
$ rpki-client -vvvf rpkica.twnic.tw/rpki/TWD-COM-TW/0/AD79CBDEB391C70F0A9DAD7888224213297EEB3A.mft
File: AD79CBDEB391C70F0A9DAD7888224213297EEB3A.mft (raw, json)
Hash identifier: WskmJ62Qpr6oBpxXE3NloByn0D24Qkz8ch8FfbxU2qg=
Subject key identifier: 69:D1:07:3E:F1:5C:B9:34:40:A8:90:FB:CA:DF:CB:E2:27:AE:2D:26
Authority key identifier: AD:79:CB:DE:B3:91:C7:0F:0A:9D:AD:78:88:22:42:13:29:7E:EB:3A
Certificate issuer: /CN=AD79CBDEB391C70F0A9DAD7888224213297EEB3A
Certificate serial: 03FB63EFB4DCB5A34C224CB4C76AE22B65DF8162
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AD79CBDEB391C70F0A9DAD7888224213297EEB3A.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWD-COM-TW/0/AD79CBDEB391C70F0A9DAD7888224213297EEB3A.mft
Manifest number: BC
Signing time: Thu 24 Sep 2026 17:48:29 +0000
Manifest this update: Thu 24 Sep 2026 17:43:29 +0000
Manifest next update: Fri 25 Sep 2026 18:44:29 +0000
Files and hashes: 1: 3232332e3136352e31352e302f32342d3234203d3e20313333393535.roa (hash: vzvsaRt3rkqEGPQk4J2sABSExNjL19sA4MUYScGsF+g=)
2: 3232332e3136352e31302e302f32342d3234203d3e20313333393535.roa (hash: 34le8Xt54+WlmHbA7MxBAZytMwZ88iAqDKmDa3GmapE=)
3: 3232332e3136352e382e302f32342d3234203d3e20313333393535.roa (hash: 211j9d7v6cqKfTJDkyYktBBdrb7sSCkBHmY96MN17tA=)
4: 3232332e3136352e392e302f32342d3234203d3e20313333393535.roa (hash: fVpKpRteO0VaGR3toHlP0vvzNxEFvd9ooLHtR/Rm6ss=)
5: 3232332e3136352e31332e302f32342d3234203d3e20313333393535.roa (hash: Pq+rcQBopuW70X5LeXjFWpzJbmIFP/Yyd1b9pbIm2QA=)
6: 3232332e3136352e31322e302f32342d3234203d3e20313333393535.roa (hash: 9G6BmFXh8fI5XHgtWuAKkjyuUhCjr0NlC/99CzJuGCU=)
7: AD79CBDEB391C70F0A9DAD7888224213297EEB3A.crl (hash: r1ftxw2WrmhqwOJis7vp0BI+K04cSDEapxOniNoFCWQ=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWD-COM-TW/0/AD79CBDEB391C70F0A9DAD7888224213297EEB3A.crl
rsync://rpkica.twnic.tw/rpki/TWD-COM-TW/0/AD79CBDEB391C70F0A9DAD7888224213297EEB3A.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AD79CBDEB391C70F0A9DAD7888224213297EEB3A.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 18:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:fb:63:ef:b4:dc:b5:a3:4c:22:4c:b4:c7:6a:e2:2b:65:df:81:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AD79CBDEB391C70F0A9DAD7888224213297EEB3A
Validity
Not Before: Sep 24 17:43:29 2026 GMT
Not After : Sep 25 18:44:29 2026 GMT
Subject: CN=69D1073EF15CB93440A890FBCADFCBE227AE2D26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0e:4f:89:f8:85:ad:e4:b3:d2:7b:4e:9a:55:
de:29:46:05:e4:ea:9f:aa:0f:f7:87:51:27:22:a5:
8d:ab:46:7c:b7:89:2f:d0:e9:e8:f0:b3:1e:67:12:
55:99:54:6a:95:96:7a:e2:a4:35:ae:43:7a:dd:3b:
a5:fa:4c:f3:ce:fe:ac:35:d8:fc:15:05:8e:a2:f0:
01:ef:2c:b7:9a:61:45:f3:9d:43:b5:d1:f0:ad:de:
64:5b:32:3f:f8:91:33:b2:0f:00:75:f5:a6:ac:ce:
8d:fe:57:cf:88:0c:34:1d:19:a9:8a:32:8d:e7:b9:
05:db:ac:6c:af:ff:3a:27:b0:bc:95:9f:45:e5:65:
4e:9c:b6:db:18:72:d5:a0:8e:6b:5f:68:3d:3b:f7:
38:f5:95:6f:e3:35:47:b7:de:d7:b4:98:61:28:1d:
7d:99:49:12:f5:a3:39:26:76:d9:91:4d:a1:6c:5d:
d5:d4:6a:92:b6:37:ca:65:e8:d3:c4:ec:67:39:9d:
94:0a:51:32:c4:cb:e6:f5:2c:b5:da:b1:2e:13:b8:
c5:a0:da:b3:af:f0:3a:10:d5:12:7a:03:d7:07:85:
22:36:3a:af:0c:a0:1e:ab:9e:db:cb:2f:79:ea:2d:
7c:ed:d0:92:7a:5d:86:7e:2d:12:d3:c7:be:36:72:
07:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:D1:07:3E:F1:5C:B9:34:40:A8:90:FB:CA:DF:CB:E2:27:AE:2D:26
X509v3 Authority Key Identifier:
keyid:AD:79:CB:DE:B3:91:C7:0F:0A:9D:AD:78:88:22:42:13:29:7E:EB:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWD-COM-TW/0/AD79CBDEB391C70F0A9DAD7888224213297EEB3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AD79CBDEB391C70F0A9DAD7888224213297EEB3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWD-COM-TW/0/AD79CBDEB391C70F0A9DAD7888224213297EEB3A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:b4:52:cc:a8:a1:02:08:2b:17:eb:64:78:fa:e6:96:16:39:
37:4c:63:f3:f2:d3:7c:bb:66:cb:d0:b4:26:02:53:cf:1d:49:
c0:3e:04:99:e5:0a:a3:50:e6:82:94:b4:b3:fd:3b:1e:fb:1e:
52:a4:44:76:62:55:a9:f3:e7:98:a0:35:e0:c5:13:5b:b6:e2:
94:dc:18:09:7f:66:63:71:20:b5:91:78:0e:c1:9c:1c:b6:b6:
cb:b1:f3:6b:27:e8:07:b3:90:06:bf:08:c8:59:35:cd:e4:9d:
71:85:de:e6:a4:dd:6b:0a:ff:87:37:d9:07:89:02:5d:34:c5:
b4:59:ee:d3:2a:e3:cf:dd:13:dd:94:8a:ee:8a:02:8e:b7:9a:
12:08:b2:86:44:49:fa:5d:25:b4:bb:85:b9:c5:d1:68:0a:9d:
3e:87:34:7e:43:75:10:09:73:ac:f7:97:29:ce:2f:89:31:15:
6f:fa:5e:33:8f:ba:41:bc:de:04:17:2d:09:cd:d5:17:d9:9d:
ad:dc:af:a0:5f:29:cb:5a:3f:81:47:28:ab:ca:4c:12:4d:68:
65:e6:39:95:91:2b:a5:18:7c:57:e5:67:23:05:31:0c:5b:e5:
ac:6c:c0:aa:fb:d1:4e:02:18:ab:ff:40:f8:0c:be:66:d3:08:
3f:77:85:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:35:32 2026 by rpki-client