
$ rpki-client -vvf rpkica.twnic.tw/rpki/ERAYINFO/0/E65F87C3415B74DFBBCBE0909A320835EE88E6E5.mft
File: E65F87C3415B74DFBBCBE0909A320835EE88E6E5.mft (raw, json)
Hash identifier: BmFpqpdPkM5fLJsuIc3+F4yEMFgfpcoR96u0vHANmxY=
Subject key identifier: 84:0A:65:BA:46:B2:EE:50:8E:37:DA:73:A0:B1:CF:F2:90:A7:74:00
Authority key identifier: E6:5F:87:C3:41:5B:74:DF:BB:CB:E0:90:9A:32:08:35:EE:88:E6:E5
Certificate issuer: /CN=E65F87C3415B74DFBBCBE0909A320835EE88E6E5
Certificate serial: 63EF5465B67CF71BFE29D209F87E5634A161EE8F
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E65F87C3415B74DFBBCBE0909A320835EE88E6E5.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/ERAYINFO/0/E65F87C3415B74DFBBCBE0909A320835EE88E6E5.mft
Manifest number: 48
Signing time: Tue 30 Jun 2026 02:12:53 +0000
Manifest this update: Tue 30 Jun 2026 02:07:53 +0000
Manifest next update: Wed 01 Jul 2026 05:59:53 +0000
Files and hashes: 1: 3130332e3136302e3138302e302f32332d3234203d3e203536383530.roa (hash: RzAPn5btTcxQ4JmMexqs2Z3tgOn6EwRXUMKi5on2EDg=)
2: 323430363a656534303a3a2f33322d3438203d3e203138303431.roa (hash: ENdF+FZ/wshSwMngi/LeNYAxqnXtTR+JIbUWvzMtjvg=)
3: 3130332e3136302e3138302e302f32332d3234203d3e203138303431.roa (hash: 18NWi1veGokF/mTHx158Mqd+r/PzLz4vX21G5OQonx8=)
4: E65F87C3415B74DFBBCBE0909A320835EE88E6E5.crl (hash: K6Uvm1YHVnFUzxmfii46EKDf9ygOpAKs4u/vG3dyk4w=)
5: 3130332e3136302e3138302e302f32332d3234203d3e20393833.roa (hash: bSmO+jTWr7YOoJ4NGhuYgKT8sLNYWbbxkJfWN+8zotE=)
6: 3130332e3136302e3138302e302f32332d3234203d3e203338313336.roa (hash: vXSGvfe4/SHzbgc1FGIm8W7fF4FtlTo17+zWJlbEFVI=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/ERAYINFO/0/E65F87C3415B74DFBBCBE0909A320835EE88E6E5.crl
rsync://rpkica.twnic.tw/rpki/ERAYINFO/0/E65F87C3415B74DFBBCBE0909A320835EE88E6E5.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E65F87C3415B74DFBBCBE0909A320835EE88E6E5.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Jul 2026 05:59:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:ef:54:65:b6:7c:f7:1b:fe:29:d2:09:f8:7e:56:34:a1:61:ee:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E65F87C3415B74DFBBCBE0909A320835EE88E6E5
Validity
Not Before: Jun 30 02:07:53 2026 GMT
Not After : Jul 1 05:59:53 2026 GMT
Subject: CN=840A65BA46B2EE508E37DA73A0B1CFF290A77400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:87:b2:47:7c:41:d4:f0:43:bc:24:c8:65:61:
45:f4:99:27:0b:ea:bf:4d:7f:f2:41:89:1d:f3:39:
43:d7:db:b8:0c:37:55:db:e6:8f:cb:44:ab:d5:22:
05:8c:53:8b:03:ac:10:a8:65:cf:75:00:82:0e:c2:
89:08:4a:fe:65:3f:38:3b:bb:d5:0d:6c:19:22:c4:
77:18:ae:d4:8f:38:6a:c7:9b:4d:46:e0:74:6d:8d:
82:1b:97:1a:bb:e2:99:7d:74:62:84:4a:29:3d:c1:
bf:73:9c:ee:4f:0e:3f:62:74:02:6b:ae:c0:27:7a:
c0:29:be:62:cf:59:d8:b1:89:f4:84:31:fc:62:be:
56:b4:72:f0:6b:dd:43:88:9c:08:ca:ac:78:58:47:
a6:7d:2a:83:94:90:bc:e2:a2:e5:3b:77:cc:83:89:
b7:75:d2:89:0a:5d:55:c8:42:56:17:06:59:a7:6b:
07:ef:90:26:66:10:7c:40:dc:62:1a:c9:b5:85:24:
09:e6:c8:aa:97:d2:22:16:91:88:99:2c:b1:c5:bc:
00:0b:1e:e8:45:fa:18:e3:84:fd:16:67:82:09:26:
4d:fe:b3:0d:69:39:61:d2:45:f4:1e:78:85:66:a5:
ff:1f:66:b7:2e:3c:ff:30:8b:0a:c7:41:84:56:da:
14:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:0A:65:BA:46:B2:EE:50:8E:37:DA:73:A0:B1:CF:F2:90:A7:74:00
X509v3 Authority Key Identifier:
keyid:E6:5F:87:C3:41:5B:74:DF:BB:CB:E0:90:9A:32:08:35:EE:88:E6:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/ERAYINFO/0/E65F87C3415B74DFBBCBE0909A320835EE88E6E5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E65F87C3415B74DFBBCBE0909A320835EE88E6E5.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ERAYINFO/0/E65F87C3415B74DFBBCBE0909A320835EE88E6E5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:1c:aa:1b:8d:07:f0:c4:12:c8:93:36:79:5e:40:2c:b0:ab:
54:c8:a4:eb:87:85:93:1b:ac:19:10:2a:3c:dd:2f:56:0e:f7:
ea:b6:d1:9f:1a:1b:06:9a:d9:3a:81:c2:a1:46:63:df:99:72:
53:88:47:4d:d3:17:e6:3e:81:76:e8:c0:3d:09:1c:9a:c9:08:
71:9d:1e:9b:52:73:35:c8:81:fc:b0:f7:17:f6:90:11:fb:8d:
ed:cf:2e:fa:1d:5a:2f:7f:86:6e:38:0b:3a:5e:6c:49:f1:5e:
f6:a7:40:ed:11:7b:3b:2b:47:58:d6:2d:58:0d:8f:65:91:d4:
f1:fc:26:d1:1d:63:e6:8a:19:f5:aa:e4:36:49:39:76:ea:7b:
6d:18:0f:b8:a2:9d:ab:79:bc:db:f6:e0:f0:4b:02:e4:a9:4d:
8f:e2:64:1c:a5:d3:d4:8a:a2:1d:ed:90:bb:4f:cd:a4:6b:6b:
60:c7:42:0d:13:7b:bd:77:9f:17:a7:b6:2e:8d:aa:1b:5b:7a:
ce:05:6e:a7:6a:36:94:38:49:7d:90:eb:54:83:49:e4:58:54:
a3:b2:5f:6c:f9:6f:13:14:1a:67:ff:70:da:ea:99:fb:18:2e:
23:d9:a0:ae:a4:b7:17:1a:6a:53:cf:fd:ab:7d:4c:f4:f0:22:
8a:2d:0b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:09:07 2026 by rpki-client