
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.mft
File: rf5uVtr4SS7H3oizqQazE5tVuGQ.mft (raw, json)
Hash identifier: xYQx2Bm3WmtqEv8mXYr6H8yQsjG/0r2xdehNlj0ChZE=
Subject key identifier: 88:54:C4:01:A8:1F:A5:35:EF:84:FC:FF:6D:06:C5:F9:9F:64:EE:F9
Authority key identifier: AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64
Certificate issuer: /CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864
Certificate serial: 08EA
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.mft
Manifest number: 0885
Signing time: Thu 26 Mar 2026 11:28:03 +0000
Manifest this update: Thu 26 Mar 2026 11:28:03 +0000
Manifest next update: Sat 28 Mar 2026 11:28:03 +0000
Files and hashes: 1: 1Jsf49U5f7I4OC2K8Qa36ZXRpIg.roa (hash: OVG6w+cJK2G2Buzrgjp8CFKBGAPrxLkYLf6pXNopTyo=)
2: 6IwRDQzie96iExY73oiuEzF4j04.roa (hash: P5nTvPt1qEHdZuQuEfViRE/3XnWprLpspar1lwmKiSQ=)
3: N0C3fSWd2C5fGP17YVAOZiuDm8w.roa (hash: 6Js7ux85K9FQfMd/VtHrXw8YY1/vtZUaSQQykn2D3dA=)
4: OwV3St-SxcsIzgpvPupGZF1MPb4.roa (hash: RP6R6k5ayPw/CKqUEyD3J0aaVXhf06X61azaX6QlA04=)
5: QlGaKgkMqYIfMM6zxAuzYDXHYjI.roa (hash: e2THAPExERdJeWKQN6zMaTMoX3zQT/hm9mmBElF0si8=)
6: RIV6PgWMJkJlUBTyjCvNjrEjQrQ.roa (hash: /c6CnGCYp3uDqy903NYKQ8azcI+NYy29gMAjI7Y7e5I=)
7: SODljBvIsuVG8-dB_kPkAdal4mw.roa (hash: Lws+6zI70GEyAa30X88eKudJPtlyPDJRxhQAi75bh8o=)
8: W6RJXfP1E9Ch09w7g0-NxD5wYMM.roa (hash: grOi09L0ObBUSuyDskSQvV+0LfLAnGL65Sx8UXUAqew=)
9: njXiHQM2YoNEf_GnjLKJCq--2lg.roa (hash: 4d3J5uAMcboHXzfCzXkyM2AWOOU2igqi0vMbvE4RvjY=)
10: rf5uVtr4SS7H3oizqQazE5tVuGQ.crl (hash: oAPVnEvzxSkwwQr9xJ5w9pcj81m9yjsFDkLkkvIAyxQ=)
11: s2omCCvZxbfNVxc23FBznFWKQec.roa (hash: AFawhO2vhOzkylH/qGiObuVfHB1AJ/ESSw/EFGgnxRQ=)
12: ue8ObbvhrPR9k0_3_F1w0o356Fk.roa (hash: FcDDAfkU5IpDDCnf7d+sMXWWLEzheC1DKOywSCLIFBg=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Mar 2026 23:29:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2282 (0x8ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864
Validity
Not Before: Mar 26 11:28:03 2026 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=8854C401A81FA535EF84FCFF6D06C5F99F64EEF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:df:1a:e9:4e:9f:e7:ed:30:87:19:fe:94:0e:
71:c2:dd:a0:b0:a2:52:3e:71:b9:2b:4a:0d:fc:88:
6e:aa:92:1b:5e:d7:5e:10:57:37:85:9d:f5:0c:ef:
14:d1:25:42:70:8e:ee:6a:87:f8:20:85:4f:58:31:
31:e4:87:18:67:09:2b:ae:8e:f0:69:d3:7d:0a:5b:
bd:92:89:e2:40:f2:68:bf:c7:b7:bb:4b:18:7e:24:
7a:24:19:4f:80:95:56:c3:be:d3:e9:96:40:6f:46:
7b:61:09:87:c0:1d:5a:03:32:b7:a5:76:4a:6f:b4:
f7:b8:52:01:63:6f:2c:e3:67:a8:7c:13:1f:37:66:
de:c5:9d:9d:89:d8:02:04:a0:fd:e2:19:cf:c9:dd:
d5:5b:84:b0:c9:4f:b2:59:25:e1:36:4b:0b:f8:16:
2f:55:9d:6e:c2:74:a8:6b:f5:95:98:f2:d1:11:0d:
d5:9a:0a:42:fd:fa:3c:b2:fd:7f:a9:28:86:6a:4d:
35:29:c2:c1:b0:cf:70:b8:e3:53:02:c7:72:23:02:
0c:16:3a:9f:a1:cd:ea:4b:22:d8:b3:44:5b:1d:21:
a6:55:ab:52:bf:97:5e:02:f3:75:8d:76:d2:bb:1b:
