
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.mft
File: DflKsHKMejjFDw1hVU1J1lHzOqI.mft (raw, json)
Hash identifier: PPvmaVkT/qdCvcNYnNYfwCdeCxk3AMmJYMfErKQIC90=
Subject key identifier: 81:FA:7E:95:6A:B6:3F:A1:3D:CA:0C:18:3E:63:3F:AB:55:C9:31:EF
Authority key identifier: 0D:F9:4A:B0:72:8C:7A:38:C5:0F:0D:61:55:4D:49:D6:51:F3:3A:A2
Certificate issuer: /CN=0DF94AB0728C7A38C50F0D61554D49D651F33AA2
Certificate serial: 0E62
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.mft
Manifest number: 0DFF
Signing time: Thu 26 Mar 2026 11:28:37 +0000
Manifest this update: Thu 26 Mar 2026 11:28:37 +0000
Manifest next update: Sat 28 Mar 2026 11:28:37 +0000
Files and hashes: 1: DflKsHKMejjFDw1hVU1J1lHzOqI.crl (hash: VUBjZNv0HKdsQdIph9kHns85GLvOXF2hOE0+GdpN8Kg=)
2: GZELNOyiVAmLDRR2MW7N8EqLGzE.roa (hash: +EXDQYZC6+0QrGxIPFf4wAysxyAMaPNfctcq9J3KzE0=)
3: Iz5tKcDQZYWT7RYRtjtU31bpn1U.roa (hash: UdokJe6o3UAr2iwc7KOVDMq9BMQTJLTIBPmYAE3iizM=)
4: Jns9QRoKa1WsqmtDocwMDtdMlT0.roa (hash: uEWgzsrUcLvTRdErDyt4Wd2xyJyx9lowSbRb3k5cKSY=)
5: OGy6Nryhc67bLXM5hzr3IRIPEvo.roa (hash: NW//Y5fISaHzjJncfP+fD1Q3i+EyT55jEXflSG250R8=)
6: XQN6OxMUcoAGxpGLooiky-tL7gc.roa (hash: KYlnunaZYM8trExSsCQ39CrmyKf/rWIHR1sdiY7IVHE=)
7: ejBKtQZTLyrE8vnIU0j-t5mEfXs.roa (hash: M2tdeDZvesGE0AAyqOJ1wnm+0nXVcRNFnYM1zMZ0F6E=)
8: f9BkDcTc0Qu7WyPYLc2LkngjCFE.roa (hash: jB+5fmaJQKDYqoyiYqbwVRiRXZtlcUXQIP6LnXyYQY0=)
9: fLu6sD6p_HtqeTeRSjHY_HQ9dr4.roa (hash: 6zwT+S23JAwSbfsfFnx6e0nfZI+pAYVSDBgx4gzVQdk=)
10: sy-areQ-4siOMM_blCu0RxNQJzA.roa (hash: 0IhdcJ+VJpYWoXAKgo1BqUgbH8152ChHGcRjK7P2cdE=)
11: ywiNVIZ1QQ4bfkFXC-tAivsHjzI.roa (hash: Q9oQftJcQcvSuPxuHL/R+AP9rCVRyQWOrSl1DN5ds9g=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Mar 2026 23:29:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3682 (0xe62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0DF94AB0728C7A38C50F0D61554D49D651F33AA2
Validity
Not Before: Mar 26 11:28:37 2026 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=81FA7E956AB63FA13DCA0C183E633FAB55C931EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7e:52:76:a2:e8:51:c1:e7:ab:b3:ef:f9:a1:
c4:97:2f:e0:e1:62:81:25:88:34:b3:8d:64:08:9d:
5d:b4:32:cd:06:05:74:a4:fa:a3:fa:8c:f9:f7:93:
7d:86:f8:b3:91:3a:1b:b6:b3:7a:bd:a5:bf:5f:02:
f7:76:7a:e5:cf:49:1c:9e:43:2b:a5:5d:bb:9d:9e:
1a:53:26:29:5b:f8:e5:64:3e:52:f1:44:74:29:a0:
81:fe:b9:16:6a:ff:94:fe:2e:52:57:d7:83:11:36:
03:3a:7a:67:a7:c7:58:3c:f7:42:31:14:0f:90:93:
60:91:ac:60:06:42:3c:7b:6d:88:df:b4:37:2c:df:
1d:90:16:44:ff:5a:6f:28:9e:a6:d1:93:48:b3:34:
42:b1:ff:22:86:9a:51:5f:cc:a1:13:e7:fc:78:c2:
c8:e7:75:bc:e7:6f:77:0c:07:0d:95:15:bd:90:39:
83:f9:e9:0a:3f:32:11:ed:80:d4:ee:d1:80:6d:c7:
96:3e:ae:cf:52:bd:b7:51:e9:a4:b2:9e:a0:b0:93:
1a:73:37:62:42:ce:67:45:39:53:df:65:eb:55:0d:
07:fb:ba:42:66:7d:1a:2d:a2:d7:92:1f:93:9c:85:
4c:72:ce:4c:28:5a:b3:7f:38:42:d9:18:39:88:bf:
7f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:FA:7E:95:6A:B6:3F:A1:3D:CA:0C:18:3E:63:3F:AB:55:C9:31:EF
X509v3 Authority Key Identifier:
keyid:0D:F9:4A:B0:72:8C:7A:38:C5:0F:0D:61:55:4D:49:D6:51:F3:3A:A2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:15:a7:db:94:7d:aa:91:2e:c1:c1:6e:bd:4e:01:7d:51:28:
f5:ff:ff:e8:27:79:f8:0e:85:f9:2b:7b:ab:e0:f3:80:08:be:
ef:b2:63:81:45:6d:36:ea:bd:ed:1e:fb:6f:12:bd:c3:69:3e:
0b:8b:2f:c0:57:6f:59:83:55:30:8b:53:81:72:60:81:b1:22:
57:6d:5f:9e:97:54:b7:ff:c0:68:e4:9e:8e:a1:45:34:f8:37:
10:9b:ae:94:ba:99:76:b6:6f:1d:33:97:d4:7c:5e:22:16:4d:
fd:08:06:6a:42:21:fc:1c:6b:86:24:2c:ec:23:15:f1:7f:a1:
bd:62:b3:63:ba:dc:a2:66:c5:8e:db:55:b7:67:dd:ef:d4:fe:
11:07:7e:ee:11:92:99:9b:1b:3f:61:2c:13:56:30:a8:bf:ca:
79:02:3c:d0:48:57:ae:56:ac:95:9d:ac:91:ea:0b:04:43:45:
c2:df:80:a1:57:5e:45:d4:62:1c:40:cc:00:e8:8e:f0:2e:2f:
04:37:27:fc:4f:05:52:b9:43:ff:5d:b7:bd:8d:36:5f:f4:66:
2c:bd:59:1a:a0:52:1d:ef:98:8c:90:0c:a5:60:b6:8c:18:60:
ce:53:60:b5:53:18:c1:43:3f:58:8a:8e:c7:4f:e5:a5:59:e4:
2c:d9:2a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:21:43 2026 by rpki-client