
$ rpki-client -vvf rpkica.twnic.tw/rpki/TAIWAN_NO1/1/5D61A267754DE88CD8451A63D9D2285FD5AF457D.mft
File: 5D61A267754DE88CD8451A63D9D2285FD5AF457D.mft (raw, json)
Hash identifier: BTyjHu8Vp9adwKPx24EU6lNzZGtxFBh7iOxiSq691Bo=
Subject key identifier: C1:26:CF:3C:BB:C0:73:01:86:FD:DA:3A:90:A4:55:99:13:EE:33:A2
Authority key identifier: 5D:61:A2:67:75:4D:E8:8C:D8:45:1A:63:D9:D2:28:5F:D5:AF:45:7D
Certificate issuer: /CN=5D61A267754DE88CD8451A63D9D2285FD5AF457D
Certificate serial: 57FE6559EB7C79DF34673B3B4C25A93858CF851C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/5D61A267754DE88CD8451A63D9D2285FD5AF457D.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TAIWAN_NO1/1/5D61A267754DE88CD8451A63D9D2285FD5AF457D.mft
Manifest number: 67
Signing time: Fri 24 Jul 2026 10:23:13 +0000
Manifest this update: Fri 24 Jul 2026 10:18:13 +0000
Manifest next update: Sat 25 Jul 2026 11:51:13 +0000
Files and hashes: 1: 3136302e3138372e3230302e302f32342d3234203d3e203338303437.roa (hash: y6F85fIDPHVAvBtzdu5R7Sx6xIWYFOo9//jso0kPGMs=)
2: 3136302e3138372e3230312e302f32342d3234203d3e203632353137.roa (hash: 8yHvYhdJJ9fLsL7Jt/4h751xCSPOoZp026K/sE/wCVc=)
3: 5D61A267754DE88CD8451A63D9D2285FD5AF457D.crl (hash: zZM5X+m5YLFYPxb0TmGvvmGWEdUbIgC32d7dyA3t9vI=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TAIWAN_NO1/1/5D61A267754DE88CD8451A63D9D2285FD5AF457D.crl
rsync://rpkica.twnic.tw/rpki/TAIWAN_NO1/1/5D61A267754DE88CD8451A63D9D2285FD5AF457D.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/5D61A267754DE88CD8451A63D9D2285FD5AF457D.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 02:57:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:fe:65:59:eb:7c:79:df:34:67:3b:3b:4c:25:a9:38:58:cf:85:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D61A267754DE88CD8451A63D9D2285FD5AF457D
Validity
Not Before: Jul 24 10:18:13 2026 GMT
Not After : Jul 25 11:51:13 2026 GMT
Subject: CN=C126CF3CBBC0730186FDDA3A90A4559913EE33A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:54:5d:f9:e3:ce:1e:5c:d3:7d:63:4d:73:78:
6c:6c:3f:be:ae:5a:e0:ca:7b:0d:20:86:95:30:61:
3b:96:5b:f5:01:d1:cf:2e:e5:ee:69:cd:53:e9:14:
01:7a:26:b8:5b:4a:cb:c2:2b:3a:20:37:bf:ac:d2:
c0:6d:5c:dc:a3:b6:eb:86:ae:a7:74:b9:a1:6f:d1:
26:25:c1:b7:83:4b:1c:8a:bf:f4:7c:a2:f4:9d:a4:
c0:19:25:92:b3:5f:3d:b4:43:d9:49:b3:9e:a7:f0:
72:bf:8d:88:d2:fe:7b:68:51:28:e0:c7:81:86:09:
5d:61:db:d6:f0:12:cd:94:f6:10:d0:8b:06:e0:27:
b5:40:b7:6b:18:b9:6b:41:6c:3f:61:3d:9f:f7:d0:
84:c7:ca:26:9f:93:36:13:8f:86:00:7f:fc:9e:7f:
43:b2:a6:79:bc:89:75:de:ca:03:d8:5e:23:85:6d:
e7:72:ab:ff:7f:63:d8:c2:10:60:95:32:e2:da:a2:
de:1d:41:75:c7:18:9e:e2:15:92:21:50:a9:bc:6d:
f7:c9:f4:cb:2c:e4:a1:01:df:c0:cf:2e:fe:77:87:
39:db:25:fd:0e:49:7d:be:49:5e:52:91:d4:c9:92:
6c:23:dd:78:76:93:d8:f4:b1:9a:ab:46:a5:34:f3:
a6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:26:CF:3C:BB:C0:73:01:86:FD:DA:3A:90:A4:55:99:13:EE:33:A2
X509v3 Authority Key Identifier:
keyid:5D:61:A2:67:75:4D:E8:8C:D8:45:1A:63:D9:D2:28:5F:D5:AF:45:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TAIWAN_NO1/1/5D61A267754DE88CD8451A63D9D2285FD5AF457D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/5D61A267754DE88CD8451A63D9D2285FD5AF457D.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TAIWAN_NO1/1/5D61A267754DE88CD8451A63D9D2285FD5AF457D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:71:51:1b:f9:66:f5:d6:98:89:a4:08:31:f7:00:57:88:ec:
ac:50:ca:b1:72:8b:61:2b:f9:ce:f0:07:64:23:96:d3:ea:3a:
7d:0c:70:6c:0b:41:ff:f6:7d:bb:4d:3c:ac:2d:09:3d:52:2e:
57:31:3d:89:ba:f0:30:46:0d:fe:8d:49:7f:60:55:7a:8b:9b:
f1:95:57:9c:d1:cb:5b:b9:98:58:61:56:5d:30:82:04:f7:61:
67:d2:1a:29:13:63:37:13:60:66:73:da:db:7c:a4:72:3e:00:
1b:bd:3d:de:06:b9:68:5f:73:a5:8d:18:00:aa:25:3e:ed:fe:
18:d2:72:fc:bf:b1:19:3e:04:1a:b3:08:02:f8:4b:f6:58:bd:
f3:e8:8b:68:a9:d2:fe:24:25:3b:c3:04:88:7f:39:02:a1:b8:
5e:05:f5:00:53:bf:fe:b3:b3:59:a4:c1:2a:87:71:64:cd:0f:
ed:a6:73:a7:de:d6:8a:c9:a8:19:9c:6b:b5:ab:71:f2:42:ba:
9b:13:56:27:95:73:65:a5:a6:94:f4:03:45:ff:2d:b5:cc:4b:
3c:23:b7:d1:1e:d1:a8:df:c3:2a:62:45:c6:07:0b:fc:87:a7:
1d:06:63:d2:7d:a7:20:d5:6e:aa:a3:3d:e6:50:b6:75:f4:56:
07:c4:48:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:37:04 2026 by rpki-client