
$ rpki-client -vvvf rpkica.twnic.tw/rpki/CXT/0/BD2262C0D264051F4D27D9E92807D2B80A8CE136.mft
File: BD2262C0D264051F4D27D9E92807D2B80A8CE136.mft (raw, json)
Hash identifier: 7L7yvsKamMBChA8NO7Jlk1CtfQZamzS91zYnZfsggWE=
Subject key identifier: 2B:FB:E2:42:06:BB:D8:83:CD:E3:9A:72:63:B4:8D:9A:1C:D6:84:44
Authority key identifier: BD:22:62:C0:D2:64:05:1F:4D:27:D9:E9:28:07:D2:B8:0A:8C:E1:36
Certificate issuer: /CN=BD2262C0D264051F4D27D9E92807D2B80A8CE136
Certificate serial: 36B444D1C1D7B21E5531AE65942D615149903625
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BD2262C0D264051F4D27D9E92807D2B80A8CE136.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CXT/0/BD2262C0D264051F4D27D9E92807D2B80A8CE136.mft
Manifest number: 21
Signing time: Fri 02 Oct 2026 02:54:59 +0000
Manifest this update: Fri 02 Oct 2026 02:49:59 +0000
Manifest next update: Sat 03 Oct 2026 04:28:59 +0000
Files and hashes: 1: BD2262C0D264051F4D27D9E92807D2B80A8CE136.crl (hash: HgXbDYTdsm9heQajIr65NGsm0rsUq3GPjfR+vfjZv2c=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/CXT/0/BD2262C0D264051F4D27D9E92807D2B80A8CE136.crl
rsync://rpkica.twnic.tw/rpki/CXT/0/BD2262C0D264051F4D27D9E92807D2B80A8CE136.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BD2262C0D264051F4D27D9E92807D2B80A8CE136.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 04:28:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:b4:44:d1:c1:d7:b2:1e:55:31:ae:65:94:2d:61:51:49:90:36:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BD2262C0D264051F4D27D9E92807D2B80A8CE136
Validity
Not Before: Oct 2 02:49:59 2026 GMT
Not After : Oct 3 04:28:59 2026 GMT
Subject: CN=2BFBE24206BBD883CDE39A7263B48D9A1CD68444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4a:d0:12:4a:04:d6:85:46:66:88:e4:b9:6d:
60:b0:d1:6d:2a:3a:88:45:c3:7e:d7:76:33:8a:ca:
6a:d6:86:e1:c3:be:ac:c8:dc:5a:20:b5:de:92:ca:
bc:62:ff:3c:f9:27:2f:c7:95:92:44:79:ab:b0:f6:
cd:02:6c:49:93:19:f7:7d:d1:e0:65:8f:dc:ed:a9:
87:9c:74:c5:06:c8:fa:39:36:1b:6f:8b:6e:23:5a:
35:bc:9c:de:a2:50:f5:b9:3f:c3:53:b1:66:14:dd:
94:39:a0:88:dc:5b:74:d3:2f:39:35:9c:f8:62:cd:
a3:d2:87:56:3c:7a:c6:86:b8:63:83:ee:4d:20:73:
df:d8:a7:d4:c3:91:e1:26:76:93:84:3d:bf:17:6a:
26:0d:b1:07:49:e9:7f:8b:38:64:da:02:cc:e3:fb:
f9:68:68:53:a5:cb:5a:be:75:3a:03:e6:ad:c8:81:
87:88:e2:8b:09:62:22:ab:bb:7d:7a:87:b4:94:65:
00:a7:1f:1c:4b:12:40:5d:c3:01:7a:12:2e:15:3c:
96:b9:1a:36:e8:33:84:fc:2d:9a:36:9e:4d:c8:93:
d6:5a:a4:f8:5f:f5:6c:57:80:fd:a5:18:6e:05:08:
7e:ce:79:9f:3c:a8:13:28:be:b6:47:e4:12:f2:d2:
5c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:FB:E2:42:06:BB:D8:83:CD:E3:9A:72:63:B4:8D:9A:1C:D6:84:44
X509v3 Authority Key Identifier:
