
$ rpki-client -vvf rpkica.twnic.tw/rpki/CHUMMYTECH/1/28E1FD03C8B040A9874A90D4654322ACDFCA3407.mft
File: 28E1FD03C8B040A9874A90D4654322ACDFCA3407.mft (raw, json)
Hash identifier: 04yJv4MmDxuzhgoPuCp6G9hX35Wqbv1cobmzYFEjwHI=
Subject key identifier: 8F:7F:CE:D1:49:B5:68:2D:E0:45:C9:CE:E8:30:44:9C:6B:9B:1B:69
Authority key identifier: 28:E1:FD:03:C8:B0:40:A9:87:4A:90:D4:65:43:22:AC:DF:CA:34:07
Certificate issuer: /CN=28E1FD03C8B040A9874A90D4654322ACDFCA3407
Certificate serial: 491C7967408B6910AAAD08624FF801378F1F9B70
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/28E1FD03C8B040A9874A90D4654322ACDFCA3407.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CHUMMYTECH/1/28E1FD03C8B040A9874A90D4654322ACDFCA3407.mft
Manifest number: 45
Signing time: Tue 30 Jun 2026 00:47:41 +0000
Manifest this update: Tue 30 Jun 2026 00:42:41 +0000
Manifest next update: Wed 01 Jul 2026 01:55:41 +0000
Files and hashes: 1: 28E1FD03C8B040A9874A90D4654322ACDFCA3407.crl (hash: FMjSMy49TO3lzkIFPq19RxcOpSWESD32ffautPNlOuc=)
2: 3136302e3138372e3139382e302f32332d3234203d3e20313532363135.roa (hash: I6RgBeSwuI+mSenPcIlVAxSTnNAaaE4/xzzLMyb2FH0=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/CHUMMYTECH/1/28E1FD03C8B040A9874A90D4654322ACDFCA3407.crl
rsync://rpkica.twnic.tw/rpki/CHUMMYTECH/1/28E1FD03C8B040A9874A90D4654322ACDFCA3407.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/28E1FD03C8B040A9874A90D4654322ACDFCA3407.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Jul 2026 01:55:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:1c:79:67:40:8b:69:10:aa:ad:08:62:4f:f8:01:37:8f:1f:9b:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28E1FD03C8B040A9874A90D4654322ACDFCA3407
Validity
Not Before: Jun 30 00:42:41 2026 GMT
Not After : Jul 1 01:55:41 2026 GMT
Subject: CN=8F7FCED149B5682DE045C9CEE830449C6B9B1B69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:48:82:04:c8:59:3a:26:c9:b6:3e:31:04:72:
4a:00:1b:8f:20:43:89:89:c2:5b:45:8b:21:3f:c8:
a2:3b:9f:e4:1e:5d:ba:c8:d7:bf:f1:04:ab:2d:8e:
e4:e0:3c:b6:c1:91:96:48:f3:6c:9e:e3:c1:87:57:
78:29:a3:28:57:f6:ae:c6:b5:a5:85:17:ce:37:72:
8e:c4:ea:47:a6:fc:f6:ba:88:62:91:d0:37:ac:1b:
33:66:09:c4:b4:69:e8:21:48:c7:d4:1b:f7:38:87:
1c:42:af:76:69:58:30:e9:2f:80:04:15:4c:19:96:
8c:a1:97:63:1e:31:ba:34:19:f4:4e:eb:7c:03:3a:
bc:05:3a:aa:31:a6:c3:f4:92:bf:fc:64:7c:83:12:
69:a4:60:f4:6f:de:26:3e:c8:1f:30:f5:db:28:18:
75:a4:02:9e:f6:ff:16:c4:d9:20:a3:9a:f2:14:52:
80:5b:5f:b0:9f:c5:f4:e6:1d:33:de:c7:3c:3f:a7:
a6:8e:2e:e8:de:88:b8:99:b6:03:5a:18:8e:db:7f:
05:ca:75:91:5e:40:d6:59:10:2e:50:93:b9:1a:4d:
ff:29:6c:d9:46:14:c4:6c:22:c1:92:bd:0b:45:37:
1a:d6:e2:fc:96:04:e6:12:a8:7c:2e:cb:53:cf:e3:
cb:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:7F:CE:D1:49:B5:68:2D:E0:45:C9:CE:E8:30:44:9C:6B:9B:1B:69
X509v3 Authority Key Identifier:
keyid:28:E1:FD:03:C8:B0:40:A9:87:4A:90:D4:65:43:22:AC:DF:CA:34:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CHUMMYTECH/1/28E1FD03C8B040A9874A90D4654322ACDFCA3407.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/28E1FD03C8B040A9874A90D4654322ACDFCA3407.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHUMMYTECH/1/28E1FD03C8B040A9874A90D4654322ACDFCA3407.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:ba:0f:d6:98:52:8b:b6:c4:a9:a8:4b:f9:9f:83:19:db:db:
f3:bb:31:ce:71:78:a9:1c:4f:07:56:a9:ed:80:73:4e:6e:7b:
2f:86:bc:02:f4:e5:b0:37:85:a0:5a:52:c0:5e:80:a4:68:b8:
01:5b:f9:58:a0:2b:bb:17:48:5d:55:72:0c:95:94:a0:a9:b0:
8b:88:4b:4e:33:d0:81:22:31:77:61:8a:04:94:36:8a:8e:c7:
f8:4c:90:3b:a6:7a:b3:30:e0:d2:46:48:5f:fc:13:e9:8a:89:
b3:50:02:aa:4b:91:48:6b:4d:ff:91:a2:59:67:e3:96:4a:0c:
34:5d:e6:b2:8c:2f:a8:95:c7:bb:50:48:75:f0:15:59:35:73:
f2:f8:20:30:54:53:cc:3c:a6:90:48:a8:12:1e:a7:f1:6c:f1:
b1:64:ac:32:67:94:1b:a8:7a:ff:8c:ea:47:5b:ed:8f:a3:03:
ea:26:b0:64:22:de:37:d4:0d:8f:2b:d2:4c:9a:4d:90:80:e0:
c4:29:61:e4:92:28:0d:ec:86:f9:14:b8:75:31:92:c3:e5:74:
f5:b1:50:0f:ca:ee:e7:92:03:13:16:7c:ed:fd:0b:00:17:93:
ec:e8:b2:9d:7a:08:28:eb:24:76:35:71:42:a6:24:4f:56:05:
89:54:93:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 13:10:02 2026 by rpki-client