
$ rpki-client -vvf rpkica.twnic.tw/rpki/WANGTIAN/0/137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.mft
File: 137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.mft (raw, json)
Hash identifier: Av/3cJMdXFE8xRRN0l2G9HoNiAcGB9KHgTLAsWep0UM=
Subject key identifier: BE:18:B2:58:BB:30:57:21:63:7D:41:72:45:80:31:4E:19:BA:2B:52
Authority key identifier: 13:7D:CF:3F:E1:8E:3C:9D:B3:3A:C6:C5:0E:8B:E3:57:D0:72:99:91
Certificate issuer: /CN=137DCF3FE18E3C9DB33AC6C50E8BE357D0729991
Certificate serial: 35AEB57FDC0C766D67068DE1DACE6C70E7CED99B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/WANGTIAN/0/137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.mft
Manifest number: 66
Signing time: Fri 24 Jul 2026 04:22:33 +0000
Manifest this update: Fri 24 Jul 2026 04:17:33 +0000
Manifest next update: Sat 25 Jul 2026 04:57:33 +0000
Files and hashes: 1: 3136312e3234382e3134342e302f32332d3234203d3e20313334383233.roa (hash: yCZqZR2AGCBzXj4ey9qRZrUJv2f1vti5atnbmciNS40=)
2: 3136312e3234382e3134342e302f32342d3234203d3e20313438393936.roa (hash: 0xOt/alcpAMDww+3hdnLaeae14FERuOIKEuHy9m9JLc=)
3: 3136312e3234382e3134342e302f32332d3234203d3e203338303432.roa (hash: qRkyiJdn63qokFKKv0HxSqaEykqKM4bsKkcH46FpFZc=)
4: 137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.crl (hash: GUDePZFSYdFq6MN32hBio5Klf6eKWhhlsB8lf0kAVNE=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/WANGTIAN/0/137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.crl
rsync://rpkica.twnic.tw/rpki/WANGTIAN/0/137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 02:57:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:ae:b5:7f:dc:0c:76:6d:67:06:8d:e1:da:ce:6c:70:e7:ce:d9:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137DCF3FE18E3C9DB33AC6C50E8BE357D0729991
Validity
Not Before: Jul 24 04:17:33 2026 GMT
Not After : Jul 25 04:57:33 2026 GMT
Subject: CN=BE18B258BB305721637D41724580314E19BA2B52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ab:58:ab:3f:c4:0c:b3:e2:b4:61:b6:00:d4:
48:f5:d6:06:ce:e5:cb:99:7d:05:bb:8f:70:af:f1:
59:ee:7c:cd:4f:91:34:63:f3:5c:86:47:36:83:e9:
d4:6e:22:13:dd:90:d0:18:f8:23:5e:ec:e7:fb:4c:
61:77:37:3e:a3:08:25:d7:cd:0d:7f:1a:e6:93:13:
43:a4:39:83:7d:78:fa:40:45:8e:30:dd:dd:d6:39:
f4:d4:0c:3d:dc:c0:13:41:af:9b:bf:d5:d9:ca:4b:
7c:25:aa:07:b6:0d:82:d5:18:17:a6:a1:67:c6:18:
6f:d3:02:a3:0d:8a:e0:0e:c7:be:f3:bc:1f:32:15:
fa:71:12:16:36:0d:8e:9b:4a:16:69:81:97:dc:d7:
8a:c6:24:0f:7f:cc:f7:43:48:c5:4b:71:3e:72:3a:
1d:3c:b4:65:06:2b:e8:25:80:e4:c0:a0:a1:81:6a:
4e:fe:a5:45:f6:1f:15:30:9f:35:70:da:33:5d:ee:
d2:a8:6a:cb:aa:54:26:2e:b2:09:6a:e4:59:68:4d:
bf:fe:69:aa:8e:39:39:3a:c1:8c:2a:55:d9:d9:45:
9d:a9:11:4c:e6:5e:97:c8:d9:22:c9:d1:5f:0e:26:
1a:27:87:76:b5:d6:a0:77:ba:9e:80:fa:5c:d5:9d:
ae:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:18:B2:58:BB:30:57:21:63:7D:41:72:45:80:31:4E:19:BA:2B:52
X509v3 Authority Key Identifier:
keyid:13:7D:CF:3F:E1:8E:3C:9D:B3:3A:C6:C5:0E:8B:E3:57:D0:72:99:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/WANGTIAN/0/137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/WANGTIAN/0/137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:84:f2:6d:2b:4b:f3:97:9b:9e:84:ac:2d:4a:57:17:f7:82:
61:eb:4f:73:03:53:62:11:2a:3a:71:93:0d:63:87:5d:78:9f:
d9:41:17:3b:da:6a:94:6f:04:fb:16:0e:04:bb:4c:f5:b0:c3:
f3:11:1f:46:ff:87:9c:36:04:8b:33:95:02:8b:59:80:bd:64:
d4:ff:c7:bc:19:e3:1f:74:2e:62:d6:93:b8:d7:da:3d:f7:54:
63:f5:da:fd:8d:36:7e:fc:61:40:04:dd:45:fe:f9:c9:01:af:
30:3f:24:7d:b2:5c:c0:32:6c:0e:21:fb:41:71:1e:d1:1c:c8:
60:3b:48:04:1b:22:64:08:a5:ae:a3:de:3f:f7:5a:d2:ce:6f:
e7:2a:96:3d:b4:65:e7:f6:1c:73:92:97:a6:a5:4e:0b:83:13:
e4:d0:2e:61:16:e7:c6:2c:ff:bf:0d:02:d8:ad:53:23:6b:05:
cc:e4:73:16:4b:d3:b7:52:6f:ac:6d:f0:84:bc:6b:ae:69:95:
b2:ac:30:7e:0c:ff:4c:f5:1d:91:5e:1a:2d:ac:c5:7a:ef:5e:
aa:18:6d:56:c1:20:42:49:eb:5d:25:d6:21:09:93:5f:0f:aa:
5c:5e:1f:db:e7:c7:8d:45:29:d6:eb:3b:f3:f0:40:b3:41:02:
a6:93:0b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:16:42 2026 by rpki-client