keyid:BD:22:62:C0:D2:64:05:1F:4D:27:D9:E9:28:07:D2:B8:0A:8C:E1:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CXT/0/BD2262C0D264051F4D27D9E92807D2B80A8CE136.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BD2262C0D264051F4D27D9E92807D2B80A8CE136.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CXT/0/BD2262C0D264051F4D27D9E92807D2B80A8CE136.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:bd:88:bc:13:a5:58:27:16:2e:a3:5c:cf:0b:6b:35:e8:6a:
54:11:3b:cc:b3:00:d8:c8:aa:b1:f5:b0:21:6a:2d:14:03:6f:
cd:be:54:4e:53:63:11:61:3d:e5:3d:32:3c:8e:b2:13:4f:3f:
eb:6c:8d:77:c3:61:25:e9:d2:c7:12:5c:73:80:57:1c:87:13:
64:15:ec:a5:02:b0:8a:9f:a1:d1:fd:88:85:ff:35:b0:03:15:
01:83:b4:ae:e9:55:54:06:cd:50:d0:fe:3f:a0:ad:dd:4e:65:
8d:18:b2:82:67:7b:41:83:f1:42:6a:f8:ed:2b:40:3d:58:b3:
58:e8:77:63:ca:cf:52:28:7d:26:58:64:bf:3c:b8:53:b0:f7:
f0:96:10:e4:24:fa:98:01:91:aa:d8:34:69:41:04:06:55:fb:
16:67:0f:df:08:f5:97:86:58:fc:e4:7a:99:85:71:98:5d:a3:
9e:52:d1:4d:89:80:21:7c:5d:03:bf:61:34:bb:20:af:dd:81:
f1:63:6f:56:be:1e:63:90:b4:18:3e:9c:1a:47:98:7e:4a:0e:
e7:c2:17:3c:d5:e1:b4:b2:0a:76:a9:23:d3:ab:86:00:40:20:
7d:f3:ea:87:28:03:02:68:59:e4:2a:19:82:52:b9:fb:4b:0e:
94:29:32:cc
-----BEGIN CERTIFICATE-----
MIIE3jCCA8agAwIBAgIUNrRE0cHXsh5VMa5llC1hUUmQNiUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkQyMjYyQzBEMjY0MDUxRjREMjdEOUU5MjgwN0QyQjgw
QThDRTEzNjAeFw0yNjEwMDIwMjQ5NTlaFw0yNjEwMDMwNDI4NTlaMDMxMTAvBgNV
BAMTKDJCRkJFMjQyMDZCQkQ4ODNDREUzOUE3MjYzQjQ4RDlBMUNENjg0NDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2StASSgTWhUZmiOS5bWCw0W0q
OohFw37XdjOKymrWhuHDvqzI3Fogtd6Syrxi/zz5Jy/HlZJEeauw9s0CbEmTGfd9
0eBlj9ztqYecdMUGyPo5Nhtvi24jWjW8nN6iUPW5P8NTsWYU3ZQ5oIjcW3TTLzk1
nPhizaPSh1Y8esaGuGOD7k0gc9/Yp9TDkeEmdpOEPb8XaiYNsQdJ6X+LOGTaAszj
+/loaFOly1q+dToD5q3IgYeI4osJYiKru316h7SUZQCnHxxLEkBdwwF6Ei4VPJa5
GjboM4T8LZo2nk3Ik9ZapPhf9WxXgP2lGG4FCH7OeZ88qBMovrZH5BLy0lwRAgMB
AAGjggHoMIIB5DAdBgNVHQ4EFgQUK/viQga72IPN45pyY7SNmhzWhEQwHwYDVR0j
BBgwFoAUvSJiwNJkBR9NJ9npKAfSuAqM4TYwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud
HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ1hULzAv
QkQyMjYyQzBEMjY0MDUxRjREMjdEOUU5MjgwN0QyQjgwQThDRTEzNi5jcmwwbwYI
KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50
dy9ycGtpL1RXTklDQ0EvMS9CRDIyNjJDMEQyNjQwNTFGNEQyN0Q5RTkyODA3RDJC
ODBBOENFMTM2LmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j
Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ1hULzAvQkQyMjYyQzBEMjY0MDUxRjRE
MjdEOUU5MjgwN0QyQjgwQThDRTEzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF
BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJm9iLwTpVgnFi6jXM8L
azXoalQRO8yzANjIqrH1sCFqLRQDb82+VE5TYxFhPeU9MjyOshNPP+tsjXfDYSXp
0scSXHOAVxyHE2QV7KUCsIqfodH9iIX/NbADFQGDtK7pVVQGzVDQ/j+grd1OZY0Y
soJne0GD8UJq+O0rQD1Ys1jod2PKz1IofSZYZL88uFOw9/CWEOQk+pgBkarYNGlB
BAZV+xZnD98I9ZeGWPzkepmFcZhdo55S0U2JgCF8XQO/YTS7IK/dgfFjb1a+HmOQ
tBg+nBpHmH5KDufCFzzV4bSyCnapI9OrhgBAIH3z6ocoAwJoWeQqGYJSuftLDpQp
Msw=
-----END CERTIFICATE-----
Generated at Fri Oct 2 19:55:38 2026 by rpki-client