
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNCTU/0/46AF3A717A403BC5489BF5532E8CB67721141841.mft
File: 46AF3A717A403BC5489BF5532E8CB67721141841.mft (raw, json)
Hash identifier: oasHcNipmlHkOqUMYyRlT/lcMdNZU6M1rwTcdzylPZQ=
Subject key identifier: DB:1E:D6:61:D3:54:BA:69:67:67:01:AB:9E:28:92:29:AA:0A:75:AB
Authority key identifier: 46:AF:3A:71:7A:40:3B:C5:48:9B:F5:53:2E:8C:B6:77:21:14:18:41
Certificate issuer: /CN=46AF3A717A403BC5489BF5532E8CB67721141841
Certificate serial: 6FE2872D0E7F67269FE6849CD2622DF6B6038E36
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/46AF3A717A403BC5489BF5532E8CB67721141841.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNCTU/0/46AF3A717A403BC5489BF5532E8CB67721141841.mft
Manifest number: 65
Signing time: Thu 23 Jul 2026 16:28:13 +0000
Manifest this update: Thu 23 Jul 2026 16:23:13 +0000
Manifest next update: Fri 24 Jul 2026 17:36:13 +0000
Files and hashes: 1: 323030313a6631383a3a2f33322d3634203d3e2039393136.roa (hash: 4fzQlK7Do1Cwvcdk+e0kfmflXXnhAsZ2G8TwcC4Ef3A=)
2: 46AF3A717A403BC5489BF5532E8CB67721141841.crl (hash: v+XQXc91Fw8qgCSnJSYEVvY6On+7U5obx7j+7bu7rhs=)
3: 3231312e37362e3234302e302f32302d3234203d3e203138313835.roa (hash: I1YE3+FdBKoKjsHXEupZh96Yo/8ldeKJYx6VAVq02Hc=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNCTU/0/46AF3A717A403BC5489BF5532E8CB67721141841.crl
rsync://rpkica.twnic.tw/rpki/TWNCTU/0/46AF3A717A403BC5489BF5532E8CB67721141841.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/46AF3A717A403BC5489BF5532E8CB67721141841.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 17:36:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:e2:87:2d:0e:7f:67:26:9f:e6:84:9c:d2:62:2d:f6:b6:03:8e:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46AF3A717A403BC5489BF5532E8CB67721141841
Validity
Not Before: Jul 23 16:23:13 2026 GMT
Not After : Jul 24 17:36:13 2026 GMT
Subject: CN=DB1ED661D354BA69676701AB9E289229AA0A75AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ce:a2:75:a8:f9:de:b3:b0:a5:55:c8:89:14:
f0:f9:2d:01:f9:13:1a:b7:6d:6e:24:6d:77:1a:e5:
fe:6d:1c:36:6d:33:04:4b:21:6f:ab:71:ed:ea:75:
3f:f0:14:0e:01:1a:25:34:2e:c3:30:ce:7e:fe:67:
59:62:87:99:4f:03:03:74:5f:53:72:57:20:c8:00:
53:8b:0b:61:66:2a:f2:d4:8d:cc:77:50:56:48:be:
20:c8:ec:7c:99:88:23:9f:5c:71:a0:65:da:90:04:
f7:94:00:44:8c:83:1e:09:23:ca:f9:6a:bf:0e:17:
86:f9:9c:99:d4:39:54:f8:9f:2e:3e:b2:ba:b6:10:
b5:e4:e1:02:5b:6a:c5:09:53:fe:f4:12:ca:fe:67:
9f:38:df:26:68:ef:13:6b:5f:b7:8a:c1:88:cc:e2:
bc:2c:aa:74:a1:7b:4c:c5:f2:61:79:fb:bc:72:35:
2c:3e:c2:63:ac:3d:b5:e8:93:ca:ec:bc:65:c8:19:
cc:80:7e:8a:79:23:6f:67:69:ca:7a:19:a8:6f:59:
68:f6:c1:a5:e1:79:19:56:a1:54:21:ac:70:be:fd:
c2:36:34:32:25:b2:b6:83:9f:0f:39:4b:72:69:60:
ba:62:81:bd:0c:99:ac:98:22:ec:83:f5:ed:8b:58:
77:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:1E:D6:61:D3:54:BA:69:67:67:01:AB:9E:28:92:29:AA:0A:75:AB
X509v3 Authority Key Identifier:
keyid:46:AF:3A:71:7A:40:3B:C5:48:9B:F5:53:2E:8C:B6:77:21:14:18:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNCTU/0/46AF3A717A403BC5489BF5532E8CB67721141841.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/46AF3A717A403BC5489BF5532E8CB67721141841.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNCTU/0/46AF3A717A403BC5489BF5532E8CB67721141841.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:57:b2:5c:79:80:a2:cd:99:49:90:56:8a:14:fe:93:41:b4:
30:7d:42:3c:dc:c0:ed:21:55:24:a0:1b:0a:14:18:01:22:03:
b3:63:13:f2:53:35:a5:3b:48:3d:d6:7e:4e:3c:55:7a:79:89:
22:47:a1:cf:eb:9a:ca:ac:8d:b4:e9:fe:08:59:e9:b3:54:84:
64:f2:18:f6:6b:c8:5b:65:fd:25:bf:62:98:d5:ce:d4:ab:43:
62:69:ce:0a:a2:d9:68:d7:a4:14:42:55:84:80:a8:62:82:42:
15:5d:3d:60:57:96:6a:dc:40:71:72:4f:2d:ea:db:93:a3:99:
9e:3e:fc:fa:59:be:22:04:1a:d1:96:9b:a8:89:ee:c0:28:4b:
da:10:e4:77:34:16:ec:40:6b:31:4b:c5:ea:96:9e:5c:7f:90:
14:33:5f:62:06:57:41:d4:11:75:ff:b2:f0:08:0e:22:37:c3:
40:da:f6:ee:15:b0:a5:c7:9c:a6:06:8c:03:2c:31:d7:39:af:
29:aa:0d:0f:00:bc:8a:bf:97:cb:cf:23:aa:49:c2:d9:d1:48:
b1:17:8b:c0:ca:51:cb:d2:b8:e5:34:12:7d:f5:a0:79:48:6b:
00:85:35:bb:bf:d1:38:53:8d:4a:eb:bc:b6:0d:52:93:f8:8c:
1c:82:99:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:13:16 2026 by rpki-client