
$ rpki-client -vvvf rpkica.twnic.tw/rpki/EHHKY/0/CE985C78C6B578507702DEDB1C399B2F99CB3B4F.mft
File: CE985C78C6B578507702DEDB1C399B2F99CB3B4F.mft (raw, json)
Hash identifier: yRmembFhUQRT5FtDN3L2oL6L+N+B1qwkYOijQ6MakMk=
Subject key identifier: E5:48:DA:D5:1A:C2:C2:F8:C3:62:49:D7:99:EF:33:4D:DB:A7:16:90
Authority key identifier: CE:98:5C:78:C6:B5:78:50:77:02:DE:DB:1C:39:9B:2F:99:CB:3B:4F
Certificate issuer: /CN=CE985C78C6B578507702DEDB1C399B2F99CB3B4F
Certificate serial: 4EB42A0DB55CA9E098ADD587601770491EC646BB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE985C78C6B578507702DEDB1C399B2F99CB3B4F.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/EHHKY/0/CE985C78C6B578507702DEDB1C399B2F99CB3B4F.mft
Manifest number: C4
Signing time: Sun 04 Oct 2026 09:04:47 +0000
Manifest this update: Sun 04 Oct 2026 08:59:47 +0000
Manifest next update: Mon 05 Oct 2026 12:15:47 +0000
Files and hashes: 1: 3130332e3133302e38342e302f32322d3234203d3e20313331363037.roa (hash: kLXIxum1hjICq0/XMBssYAH4VJErk8HWH+ctM17UVM0=)
2: CE985C78C6B578507702DEDB1C399B2F99CB3B4F.crl (hash: q/v6o33u3ImNiNQ9Qty46B3vriabUWpb8XG2Ws+8Ghw=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/EHHKY/0/CE985C78C6B578507702DEDB1C399B2F99CB3B4F.crl
rsync://rpkica.twnic.tw/rpki/EHHKY/0/CE985C78C6B578507702DEDB1C399B2F99CB3B4F.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE985C78C6B578507702DEDB1C399B2F99CB3B4F.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Oct 2026 12:15:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:b4:2a:0d:b5:5c:a9:e0:98:ad:d5:87:60:17:70:49:1e:c6:46:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CE985C78C6B578507702DEDB1C399B2F99CB3B4F
Validity
Not Before: Oct 4 08:59:47 2026 GMT
Not After : Oct 5 12:15:47 2026 GMT
Subject: CN=E548DAD51AC2C2F8C36249D799EF334DDBA71690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:83:ac:de:df:de:69:4a:2c:41:1f:a2:5f:d9:
4d:a4:fd:25:77:e0:8f:86:38:c3:9d:ed:45:88:c6:
5d:1f:96:d5:70:8e:65:8e:20:06:01:41:12:bf:8c:
09:cc:82:3c:b6:73:b9:95:4d:b6:bc:e7:30:bf:75:
03:81:c2:c5:df:2f:8a:62:51:46:da:5c:16:da:22:
62:a7:97:09:ee:ca:55:f4:35:21:ae:c6:81:21:d1:
72:3f:1e:3f:11:e9:34:e5:ce:6c:6f:2f:d6:db:40:
e7:dd:55:e0:6a:e6:3d:15:ad:51:dd:8c:fb:39:8b:
73:b4:b8:18:2d:92:45:47:a9:37:bb:c2:c5:13:21:
9a:ab:a2:65:dd:db:22:63:90:34:95:d1:04:ec:49:
f1:aa:6a:b9:55:0e:0a:6d:5e:40:cc:c1:f7:34:39:
e0:2a:d1:69:7f:53:9d:b6:2c:94:40:73:61:3b:9e:
f3:63:69:2c:03:74:4b:27:9b:7e:b2:5e:bb:59:2f:
88:46:09:a0:78:e5:eb:ff:b5:c7:7c:5e:19:70:3d:
ff:4a:98:3d:9e:f6:76:d5:68:2d:47:7b:ae:ef:42:
ba:39:24:95:21:8b:19:16:79:a2:97:96:bc:12:db:
c1:b6:e1:14:99:3e:68:50:82:4f:19:f4:8d:9d:58:
73:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:48:DA:D5:1A:C2:C2:F8:C3:62:49:D7:99:EF:33:4D:DB:A7:16:90
X509v3 Authority Key Identifier:
keyid:CE:98:5C:78:C6:B5:78:50:77:02:DE:DB:1C:39:9B:2F:99:CB:3B:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/EHHKY/0/CE985C78C6B578507702DEDB1C399B2F99CB3B4F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE985C78C6B578507702DEDB1C399B2F99CB3B4F.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/EHHKY/0/CE985C78C6B578507702DEDB1C399B2F99CB3B4F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:b7:82:01:f4:38:9d:92:2b:7d:2d:69:2a:b5:60:48:5f:02:
57:85:0e:2d:10:1a:f7:cb:9b:f2:b2:5c:1a:ae:61:f6:d5:a2:
31:3d:77:85:13:17:1b:84:b3:8d:f7:4c:1f:8c:ee:8c:04:47:
b2:be:f9:44:d2:44:18:6c:c6:43:0d:79:41:95:59:d1:c2:61:
fb:5d:19:94:56:63:81:c8:4f:da:5c:a9:41:f7:56:22:c7:0e:
6a:ee:31:83:de:34:20:b5:23:be:6b:a9:81:61:41:a1:80:47:
7a:db:46:9b:f4:89:56:ae:95:ea:2e:0c:1b:28:f9:b7:14:3a:
4e:82:5c:6f:f7:40:17:15:79:c9:74:37:01:7f:5b:62:30:bc:
d0:4f:69:8c:b6:0f:dd:9b:2a:dc:79:23:74:b3:94:73:42:ee:
28:c5:cb:26:57:79:34:29:ee:74:bb:d2:db:28:19:2b:3f:bc:
5a:87:85:2a:72:72:5a:71:35:41:21:ac:7a:dc:35:6c:af:eb:
c2:20:1a:b6:d5:8d:f6:30:53:96:70:97:ff:f5:12:c2:1c:30:
b7:86:a7:1d:95:64:f2:a1:9a:a5:79:a0:60:b9:bd:1c:a2:c2:
b1:83:11:b2:28:f2:4e:26:e7:d5:5d:8b:d6:b3:cd:0b:52:89:
3d:b6:c7:26
-----BEGIN CERTIFICATE-----
MIIE4jCCA8qgAwIBAgIUTrQqDbVcqeCYrdWHYBdwSR7GRrswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0U5ODVDNzhDNkI1Nzg1MDc3MDJERURCMUMzOTlCMkY5
OUNCM0I0RjAeFw0yNjEwMDQwODU5NDdaFw0yNjEwMDUxMjE1NDdaMDMxMTAvBgNV
BAMTKEU1NDhEQUQ1MUFDMkMyRjhDMzYyNDlENzk5RUYzMzREREJBNzE2OTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLg6ze395pSixBH6Jf2U2k/SV3
4I+GOMOd7UWIxl0fltVwjmWOIAYBQRK/jAnMgjy2c7mVTba85zC/dQOBwsXfL4pi
UUbaXBbaImKnlwnuylX0NSGuxoEh0XI/Hj8R6TTlzmxvL9bbQOfdVeBq5j0VrVHd
jPs5i3O0uBgtkkVHqTe7wsUTIZqromXd2yJjkDSV0QTsSfGqarlVDgptXkDMwfc0
OeAq0Wl/U522LJRAc2E7nvNjaSwDdEsnm36yXrtZL4hGCaB45ev/tcd8XhlwPf9K
mD2e9nbVaC1He67vQro5JJUhixkWeaKXlrwS28G24RSZPmhQgk8Z9I2dWHOHAgMB
AAGjggHsMIIB6DAdBgNVHQ4EFgQU5Uja1RrCwvjDYknXme8zTdunFpAwHwYDVR0j
BBgwFoAUzphceMa1eFB3At7bHDmbL5nLO08wDgYDVR0PAQH/BAQDAgeAMGIGA1Ud
HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRUhIS1kv
MC9DRTk4NUM3OEM2QjU3ODUwNzcwMkRFREIxQzM5OUIyRjk5Q0IzQjRGLmNybDBv
BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS8xL0NFOTg1Qzc4QzZCNTc4NTA3NzAyREVEQjFDMzk5
QjJGOTlDQjNCNEYuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5
bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9FSEhLWS8wL0NFOTg1Qzc4QzZCNTc4
NTA3NzAyREVEQjFDMzk5QjJGOTlDQjNCNEYubWZ0MBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAgt4IB9Didkit9
LWkqtWBIXwJXhQ4tEBr3y5vyslwarmH21aIxPXeFExcbhLON90wfjO6MBEeyvvlE
0kQYbMZDDXlBlVnRwmH7XRmUVmOByE/aXKlB91Yixw5q7jGD3jQgtSO+a6mBYUGh
gEd620ab9IlWrpXqLgwbKPm3FDpOglxv90AXFXnJdDcBf1tiMLzQT2mMtg/dmyrc
eSN0s5RzQu4oxcsmV3k0Ke50u9LbKBkrP7xah4UqcnJacTVBIax63DVsr+vCIBq2
1Y32MFOWcJf/9RLCHDC3hqcdlWTyoZqleaBgub0cosKxgxGyKPJOJufVXYvWs80L
Uok9tscm
-----END CERTIFICATE-----
Generated at Sun Oct 4 18:00:41 2026 by rpki-client