
$ rpki-client -vvvf rpkica.twnic.tw/rpki/SMCI/0/D44F2A492A54CEF17E23EBCBA3BD57730005DBCD.mft
File: D44F2A492A54CEF17E23EBCBA3BD57730005DBCD.mft (raw, json)
Hash identifier: wJR1i9Yqen47O/7C/259pNjzxzeDrI5gFl9BR1bx+ug=
Subject key identifier: 70:17:7D:F4:3F:8A:BA:C0:C4:88:37:AE:C3:AE:91:4D:CB:7E:D4:4E
Authority key identifier: D4:4F:2A:49:2A:54:CE:F1:7E:23:EB:CB:A3:BD:57:73:00:05:DB:CD
Certificate issuer: /CN=D44F2A492A54CEF17E23EBCBA3BD57730005DBCD
Certificate serial: 1B2AAAB0503F4226656CCC60288D27B7009AEE16
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D44F2A492A54CEF17E23EBCBA3BD57730005DBCD.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SMCI/0/D44F2A492A54CEF17E23EBCBA3BD57730005DBCD.mft
Manifest number: B6
Signing time: Thu 24 Sep 2026 22:14:35 +0000
Manifest this update: Thu 24 Sep 2026 22:09:35 +0000
Manifest next update: Sat 26 Sep 2026 01:06:35 +0000
Files and hashes: 1: 3130332e3136322e38342e302f32332d3234203d3e203633383934.roa (hash: 64VWfWpwPEaWvDLB9FclOWVpeag/ViOxY6Yn4Un8azo=)
2: D44F2A492A54CEF17E23EBCBA3BD57730005DBCD.crl (hash: dHOTUn+m/VMg+cv+GYPV8ExtFT0updqB31nVNebzamM=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/SMCI/0/D44F2A492A54CEF17E23EBCBA3BD57730005DBCD.crl
rsync://rpkica.twnic.tw/rpki/SMCI/0/D44F2A492A54CEF17E23EBCBA3BD57730005DBCD.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D44F2A492A54CEF17E23EBCBA3BD57730005DBCD.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 21:19:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:2a:aa:b0:50:3f:42:26:65:6c:cc:60:28:8d:27:b7:00:9a:ee:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D44F2A492A54CEF17E23EBCBA3BD57730005DBCD
Validity
Not Before: Sep 24 22:09:35 2026 GMT
Not After : Sep 26 01:06:35 2026 GMT
Subject: CN=70177DF43F8ABAC0C48837AEC3AE914DCB7ED44E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b3:1d:e2:e7:41:6d:0e:26:de:f9:3f:cf:8a:
9b:04:50:c8:66:fc:a9:76:5a:a3:07:11:82:f9:b2:
f4:99:59:b4:60:65:a9:e8:e7:b1:b7:8c:bc:59:f8:
e3:71:5a:b2:a6:9f:42:a5:7e:72:ee:f6:d7:9b:f8:
7a:57:b7:6d:9b:a9:6f:f5:a2:59:1a:6f:7c:ff:1b:
96:14:92:9e:25:ef:6c:f1:32:21:e6:a7:9d:49:26:
88:e9:52:36:53:b9:1b:ec:a8:09:f4:3d:49:4c:ef:
3c:40:3f:f5:c0:24:d9:ed:f1:0d:e5:0d:51:26:fb:
58:eb:e8:a2:9c:6c:bc:f6:69:15:bf:72:82:5c:1a:
85:aa:7b:ae:4a:9f:73:86:1b:96:78:0f:36:56:60:
9b:19:40:12:85:b3:a4:5e:60:f9:90:79:6f:aa:66:
65:f2:84:c2:16:55:e9:3c:61:a2:c3:f5:89:32:82:
b8:91:ed:1a:90:a5:7d:5f:b0:93:8f:70:4e:20:0f:
6f:20:9b:d7:ec:b6:be:8e:13:d1:cf:8f:77:63:2e:
11:45:88:af:3d:5c:e5:31:e7:d6:6f:15:8b:66:10:
9e:35:e0:51:d6:fa:ae:55:51:f2:62:0e:c0:84:a1:
8c:90:93:7c:7c:a6:1a:03:49:bf:5d:b7:86:7c:82:
47:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:17:7D:F4:3F:8A:BA:C0:C4:88:37:AE:C3:AE:91:4D:CB:7E:D4:4E
X509v3 Authority Key Identifier:
keyid:D4:4F:2A:49:2A:54:CE:F1:7E:23:EB:CB:A3:BD:57:73:00:05:DB:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SMCI/0/D44F2A492A54CEF17E23EBCBA3BD57730005DBCD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D44F2A492A54CEF17E23EBCBA3BD57730005DBCD.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SMCI/0/D44F2A492A54CEF17E23EBCBA3BD57730005DBCD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:58:92:21:91:04:de:7e:54:81:79:3a:0d:37:aa:dd:36:9c:
aa:3a:b5:a1:03:33:bf:8f:2f:01:a2:ef:ad:a2:e0:f1:a4:ff:
23:76:2e:95:54:4d:1c:70:b8:6c:09:e2:94:55:4c:bf:21:65:
7d:15:bf:64:21:5a:8a:72:0a:22:d8:ad:7b:9e:6f:75:8a:95:
fa:0c:e0:a5:d5:09:9f:b5:e8:65:20:93:36:09:e7:ed:86:79:
14:a0:45:97:04:14:24:c6:16:4c:08:1c:a7:52:a1:22:e7:77:
3e:c7:8a:12:58:48:77:45:d0:c5:4e:51:b3:27:99:9e:bf:15:
e4:ab:dd:a1:1b:66:4d:f2:c1:e8:c9:35:54:c9:88:7e:78:3f:
0a:55:50:b8:00:35:b3:0b:10:56:68:04:47:35:19:ea:18:e9:
52:f8:05:db:0e:97:3c:10:3d:08:c9:3a:13:90:91:a0:0d:1d:
80:b8:3c:6d:53:72:e8:c2:7f:35:08:11:77:1e:21:ef:5d:db:
3e:7b:75:26:af:10:bd:0e:4b:02:39:7d:92:4a:47:bb:a6:a7:
88:76:57:74:5f:c0:79:9d:1e:bf:ea:16:ae:ec:1d:b7:1e:08:
52:9e:6a:8e:70:62:ec:7d:34:7a:b9:d0:d1:d5:2e:d2:7d:c1:
51:f4:8e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:44:42 2026 by rpki-client