
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWD-COM-TW/0/AD79CBDEB391C70F0A9DAD7888224213297EEB3A.mft
File: AD79CBDEB391C70F0A9DAD7888224213297EEB3A.mft (raw, json)
Hash identifier: UDcYvh4YjGrIfiQbqaihf+gFLIWvuid7CCVgqi8G3ag=
Subject key identifier: 70:71:13:EB:74:2C:0B:69:6A:05:14:6E:DD:7F:F0:EA:3F:58:20:1B
Authority key identifier: AD:79:CB:DE:B3:91:C7:0F:0A:9D:AD:78:88:22:42:13:29:7E:EB:3A
Certificate issuer: /CN=AD79CBDEB391C70F0A9DAD7888224213297EEB3A
Certificate serial: 0DDB01BB28448164ECF1D18FED8A1657C753B85F
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AD79CBDEB391C70F0A9DAD7888224213297EEB3A.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWD-COM-TW/0/AD79CBDEB391C70F0A9DAD7888224213297EEB3A.mft
Manifest number: 67
Signing time: Thu 23 Jul 2026 17:51:23 +0000
Manifest this update: Thu 23 Jul 2026 17:46:23 +0000
Manifest next update: Fri 24 Jul 2026 18:06:23 +0000
Files and hashes: 1: 3232332e3136352e31352e302f32342d3234203d3e20313333393535.roa (hash: vzvsaRt3rkqEGPQk4J2sABSExNjL19sA4MUYScGsF+g=)
2: 3232332e3136352e382e302f32342d3234203d3e20313333393535.roa (hash: 211j9d7v6cqKfTJDkyYktBBdrb7sSCkBHmY96MN17tA=)
3: 3232332e3136352e392e302f32342d3234203d3e20313333393535.roa (hash: fVpKpRteO0VaGR3toHlP0vvzNxEFvd9ooLHtR/Rm6ss=)
4: 3232332e3136352e31302e302f32342d3234203d3e20313333393535.roa (hash: 34le8Xt54+WlmHbA7MxBAZytMwZ88iAqDKmDa3GmapE=)
5: AD79CBDEB391C70F0A9DAD7888224213297EEB3A.crl (hash: 5hXLpHAVGnHKwXoctf0KNnMMcYLDLn9pxr+AILj1i94=)
6: 3232332e3136352e31332e302f32342d3234203d3e20313333393535.roa (hash: Pq+rcQBopuW70X5LeXjFWpzJbmIFP/Yyd1b9pbIm2QA=)
7: 3232332e3136352e31322e302f32342d3234203d3e20313333393535.roa (hash: 9G6BmFXh8fI5XHgtWuAKkjyuUhCjr0NlC/99CzJuGCU=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWD-COM-TW/0/AD79CBDEB391C70F0A9DAD7888224213297EEB3A.crl
rsync://rpkica.twnic.tw/rpki/TWD-COM-TW/0/AD79CBDEB391C70F0A9DAD7888224213297EEB3A.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AD79CBDEB391C70F0A9DAD7888224213297EEB3A.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 13:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:db:01:bb:28:44:81:64:ec:f1:d1:8f:ed:8a:16:57:c7:53:b8:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AD79CBDEB391C70F0A9DAD7888224213297EEB3A
Validity
Not Before: Jul 23 17:46:23 2026 GMT
Not After : Jul 24 18:06:23 2026 GMT
Subject: CN=707113EB742C0B696A05146EDD7FF0EA3F58201B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a1:d9:9a:49:62:ce:e4:0f:e8:99:a4:7b:14:
90:dd:af:51:5d:f7:97:fc:73:61:99:21:66:55:77:
a8:3c:1c:b5:fe:af:8a:fe:57:11:06:a2:b0:4d:a3:
ba:bf:85:64:98:19:d4:d8:f1:1d:78:cb:14:3a:13:
66:ee:6b:84:32:00:c6:43:12:93:79:84:27:4e:4a:
77:92:a6:de:11:44:d1:33:81:43:69:d0:04:5a:08:
eb:56:48:a8:80:a2:b0:42:36:59:09:69:64:8a:66:
4c:76:fb:63:a5:0e:70:8d:f4:a8:04:28:55:1f:87:
9e:75:77:09:3d:3f:b4:73:86:86:34:85:8e:e1:0c:
ad:4d:8b:4c:c8:78:88:b2:bd:38:51:ca:26:bc:f3:
3c:de:10:fa:fc:ef:02:c9:93:f6:1a:f4:9a:87:5d:
d6:de:e4:53:ad:08:9d:0c:be:3d:d3:41:cb:05:91:
57:32:76:a0:a7:dc:c7:47:71:e1:6d:1c:ad:64:e7:
7c:2b:43:d4:35:53:8e:38:49:c5:93:b7:34:e8:4a:
28:af:e3:6d:55:90:80:d3:c5:0f:7c:bd:30:cf:e3:
