
$ rpki-client -vvvf rpkica.twnic.tw/rpki/LIANGCAI/0/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.mft
File: D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.mft (raw, json)
Hash identifier: R/7bTtReCmfaqqXakNG5RqL83fRejEaSrMOoL86xDaQ=
Subject key identifier: 8A:32:DF:09:04:8A:DC:12:57:B5:29:47:BD:49:79:81:19:C6:9E:A4
Authority key identifier: D0:B4:58:CE:0B:E5:8E:21:77:9D:5A:CA:09:6C:EF:CE:BC:ED:5D:12
Certificate issuer: /CN=D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12
Certificate serial: 6F90C685B715D88B6F527A3AA23E0E6246ADD9E2
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/LIANGCAI/0/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.mft
Manifest number: C2
Signing time: Sat 03 Oct 2026 12:25:02 +0000
Manifest this update: Sat 03 Oct 2026 12:20:02 +0000
Manifest next update: Sun 04 Oct 2026 16:03:02 +0000
Files and hashes: 1: 3130332e39392e3133382e302f32332d3332203d3e20313331363432.roa (hash: JM1ES7aYxSnNnfsEPzEsFs8jJ+J2CBl25b9ETMqQfLU=)
2: D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.crl (hash: fwJKZxqfN2zQ3QJsGTIRYXmBl/7W7Ffm16nsLWUUzos=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/LIANGCAI/0/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.crl
rsync://rpkica.twnic.tw/rpki/LIANGCAI/0/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 04:17:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:90:c6:85:b7:15:d8:8b:6f:52:7a:3a:a2:3e:0e:62:46:ad:d9:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12
Validity
Not Before: Oct 3 12:20:02 2026 GMT
Not After : Oct 4 16:03:02 2026 GMT
Subject: CN=8A32DF09048ADC1257B52947BD49798119C69EA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:90:ed:83:61:83:71:6e:79:ee:2a:15:69:e8:
13:b1:e4:bd:01:ec:56:57:ae:df:f1:eb:59:dd:ac:
57:e8:eb:29:c8:8f:ac:87:54:02:9e:4f:f4:9c:5e:
97:89:d0:9e:f5:90:f2:ff:a3:ac:3e:be:b3:85:2f:
7c:ad:c4:bc:93:f4:4e:48:c2:8a:3e:35:e7:41:3c:
78:d9:5e:d3:b6:a2:57:ea:f5:1c:9e:37:8d:d4:e2:
aa:47:62:23:eb:90:c0:fa:00:90:bc:e1:41:59:f8:
12:b4:16:ae:45:2f:c1:ed:d3:66:fa:6b:4f:fb:55:
1c:27:f5:e7:a6:30:ad:fb:bd:e0:54:ae:27:88:5a:
5a:26:5e:b2:f0:71:c8:d6:32:92:9e:02:42:a4:92:
89:9c:07:c6:e4:87:36:18:7e:a1:44:0a:17:17:ab:
88:aa:95:04:58:9a:76:35:39:90:47:81:91:ab:81:
85:22:c4:99:5b:82:fa:e3:6a:7e:c5:c7:01:b4:c1:
51:d1:5c:89:84:e6:77:74:a7:8e:ec:be:b5:b2:e6:
fb:4d:7f:f5:53:3e:67:65:d5:5a:28:19:c5:e4:58:
b1:96:d1:c3:7c:74:d2:bf:7f:5c:c9:2a:d2:f5:cd:
26:a4:b8:9b:ed:4c:21:60:8d:fb:ec:e9:09:e6:2d:
29:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:32:DF:09:04:8A:DC:12:57:B5:29:47:BD:49:79:81:19:C6:9E:A4
X509v3 Authority Key Identifier:
keyid:D0:B4:58:CE:0B:E5:8E:21:77:9D:5A:CA:09:6C:EF:CE:BC:ED:5D:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/LIANGCAI/0/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LIANGCAI/0/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:aa:83:d6:6f:a2:53:74:74:78:9b:e7:d0:0d:6a:36:c7:77:
5a:a3:eb:25:e1:6e:dd:dc:74:20:ca:c7:03:d3:b7:ac:cd:d6:
96:05:24:9b:de:40:36:68:db:36:05:93:f9:14:6f:6c:2c:7f:
a7:d7:a4:d1:87:25:11:5a:de:31:73:b5:98:9a:75:4f:f0:82:
0d:dd:ad:78:ac:1e:c4:f8:0a:b0:17:1e:36:f5:5e:9d:2f:62:
a6:97:71:d3:7a:de:2c:0e:12:61:06:0a:8a:37:ba:68:8b:15:
fc:4d:ab:08:b5:b6:c8:9d:48:81:dc:1d:1e:03:07:06:ab:03:
cc:a0:bc:16:b2:50:e6:74:9f:1b:5a:2a:9e:46:1e:d8:e5:95:
96:ab:02:cf:33:b7:8e:38:28:19:fc:77:53:0c:da:8b:12:53:
14:13:b4:d1:ad:0d:d0:f0:e7:50:00:8f:4f:62:01:0b:a7:e2:
1b:b2:30:2c:8b:e1:38:2c:a2:a6:bc:b9:de:3a:42:5d:20:f8:
63:91:0d:12:f0:41:95:8c:8d:9c:c2:11:ac:47:28:6a:9a:1d:
cf:e5:ff:bc:1f:7d:57:51:90:36:68:55:3d:b5:47:6f:2a:05:
cb:26:08:7a:cc:22:74:69:64:c5:7f:e5:3f:0f:3e:57:19:dd:
84:7a:1c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 22:27:53 2026 by rpki-client