
$ rpki-client -vvvf rpkica.twnic.tw/rpki/HINET/2/71E534018547D77B65EBCD0FC4941DC8113FAEE3.mft
File: 71E534018547D77B65EBCD0FC4941DC8113FAEE3.mft (raw, json)
Hash identifier: hhkKzgeAVCGcXp+hpKzj2Nkq1Et6eNvMwZIghAwFrqs=
Subject key identifier: 9A:6D:95:7E:A9:57:27:DB:38:FB:5D:45:5D:3A:33:83:12:38:CF:D3
Authority key identifier: 71:E5:34:01:85:47:D7:7B:65:EB:CD:0F:C4:94:1D:C8:11:3F:AE:E3
Certificate issuer: /CN=71E534018547D77B65EBCD0FC4941DC8113FAEE3
Certificate serial: 296D1FADD6E633FDD92A0058E34A717B0EBFAFA4
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/3/71E534018547D77B65EBCD0FC4941DC8113FAEE3.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/HINET/2/71E534018547D77B65EBCD0FC4941DC8113FAEE3.mft
Manifest number: 018E
Signing time: Mon 12 Oct 2026 23:29:49 +0000
Manifest this update: Mon 12 Oct 2026 23:24:49 +0000
Manifest next update: Wed 14 Oct 2026 01:10:49 +0000
Files and hashes: 1: 71E534018547D77B65EBCD0FC4941DC8113FAEE3.crl (hash: tmWd9+M0t1ceBe3iR04HR2GV2gELtMD513GU+c58ZKk=)
2: 323030313a3766613a313a3a2f34382d3438203d3e2037343831.roa (hash: kPG07upBltBMpeU3lVOAGDxJPAnyCOXOCAXQZ9d58mQ=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/HINET/2/71E534018547D77B65EBCD0FC4941DC8113FAEE3.crl
rsync://rpkica.twnic.tw/rpki/HINET/2/71E534018547D77B65EBCD0FC4941DC8113FAEE3.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/3/71E534018547D77B65EBCD0FC4941DC8113FAEE3.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 01:10:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:6d:1f:ad:d6:e6:33:fd:d9:2a:00:58:e3:4a:71:7b:0e:bf:af:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71E534018547D77B65EBCD0FC4941DC8113FAEE3
Validity
Not Before: Oct 12 23:24:49 2026 GMT
Not After : Oct 14 01:10:49 2026 GMT
Subject: CN=9A6D957EA95727DB38FB5D455D3A33831238CFD3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:59:ab:e8:fc:62:c6:b0:2d:96:a6:a9:32:cd:
6c:c2:d9:50:c1:4a:02:5f:64:34:f0:aa:02:94:7b:
4e:d5:7a:af:e9:c9:b6:cd:78:fe:31:7d:ae:f1:ff:
d8:0a:6c:ea:0e:8e:c3:b4:1f:20:b8:b6:4f:2b:b6:
c7:92:c0:67:eb:ed:8a:48:83:60:c8:7e:50:36:60:
d4:92:58:ba:49:74:d1:e9:fb:12:6c:11:f5:e1:41:
1e:fb:84:57:0f:9b:a2:30:f4:a7:1a:67:0f:a8:57:
e4:48:a9:97:f0:19:75:b0:40:fe:e4:14:de:fa:f7:
44:79:3f:4e:65:32:83:ca:9c:c9:8e:63:8b:7e:76:
06:12:71:89:7a:03:59:40:e8:e0:3c:3c:68:f7:47:
70:2d:67:2d:02:e8:9a:31:16:68:8f:c0:37:0b:32:
97:97:7f:49:1c:88:af:87:5e:b1:03:b2:eb:d0:ee:
b5:5a:e3:ee:aa:0c:f7:84:c8:97:62:03:b1:d9:03:
e7:1d:bc:78:4d:83:70:76:59:4e:b4:f2:58:22:4e:
04:1f:3d:db:23:f6:89:d8:62:a4:e0:c7:f9:83:9b:
8e:27:b0:71:06:15:5f:c7:4f:e1:27:05:84:f0:a3:
db:fe:d6:85:28:5f:dc:cf:0c:05:e3:1e:bd:a2:7b:
a0:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:6D:95:7E:A9:57:27:DB:38:FB:5D:45:5D:3A:33:83:12:38:CF:D3
X509v3 Authority Key Identifier:
keyid:71:E5:34:01:85:47:D7:7B:65:EB:CD:0F:C4:94:1D:C8:11:3F:AE:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/HINET/2/71E534018547D77B65EBCD0FC4941DC8113FAEE3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/71E534018547D77B65EBCD0FC4941DC8113FAEE3.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HINET/2/71E534018547D77B65EBCD0FC4941DC8113FAEE3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:f9:b1:e2:ed:26:3c:32:15:2a:68:a6:44:ca:e6:b4:8e:33:
86:e8:cb:20:b8:a3:e1:ef:83:15:5f:cf:15:0f:0a:36:1a:cf:
a0:d9:c9:98:99:a9:9b:7f:23:76:e5:20:0c:4a:d0:10:50:56:
71:d1:ea:f9:12:0f:15:7f:71:0d:9e:53:cc:f4:c9:e4:99:c1:
31:a9:f7:89:50:05:8e:2a:b5:11:6a:d7:c3:22:b4:4b:91:04:
f4:08:ab:7c:52:a3:fc:6e:10:71:4b:f3:cf:35:c4:87:d1:9c:
7b:e2:e4:20:fd:91:50:2e:42:73:a7:96:7c:6f:d6:7f:af:88:
e0:07:ac:44:40:9b:53:53:0c:2a:b7:17:fb:6b:af:5e:81:fb:
07:d5:0f:7f:17:b2:43:38:b6:28:8e:76:d0:78:b9:c1:bd:0b:
7c:5f:4d:47:13:7b:40:0d:e9:ed:43:ad:ba:08:1b:bc:c9:ca:
12:9f:2d:1d:ea:27:72:38:74:5c:79:8f:db:39:ec:00:ef:74:
c3:53:82:9d:d6:41:6e:be:89:e9:fe:c6:7b:14:51:8e:b6:ce:
b1:32:61:6a:07:1f:0a:85:1e:8b:59:9a:62:43:b0:0d:e3:da:
08:ae:65:d2:0d:56:4a:a4:b0:1c:e2:4d:ad:e3:59:24:dd:9f:
a4:0b:19:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 19:25:34 2026 by rpki-client