
$ rpki-client -vvvf rpkica.twnic.tw/rpki/CHUANGLI/0/295FAD27AFED0134764CB0F6CA702AF930C0AC18.mft
File: 295FAD27AFED0134764CB0F6CA702AF930C0AC18.mft (raw, json)
Hash identifier: 0x3S6JVNCSszFglQfbse3gMxbUc2YbRSkwL8+nMf1tU=
Subject key identifier: 2A:3D:2E:AF:96:38:5A:51:CD:50:E1:C7:F8:C1:10:91:EA:4E:61:F0
Authority key identifier: 29:5F:AD:27:AF:ED:01:34:76:4C:B0:F6:CA:70:2A:F9:30:C0:AC:18
Certificate issuer: /CN=295FAD27AFED0134764CB0F6CA702AF930C0AC18
Certificate serial: 65DA06C321A5C7936B5E7C70CC481AE4DE7B4C98
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/295FAD27AFED0134764CB0F6CA702AF930C0AC18.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CHUANGLI/0/295FAD27AFED0134764CB0F6CA702AF930C0AC18.mft
Manifest number: C1
Signing time: Sat 03 Oct 2026 12:45:05 +0000
Manifest this update: Sat 03 Oct 2026 12:40:05 +0000
Manifest next update: Sun 04 Oct 2026 12:56:05 +0000
Files and hashes: 1: 295FAD27AFED0134764CB0F6CA702AF930C0AC18.crl (hash: LGfnzMhz5CP4DH/LPjvGp7Kr4ylxHd46X6AYGERGGv8=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/CHUANGLI/0/295FAD27AFED0134764CB0F6CA702AF930C0AC18.crl
rsync://rpkica.twnic.tw/rpki/CHUANGLI/0/295FAD27AFED0134764CB0F6CA702AF930C0AC18.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/295FAD27AFED0134764CB0F6CA702AF930C0AC18.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 12:56:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:da:06:c3:21:a5:c7:93:6b:5e:7c:70:cc:48:1a:e4:de:7b:4c:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295FAD27AFED0134764CB0F6CA702AF930C0AC18
Validity
Not Before: Oct 3 12:40:05 2026 GMT
Not After : Oct 4 12:56:05 2026 GMT
Subject: CN=2A3D2EAF96385A51CD50E1C7F8C11091EA4E61F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c1:fc:ab:6c:7a:7e:f5:81:e6:91:68:62:7b:
76:0c:b5:82:b3:64:34:d3:99:34:68:ca:27:22:a6:
ec:5c:ea:c8:8a:a5:4b:9c:ab:49:a3:6e:61:29:f9:
6c:01:67:53:37:aa:cf:5a:9b:e7:48:71:22:3d:70:
f2:a4:69:7e:64:f9:d5:71:62:16:0e:10:8e:2f:cf:
69:ff:72:34:de:ed:a7:d1:fc:72:0b:35:1c:0c:4f:
16:4c:22:fb:1b:94:70:8b:34:70:65:97:a8:5e:83:
53:d4:87:1b:ac:a2:16:05:54:e5:68:e9:9a:68:7b:
ea:61:36:aa:e8:9d:e9:36:b9:fd:7f:19:2e:78:97:
3b:01:39:f4:29:f5:02:b7:ec:fb:a9:a5:0f:4c:ac:
e2:e1:a0:22:50:ee:14:91:c0:80:22:03:40:6b:58:
e9:20:a0:c2:43:2d:a5:e6:b8:1e:fe:4b:56:c6:ed:
4f:cd:70:df:8c:28:24:4f:67:93:68:c5:86:8b:83:
ec:77:44:3d:c7:13:78:a9:54:62:c2:13:17:15:0b:
41:b9:e2:19:96:7c:09:63:11:df:40:e5:2d:6f:63:
46:3b:6c:32:37:57:0f:f3:ca:99:d2:66:33:1a:56:
e7:37:08:97:14:d9:2e:e1:f5:8e:15:8a:26:a6:e7:
5b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:3D:2E:AF:96:38:5A:51:CD:50:E1:C7:F8:C1:10:91:EA:4E:61:F0
X509v3 Authority Key Identifier:
keyid:29:5F:AD:27:AF:ED:01:34:76:4C:B0:F6:CA:70:2A:F9:30:C0:AC:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CHUANGLI/0/295FAD27AFED0134764CB0F6CA702AF930C0AC18.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/295FAD27AFED0134764CB0F6CA702AF930C0AC18.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHUANGLI/0/295FAD27AFED0134764CB0F6CA702AF930C0AC18.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:22:70:c4:ad:23:df:ce:05:51:98:59:c9:0b:a9:eb:a6:f6:
0a:35:d6:e2:24:07:12:de:40:32:d2:7b:65:75:27:18:d5:f6:
13:8e:2d:bc:a6:cb:68:49:81:b5:a2:5b:db:f5:6e:fc:a3:99:
3d:1f:57:9e:ec:10:ec:c0:0e:5e:92:97:c0:96:cb:e6:e3:02:
04:a3:ff:01:65:cb:f3:3a:e7:cc:bb:ae:8e:c4:27:4e:d7:0b:
08:d3:76:1e:d3:16:25:df:f6:4f:b0:5d:bb:6e:db:64:71:7a:
b7:27:ba:10:b9:bd:63:93:a8:f3:9d:3a:fa:a9:a9:fa:69:a7:
11:ce:7d:7f:eb:07:25:bf:e0:09:23:38:8c:6f:81:70:a0:54:
4a:e0:02:86:01:df:46:38:07:eb:67:ed:8b:e4:0e:b2:a1:ab:
0a:e2:77:da:96:89:95:8b:c4:cc:9e:10:e7:4d:d4:20:b2:c1:
dd:1b:da:df:c1:5d:e2:67:b1:c2:1f:12:42:38:03:28:0b:80:
f4:e6:69:c9:45:01:24:52:d4:40:eb:63:52:8d:7a:60:ca:3b:
55:cc:6c:fe:2f:7c:5e:bf:04:2c:7b:cc:ac:29:46:7f:fe:75:
b7:c1:81:36:04:5b:24:c2:fe:7d:34:39:d3:73:ee:16:2f:b2:
28:9e:2c:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 00:27:11 2026 by rpki-client