7f:67:0c:8e:e2:04:37:7a:06:98:80:4e:15:7d:4c:
61:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:54:C4:01:A8:1F:A5:35:EF:84:FC:FF:6D:06:C5:F9:9F:64:EE:F9
X509v3 Authority Key Identifier:
keyid:AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:8c:f3:ef:c9:f6:50:a4:6c:fd:ef:33:ba:e4:49:63:04:e8:
54:50:4b:78:72:d1:9f:ab:58:fa:0d:ac:37:2f:13:9c:fa:19:
a8:5c:83:3a:db:1c:11:0a:c0:30:66:2b:cb:b8:2f:1e:f5:e7:
01:c4:fb:a6:d7:f1:a6:91:53:b1:db:13:13:95:f9:ce:c6:ee:
e1:97:35:18:0c:58:99:79:e9:c2:a0:cd:c0:a7:1c:6e:c9:69:
36:50:52:95:3c:d5:18:9a:00:6b:29:6b:c0:eb:c3:81:26:8a:
35:c1:e5:4c:c6:90:da:f0:d2:91:f0:74:de:a8:62:dd:65:d0:
ce:03:45:3e:95:78:50:08:98:f5:7e:07:d2:9b:9e:0f:80:80:
1c:db:fc:80:29:9d:cf:72:f3:4c:2b:c9:a8:50:8c:71:df:1a:
9e:9c:e0:54:09:54:64:22:16:3e:2f:9a:50:30:d8:4c:2f:ca:
60:21:fb:6f:a4:b6:d0:0d:b4:b4:1b:cc:67:8a:cf:38:3e:bc:
29:2e:d6:a2:f9:4f:46:56:41:aa:85:5e:8e:a1:7e:21:f0:d2:
a4:f1:e0:e2:db:45:f5:18:d5:16:7e:1a:d8:02:09:d8:28:4c:
a1:ee:b7:76:5c:88:ed:a8:40:5f:ce:c9:db:41:63:f6:e0:bb:
34:f9:67:92
-----BEGIN CERTIFICATE-----
MIIE8TCCA9mgAwIBAgICCOowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQURG
RTZFNTZEQUY4NDkyRUM3REU4OEIzQTkwNkIzMTM5QjU1Qjg2NDAeFw0yNjAzMjYx
MTI4MDNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDg4NTRDNDAxQTgxRkE1
MzVFRjg0RkNGRjZEMDZDNUY5OUY2NEVFRjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCr3xrpTp/n7TCHGf6UDnHC3aCwolI+cbkrSg38iG6qkhte114Q
VzeFnfUM7xTRJUJwju5qh/gghU9YMTHkhxhnCSuujvBp030KW72SieJA8mi/x7e7
Sxh+JHokGU+AlVbDvtPplkBvRnthCYfAHVoDMreldkpvtPe4UgFjbyzjZ6h8Ex83
Zt7FnZ2J2AIEoP3iGc/J3dVbhLDJT7JZJeE2Swv4Fi9VnW7CdKhr9ZWY8tERDdWa
CkL9+jyy/X+pKIZqTTUpwsGwz3C441MCx3IjAgwWOp+hzepLItizRFsdIaZVq1K/
l14C83WNdtK7G39nDI7iBDd6BpiAThV9TGHPAgMBAAGjggINMIICCTAdBgNVHQ4E
FgQUiFTEAagfpTXvhPz/bQbF+Z9k7vkwHwYDVR0jBBgwFoAUrf5uVtr4SS7H3oiz
qQazE5tVuGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg
UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlOR1lJ
VEVBL3JmNXVWdHI0U1M3SDNvaXpxUWF6RTV0VnVHUS5jcmwwYAYIKwYBBQUHAQEE
VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX
TklDQ0EvcmY1dVZ0cjRTUzdIM29penFRYXpFNXRWdUdRLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw
a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlOR1lJVEVBL3JmNXVWdHI0U1M3
SDNvaXpxUWF6RTV0VnVHUS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50
d25pYy50dy9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAh
BggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUA
A4IBAQC1jPPvyfZQpGz97zO65EljBOhUUEt4ctGfq1j6Daw3LxOc+hmoXIM62xwR
CsAwZivLuC8e9ecBxPum1/GmkVOx2xMTlfnOxu7hlzUYDFiZeenCoM3ApxxuyWk2
UFKVPNUYmgBrKWvA68OBJoo1weVMxpDa8NKR8HTeqGLdZdDOA0U+lXhQCJj1fgfS
m54PgIAc2/yAKZ3PcvNMK8moUIxx3xqenOBUCVRkIhY+L5pQMNhML8pgIftvpLbQ
DbS0G8xnis84PrwpLtai+U9GVkGqhV6OoX4h8NKk8eDi20X1GNUWfhrYAgnYKEyh
7rd2XIjtqEBfzsnbQWP24Ls0+WeS
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:58:49 2026 by rpki-client