
$ rpki-client -vvvf rpkica.twnic.tw/rpki/HST/0/E87D26C09449CEB4EE5FD7CC200B073CA53BCA44.mft
File: E87D26C09449CEB4EE5FD7CC200B073CA53BCA44.mft (raw, json)
Hash identifier: MPdyP6I8X5YszcMEqClS1+B+zvB4hDSNnasiAuwvN/M=
Subject key identifier: 6D:F9:EF:DF:0F:F4:5F:F1:67:C8:5D:8E:A9:78:7F:BA:81:24:F8:42
Authority key identifier: E8:7D:26:C0:94:49:CE:B4:EE:5F:D7:CC:20:0B:07:3C:A5:3B:CA:44
Certificate issuer: /CN=E87D26C09449CEB4EE5FD7CC200B073CA53BCA44
Certificate serial: 07F87794A6B02FE0769AE6F6486640FA9FABC8F1
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E87D26C09449CEB4EE5FD7CC200B073CA53BCA44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/HST/0/E87D26C09449CEB4EE5FD7CC200B073CA53BCA44.mft
Manifest number: C7
Signing time: Sun 04 Oct 2026 14:55:50 +0000
Manifest this update: Sun 04 Oct 2026 14:50:50 +0000
Manifest next update: Mon 05 Oct 2026 15:13:50 +0000
Files and hashes: 1: E87D26C09449CEB4EE5FD7CC200B073CA53BCA44.crl (hash: dOlPkuSaMc2IdTxxxKwcFdZxlXMOFduTo0vCb4LaDxI=)
2: 3231312e37362e3139302e302f32332d3234203d3e20313331363636.roa (hash: dIKzwOV/Rg8kX37DO7rzZtMhciZlDJrIMJrJMoEYC/o=)
3: 3130332e3134342e33342e302f32332d3234203d3e20313331363636.roa (hash: Wv08z2tY7w2z0229EEvjyYYNTE6epIRCshOK3YEh39Y=)
4: 323430353a363434303a3a2f33322d3332203d3e20313331363636.roa (hash: QB2gyR5XQYs4MfGBjgJf/jtuHKKTmEl5qfrVI5ynL/A=)
5: 3230322e3132332e3132342e302f32332d3234203d3e20313331363636.roa (hash: G254ASDsdEOL8B4Bo3zdknO7xdbQNcKopBri7j6oisI=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/HST/0/E87D26C09449CEB4EE5FD7CC200B073CA53BCA44.crl
rsync://rpkica.twnic.tw/rpki/HST/0/E87D26C09449CEB4EE5FD7CC200B073CA53BCA44.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E87D26C09449CEB4EE5FD7CC200B073CA53BCA44.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Oct 2026 15:13:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:f8:77:94:a6:b0:2f:e0:76:9a:e6:f6:48:66:40:fa:9f:ab:c8:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E87D26C09449CEB4EE5FD7CC200B073CA53BCA44
Validity
Not Before: Oct 4 14:50:50 2026 GMT
Not After : Oct 5 15:13:50 2026 GMT
Subject: CN=6DF9EFDF0FF45FF167C85D8EA9787FBA8124F842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:26:0f:08:70:d3:88:7c:e6:dd:4f:91:1d:62:
ea:14:72:e0:55:e3:ae:b1:e1:ad:a9:42:d6:73:76:
63:84:c3:d3:2c:3e:7f:6e:c0:74:6c:3f:e4:d7:ed:
92:e5:86:6b:be:e1:02:a2:9e:36:35:40:45:14:34:
a0:5b:9e:e3:f9:08:29:ec:a1:71:16:a8:c9:f5:c3:
fc:bd:6a:3e:fc:79:f3:8c:de:7c:a4:d7:d8:57:94:
ac:e7:77:e0:92:8a:b5:c6:45:93:86:9e:c7:f4:fd:
27:3c:96:28:30:0f:a0:69:0e:e7:c6:eb:58:4a:3f:
3b:3d:c8:28:3f:54:53:5e:f3:48:2e:81:29:89:af:
7e:ad:88:eb:69:12:25:50:54:81:62:e8:6e:eb:39:
79:f0:49:38:ae:d8:64:0b:64:b9:fc:13:7b:9a:54:
24:be:e4:c6:80:88:35:af:20:4f:da:d4:19:50:01:
ff:27:1d:bb:2e:45:a2:dc:fc:d2:6a:34:c6:31:f1:
08:b4:46:2f:dd:2d:fa:92:fe:76:11:0e:42:22:47:
4c:d9:02:f6:15:97:eb:9e:e6:0c:1b:0b:cf:70:8f:
90:ec:09:a3:a5:f0:04:35:db:68:a0:f4:90:d4:a0:
f8:25:ff:31:cd:46:40:a9:e7:a5:ee:e3:67:2f:0c:
15:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:F9:EF:DF:0F:F4:5F:F1:67:C8:5D:8E:A9:78:7F:BA:81:24:F8:42
X509v3 Authority Key Identifier:
keyid:E8:7D:26:C0:94:49:CE:B4:EE:5F:D7:CC:20:0B:07:3C:A5:3B:CA:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/HST/0/E87D26C09449CEB4EE5FD7CC200B073CA53BCA44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E87D26C09449CEB4EE5FD7CC200B073CA53BCA44.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HST/0/E87D26C09449CEB4EE5FD7CC200B073CA53BCA44.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:72:bf:e7:fa:9a:eb:c9:0b:39:36:8e:40:ca:06:47:44:0a:
3e:dc:fa:43:87:72:71:35:2d:9b:df:37:ed:7c:7c:de:8d:b5:
c5:1e:df:a6:e7:45:c0:cd:95:59:f9:31:d1:a5:27:6c:21:eb:
43:31:27:9c:79:83:73:a2:39:d9:a5:b3:b6:82:80:3a:a7:03:
6e:4e:3d:0a:c5:30:ea:ca:24:19:b5:22:91:f3:e7:6b:ac:e3:
84:23:1c:b8:1c:73:0a:a5:55:81:55:94:0a:4e:64:b1:6b:bd:
71:c7:06:22:ba:e2:09:b7:d6:e7:4f:4a:21:b1:45:a6:18:aa:
83:3f:0d:58:4a:5b:e9:9d:de:3a:21:d6:e4:e0:f7:96:b3:b9:
2f:df:25:df:5a:dc:32:ae:8b:80:28:ec:4e:fc:31:f9:5c:fd:
e2:7d:0b:44:cc:71:7a:59:e7:7e:5a:03:b9:79:56:4c:de:0e:
22:5f:c5:4e:bd:2a:43:f8:ae:e8:b5:ac:23:42:0b:2f:84:ae:
0a:cd:5f:0f:0d:a7:45:1e:cc:b0:44:d6:b6:b3:ab:c5:22:a2:
1c:b2:9b:b8:1d:78:12:72:28:c6:a0:42:08:fa:e6:c2:ca:c5:
f5:84:4c:79:58:e2:e7:ef:23:fb:3b:7b:22:73:3c:b7:74:c6:
5c:66:18:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:57:41 2026 by rpki-client