
$ rpki-client -vvvf rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft
File: C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft (raw, json)
Hash identifier: CN9PuUI8kJbZGzMkbGRkQULKPQGcTJUmuHQfZCu7tjU=
Subject key identifier: F3:95:27:A6:5D:A7:F8:72:76:26:25:66:43:75:0C:00:96:6C:DD:3A
Authority key identifier: C4:9B:AE:24:30:BE:EC:35:4C:1B:14:F2:26:E7:61:FC:9B:DC:F0:05
Certificate issuer: /CN=A91BDB290000/serialNumber=C49BAE2430BEEC354C1B14F226E761FC9BDCF005
Certificate serial: 0C3F9DFCEC625CD7E81F0D93BC50757833C60FE8
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft
Manifest number: 0298
Signing time: Thu 24 Sep 2026 01:55:23 +0000
Manifest this update: Thu 24 Sep 2026 01:50:23 +0000
Manifest next update: Fri 25 Sep 2026 03:04:23 +0000
Files and hashes: 1: 71E534018547D77B65EBCD0FC4941DC8113FAEE3.cer (hash: e/12Bvs4XBSRwhh9g+zZp9qn/cEuRAq2sYTeeh5SElU=)
2: 138A054AE20232FE74DA41A7D1FB6684BFF8B631.cer (hash: Zo39dsWqNkolqaKhWzlf8458SfxFo6DnsdWakso6pqc=)
3: 061E60E9FDA5A25EDC961572A4CBA8C539D780AF.cer (hash: etK9ChY/67xJMPxpSS2bELv6+079wOhz5Owjed+7V9s=)
4: 9F397B838061280C2F2A887AC9D64012310492D8.cer (hash: AkAR+lSILTN1pLkO4LJRfr6uv+VMbaYKmt4kHAXjuR0=)
5: BDC7715D29F4E43198D59315B71674EE9F648F6D.cer (hash: mHwEYS1tNelL6RV/T7poIrm2xe//+2sBhpMulCadIwE=)
6: C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl (hash: THCfi+nfHvuErS5OYKjGVZNRslj2oWJjdQG/sConLvg=)
7: 1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.cer (hash: I5RrhNzkFBB9aTAVEwcT8m+Fq6yg/7jrMob8Rgy03bQ=)
8: BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.cer (hash: Wgiiza2OtZGJQUX76W3y7Jpru4jNxqcQx1dg64cWfx0=)
9: 5F225958DB67E3418BFBE293BFD25E6F6A9346B9.cer (hash: wYdtix/LDee8ZEJGiTxD5AqF7ZWjOoSZiL6WSmE5qzo=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 03:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:3f:9d:fc:ec:62:5c:d7:e8:1f:0d:93:bc:50:75:78:33:c6:0f:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=C49BAE2430BEEC354C1B14F226E761FC9BDCF005
Validity
Not Before: Sep 24 01:50:23 2026 GMT
Not After : Sep 25 03:04:23 2026 GMT
Subject: CN=F39527A65DA7F8727626256643750C00966CDD3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8e:92:32:8e:52:de:b3:a9:15:91:7a:6b:c0:
b3:5e:fe:d8:f6:1d:2d:8f:04:75:15:3f:ff:47:92:
94:ce:f5:b1:87:98:42:b4:40:04:9a:0e:6c:99:af:
47:e9:59:03:6d:f2:59:c6:03:24:5a:54:63:6e:af:
5b:ab:77:ff:c4:52:4a:80:ab:83:a6:9b:26:69:6d:
c0:ad:f6:96:52:7b:46:78:cc:f2:9f:ac:49:cb:d6:
b2:ae:54:95:10:54:6a:4a:e1:5f:70:6b:39:87:25:
e3:f8:dd:07:1f:31:c7:cc:4b:0d:86:88:42:88:0c:
b3:44:46:11:26:d6:1d:4a:bc:de:41:aa:f8:14:16:
4a:9f:0d:35:75:ba:94:cd:13:8d:1a:97:0e:35:be:
61:ef:05:b3:09:74:63:4a:3a:5e:69:bc:7d:59:02:
53:9c:64:31:de:2d:98:ad:b4:36:34:a1:1f:4a:0f:
4b:67:77:75:ad:c8:e3:11:48:80:22:18:ee:18:b0:
74:97:98:7f:95:1f:50:ac:ac:cb:f1:e9:0f:47:59:
00:d3:27:19:8f:1b:c7:d1:ae:2a:0a:5a:86:b3:dc:
e2:22:c0:82:b5:82:8b:ab:06:cf:e5:2f:98:ad:7a:
8f:19:37:05:ae:e8:54:f3:fc:7f:82:bc:45:af:08:
25:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:95:27:A6:5D:A7:F8:72:76:26:25:66:43:75:0C:00:96:6C:DD:3A
X509v3 Authority Key Identifier:
keyid:C4:9B:AE:24:30:BE:EC:35:4C:1B:14:F2:26:E7:61:FC:9B:DC:F0:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:13:09:b1:34:50:05:65:84:0e:4a:79:e8:7f:be:17:8e:f4:
70:d8:96:61:a3:f2:49:11:b8:6f:21:fb:75:4f:28:8e:9a:19:
bc:2c:b5:9a:e2:42:a8:51:1e:97:4d:41:34:f3:f5:61:76:38:
b4:d8:9b:8e:81:c2:97:4f:61:24:67:d7:da:a5:c1:4d:64:43:
cf:08:0e:8a:7d:43:d6:03:8a:a6:d0:59:47:4e:5e:5c:8d:21:
1f:f6:3a:0e:4b:ca:0e:42:e1:8b:82:4f:1e:54:a3:8f:3d:c1:
56:d1:42:5a:c8:47:42:13:52:a8:99:ae:6e:1f:7e:63:ae:49:
95:51:40:f4:56:56:d5:b6:1c:ab:a4:02:e4:80:3f:da:f8:49:
6b:6c:b3:b3:cf:49:4b:89:97:a9:ad:9d:f8:ae:13:af:a8:c8:
79:31:37:ea:0f:71:cb:73:a8:68:2c:bc:48:cf:f9:c5:c3:d7:
d6:02:8e:95:5e:f2:3b:35:a9:18:12:b3:d8:be:8f:26:9d:7d:
51:60:ea:ab:5a:e8:49:87:5b:1a:bd:ca:04:6d:2d:e4:67:36:
57:da:b2:4a:17:0c:54:e4:02:f3:b3:0d:fb:12:e3:d5:fa:86:
94:c1:95:5f:86:03:81:69:e7:04:db:5a:27:18:00:d7:8f:27:
64:4d:40:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:29:43 2026 by rpki-client