
$ rpki-client -vvf rpkica.twnic.tw/rpki/WANIN/0/101B0A7F90D58731E9618DC432438C8BFDB28AF4.mft
File: 101B0A7F90D58731E9618DC432438C8BFDB28AF4.mft (raw, json)
Hash identifier: lzF5Lh6fXAgCUFCamyFWrJeTL7Rw9HDZOw+a7gExKuw=
Subject key identifier: 71:48:C5:B5:6E:E3:84:45:C8:DC:98:95:8F:29:86:96:B6:6B:55:B8
Authority key identifier: 10:1B:0A:7F:90:D5:87:31:E9:61:8D:C4:32:43:8C:8B:FD:B2:8A:F4
Certificate issuer: /CN=101B0A7F90D58731E9618DC432438C8BFDB28AF4
Certificate serial: 28D37CE7209ABFF007B2A07FEF47467A9269FC7D
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/101B0A7F90D58731E9618DC432438C8BFDB28AF4.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/WANIN/0/101B0A7F90D58731E9618DC432438C8BFDB28AF4.mft
Manifest number: 6A
Signing time: Fri 24 Jul 2026 03:37:25 +0000
Manifest this update: Fri 24 Jul 2026 03:32:25 +0000
Manifest next update: Sat 25 Jul 2026 04:34:25 +0000
Files and hashes: 1: 3231312e37362e3138382e302f32332d3234203d3e20313331363336.roa (hash: oaNsp11upkBZ+JGYlmo3nCJ8dB+RQUZt5gJM6iJrwHk=)
2: 3130332e3133302e3132362e302f32342d3234203d3e20313331363336.roa (hash: TLjcZQcFu7MKcP1kT7lAPY8o3wjcQeXfdOkLoUquYVA=)
3: 101B0A7F90D58731E9618DC432438C8BFDB28AF4.crl (hash: 1NKQ1OTtL9XnjY3My6I+TYgJeKCf5RppGl7brVnuLOQ=)
4: 3130332e3133302e3132342e302f32342d3234203d3e20313331363336.roa (hash: VXtVToak1u7PW+U+n97OPXO4Dchb6DLpI7qRdjvNc0Q=)
5: 323430333a623963303a3a2f33322d3438203d3e20313331363336.roa (hash: E288eui5EN66onNVEK7Y344pLWOHjEel/MAK2S1bEhQ=)
6: 3130332e3133302e3132372e302f32342d3234203d3e20313331363336.roa (hash: FnT/XgOP5REsMrJKvplqM9/TZ2tdCkQ9b4citLvn+6U=)
7: 3130332e3133302e3132342e302f32322d3234203d3e20313331363336.roa (hash: 7MNXU7sfreKdDoH2cxg35XbGCH5NeuOsP993lyzfqsc=)
8: 3130332e3133302e3132352e302f32342d3234203d3e20313331363336.roa (hash: FraePq7gvqKVgRVRs1hOCUPexz3gSr4BPRhnGrHTV3o=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/WANIN/0/101B0A7F90D58731E9618DC432438C8BFDB28AF4.crl
rsync://rpkica.twnic.tw/rpki/WANIN/0/101B0A7F90D58731E9618DC432438C8BFDB28AF4.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/101B0A7F90D58731E9618DC432438C8BFDB28AF4.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 03:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:d3:7c:e7:20:9a:bf:f0:07:b2:a0:7f:ef:47:46:7a:92:69:fc:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=101B0A7F90D58731E9618DC432438C8BFDB28AF4
Validity
Not Before: Jul 24 03:32:25 2026 GMT
Not After : Jul 25 04:34:25 2026 GMT
Subject: CN=7148C5B56EE38445C8DC98958F298696B66B55B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:48:0f:aa:34:95:e6:09:c3:26:a2:95:3b:c4:
9e:64:12:e2:52:9a:0d:e0:d9:a8:8b:bc:c4:14:37:
6d:38:e0:12:ca:18:cf:34:83:be:6f:3d:89:19:55:
c1:aa:5d:07:93:d3:98:06:82:30:b1:f0:f2:64:9f:
be:64:81:5a:b5:8f:32:aa:a5:e9:4a:65:76:ba:59:
02:df:c7:61:28:cb:e1:c3:5b:72:88:ae:13:15:27:
e5:6c:d9:60:c6:dd:47:f6:70:f7:3a:3f:6d:b1:5e:
e9:a4:e6:3a:dd:dd:a3:be:b9:90:bf:e3:3f:36:9b:
c8:d6:29:70:50:83:f3:82:39:a4:14:57:ac:cd:08:
a9:fb:5f:ea:4c:eb:fc:8b:d7:2c:c1:5b:0f:6e:bc:
8d:83:c8:8f:82:66:bf:20:0c:dd:53:b3:e4:b0:89:
a6:f5:c5:a2:35:f1:ef:14:41:37:4c:56:1d:fd:1f:
e6:b8:61:7c:3a:71:2c:ff:6a:ae:86:95:64:b1:bd:
4f:58:e0:b3:a1:96:41:8c:f9:6a:2c:e2:7e:e3:55:
ce:0d:c2:c7:36:e7:14:79:3d:40:f6:62:58:6e:da:
9a:b3:d2:b2:19:16:84:0f:f7:2b:45:24:da:73:42:
9d:6f:67:4f:36:54:48:5e:28:9d:a8:0e:25:d8:03:
e8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:48:C5:B5:6E:E3:84:45:C8:DC:98:95:8F:29:86:96:B6:6B:55:B8
X509v3 Authority Key Identifier:
keyid:10:1B:0A:7F:90:D5:87:31:E9:61:8D:C4:32:43:8C:8B:FD:B2:8A:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/WANIN/0/101B0A7F90D58731E9618DC432438C8BFDB28AF4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/101B0A7F90D58731E9618DC432438C8BFDB28AF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/WANIN/0/101B0A7F90D58731E9618DC432438C8BFDB28AF4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:ef:d4:ab:6e:c6:12:3d:98:63:fb:ac:79:ba:cf:81:cd:2e:
48:3a:09:8d:35:3f:cb:50:a9:93:87:44:eb:23:da:6c:49:49:
12:d6:9d:01:f8:00:bb:de:e2:36:07:ee:9e:fa:9c:6e:db:1b:
77:41:88:28:22:bc:aa:0b:99:66:2e:05:cb:f1:4a:9a:76:7d:
bc:fb:64:e3:a4:8a:45:30:49:ca:80:4e:36:19:6e:ad:6b:c4:
f4:06:f2:96:6a:96:86:b0:65:76:19:cd:2e:4c:ef:45:4a:df:
f9:a9:8f:b4:d5:c7:5c:6d:63:35:91:f8:71:7f:06:f3:b2:91:
ae:7d:22:a3:3b:b0:d8:59:47:be:a8:29:48:8d:39:5b:34:02:
27:61:ba:c4:74:81:99:a4:f3:ea:6a:f3:74:35:00:b0:cc:3e:
02:06:1d:e2:7a:3c:3a:e9:0b:a6:52:b9:20:c1:0f:89:23:ee:
77:19:69:d8:df:91:91:5f:ce:9f:23:fe:8c:25:61:96:34:6d:
bf:6c:6d:98:d3:8f:5d:0f:0a:e0:65:46:46:d0:bd:31:2c:6b:
0b:99:48:7f:b1:49:d3:d2:c1:c6:17:34:7d:9a:8f:80:88:8c:
a8:84:80:7a:8f:0f:83:b6:2f:cf:6f:6e:0c:d5:a1:e6:ad:07:
c6:91:ac:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:10:55 2026 by rpki-client