
$ rpki-client -vvf rpkica.twnic.tw/rpki/BEIDOU/0/20E6A3BA2C4DA16407FE46FD4FDF6DBDBA4197DC.mft
File: 20E6A3BA2C4DA16407FE46FD4FDF6DBDBA4197DC.mft (raw, json)
Hash identifier: pnELf7+EIkiTKzPRLY5Ha4k2eJ5Epf9w0SYiAcLlRTw=
Subject key identifier: 2C:02:71:05:DB:F0:03:B6:DF:2D:4F:42:42:E8:DF:2A:CD:6B:54:39
Authority key identifier: 20:E6:A3:BA:2C:4D:A1:64:07:FE:46:FD:4F:DF:6D:BD:BA:41:97:DC
Certificate issuer: /CN=20E6A3BA2C4DA16407FE46FD4FDF6DBDBA4197DC
Certificate serial: 7D811DD97CE4DCAE14DBFCA3C3DEA1C1D35F3C38
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/20E6A3BA2C4DA16407FE46FD4FDF6DBDBA4197DC.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/BEIDOU/0/20E6A3BA2C4DA16407FE46FD4FDF6DBDBA4197DC.mft
Manifest number: 87
Signing time: Fri 14 Aug 2026 11:06:40 +0000
Manifest this update: Fri 14 Aug 2026 11:01:40 +0000
Manifest next update: Sat 15 Aug 2026 13:48:40 +0000
Files and hashes: 1: 20E6A3BA2C4DA16407FE46FD4FDF6DBDBA4197DC.crl (hash: 7w9q99U/PZn4vNonV/LoJCKg4mOvSxGptM0N73QDuk4=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/BEIDOU/0/20E6A3BA2C4DA16407FE46FD4FDF6DBDBA4197DC.crl
rsync://rpkica.twnic.tw/rpki/BEIDOU/0/20E6A3BA2C4DA16407FE46FD4FDF6DBDBA4197DC.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/20E6A3BA2C4DA16407FE46FD4FDF6DBDBA4197DC.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 15 Aug 2026 13:48:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:81:1d:d9:7c:e4:dc:ae:14:db:fc:a3:c3:de:a1:c1:d3:5f:3c:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20E6A3BA2C4DA16407FE46FD4FDF6DBDBA4197DC
Validity
Not Before: Aug 14 11:01:40 2026 GMT
Not After : Aug 15 13:48:40 2026 GMT
Subject: CN=2C027105DBF003B6DF2D4F4242E8DF2ACD6B5439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:79:7d:3e:d6:bb:ae:72:8b:9b:0d:bd:aa:e9:
05:02:41:53:72:a3:b2:ea:ef:d1:e1:e1:52:ca:cf:
a7:92:77:bc:25:5d:1f:37:4c:f2:43:6f:c8:55:bd:
1a:23:0b:e1:78:16:02:d8:6d:78:cf:a2:b4:28:0c:
b8:66:64:85:b5:d3:e0:62:26:f3:6f:21:7d:a7:ef:
58:0f:93:b4:2c:74:0b:25:de:9b:3a:2b:9f:18:b5:
a9:c6:6c:18:ff:6a:a7:f4:ec:a4:3d:b5:a5:23:8c:
91:0b:e2:a3:9a:e6:45:6c:ef:c7:ed:76:43:c3:7f:
98:cf:54:b3:56:db:28:42:2b:28:51:d1:2a:c0:98:
bc:4f:40:d3:02:59:16:38:21:f2:89:b1:b0:5b:b8:
6d:0b:9b:fa:0a:5a:95:59:87:79:84:0e:d2:25:d3:
d5:9b:7e:a8:30:ee:65:a0:2e:ed:18:60:b2:f9:83:
0a:79:9c:13:7f:85:34:53:c1:d7:6f:c2:a4:e4:cb:
6e:c2:2b:ce:83:12:40:31:e4:1c:4d:0c:17:d7:4f:
9b:13:d2:04:66:20:f5:bb:23:48:bc:49:55:de:15:
ee:0f:6a:0e:8e:69:4f:db:f7:72:97:e0:1d:49:e9:
bb:c6:04:a8:df:aa:63:ec:cb:fb:21:41:97:1f:8e:
2e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:02:71:05:DB:F0:03:B6:DF:2D:4F:42:42:E8:DF:2A:CD:6B:54:39
X509v3 Authority Key Identifier:
keyid:20:E6:A3:BA:2C:4D:A1:64:07:FE:46:FD:4F:DF:6D:BD:BA:41:97:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/BEIDOU/0/20E6A3BA2C4DA16407FE46FD4FDF6DBDBA4197DC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/20E6A3BA2C4DA16407FE46FD4FDF6DBDBA4197DC.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/BEIDOU/0/20E6A3BA2C4DA16407FE46FD4FDF6DBDBA4197DC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:2f:5b:3c:d9:bf:31:e4:5b:69:15:87:bf:8d:5e:74:0e:ea:
d6:9b:34:c8:10:79:d2:50:33:d1:9d:dc:71:2d:33:d0:76:b8:
48:a8:7f:67:4a:ad:08:b0:a5:2a:1b:be:ee:db:fa:44:87:e3:
6b:0f:26:a8:ac:71:ae:ac:25:4f:c1:ed:61:39:e9:d8:cb:5a:
82:e6:4b:29:7d:0b:25:f4:b8:f3:7c:a2:65:e1:4f:7a:73:49:
c3:97:1f:57:d3:22:8c:dd:8e:02:61:41:9a:0f:08:ea:24:1b:
07:a8:4f:96:22:71:3a:71:1f:8a:5c:cc:e9:db:a9:74:65:cb:
fa:89:69:34:e9:a7:10:4e:d0:56:f1:2a:f9:52:30:34:89:64:
ca:21:b6:47:e0:90:fe:88:78:53:74:14:69:c7:09:84:3b:80:
54:60:4e:f6:8d:9c:ce:b1:fb:de:d4:21:64:f0:b5:bc:0a:8d:
b9:5c:33:d7:3c:e4:1e:f1:b0:a9:95:05:42:5c:47:84:34:2b:
40:1b:e7:d5:0f:aa:f6:f1:46:20:9f:c3:76:92:1e:27:a4:2e:
13:3f:71:b2:b9:b7:10:12:d1:2f:23:b9:41:45:a1:b7:8e:15:
3e:51:e0:88:c2:ec:b3:f5:88:a3:6c:07:bb:09:54:92:e4:8b:
7c:a1:5a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:20:22 2026 by rpki-client