
$ rpki-client -vvf rpkica.twnic.tw/rpki/HCCG_HCEB/1/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.mft
File: 59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.mft (raw, json)
Hash identifier: 4o/jMmxN07IAnCv7ab4OrGpiM6DzU7byeE2sxYjF8Sg=
Subject key identifier: 02:0E:9D:3E:14:89:46:43:30:1F:CB:42:65:5E:4A:56:8A:42:9C:50
Authority key identifier: 59:D9:8E:8C:BB:AB:DC:DF:7B:22:2D:A5:00:F5:CD:E6:3F:F2:DA:0C
Certificate issuer: /CN=59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C
Certificate serial: 696B2016246C792EDF971B5C6B9ED1A185F2C30B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/HCCG_HCEB/1/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.mft
Manifest number: 81
Signing time: Fri 14 Aug 2026 20:08:22 +0000
Manifest this update: Fri 14 Aug 2026 20:03:22 +0000
Manifest next update: Sat 15 Aug 2026 23:15:22 +0000
Files and hashes: 1: 3134342e37392e36362e302f32332d3234203d3e203138303433.roa (hash: I/nH3WfH4w3frC/mXwjMQ3leEpW2mw7DOz5WWS1+97M=)
2: 59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.crl (hash: rKLfxMr72Qh5fsGBWT9g4cIpA6Dg3bQiDAytOK2q7Ak=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/HCCG_HCEB/1/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.crl
rsync://rpkica.twnic.tw/rpki/HCCG_HCEB/1/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 15 Aug 2026 23:15:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:6b:20:16:24:6c:79:2e:df:97:1b:5c:6b:9e:d1:a1:85:f2:c3:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C
Validity
Not Before: Aug 14 20:03:22 2026 GMT
Not After : Aug 15 23:15:22 2026 GMT
Subject: CN=020E9D3E14894643301FCB42655E4A568A429C50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:22:56:10:f1:00:54:9a:47:c5:c3:6b:1f:09:
81:9d:6f:72:74:40:fe:8e:a3:de:07:70:63:9b:86:
9e:ca:6a:dc:3c:4b:3e:52:82:6b:aa:54:3e:0b:8c:
7e:3d:d1:69:c0:17:12:d1:07:7c:8d:ec:09:11:87:
0f:89:2f:bc:55:8a:3d:7d:8b:91:e6:ba:33:d0:5d:
b4:b7:c8:65:90:22:91:69:72:91:01:c9:ac:92:a2:
ec:49:a8:71:3b:7e:63:fb:df:a8:78:c0:e3:aa:fd:
57:fc:40:5d:33:3c:d7:f0:d7:b2:46:b6:36:32:83:
63:5a:b4:4a:50:be:a6:a8:76:d2:8e:97:19:b9:8d:
51:9f:cc:97:bd:67:be:46:ad:f7:44:d2:6b:90:a7:
7c:cf:e8:8f:7e:99:3e:5c:4c:81:f3:02:ab:7f:05:
9e:11:fd:1a:b2:1e:b7:11:fc:6f:9c:c5:50:a2:ea:
67:1c:51:b6:00:29:35:28:56:fd:83:39:a7:e4:00:
e4:7e:dd:a7:8f:e9:07:8c:fd:23:29:58:f6:37:73:
04:2b:ae:d7:30:7c:fb:30:49:dc:15:99:dd:41:5d:
da:b1:2c:a5:68:08:82:d8:73:54:56:21:c6:c9:20:
b2:fa:65:3d:54:43:d9:4a:83:e1:e0:0b:eb:6d:44:
b8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:0E:9D:3E:14:89:46:43:30:1F:CB:42:65:5E:4A:56:8A:42:9C:50
X509v3 Authority Key Identifier:
keyid:59:D9:8E:8C:BB:AB:DC:DF:7B:22:2D:A5:00:F5:CD:E6:3F:F2:DA:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/HCCG_HCEB/1/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HCCG_HCEB/1/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:1d:31:4f:06:65:2a:39:0d:49:18:6e:3e:6d:77:ec:72:3f:
7e:6d:e3:d0:ef:60:bb:cc:62:ff:88:c4:82:c6:e8:74:69:4a:
2f:9d:90:53:4d:38:3b:68:e2:2e:98:e6:bb:6b:ce:d2:f1:a5:
c5:b6:39:94:5e:04:e1:b5:d0:9d:99:89:13:38:48:56:7a:85:
bc:fa:d7:dc:b8:09:bf:4f:64:3c:2d:f9:5f:d4:d9:ca:24:90:
ac:3e:3f:5e:55:d1:92:d6:00:08:28:9b:98:47:c5:d9:64:47:
66:42:fd:33:66:cc:59:d7:b8:d6:c3:f1:4b:2f:79:7a:0f:a7:
e4:7d:f0:0c:08:83:71:5b:2e:5f:59:b8:6f:cd:ba:c4:56:aa:
d0:35:59:64:17:a5:cd:e1:1a:e2:b9:c2:8c:12:ac:65:8e:d4:
46:1b:d5:d3:86:d1:85:33:4d:19:99:52:95:6c:bb:16:39:fa:
21:c2:6c:b9:bd:03:a9:05:1b:cc:f0:64:9b:60:37:76:1c:c3:
f6:cc:c6:d2:8d:5e:db:53:e2:64:5e:6f:d1:38:2b:59:52:d0:
62:db:50:fd:a9:68:32:75:97:34:53:43:33:21:87:eb:0e:ef:
11:6b:6c:c1:8a:95:27:31:4b:83:15:b1:e8:49:c3:a0:40:81:
73:dd:73:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 10:12:36 2026 by rpki-client