a7:b5:8c:55:c6:da:f0:0a:94:e9:0d:ec:bf:1b:53:
07:9d:74:32:67:4d:ca:cb:60:a1:a6:70:6e:b7:57:
25:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:71:13:EB:74:2C:0B:69:6A:05:14:6E:DD:7F:F0:EA:3F:58:20:1B
X509v3 Authority Key Identifier:
keyid:AD:79:CB:DE:B3:91:C7:0F:0A:9D:AD:78:88:22:42:13:29:7E:EB:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWD-COM-TW/0/AD79CBDEB391C70F0A9DAD7888224213297EEB3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AD79CBDEB391C70F0A9DAD7888224213297EEB3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWD-COM-TW/0/AD79CBDEB391C70F0A9DAD7888224213297EEB3A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:8d:e5:d2:d5:00:79:b4:3c:2e:4c:ac:08:7a:7a:fb:48:6a:
d4:78:c2:01:3c:4e:5b:06:87:6e:b2:84:a8:72:d2:c5:9c:54:
9e:44:62:4d:65:94:aa:4f:15:01:9b:5e:07:0f:c7:7f:1a:81:
00:a1:8f:38:c4:91:96:28:31:37:fc:63:0b:bc:bb:8b:6b:db:
e1:a7:c1:2b:34:02:d6:08:22:53:64:8a:cf:4b:d3:bc:28:0f:
a4:ba:90:68:99:fe:5a:94:fb:18:5f:57:ac:e0:a3:54:19:0f:
91:14:fb:f8:02:f6:b4:c3:54:5e:8c:fd:ca:0e:40:17:94:ef:
57:3b:dc:b1:5e:c1:70:3a:6d:e1:d7:ab:77:ed:46:3f:0e:69:
bb:fe:28:e1:f7:42:01:f8:79:a1:98:db:c6:fb:18:f2:89:19:
48:95:53:8a:b6:b3:19:9e:de:1f:e2:40:31:4e:e8:01:c7:e1:
d5:af:37:6a:62:20:43:14:84:d3:00:11:19:b6:2d:77:11:b4:
f2:a3:e7:47:8e:f7:6c:9f:90:dd:4b:e3:e8:14:b4:f9:0b:78:
74:c8:0a:f5:ca:59:aa:45:26:29:12:90:da:cc:15:38:d5:60:
32:86:ba:56:a3:ce:fa:4a:b7:99:9d:f8:ae:8b:85:aa:37:a8:
e4:17:fc:bb
-----BEGIN CERTIFICATE-----
MIIE7DCCA9SgAwIBAgIUDdsBuyhEgWTs8dGP7YoWV8dTuF8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUQ3OUNCREVCMzkxQzcwRjBBOURBRDc4ODgyMjQyMTMy
OTdFRUIzQTAeFw0yNjA3MjMxNzQ2MjNaFw0yNjA3MjQxODA2MjNaMDMxMTAvBgNV
BAMTKDcwNzExM0VCNzQyQzBCNjk2QTA1MTQ2RUREN0ZGMEVBM0Y1ODIwMUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5odmaSWLO5A/omaR7FJDdr1Fd
95f8c2GZIWZVd6g8HLX+r4r+VxEGorBNo7q/hWSYGdTY8R14yxQ6E2bua4QyAMZD
EpN5hCdOSneSpt4RRNEzgUNp0ARaCOtWSKiAorBCNlkJaWSKZkx2+2OlDnCN9KgE
KFUfh551dwk9P7RzhoY0hY7hDK1Ni0zIeIiyvThRyia88zzeEPr87wLJk/Ya9JqH
Xdbe5FOtCJ0Mvj3TQcsFkVcydqCn3MdHceFtHK1k53wrQ9Q1U444ScWTtzToSiiv
421VkIDTxQ98vTDP46e1jFXG2vAKlOkN7L8bUweddDJnTcrLYKGmcG63VyVLAgMB
AAGjggH2MIIB8jAdBgNVHQ4EFgQUcHET63QsC2lqBRRu3X/w6j9YIBswHwYDVR0j
BBgwFoAUrXnL3rORxw8Kna14iCJCEyl+6zowDgYDVR0PAQH/BAQDAgeAMGcGA1Ud
HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdELUNP
TS1UVy8wL0FENzlDQkRFQjM5MUM3MEYwQTlEQUQ3ODg4MjI0MjEzMjk3RUVCM0Eu
Y3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBLzEvQUQ3OUNCREVCMzkxQzcwRjBBOURBRDc4
ODgyMjQyMTMyOTdFRUIzQS5jZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzAL
hlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXRC1DT00tVFcvMC9BRDc5
Q0JERUIzOTFDNzBGMEE5REFENzg4ODIyNDIxMzI5N0VFQjNBLm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
H43l0tUAebQ8LkysCHp6+0hq1HjCATxOWwaHbrKEqHLSxZxUnkRiTWWUqk8VAZte
Bw/HfxqBAKGPOMSRligxN/xjC7y7i2vb4afBKzQC1ggiU2SKz0vTvCgPpLqQaJn+
WpT7GF9XrOCjVBkPkRT7+AL2tMNUXoz9yg5AF5TvVzvcsV7BcDpt4derd+1GPw5p
u/4o4fdCAfh5oZjbxvsY8okZSJVTirazGZ7eH+JAMU7oAcfh1a83amIgQxSE0wAR
GbYtdxG08qPnR473bJ+Q3Uvj6BS0+Qt4dMgK9cpZqkUmKRKQ2swVONVgMoa6VqPO
+kq3mZ34rouFqjeo5Bf8uw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:41:22 2026 by rpki-client