
$ rpki-client -vvvf rpkica.twnic.tw/rpki/GSNET/0/A67F7A72FC031B1A33774C937883F79C7342B848.mft
File: A67F7A72FC031B1A33774C937883F79C7342B848.mft (raw, json)
Hash identifier: G/VLGEzQiBTiaaXJ18E8SHXCijbwziZV0zfj210Uhxc=
Subject key identifier: 62:4D:5E:BC:01:30:7E:8B:B7:F8:FC:EE:DB:9D:1F:B1:5F:EC:AA:02
Authority key identifier: A6:7F:7A:72:FC:03:1B:1A:33:77:4C:93:78:83:F7:9C:73:42:B8:48
Certificate issuer: /CN=A67F7A72FC031B1A33774C937883F79C7342B848
Certificate serial: 7688825AEAC017B6C03986785030987BF6951095
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A67F7A72FC031B1A33774C937883F79C7342B848.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/GSNET/0/A67F7A72FC031B1A33774C937883F79C7342B848.mft
Manifest number: C7
Signing time: Tue 06 Oct 2026 13:44:21 +0000
Manifest this update: Tue 06 Oct 2026 13:39:21 +0000
Manifest next update: Wed 07 Oct 2026 15:48:21 +0000
Files and hashes: 1: A67F7A72FC031B1A33774C937883F79C7342B848.crl (hash: QCnulTTgQV2kCXd3Jzq/VEWM5xKbsBciboXIvYsiM8w=)
2: 3231312e37382e36342e302f32302d3234203d3e203338383337.roa (hash: BXuBK0LMjwx4Feg0mEC7/E23SnCajtY0CpedBH0UNLE=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/GSNET/0/A67F7A72FC031B1A33774C937883F79C7342B848.crl
rsync://rpkica.twnic.tw/rpki/GSNET/0/A67F7A72FC031B1A33774C937883F79C7342B848.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A67F7A72FC031B1A33774C937883F79C7342B848.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 07 Oct 2026 02:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:88:82:5a:ea:c0:17:b6:c0:39:86:78:50:30:98:7b:f6:95:10:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A67F7A72FC031B1A33774C937883F79C7342B848
Validity
Not Before: Oct 6 13:39:21 2026 GMT
Not After : Oct 7 15:48:21 2026 GMT
Subject: CN=624D5EBC01307E8BB7F8FCEEDB9D1FB15FECAA02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:f6:e5:25:ae:fb:e4:f0:59:ac:b4:52:9b:81:
d0:8b:81:a4:2b:0f:20:fb:e3:7d:48:54:7a:0f:14:
c1:d2:60:b0:1a:6d:cf:49:71:07:5d:cd:a3:07:e2:
fc:d2:01:b9:62:0a:66:3f:26:b2:df:7e:37:b9:ad:
f3:4f:b5:25:53:00:75:d1:53:d9:ef:ed:07:8a:bb:
ae:8d:e6:c4:ae:bc:1c:fc:a4:65:c6:20:28:32:b4:
4d:df:82:5b:ac:4f:1e:30:8a:9c:5d:57:4d:8e:6a:
40:6c:ef:59:6a:7e:53:80:44:fd:47:b1:08:ab:34:
71:2d:de:f8:61:91:37:f6:91:ad:0a:7e:63:48:d9:
f5:dd:83:9a:de:6e:84:48:a1:e6:b8:ad:34:be:4d:
c3:c1:85:ab:ab:86:c5:d5:b4:ed:d8:b3:74:8c:49:
6c:66:66:e0:39:cc:a4:96:77:82:6d:5f:ec:73:41:
c9:bd:bc:eb:56:56:b6:4d:9a:52:8c:2a:d0:53:71:
9a:c9:14:5f:37:21:fd:67:6f:92:a2:84:b6:4a:e6:
7f:da:b3:0d:64:c8:13:b7:4e:fd:b9:f8:8d:b0:4a:
24:58:ce:b0:35:63:bc:54:84:7b:dc:ea:1a:65:03:
34:51:69:17:b9:8f:9c:12:68:7f:68:8f:99:d6:3d:
51:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:4D:5E:BC:01:30:7E:8B:B7:F8:FC:EE:DB:9D:1F:B1:5F:EC:AA:02
X509v3 Authority Key Identifier:
keyid:A6:7F:7A:72:FC:03:1B:1A:33:77:4C:93:78:83:F7:9C:73:42:B8:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/GSNET/0/A67F7A72FC031B1A33774C937883F79C7342B848.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A67F7A72FC031B1A33774C937883F79C7342B848.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/GSNET/0/A67F7A72FC031B1A33774C937883F79C7342B848.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:e2:64:8d:4f:ec:e0:59:96:b7:ad:75:70:2c:5a:8b:60:3e:
54:22:fe:30:c0:6c:16:0e:31:2d:0c:94:3c:52:42:2a:8b:01:
24:72:ad:c0:9c:50:52:bf:08:ef:1e:27:7e:5a:c2:2a:bc:b6:
cf:32:21:12:d1:46:0d:ea:2b:69:0f:25:82:a3:26:43:3d:08:
dd:37:6d:a7:5b:d0:a9:19:2f:b4:95:2b:dd:25:d7:96:86:43:
52:f7:bb:8a:78:1c:63:f7:b5:9a:14:e6:5c:91:09:6b:05:f0:
84:4e:fa:8b:0f:9c:b5:5d:95:03:94:c1:e3:e0:0b:06:fd:3c:
c9:43:bc:0b:b3:8f:78:39:66:c7:4b:db:5d:dc:fa:70:63:a0:
55:9c:a6:b2:a2:42:a7:17:53:54:ba:20:57:d7:bc:8e:cd:cb:
e2:51:31:5c:b7:0e:9a:71:61:86:f6:d6:ef:58:76:8a:47:93:
e5:3e:17:47:a1:b1:fa:65:b2:c5:94:85:c9:b7:90:22:b5:a5:
e5:59:5f:7b:ba:95:31:da:fe:ec:a6:89:9b:3e:87:75:03:11:
2e:4b:af:24:8f:34:91:bf:01:fe:60:50:7d:77:68:e2:dc:9e:
ed:3c:a5:6f:29:01:14:8e:66:34:c2:c3:42:db:95:06:f8:06:
bf:c1:b5:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 20:06:53 2026 by rpki-client