
$ rpki-client -vvf rpkica.twnic.tw/rpki/UNIONISME/0/49351FABA26185254DDA416A1D5581DD443EDC41.mft
File: 49351FABA26185254DDA416A1D5581DD443EDC41.mft (raw, json)
Hash identifier: CToTS+07nuNn9KLVWFNtjdOu9K/DG8CltPCAoc1Y9ek=
Subject key identifier: 0D:5A:67:B4:20:2B:11:43:4B:8B:5F:96:BA:BD:76:09:24:9B:77:E0
Authority key identifier: 49:35:1F:AB:A2:61:85:25:4D:DA:41:6A:1D:55:81:DD:44:3E:DC:41
Certificate issuer: /CN=49351FABA26185254DDA416A1D5581DD443EDC41
Certificate serial: 6E5CCDC02081446DB9EC0551D0102C22F80FF29C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/49351FABA26185254DDA416A1D5581DD443EDC41.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/UNIONISME/0/49351FABA26185254DDA416A1D5581DD443EDC41.mft
Manifest number: 67
Signing time: Fri 24 Jul 2026 00:12:05 +0000
Manifest this update: Fri 24 Jul 2026 00:07:05 +0000
Manifest next update: Sat 25 Jul 2026 03:02:05 +0000
Files and hashes: 1: 3130332e31362e3234302e302f32322d3234203d3e20313331363733.roa (hash: CYt3OwOdi5U6nl1DotXkg2V2ue2On7IBYFMCTCpmp+8=)
2: 34352e3131332e3135362e302f32322d3234203d3e20313331363733.roa (hash: ycz7kvMyQPtm2jOjyvhgNkKeTDXs7w0xpNO1K4Z0/eU=)
3: 34352e3131332e3135362e302f32322d3234203d3e20313331353937.roa (hash: hWu6tW+8EUwAkTQrievR14wJtvHQ0JFv/OJ8GCbApT0=)
4: 3130332e31362e3234302e302f32322d3234203d3e203138303436.roa (hash: eF3bAaUqqoqMzXnPBRSreU2oFC5f9WjHW96m5CAKqMQ=)
5: 49351FABA26185254DDA416A1D5581DD443EDC41.crl (hash: uPM7xon7GuhUoJ33WK5W7YEsA6OSp00XjChz1Cnk18M=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/UNIONISME/0/49351FABA26185254DDA416A1D5581DD443EDC41.crl
rsync://rpkica.twnic.tw/rpki/UNIONISME/0/49351FABA26185254DDA416A1D5581DD443EDC41.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/49351FABA26185254DDA416A1D5581DD443EDC41.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 03:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:5c:cd:c0:20:81:44:6d:b9:ec:05:51:d0:10:2c:22:f8:0f:f2:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49351FABA26185254DDA416A1D5581DD443EDC41
Validity
Not Before: Jul 24 00:07:05 2026 GMT
Not After : Jul 25 03:02:05 2026 GMT
Subject: CN=0D5A67B4202B11434B8B5F96BABD7609249B77E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:81:ca:04:78:6f:98:78:b7:f9:2a:1a:e9:f2:
53:0c:c9:4d:17:ac:63:ba:14:d7:81:05:16:02:1c:
f5:5c:ae:fe:9d:5d:f2:b4:a0:c4:c9:76:2a:9d:fe:
0e:f5:33:cb:96:d3:04:57:ad:26:a1:26:dc:2c:1e:
8c:9b:1a:cc:4c:09:32:4a:b7:26:e7:07:14:86:3d:
9d:5a:52:69:54:7f:a5:bc:93:74:d4:c3:ae:37:7a:
37:c6:af:31:e3:1d:89:88:59:b2:a1:ac:c5:61:01:
38:27:cc:61:dc:31:0d:13:5c:97:4a:89:cd:3c:52:
ec:c7:6c:84:0c:23:93:f0:25:35:01:5e:86:7b:3b:
fc:00:de:8d:d8:bb:b5:3e:16:c3:b2:33:3a:60:36:
8b:db:97:83:ae:ea:e8:ba:10:02:bf:b7:0b:e9:88:
cc:22:5b:4a:5e:2a:b2:fa:b3:ee:0e:f1:d5:f7:d9:
a1:f5:a4:1d:9b:e0:42:ec:af:de:67:48:ec:49:e6:
14:e8:26:5a:08:a6:e1:61:bc:cb:3b:94:07:4e:a5:
86:cd:7e:e1:b3:53:ec:39:41:69:85:1b:7a:a1:25:
e0:21:6a:de:86:23:be:87:d3:9c:8b:5b:f0:d2:b1:
aa:b2:f9:da:11:6e:f9:a6:3d:c4:b5:cb:79:ea:86:
6b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:5A:67:B4:20:2B:11:43:4B:8B:5F:96:BA:BD:76:09:24:9B:77:E0
X509v3 Authority Key Identifier:
keyid:49:35:1F:AB:A2:61:85:25:4D:DA:41:6A:1D:55:81:DD:44:3E:DC:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/UNIONISME/0/49351FABA26185254DDA416A1D5581DD443EDC41.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/49351FABA26185254DDA416A1D5581DD443EDC41.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/UNIONISME/0/49351FABA26185254DDA416A1D5581DD443EDC41.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:93:32:18:4c:28:be:05:c3:01:59:95:1e:4a:3d:e6:76:b8:
52:57:1f:a2:e4:b0:da:55:50:ab:1f:a9:fa:eb:da:9e:61:82:
00:a2:42:b8:81:99:12:17:ab:b3:b1:85:ec:77:8b:fe:99:c4:
73:86:4c:a9:d6:db:f8:43:c0:0e:eb:6e:e1:dd:f1:5b:2b:62:
d8:5e:bf:80:bd:25:79:d5:43:46:a3:47:c2:f0:f7:15:ed:97:
c3:a9:8e:af:e9:50:a8:49:06:ba:83:47:a3:b6:12:d9:f1:80:
fc:5e:b5:39:7f:79:16:16:5b:a4:47:e1:16:78:79:93:b3:41:
8e:98:da:c5:b6:32:c6:25:a7:c6:9e:9f:51:8d:d8:30:33:31:
e2:73:6d:9f:c9:90:9c:5e:11:ac:32:dd:4d:9e:30:9a:7c:32:
7d:49:36:ce:7b:1b:a4:44:e8:a4:98:f3:64:7c:94:9d:1c:a5:
f7:f4:1a:4a:da:db:5f:59:ce:4c:4d:06:a0:0f:68:6e:1f:b0:
a1:de:39:85:6c:43:14:15:e2:8b:20:79:07:73:c1:50:15:af:
75:fa:28:1d:88:11:a0:a6:1e:43:f1:76:08:95:cb:77:16:1a:
c5:70:65:6d:f6:ca:4e:c9:0f:e9:ae:06:08:23:be:4b:55:7d:
ee:6b:5c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:01:18 2026 by rpki-client