
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/M2NIM/zE7-l8nB6kjwGh-GXdYX67EzUaE.mft
File: zE7-l8nB6kjwGh-GXdYX67EzUaE.mft (raw, json)
Hash identifier: jJIgyx2b9seZuB51106FkfcUd2+dXF+BPYK48xOZO/4=
Subject key identifier: DE:9B:9D:FE:64:6B:2A:3D:D1:17:88:D2:D7:3B:53:FA:4F:D0:AE:CD
Authority key identifier: CC:4E:FE:97:C9:C1:EA:48:F0:1A:1F:86:5D:D6:17:EB:B1:33:51:A1
Certificate issuer: /CN=CC4EFE97C9C1EA48F01A1F865DD617EBB13351A1
Certificate serial: 026F
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/zE7-l8nB6kjwGh-GXdYX67EzUaE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/M2NIM/zE7-l8nB6kjwGh-GXdYX67EzUaE.mft
Manifest number: 0267
Signing time: Thu 26 Mar 2026 11:57:57 +0000
Manifest this update: Thu 26 Mar 2026 11:57:57 +0000
Manifest next update: Sat 28 Mar 2026 11:57:57 +0000
Files and hashes: 1: r8boz4jBdZztL_izZVGfhqDuooE.roa (hash: TlUVGa4sphWGhDx//uUjzcMnpnFrJwG51Qzv51S2VWM=)
2: vDrORrFm7k39BuC9jdbHK4wit7c.roa (hash: 1Kb0WJOh7IMaquSPxMONz4pqLmPmKVqAW2zKx1fWMXc=)
3: zE7-l8nB6kjwGh-GXdYX67EzUaE.crl (hash: Un4/8l9M0JY8+8Amlj0EKE/NXl61k3tv/783BsMvpWg=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/M2NIM/zE7-l8nB6kjwGh-GXdYX67EzUaE.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/M2NIM/zE7-l8nB6kjwGh-GXdYX67EzUaE.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/zE7-l8nB6kjwGh-GXdYX67EzUaE.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Mar 2026 18:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 623 (0x26f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CC4EFE97C9C1EA48F01A1F865DD617EBB13351A1
Validity
Not Before: Mar 26 11:57:57 2026 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=DE9B9DFE646B2A3DD11788D2D73B53FA4FD0AECD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2b:cf:f5:2c:a2:87:7b:b6:c9:41:7c:04:49:
62:35:99:68:87:a4:10:8e:b5:7b:54:c1:71:4e:5d:
e8:b2:eb:7e:e0:e7:9e:81:ed:e0:bf:e6:3c:cd:c1:
2b:59:4f:66:da:60:4a:b9:30:21:f6:77:39:38:32:
68:2f:b5:ac:10:40:e0:a9:6c:c2:67:12:2f:41:42:
dc:df:71:75:60:6a:cd:77:81:00:cb:73:a3:12:1c:
fd:a6:c6:46:c7:46:30:57:15:65:0b:a9:b6:e2:a2:
4f:55:d1:e8:ab:23:e5:87:84:f2:38:19:82:13:a6:
7e:e4:81:c5:07:07:d1:5c:14:3d:e3:4d:ae:14:86:
ad:28:f3:35:7c:c8:c9:80:7f:bf:1e:f6:a5:42:85:
de:9c:47:0c:b1:37:b6:74:0c:78:e6:cc:b4:ee:19:
b7:4b:80:2c:8a:b8:6e:35:84:39:1f:f3:a6:2b:f6:
1e:17:13:74:20:47:a7:a1:0a:22:cb:ee:59:9c:ad:
9f:5a:83:a3:8b:87:c1:9c:5f:87:77:51:2d:74:16:
1a:2d:5b:2d:08:5b:02:3b:1c:33:ca:fb:57:e9:4d:
41:ea:80:14:b8:de:5b:89:cf:09:3f:b1:38:d6:31:
2a:8e:fd:76:e0:8b:51:52:96:25:d8:41:d5:cc:d1:
f8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:9B:9D:FE:64:6B:2A:3D:D1:17:88:D2:D7:3B:53:FA:4F:D0:AE:CD
X509v3 Authority Key Identifier:
keyid:CC:4E:FE:97:C9:C1:EA:48:F0:1A:1F:86:5D:D6:17:EB:B1:33:51:A1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/M2NIM/zE7-l8nB6kjwGh-GXdYX67EzUaE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/zE7-l8nB6kjwGh-GXdYX67EzUaE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/M2NIM/zE7-l8nB6kjwGh-GXdYX67EzUaE.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:e4:94:24:ce:57:26:f7:a8:64:ee:28:b6:f6:e1:1e:9a:8b:
69:72:96:f6:78:1a:ce:b1:39:0c:66:ea:c0:e0:84:10:9f:7c:
ae:cd:fb:ea:55:e2:50:d7:c5:8a:e1:0b:53:1a:8e:9a:5a:40:
7e:81:2b:78:5b:86:3b:63:97:23:5f:c4:86:0e:87:b9:8b:51:
5c:33:cc:3f:7d:83:50:77:83:b4:a8:33:be:89:8a:e8:85:42:
d3:ba:e1:36:f0:29:9b:fa:49:be:d7:4d:73:40:7c:75:d5:fb:
ca:6f:7f:94:84:93:3e:22:61:2f:99:bb:38:70:9d:c5:4d:c9:
78:ad:54:2e:32:dc:e2:ab:12:07:26:1d:a7:c2:cc:00:f5:4e:
a7:76:3f:c6:91:5e:b5:ac:c6:c9:18:fc:e0:a0:52:e2:bc:36:
81:85:f1:95:ef:8b:05:16:2e:7d:a4:86:0b:2b:d7:3f:08:2c:
c3:0e:d8:ee:a9:1a:f2:65:1d:54:73:33:3b:08:39:01:f0:4a:
09:2a:9f:01:f7:8d:a9:73:e9:e8:52:cf:34:b4:ea:e8:31:e3:
2b:66:7d:4b:30:2e:18:c5:d5:fb:1a:90:ca:cd:b0:0d:90:13:
74:12:74:5f:14:a9:71:eb:14:aa:ac:74:26:08:6d:54:bd:29:
bc:c3:f0:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:57:32 2026 by rpki-client