
$ rpki-client -vvf rpkica.twnic.tw/rpki/HCCG_HCEB/1/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.mft
File: 59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.mft (raw, json)
Hash identifier: GsXH2MrMJ8w/lDaAWrqRv1VBbpRO1/JcS21jWY+cUQ0=
Subject key identifier: 64:BB:9D:C9:F5:BE:4B:C1:59:3B:64:1D:5A:2E:AF:98:3D:A5:29:EC
Authority key identifier: 59:D9:8E:8C:BB:AB:DC:DF:7B:22:2D:A5:00:F5:CD:E6:3F:F2:DA:0C
Certificate issuer: /CN=59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C
Certificate serial: 54CAB89DA0328E6C4C588183E2E895F7EF9546E1
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/HCCG_HCEB/1/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.mft
Manifest number: 09
Signing time: Sat 16 May 2026 01:02:50 +0000
Manifest this update: Sat 16 May 2026 00:57:50 +0000
Manifest next update: Sun 17 May 2026 03:40:50 +0000
Files and hashes: 1: 59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.crl (hash: 65HbGhciK+ytc2L6u+9Ekt02w72YaDYmRraNpxgJNB8=)
2: 3134342e37392e36362e302f32332d3234203d3e203138303433.roa (hash: I/nH3WfH4w3frC/mXwjMQ3leEpW2mw7DOz5WWS1+97M=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/HCCG_HCEB/1/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.crl
rsync://rpkica.twnic.tw/rpki/HCCG_HCEB/1/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 16 May 2026 21:11:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:ca:b8:9d:a0:32:8e:6c:4c:58:81:83:e2:e8:95:f7:ef:95:46:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C
Validity
Not Before: May 16 00:57:50 2026 GMT
Not After : May 17 03:40:50 2026 GMT
Subject: CN=64BB9DC9F5BE4BC1593B641D5A2EAF983DA529EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:1d:f8:e3:1b:21:76:4e:85:3b:e7:3d:b1:4b:
12:7e:99:22:6e:0c:75:39:92:d4:4c:6f:05:cb:8c:
c7:62:c1:44:47:42:15:9e:80:a1:2a:32:50:dc:48:
b1:85:6b:cc:18:85:e6:78:50:1a:25:0c:bb:01:d2:
1b:c2:2a:48:26:99:7c:2a:e6:69:6a:c6:6d:1e:5b:
76:b2:d1:ca:3a:88:f5:29:18:dc:99:31:26:6e:22:
ae:2e:b7:9f:25:b5:df:7b:13:b0:1c:96:9d:b6:17:
2f:73:1b:2e:1f:0d:f7:03:2a:b5:40:90:ef:d5:9d:
ca:7a:5a:c5:e1:60:3d:81:cb:dd:d3:d5:e0:17:ec:
06:95:a8:3b:fa:f8:4f:57:0f:06:03:93:01:00:59:
76:bc:bd:48:26:0a:8f:f2:00:f0:53:dd:37:8a:1d:
32:c7:11:c2:cc:e3:50:d7:64:a2:e1:13:70:78:f2:
83:16:0a:7a:67:3c:d6:a9:d2:8b:6b:79:19:7e:c1:
bf:9e:93:59:8b:b6:74:90:8b:03:79:e9:9a:a5:6e:
f4:7c:23:65:04:9d:69:40:90:fc:3b:6c:5b:62:ba:
39:de:de:f2:b5:22:62:8f:74:da:c3:ac:1c:f1:b6:
b2:12:28:fd:9c:e5:99:65:1b:c2:3f:97:ab:d8:09:
29:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:BB:9D:C9:F5:BE:4B:C1:59:3B:64:1D:5A:2E:AF:98:3D:A5:29:EC
X509v3 Authority Key Identifier:
keyid:59:D9:8E:8C:BB:AB:DC:DF:7B:22:2D:A5:00:F5:CD:E6:3F:F2:DA:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/HCCG_HCEB/1/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HCCG_HCEB/1/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:56:83:1b:f9:b2:06:33:95:49:7d:7d:12:d2:33:bc:e3:6a:
6b:0d:20:9a:86:2a:80:d3:fb:5d:d4:6c:46:23:ca:c3:7e:d7:
6b:e1:0f:34:0e:b6:c1:39:c3:f9:18:6e:34:b5:84:74:7f:16:
36:31:5e:f0:24:fb:d3:9b:b0:26:a4:07:76:5a:5e:3e:1b:6c:
78:b0:81:ce:c7:e6:34:3c:94:e2:75:36:33:6f:13:01:5a:4d:
d1:b3:19:12:34:d6:82:53:8c:ca:49:ad:4d:b9:a4:2d:52:50:
0e:a7:f2:8b:49:ad:1f:09:d0:fe:a8:de:d6:b2:11:38:3f:be:
f8:a1:53:1e:a9:52:6b:f4:15:c1:c0:c7:42:db:c1:0a:51:4f:
8c:bc:8c:a4:15:c4:b2:0d:3e:6e:91:88:82:89:df:09:89:ec:
bd:28:17:3d:e4:89:01:47:58:0a:9a:cd:de:d3:33:c7:79:3b:
25:83:6c:cd:bf:7f:6b:7d:f5:5c:30:7d:a8:5d:b0:ad:23:2b:
16:93:85:ac:3b:f9:14:1f:d3:e9:d3:94:d6:c8:4e:ca:27:ea:
da:5a:99:ea:46:4d:19:a3:a3:9c:04:1a:3e:6b:d4:9e:2c:e4:
79:b3:d7:3d:df:eb:d8:79:da:91:5b:8c:07:d9:c0:b9:1a:52:
4e:a0:d2:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 04:47:26 2026 by rpki-client