
$ rpki-client -vvvf rpkica.twnic.tw/rpki/ARCHE/0/CAD362F3BFAFE5B9307917E23B93FE8D0393085C.mft
File: CAD362F3BFAFE5B9307917E23B93FE8D0393085C.mft (raw, json)
Hash identifier: Xc+1umUmykAmv6zE5M2Gb22ObFc66ADBoqtOPUQTwEw=
Subject key identifier: EB:96:4A:65:06:5C:3B:FC:65:EA:B3:F8:EC:70:9C:2D:99:E5:6F:CD
Authority key identifier: CA:D3:62:F3:BF:AF:E5:B9:30:79:17:E2:3B:93:FE:8D:03:93:08:5C
Certificate issuer: /CN=CAD362F3BFAFE5B9307917E23B93FE8D0393085C
Certificate serial: 77215255EC3876352EA22D319236968F3B63CA8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CAD362F3BFAFE5B9307917E23B93FE8D0393085C.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/ARCHE/0/CAD362F3BFAFE5B9307917E23B93FE8D0393085C.mft
Manifest number: C4
Signing time: Sun 04 Oct 2026 07:59:41 +0000
Manifest this update: Sun 04 Oct 2026 07:54:41 +0000
Manifest next update: Mon 05 Oct 2026 08:10:41 +0000
Files and hashes: 1: CAD362F3BFAFE5B9307917E23B93FE8D0393085C.crl (hash: JEaWoqmUZlh21rXHVtU5vS28DXnyuMhNmwnibY9mvKE=)
2: 323430313a376136303a3a2f33322d3332203d3e203138303431.roa (hash: qxUkmVDTlYC49rIGKj7zr8ivSmLfXGtp1JCdVnCFlN8=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/ARCHE/0/CAD362F3BFAFE5B9307917E23B93FE8D0393085C.crl
rsync://rpkica.twnic.tw/rpki/ARCHE/0/CAD362F3BFAFE5B9307917E23B93FE8D0393085C.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CAD362F3BFAFE5B9307917E23B93FE8D0393085C.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Oct 2026 08:10:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:21:52:55:ec:38:76:35:2e:a2:2d:31:92:36:96:8f:3b:63:ca:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CAD362F3BFAFE5B9307917E23B93FE8D0393085C
Validity
Not Before: Oct 4 07:54:41 2026 GMT
Not After : Oct 5 08:10:41 2026 GMT
Subject: CN=EB964A65065C3BFC65EAB3F8EC709C2D99E56FCD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d7:45:cd:ce:9b:0a:d0:97:ea:9c:08:f4:56:
04:a3:ce:e1:79:71:21:5e:07:f3:90:1d:91:fc:a7:
05:2e:7f:d8:c6:d1:d7:90:06:2f:c3:92:40:31:21:
69:41:61:cb:de:64:09:19:a1:ef:a9:d7:0c:67:c6:
39:91:64:ec:b2:3b:dc:7f:2d:ae:e8:cb:ae:f2:97:
4f:84:fe:41:13:f1:61:81:0e:bf:3d:20:70:69:02:
38:2a:a8:92:98:d7:c3:80:68:1e:c9:f1:08:d5:35:
26:af:af:2d:8a:6c:0f:4e:4b:7b:36:ef:e5:e1:54:
a3:13:07:2e:ec:bb:d6:e9:32:0d:e7:54:2e:a1:6a:
7e:50:19:84:98:fa:b8:e9:f0:1e:c2:5e:7a:fe:4d:
9f:55:a4:ac:36:76:be:9b:43:e1:ac:14:54:09:03:
e2:19:56:bc:6f:89:72:23:f9:ee:4a:9f:16:d6:30:
ec:89:fc:59:16:ed:d7:ae:d4:8f:d5:6e:84:e5:fd:
6e:e4:44:0f:78:95:f7:d3:a6:8b:a1:bf:f7:b0:8c:
29:e2:91:19:5f:a5:ab:5a:4c:1e:39:ba:cd:25:cf:
bb:b2:52:2b:fa:2f:04:66:a8:57:52:39:8f:56:72:
da:96:d7:ca:d9:87:13:7e:af:99:19:30:e7:37:69:
cd:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:96:4A:65:06:5C:3B:FC:65:EA:B3:F8:EC:70:9C:2D:99:E5:6F:CD
X509v3 Authority Key Identifier:
keyid:CA:D3:62:F3:BF:AF:E5:B9:30:79:17:E2:3B:93:FE:8D:03:93:08:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/ARCHE/0/CAD362F3BFAFE5B9307917E23B93FE8D0393085C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CAD362F3BFAFE5B9307917E23B93FE8D0393085C.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ARCHE/0/CAD362F3BFAFE5B9307917E23B93FE8D0393085C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:03:50:63:f3:aa:72:a7:98:38:f6:76:b6:9c:a7:79:e1:40:
df:cb:f7:23:40:47:54:6d:0d:64:9a:a5:68:81:03:84:01:0b:
39:1e:a3:ef:b4:29:0a:6a:76:20:b2:31:f6:61:96:ad:f5:b7:
2e:2c:7a:20:4d:59:cf:40:2f:96:50:ad:01:23:f0:7e:c6:c4:
16:89:0d:dd:8e:45:05:22:20:de:9f:bb:62:c7:b7:06:38:b5:
aa:92:f5:93:34:a6:5f:a5:47:25:62:5d:8e:f3:b3:50:d1:95:
4e:25:4e:9c:ce:9c:b0:2e:ea:35:1a:e6:f1:42:c0:f1:35:c2:
ca:56:9c:b6:48:e0:1e:e2:0e:a0:db:e8:45:3d:a3:7a:2b:d4:
95:a0:c5:1a:57:1e:1e:53:93:6a:33:0b:f4:94:f7:5b:cf:29:
f1:18:be:cc:ce:8a:ab:b5:d8:55:ca:ff:98:65:e4:75:5a:88:
2f:5a:67:bb:f8:58:c8:dd:81:b4:fd:df:94:71:df:7d:cf:18:
4a:54:45:95:88:90:4a:b2:75:0f:e4:c8:1a:34:c8:72:d8:57:
04:b2:6a:b7:f4:36:28:2b:d0:6b:dc:93:16:01:6e:0e:25:a2:
6f:6c:ee:6d:9a:3f:12:f0:64:40:8b:e8:eb:68:70:86:9f:82:
3b:c8:d5:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:37:57 2026 by rpki-client