cmSGG8ZDxjJnE=)
10: 33362e35302e3234382e302f32342d3234203d3e20323032383831.roa (hash: WG6X/jnayWkEMowgg+mWD8HiPPilQG6Q3sQOujOR2xs=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/SHIJICOLTD/0/1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.crl
rsync://rpkica.twnic.tw/rpki/SHIJICOLTD/0/1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 12:36:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:19:29:97:3a:86:af:82:32:fd:b1:49:02:17:3d:6e:c6:12:94:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1A5DE0B5C72E02E2A2380CA27CEDA3329959C532
Validity
Not Before: May 12 11:55:50 2026 GMT
Not After : May 13 12:36:50 2026 GMT
Subject: CN=03E1B4CA2BB6B850743E2F1FE293FD83468D2C21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:29:4a:a7:90:11:8e:f8:8c:d1:1c:4a:03:ba:
6b:ff:3e:4a:31:c1:7d:be:a4:1d:ea:4d:a2:38:94:
a7:97:8f:7f:fa:85:f3:d6:12:bf:83:c5:d0:30:ad:
f2:51:c6:7a:34:92:9f:ba:81:cf:f0:cd:7b:32:32:
cf:a1:9d:02:37:91:00:c9:58:11:7c:e9:6f:f0:a1:
59:ac:6b:a8:21:22:10:44:70:3d:b5:35:f3:d1:94:
bf:cf:8a:e6:0f:5a:d2:de:83:60:b9:38:6a:72:89:
b8:15:38:12:fd:d3:2e:a7:74:54:da:02:4c:e2:50:
a5:6a:11:7e:1b:1e:96:65:f1:38:cc:a2:ce:56:1a:
6c:9d:c2:4a:cf:c2:f1:b0:fd:34:35:cf:d4:ad:6b:
3a:ca:7f:e6:85:8c:f9:47:1e:a6:3a:87:13:fe:ed:
23:b4:db:4c:86:f1:93:ae:62:88:d3:07:e4:ea:fa:
a1:2a:a6:7c:4b:0a:8e:c0:12:da:82:d8:e8:9a:50:
c2:39:2c:07:7c:c4:7f:25:b2:25:1e:71:79:84:0b:
28:5c:e1:d0:78:38:a3:74:45:fd:5f:10:ea:f0:72:
40:a4:be:56:ab:4b:bd:9a:61:dc:ec:fb:ee:25:53:
a6:8d:dd:d5:84:e1:05:c8:d3:18:b6:52:89:dd:96:
f0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:E1:B4:CA:2B:B6:B8:50:74:3E:2F:1F:E2:93:FD:83:46:8D:2C:21
X509v3 Authority Key Identifier:
keyid:1A:5D:E0:B5:C7:2E:02:E2:A2:38:0C:A2:7C:ED:A3:32:99:59:C5:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SHIJICOLTD/0/1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SHIJICOLTD/0/1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:aa:43:17:5f:7e:ee:01:3c:11:40:c8:3d:cd:cb:22:5c:86:
38:da:c9:1f:b6:e9:11:10:fd:ed:5c:02:91:fd:4c:c3:96:45:
48:13:60:2c:47:de:f8:a0:63:d3:bd:e3:1b:97:46:20:b4:cb:
5a:65:07:e0:71:f0:83:e3:64:d8:16:08:ab:96:0b:9f:9f:6b:
8c:48:25:6f:89:af:16:89:44:17:11:b4:c8:dd:81:b0:b0:f4:
c3:27:4f:53:d6:5d:0d:84:aa:46:65:26:80:30:3e:b2:62:02:
45:51:82:fe:a0:1d:48:35:ef:e4:52:0f:85:e6:70:38:f8:40:
dd:57:2c:32:64:62:84:4f:75:1b:4a:b0:e8:04:3e:68:60:88:
a3:3f:88:81:b3:33:7c:0e:b7:36:06:65:db:63:9f:43:ef:f1:
60:be:76:e7:22:2f:52:7c:eb:86:a3:57:56:2f:b5:3c:b7:1f:
26:ef:f9:0d:2b:72:2a:52:cf:cc:48:3c:95:af:e8:ce:37:4f:
cb:1a:78:1d:d1:09:73:9e:ab:32:bb:94:13:80:39:df:1f:76:
f0:b0:2c:3b:6a:9c:aa:be:0f:ec:b7:78:ac:a0:8c:82:e0:73:
5b:50:c0:ae:a8:76:31:62:22:4a:4e:e8:56:c3:0c:a9:6f:4b:
63:7a:0a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:38:28 2026 by rpki-client