
$ rpki-client -vvvf rpkica.twnic.tw/rpki/SIMPLE/0/5407824F2094BDB5E96C450A4F36563A73225CCB.mft
File: 5407824F2094BDB5E96C450A4F36563A73225CCB.mft (raw, json)
Hash identifier: PEZ2hjYyEBSrtO2wXtZcCCouFmCjy9wkO1RoOnQb4uk=
Subject key identifier: 08:F1:B5:28:CD:39:2E:57:43:03:14:18:D4:79:40:87:30:AA:62:79
Authority key identifier: 54:07:82:4F:20:94:BD:B5:E9:6C:45:0A:4F:36:56:3A:73:22:5C:CB
Certificate issuer: /CN=5407824F2094BDB5E96C450A4F36563A73225CCB
Certificate serial: 0B1847BEE4C672520F29D1E33423AC880A53A966
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5407824F2094BDB5E96C450A4F36563A73225CCB.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SIMPLE/0/5407824F2094BDB5E96C450A4F36563A73225CCB.mft
Manifest number: FF
Signing time: Sun 15 Nov 2026 07:57:41 +0000
Manifest this update: Sun 15 Nov 2026 07:52:41 +0000
Manifest next update: Mon 16 Nov 2026 09:54:41 +0000
Files and hashes: 1: 323430313a626136303a3a2f33322d3438203d3e2039393233.roa (hash: 5TVrVE33kIL0XhQaO3gte1KLCXkOhF1o3uG63J4/55s=)
2: 5407824F2094BDB5E96C450A4F36563A73225CCB.crl (hash: xFyJCDwoOJCjecVaLV3bSAkeCgtzLjjPqjhfsIXyeOY=)
3: 323430313a626136303a3a2f33322d3438203d3e203332353935.roa (hash: RBIOP3iKwRtqrSWqj44FA3/x/uVqA34IvA8ZG8hK44Q=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/SIMPLE/0/5407824F2094BDB5E96C450A4F36563A73225CCB.crl
rsync://rpkica.twnic.tw/rpki/SIMPLE/0/5407824F2094BDB5E96C450A4F36563A73225CCB.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5407824F2094BDB5E96C450A4F36563A73225CCB.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 16 Nov 2026 08:45:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:18:47:be:e4:c6:72:52:0f:29:d1:e3:34:23:ac:88:0a:53:a9:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5407824F2094BDB5E96C450A4F36563A73225CCB
Validity
Not Before: Nov 15 07:52:41 2026 GMT
Not After : Nov 16 09:54:41 2026 GMT
Subject: CN=08F1B528CD392E5743031418D479408730AA6279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5a:d0:d8:c1:8c:90:59:42:b7:07:75:00:d4:
ab:e2:70:55:a4:c6:bd:73:3b:da:1a:3f:f3:e2:fb:
41:dc:d6:36:c4:20:b5:82:4b:e1:ea:ec:60:38:d7:
81:f3:d2:9e:6b:64:64:ad:d1:5c:b2:ed:1e:47:57:
19:98:ad:38:0c:a5:4b:c6:17:97:1d:9d:61:35:6e:
46:df:b0:6c:73:89:b5:a3:6a:cd:66:5d:b8:d1:10:
d0:1e:ae:05:5f:d0:88:e9:e4:97:2d:7f:ad:bd:b5:
5e:84:cf:f2:93:6a:82:72:8f:3d:a6:a8:f5:f7:9f:
de:79:86:ec:e1:ed:1c:5b:c2:a6:a2:fd:4b:6b:6d:
50:b9:88:c8:33:56:a5:03:b4:8a:cf:74:98:a4:53:
c3:c4:53:87:64:b9:81:f2:85:0a:42:9b:52:b3:5a:
c2:69:cc:c3:29:77:94:ce:76:66:8f:67:90:d7:cf:
1a:a5:33:60:79:63:c8:0b:fe:1d:eb:55:7b:70:4d:
88:51:55:a4:d4:68:0a:b2:c6:6b:71:46:b0:73:0b:
67:f5:da:c2:87:ce:1f:56:fc:6d:bf:59:ac:bb:7b:
3c:d4:f3:6f:f6:59:fe:ff:f7:00:ea:7f:71:ae:c1:
f1:96:f7:2a:11:80:0e:9f:97:55:d6:3b:ba:4e:be:
25:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:F1:B5:28:CD:39:2E:57:43:03:14:18:D4:79:40:87:30:AA:62:79
X509v3 Authority Key Identifier:
keyid:54:07:82:4F:20:94:BD:B5:E9:6C:45:0A:4F:36:56:3A:73:22:5C:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SIMPLE/0/5407824F2094BDB5E96C450A4F36563A73225CCB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5407824F2094BDB5E96C450A4F36563A73225CCB.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SIMPLE/0/5407824F2094BDB5E96C450A4F36563A73225CCB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:8f:fa:24:bd:61:3d:6a:85:d2:e8:3a:a4:3c:53:3b:05:55:
0b:5e:1e:62:7f:8f:0a:77:34:db:87:4f:7f:c5:c4:ab:d2:a5:
41:f2:6b:e1:49:6d:65:f3:45:3d:88:99:22:2b:f1:90:fb:a2:
7e:42:74:e9:1d:02:90:2f:e3:de:a1:4a:a7:a1:ee:8c:4a:a9:
01:76:f9:1d:0a:73:1d:5b:c4:09:81:68:b9:c7:46:12:03:4a:
c7:cb:a9:14:e5:6d:f7:80:ae:8e:8f:50:c7:ca:e7:e5:f3:ca:
d1:cc:bc:a4:27:55:ca:e4:e4:a3:6d:81:97:18:95:18:c0:ce:
a6:31:96:78:ab:51:37:89:b1:28:4d:db:eb:c1:82:27:1d:c6:
88:fa:cf:a6:03:b3:d4:bd:6e:68:fe:3b:cf:32:31:d9:f1:41:
bd:37:95:7c:1f:13:f9:48:cc:cb:30:3b:e9:65:9c:2e:f5:dd:
43:4e:ab:0f:0b:84:de:a6:25:af:db:eb:b0:da:86:6f:28:91:
e5:d3:15:98:57:1c:1b:d7:44:b1:02:15:d0:14:12:5d:f2:ac:
74:d5:29:f2:9b:71:31:d7:f4:0e:c5:09:a0:c7:9a:7f:21:33:
1c:f2:fb:99:5f:8a:62:d6:9b:d4:f0:04:d2:92:49:14:8d:4a:
87:c8:62:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:16:56 2026 by rpki-client