
$ rpki-client -vvf rpkica.twnic.tw/rpki/IMYKL/0/EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.mft
File: EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.mft (raw, json)
Hash identifier: lGSJy8vltCPrUEHfx8QoTvOf5yfRonQlOke7j1wWBiA=
Subject key identifier: AC:78:80:09:13:84:0B:D8:21:C4:0A:6D:B1:91:28:78:42:65:83:E1
Authority key identifier: EF:1D:10:48:4E:FA:79:AB:C0:18:FA:0E:FA:7F:3B:0C:16:EE:43:A7
Certificate issuer: /CN=EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7
Certificate serial: 0DCED1787EAFF4E04F7C76137B2F1E52F96992DC
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/IMYKL/0/EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.mft
Manifest number: 09
Signing time: Fri 15 May 2026 12:47:14 +0000
Manifest this update: Fri 15 May 2026 12:42:14 +0000
Manifest next update: Sat 16 May 2026 16:17:14 +0000
Files and hashes: 1: EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.crl (hash: Vu1F4BnpftevjBUgZ2V1+p1n4repjaNWMVu4SwmoTwk=)
2: 3136302e3139312e342e302f32332d3234203d3e20313438393936.roa (hash: WDQ6isA31vRFBEKAPNTN2h03bliS7XG3+ZDUsxu5ekM=)
3: 3136302e3139312e342e302f32332d3234203d3e20313334383233.roa (hash: MvSn3+N3E0x49y2zyFZseXhPFbhPYX7FDxa/hvK0XxA=)
4: 3136302e3139312e342e302f32332d3234203d3e203338303432.roa (hash: uC4SAyffO7EbE3rGS0jHS6n7C39qBWkfFa7uUUduW8s=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/IMYKL/0/EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.crl
rsync://rpkica.twnic.tw/rpki/IMYKL/0/EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 16 May 2026 16:17:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:ce:d1:78:7e:af:f4:e0:4f:7c:76:13:7b:2f:1e:52:f9:69:92:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7
Validity
Not Before: May 15 12:42:14 2026 GMT
Not After : May 16 16:17:14 2026 GMT
Subject: CN=AC78800913840BD821C40A6DB1912878426583E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:13:50:73:c9:7a:4d:01:59:6c:e9:ec:04:46:
0d:d4:bc:52:8f:ae:11:56:f7:28:a6:8a:7e:14:5d:
8c:3b:63:8a:be:a7:ff:4e:17:2b:71:bd:64:75:dc:
3d:c9:44:ba:e1:74:23:bb:f6:9b:38:43:4f:63:ca:
7c:2a:b4:cb:e1:d4:78:ac:7d:94:bf:28:d7:9e:f1:
98:3e:f4:c6:64:1f:cd:5a:68:1b:1f:e5:e8:bb:3d:
25:74:30:26:60:b0:0f:3d:9a:a5:90:c1:58:97:c0:
b9:c2:3f:86:09:e8:10:fb:18:6a:09:b4:e5:15:37:
41:e9:66:97:55:55:d0:eb:9e:d8:df:08:1d:07:9d:
8d:c5:c1:3c:81:a4:27:67:7b:13:fd:10:e5:c8:9f:
9d:93:f9:08:fb:76:5e:26:53:0f:3f:6c:60:70:b2:
18:cf:bb:ce:fa:e6:c6:f3:8e:f2:18:45:58:80:d6:
2a:6a:19:7d:8f:b6:d2:12:63:de:7d:4c:30:12:23:
97:6e:a0:57:ca:a1:fa:74:a0:81:87:71:ca:1d:03:
2a:cc:d0:ad:03:b1:e3:91:0e:e3:da:98:6f:d1:04:
52:62:69:10:e0:92:37:79:64:3a:65:1c:65:a4:d8:
2b:32:7f:2a:d7:6e:26:74:cb:03:9c:8e:e4:e1:ae:
5b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:78:80:09:13:84:0B:D8:21:C4:0A:6D:B1:91:28:78:42:65:83:E1
X509v3 Authority Key Identifier:
keyid:EF:1D:10:48:4E:FA:79:AB:C0:18:FA:0E:FA:7F:3B:0C:16:EE:43:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/IMYKL/0/EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/IMYKL/0/EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:37:fb:9b:9a:40:73:37:8c:5f:60:c5:dd:c9:7d:3f:21:1d:
e2:0a:e7:1f:1c:ec:0e:ff:90:d5:b8:eb:99:89:ba:81:8d:23:
e2:90:ad:bb:cc:4f:1a:7e:c5:88:b2:49:4a:b5:a9:33:a0:a2:
d7:5d:74:b1:05:c8:4c:88:f3:87:74:d2:cd:a4:84:aa:03:82:
72:07:c6:60:88:e5:d5:42:78:50:6d:fe:df:56:84:c5:1a:73:
bb:5b:fa:63:af:a9:73:83:74:94:14:55:35:32:6a:d4:7c:eb:
69:bc:bf:a3:6a:d5:2a:14:42:64:4c:93:0b:47:b4:27:5f:2f:
4b:08:ca:58:ac:4e:98:96:57:01:ab:36:08:b2:9c:a0:ed:ca:
d9:b4:1d:c2:ef:9f:30:92:6f:82:bb:3e:01:27:5c:67:7c:8b:
eb:a2:6a:d2:61:05:e4:9b:74:6d:b6:a9:77:89:f2:4e:67:f6:
a3:86:c5:ee:fd:35:88:0b:3f:e6:20:6f:7b:c3:b7:c2:ce:14:
9e:a2:47:06:9b:91:3c:d8:f2:77:6a:da:42:ea:58:2f:25:5d:
4d:b4:8b:33:dc:4c:b2:e9:3d:fa:3a:e6:8b:2c:e3:32:82:4a:
78:8b:cc:bc:18:fc:a6:ed:ea:87:37:57:0a:bd:c5:1a:65:1c:
b6:3e:0e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 04:47:25 2026 by rpki-client