
$ rpki-client -vvvf rpkica.twnic.tw/rpki/ACEREDC/0/E9D732B463775547C17E266980ED23CB1F48AE48.mft
File: E9D732B463775547C17E266980ED23CB1F48AE48.mft (raw, json)
Hash identifier: yHMbbEDRpDDxQhLMPNP0G3Br4EFSuaxs5ryu3UrwyyY=
Subject key identifier: 8C:97:E5:3D:B1:8A:D0:F0:87:D7:EA:C9:05:68:4D:AA:74:C3:8F:7A
Authority key identifier: E9:D7:32:B4:63:77:55:47:C1:7E:26:69:80:ED:23:CB:1F:48:AE:48
Certificate issuer: /CN=E9D732B463775547C17E266980ED23CB1F48AE48
Certificate serial: 33A9A6CB7E929C4B76F4B00A4ED0FE9A7ADD99B3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E9D732B463775547C17E266980ED23CB1F48AE48.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/ACEREDC/0/E9D732B463775547C17E266980ED23CB1F48AE48.mft
Manifest number: C5
Signing time: Sat 03 Oct 2026 12:10:00 +0000
Manifest this update: Sat 03 Oct 2026 12:05:00 +0000
Manifest next update: Sun 04 Oct 2026 15:37:00 +0000
Files and hashes: 1: 3231312e37392e3139322e302f32302d3234203d3e203137343230.roa (hash: fJ+WHwZ/QadsuhzmLQLFUZGILHar/OLv/HLjuXhUwlA=)
2: E9D732B463775547C17E266980ED23CB1F48AE48.crl (hash: 0cHXtv1AvkCy/1IR2e3wpih7s2XsjHEoVEB3xhCYUhg=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/ACEREDC/0/E9D732B463775547C17E266980ED23CB1F48AE48.crl
rsync://rpkica.twnic.tw/rpki/ACEREDC/0/E9D732B463775547C17E266980ED23CB1F48AE48.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E9D732B463775547C17E266980ED23CB1F48AE48.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 15:37:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:a9:a6:cb:7e:92:9c:4b:76:f4:b0:0a:4e:d0:fe:9a:7a:dd:99:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E9D732B463775547C17E266980ED23CB1F48AE48
Validity
Not Before: Oct 3 12:05:00 2026 GMT
Not After : Oct 4 15:37:00 2026 GMT
Subject: CN=8C97E53DB18AD0F087D7EAC905684DAA74C38F7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:bb:c8:81:35:8d:c8:02:ce:a6:2a:e4:b6:f9:
e0:06:73:4d:aa:a6:5a:ea:be:4f:4e:0c:bf:dc:36:
95:d7:a0:4e:2d:74:d8:51:67:ad:cc:70:ca:78:c6:
40:e3:2c:b1:cf:7f:d2:73:dd:cd:c6:81:eb:a9:40:
10:fb:6d:da:b6:19:de:08:44:00:b7:b9:2a:f7:09:
05:2f:6a:89:80:e8:be:63:e2:d5:18:97:26:81:d3:
df:fd:79:64:6b:2a:cd:9d:ea:4f:35:c3:0a:dc:0a:
38:28:06:73:ee:bf:67:cc:0f:cd:af:9c:b6:77:1a:
cf:16:b1:ea:2a:66:4c:ef:c6:bd:26:b9:36:7d:0b:
5e:f5:5d:93:da:20:79:48:d6:fd:66:1a:f5:e3:77:
56:93:82:0d:ff:39:2d:eb:bb:7f:29:ab:33:a6:38:
dd:6b:48:f8:de:9c:2b:eb:86:bc:2a:f9:a8:19:a8:
ad:01:50:9b:25:32:df:45:24:f5:c7:bd:7f:40:4b:
9d:89:d9:e6:56:48:da:4d:b8:cb:75:07:85:62:c5:
f5:8c:cd:dc:4d:7e:6d:08:c6:cb:c3:40:b4:04:da:
d0:ec:44:2f:04:49:6e:63:49:3d:3d:5c:54:a1:21:
83:b4:3e:1f:57:09:72:26:66:4b:06:73:a2:9f:85:
1f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:97:E5:3D:B1:8A:D0:F0:87:D7:EA:C9:05:68:4D:AA:74:C3:8F:7A
X509v3 Authority Key Identifier:
keyid:E9:D7:32:B4:63:77:55:47:C1:7E:26:69:80:ED:23:CB:1F:48:AE:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/ACEREDC/0/E9D732B463775547C17E266980ED23CB1F48AE48.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E9D732B463775547C17E266980ED23CB1F48AE48.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ACEREDC/0/E9D732B463775547C17E266980ED23CB1F48AE48.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:2b:55:32:3b:25:f4:fc:cc:84:63:5d:a3:ad:7d:52:f9:3a:
e3:fc:f4:94:ff:c2:55:59:90:9e:17:c9:29:8b:49:41:1a:e4:
71:8b:67:ef:55:cc:7d:f2:45:7d:0e:e5:b3:6b:ff:14:7b:87:
a6:ab:68:29:76:ef:a0:69:cc:87:fc:ea:8a:79:2d:86:02:c9:
b5:d7:26:dd:d2:94:5a:02:aa:b5:d6:8f:74:b6:de:1a:b1:76:
d0:5a:1a:d3:c7:b5:7f:d2:36:37:5d:70:b3:2a:e9:e9:43:3d:
46:56:a3:17:30:e9:74:49:2c:ac:f3:d5:1d:cc:93:42:f3:25:
28:ae:4a:31:30:ea:11:42:9f:25:dc:cb:e9:44:74:38:b5:1d:
3b:1c:64:d9:83:67:a8:57:31:83:c2:3d:dd:39:af:79:de:28:
85:b2:da:2e:86:a4:50:d0:21:f8:ad:d2:ba:d8:e8:79:69:69:
a0:12:da:15:3d:8f:e5:ac:1e:1a:cf:34:d4:9a:5a:a4:85:a7:
b3:50:f7:23:b9:dc:9e:86:bd:99:92:42:02:f0:d9:a3:f2:13:
25:ae:88:c5:37:e5:47:dc:79:36:49:8e:59:32:7b:e8:32:95:
2b:99:5a:c5:d7:ec:87:34:c5:07:70:83:dd:1b:83:c8:f0:5f:
0d:2b:b5:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:04:55 2026 by rpki-client