
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/IMCRS/IsUSmNl6ECkCcx_cSb36s51Sqys.mft
File: IsUSmNl6ECkCcx_cSb36s51Sqys.mft (raw, json)
Hash identifier: H+uBQj/f+9tWnCVLodyd0LW4yGVQEHl9mdojsos5n4M=
Subject key identifier: 90:9E:A4:E6:27:3D:85:BE:13:8C:CD:AB:C3:E0:C0:16:F0:39:30:DB
Authority key identifier: 22:C5:12:98:D9:7A:10:29:02:73:1F:DC:49:BD:FA:B3:9D:52:AB:2B
Certificate issuer: /CN=22C51298D97A102902731FDC49BDFAB39D52AB2B
Certificate serial: 04AC
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/IsUSmNl6ECkCcx_cSb36s51Sqys.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCRS/IsUSmNl6ECkCcx_cSb36s51Sqys.mft
Manifest number: 0497
Signing time: Thu 26 Mar 2026 04:28:28 +0000
Manifest this update: Thu 26 Mar 2026 04:28:28 +0000
Manifest next update: Sat 28 Mar 2026 04:28:28 +0000
Files and hashes: 1: 0c7mhw6wAI4CpRn1Hkyr3qb_5A8.roa (hash: vvB1FnDct6Ng/cIwpuOjmo9jsB5UGapjKebxfGVwDMM=)
2: 0mcwIl3xugeY7yYklmRRDrXtqUE.roa (hash: 4w4MyvoJOOzT6ryqc4UxEV1YPPBO4mkDDZbpp5saUsk=)
3: 2hDC2uRlzDb2lONQVJNKJYiemRc.roa (hash: PrE2A13rXu1Rw+WqjYL/5mhc+wnL8bhlRTDIgACgB74=)
4: IsUSmNl6ECkCcx_cSb36s51Sqys.crl (hash: d8VvtD85x/LoirY0K8xKiCa1XddyipLQiCZTMcpETA8=)
5: JH6qYgr3IAtOHKp_ITUCtiVXPbg.roa (hash: t95JaeX8j8so7N/rz1IBxOAXiQjGybTGN016LbMGzTw=)
6: nYkwyKHN8p_SfZ_jL_yEK5bTqCw.roa (hash: kevMel0s/kT5hNYlRQz2o0sjapSR+CQ4iaaIDSwmuU0=)
7: nsVXvlaZC5sjPThoV6_6cGAPe5Y.roa (hash: fclIkSTECSk8GNoe6PnsG3XKY/t9UJJdEsw0zNRyhbk=)
8: wXNpkQmppBLq9rEzWKeNcufQD5c.roa (hash: JzHJvlWAKUiHUSiGJ9aqb6u+Fg27yeo7K0QNZZFGOVE=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCRS/IsUSmNl6ECkCcx_cSb36s51Sqys.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCRS/IsUSmNl6ECkCcx_cSb36s51Sqys.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/IsUSmNl6ECkCcx_cSb36s51Sqys.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Mar 2026 09:28:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1196 (0x4ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22C51298D97A102902731FDC49BDFAB39D52AB2B
Validity
Not Before: Mar 26 04:28:28 2026 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=909EA4E6273D85BE138CCDABC3E0C016F03930DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a5:d6:62:d8:73:41:fe:f5:98:39:77:cb:58:
c3:45:24:7c:ad:91:c7:3e:22:28:90:28:89:bf:76:
1f:28:22:21:fa:e0:5c:d0:f2:2c:28:12:ef:40:44:
f8:0e:70:58:7d:9d:99:bc:ac:a4:76:78:8f:d9:9b:
d7:99:94:06:7d:e4:01:11:3b:30:3c:88:f0:83:f1:
07:85:55:b3:16:a5:54:32:e4:25:26:2b:f7:44:ef:
57:7f:db:12:b8:60:80:4c:52:6b:ea:b0:4e:55:96:
0f:ca:62:51:71:e4:09:27:7c:39:7e:92:c8:5e:23:
9b:4f:0f:f7:14:08:46:9b:bc:22:30:9e:5f:28:d8:
11:85:a4:fe:94:2d:c0:76:03:f8:08:85:c4:bd:62:
a5:92:88:9b:18:f9:d2:5a:dc:e7:ea:67:72:27:1e:
c0:fb:12:5a:69:e8:89:84:e7:f6:0a:42:56:be:15:
86:03:7b:48:62:ce:eb:f6:80:d8:8e:ec:4a:7f:b4:
c3:c9:12:ab:61:dd:b8:ee:25:a4:83:4a:d0:35:6c:
61:bf:89:21:dd:45:eb:ee:c6:9f:73:4d:94:9b:9f:
18:3d:f7:8a:a9:25:b1:95:c3:88:e3:83:ae:b8:79:
50:2b:79:21:d7:cb:c3:18:3b:8c:ab:d0:2a:cc:4d:
83:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:9E:A4:E6:27:3D:85:BE:13:8C:CD:AB:C3:E0:C0:16:F0:39:30:DB
X509v3 Authority Key Identifier:
keyid:22:C5:12:98:D9:7A:10:29:02:73:1F:DC:49:BD:FA:B3:9D:52:AB:2B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCRS/IsUSmNl6ECkCcx_cSb36s51Sqys.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IsUSmNl6ECkCcx_cSb36s51Sqys.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCRS/IsUSmNl6ECkCcx_cSb36s51Sqys.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:1f:42:85:38:f0:da:51:3f:a5:15:03:f9:03:1d:89:50:4b:
9a:e6:1d:21:1d:f0:a4:94:9b:8b:a9:33:78:f2:3c:fc:2f:7e:
df:be:45:06:76:0b:58:d2:84:d9:9d:1e:b3:44:e3:ef:31:54:
8e:fb:36:87:b0:3e:03:86:ee:f2:88:65:7b:77:83:b8:dc:3d:
fe:ed:38:22:c8:33:c0:dd:1f:0c:71:a5:49:65:03:06:31:ba:
b7:3d:c1:61:2a:07:e7:61:f0:6c:b4:f6:8e:23:c1:36:83:13:
1c:ae:b0:ac:02:e1:ce:61:21:36:12:1b:3a:a8:13:9e:7d:30:
ca:96:a3:80:90:1f:d4:72:fd:59:d4:b0:28:70:ce:4b:ba:a0:
39:ef:e8:c5:47:95:ac:ac:d9:86:02:2f:88:c2:ec:72:76:e8:
3f:2f:e9:1c:f4:7c:09:05:42:79:7f:e9:76:95:18:15:c9:b4:
0a:90:fd:c5:13:89:91:4d:0f:e0:13:df:c5:06:a2:4f:ff:1f:
ef:25:06:c2:d8:72:55:a3:88:b2:18:98:42:ea:74:97:2d:49:
e3:fb:d8:07:9a:53:19:3f:ae:75:50:5e:12:a4:3c:54:c1:c2:
df:bd:14:b1:81:03:7b:bb:d5:e1:ee:6e:b3:33:25:53:3d:0d:
4f:c9:63:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:01:37 2026 by rpki-client