
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft
File: C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft (raw, json)
Hash identifier: aZ7naFqmzb12koP/lB3lhOSJJ8ElYxfY3YaguQmnnpA=
Subject key identifier: B6:52:4E:1A:D1:BA:66:87:EF:84:6F:C2:A8:A0:B6:44:ED:97:7D:AB
Authority key identifier: C4:9B:AE:24:30:BE:EC:35:4C:1B:14:F2:26:E7:61:FC:9B:DC:F0:05
Certificate issuer: /CN=A91BDB290000/serialNumber=C49BAE2430BEEC354C1B14F226E761FC9BDCF005
Certificate serial: 39185598389E2ACBA24133CE0C34B03CB8F96DD5
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft
Manifest number: 0194
Signing time: Tue 12 May 2026 01:09:20 +0000
Manifest this update: Tue 12 May 2026 01:04:20 +0000
Manifest next update: Wed 13 May 2026 01:21:20 +0000
Files and hashes: 1: 9F397B838061280C2F2A887AC9D64012310492D8.cer (hash: AkAR+lSILTN1pLkO4LJRfr6uv+VMbaYKmt4kHAXjuR0=)
2: BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.cer (hash: Wgiiza2OtZGJQUX76W3y7Jpru4jNxqcQx1dg64cWfx0=)
3: 5F225958DB67E3418BFBE293BFD25E6F6A9346B9.cer (hash: wYdtix/LDee8ZEJGiTxD5AqF7ZWjOoSZiL6WSmE5qzo=)
4: 138A054AE20232FE74DA41A7D1FB6684BFF8B631.cer (hash: Zo39dsWqNkolqaKhWzlf8458SfxFo6DnsdWakso6pqc=)
5: BDC7715D29F4E43198D59315B71674EE9F648F6D.cer (hash: mHwEYS1tNelL6RV/T7poIrm2xe//+2sBhpMulCadIwE=)
6: 71E534018547D77B65EBCD0FC4941DC8113FAEE3.cer (hash: e/12Bvs4XBSRwhh9g+zZp9qn/cEuRAq2sYTeeh5SElU=)
7: C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl (hash: tx2kYd5XbebZeg+rFQjWWuhzPctvh1TWFnjOQkdWXTA=)
8: 061E60E9FDA5A25EDC961572A4CBA8C539D780AF.cer (hash: etK9ChY/67xJMPxpSS2bELv6+079wOhz5Owjed+7V9s=)
9: 1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.cer (hash: I5RrhNzkFBB9aTAVEwcT8m+Fq6yg/7jrMob8Rgy03bQ=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 01:21:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:18:55:98:38:9e:2a:cb:a2:41:33:ce:0c:34:b0:3c:b8:f9:6d:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=C49BAE2430BEEC354C1B14F226E761FC9BDCF005
Validity
Not Before: May 12 01:04:20 2026 GMT
Not After : May 13 01:21:20 2026 GMT
Subject: CN=B6524E1AD1BA6687EF846FC2A8A0B644ED977DAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:16:53:7e:48:5f:5d:90:4d:b4:1c:41:20:c3:
20:0b:c7:b9:7a:b4:1f:b5:5c:9f:14:48:9e:45:01:
cf:90:c9:6b:b7:bb:bb:e7:a4:2a:0d:0e:ed:6f:19:
f5:93:2b:03:2f:55:4b:d0:d7:e1:44:48:1b:b2:b2:
4e:3d:4b:d5:65:54:c6:ca:52:90:a5:13:6a:90:f8:
8b:d7:25:18:98:53:c4:ac:9a:cd:e0:a8:03:bb:45:
81:13:73:ab:78:18:6f:29:f6:52:a0:4b:98:c0:d0:
f3:d4:aa:0b:35:99:d9:2a:a9:dd:4a:31:8a:81:e3:
39:d7:48:af:17:8d:f3:47:bf:a5:15:f1:3d:55:cb:
8f:0b:e4:10:00:20:28:30:93:76:1a:9e:e3:a4:98:
41:cc:87:b6:f0:be:80:67:63:f0:f8:0a:de:63:34:
94:91:8e:fe:19:00:09:a9:39:cf:d8:37:a0:1b:78:
6b:67:3e:d7:99:f1:67:4c:22:ee:39:52:29:4f:5b:
a7:dc:f2:5d:1a:8b:a5:48:00:b6:7a:6f:bd:d1:75:
2d:35:57:2a:a9:8e:33:ab:13:54:ba:74:f5:44:fa:
6b:93:0a:95:38:b8:e8:76:16:03:07:a2:66:4e:9f:
a7:29:1b:f9:d9:b9:93:b1:b9:20:2b:bc:40:57:3d:
d4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:52:4E:1A:D1:BA:66:87:EF:84:6F:C2:A8:A0:B6:44:ED:97:7D:AB
X509v3 Authority Key Identifier:
keyid:C4:9B:AE:24:30:BE:EC:35:4C:1B:14:F2:26:E7:61:FC:9B:DC:F0:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:c6:4e:36:41:52:31:f8:40:12:e5:00:72:b5:41:a0:a2:c2:
64:6c:0d:fd:38:9c:01:64:0f:38:c2:99:f5:8d:9d:07:92:ea:
86:57:0a:3c:19:d0:a2:c9:9a:8b:a2:eb:c7:ec:57:f9:96:f2:
2b:ca:8b:06:76:75:85:1f:de:bc:c6:19:c2:9b:4c:f9:98:78:
a1:dd:94:8b:d8:7e:9e:5f:5d:e9:a3:fc:b7:72:55:01:3c:e5:
21:e8:cf:ba:c3:73:ef:16:e9:e1:b0:02:19:89:37:08:a2:90:
be:8f:f2:b1:12:6a:b5:ec:1b:85:3e:29:9a:ee:54:fb:a9:9f:
cc:8d:8d:40:38:d2:be:f2:2c:3b:0a:05:83:7c:b8:6f:ec:4d:
da:70:28:84:d3:0a:0f:51:1d:c6:74:36:85:c3:b1:a9:14:f6:
a1:04:1a:c3:14:42:d4:89:f5:5a:6e:fe:e7:47:c0:0e:b0:16:
5d:69:4f:3f:83:05:e2:1d:3a:24:9d:fb:b1:0b:dc:6a:63:73:
f3:14:04:ab:f2:a9:b9:0e:52:13:78:d0:3a:28:dd:03:a8:bf:
7d:74:17:8f:21:7a:e3:dc:51:63:ef:c6:be:03:72:a3:9c:e2:
55:c7:75:f6:b3:4a:99:31:fb:38:53:00:e9:75:cc:5b:3e:5c:
5b:c1:ca:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:06:52 2026 by rpki-client