
$ rpki-client -vvf rpkica.twnic.tw/rpki/M2NIM/0/E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.mft
File: E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.mft (raw, json)
Hash identifier: 2CjGP42o0uoQgial5ZwxwWBxPnBJzVddEBVNBzM+giU=
Subject key identifier: 89:0B:2B:8B:21:C1:75:8C:85:A4:05:6F:4B:BC:30:F0:89:60:A1:69
Authority key identifier: E5:AA:3B:0F:9F:58:C9:34:21:C6:48:20:4A:B4:31:A4:AD:C4:B0:CB
Certificate issuer: /CN=E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB
Certificate serial: 698B389E749FB96C58CA3D958EE82ACD3ADA7A04
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/M2NIM/0/E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.mft
Manifest number: 48
Signing time: Tue 30 Jun 2026 13:54:04 +0000
Manifest this update: Tue 30 Jun 2026 13:49:04 +0000
Manifest next update: Wed 01 Jul 2026 16:20:04 +0000
Files and hashes: 1: E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.crl (hash: nHX0uY6ukunp+BiPYoIE5XqWPy8a5jcQhndd09HtAvw=)
2: 323430313a383432303a3a2f33322d3438203d3e203332353935.roa (hash: 7IK6gvzs6uMwoViSpBOdjJrk5WxLH5pe447RiZaITJY=)
3: 323430313a383432303a3a2f33322d3438203d3e2039393233.roa (hash: mAMCDxxdS5D0xlBjJmg5NjQv1GONdD1Fp7YNezXC9T8=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/M2NIM/0/E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.crl
rsync://rpkica.twnic.tw/rpki/M2NIM/0/E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Jul 2026 14:08:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:8b:38:9e:74:9f:b9:6c:58:ca:3d:95:8e:e8:2a:cd:3a:da:7a:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB
Validity
Not Before: Jun 30 13:49:04 2026 GMT
Not After : Jul 1 16:20:04 2026 GMT
Subject: CN=890B2B8B21C1758C85A4056F4BBC30F08960A169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:11:7c:92:2c:04:5f:45:bd:75:9b:21:15:84:
e1:ef:35:4a:b2:f6:0a:43:d7:b1:af:4e:c1:34:62:
d6:ac:8c:ed:e8:dc:e8:7d:c5:da:46:2e:c0:4a:1b:
6d:ac:dd:b0:ad:22:bf:aa:aa:7f:21:31:1b:42:e8:
2c:67:a4:2a:f3:cd:fd:10:86:a7:c9:1d:86:7b:ea:
5a:dc:2f:b4:d3:b8:64:97:63:d2:32:57:81:e4:51:
0b:46:5e:48:0b:e8:fc:54:be:ad:b7:61:3d:09:ed:
0b:70:d6:3d:32:2b:8c:c7:f5:d2:fc:e9:a6:4f:3e:
39:0d:b0:b4:80:80:c7:18:da:46:90:0a:dc:df:c6:
12:70:af:40:bc:24:74:7f:42:8b:16:b8:8b:1e:2b:
1d:f7:4d:9b:cd:20:0c:54:19:c7:4d:42:7a:99:26:
a0:45:51:0d:07:f0:29:62:89:46:fa:d8:7b:64:28:
15:86:79:08:92:20:fc:95:a8:14:70:ff:7a:70:b0:
84:d6:eb:98:24:28:f8:ee:fc:56:da:6d:03:07:cf:
83:f4:95:a9:a5:8a:f5:e5:cb:f8:ba:69:87:d8:b1:
42:be:02:af:2f:95:e0:67:34:39:a3:28:b9:d4:aa:
f8:e3:75:98:8d:b6:2f:3d:06:47:18:5e:69:66:74:
40:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:0B:2B:8B:21:C1:75:8C:85:A4:05:6F:4B:BC:30:F0:89:60:A1:69
X509v3 Authority Key Identifier:
keyid:E5:AA:3B:0F:9F:58:C9:34:21:C6:48:20:4A:B4:31:A4:AD:C4:B0:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/M2NIM/0/E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/M2NIM/0/E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:4e:3d:74:54:28:ff:41:c8:e3:81:1c:04:9a:14:1a:e5:f0:
74:c3:aa:8d:86:bf:39:1f:71:7c:dc:a5:1f:5e:ef:1c:38:32:
b6:f7:35:5b:8a:4e:55:f6:da:20:61:5d:ea:25:96:fe:41:9a:
fd:22:7d:f1:47:37:42:61:4e:ae:3e:42:fd:5d:57:77:e3:e2:
bc:52:a2:d5:19:5c:69:2c:05:d0:93:df:46:1b:40:6e:02:76:
3d:05:09:fc:0d:3d:22:8f:8f:6d:1f:b5:a2:61:25:2c:37:93:
71:04:80:eb:b4:ad:2e:f8:c3:e1:f1:c2:03:62:25:c9:5f:35:
4f:87:a6:ba:3e:cc:89:18:f8:e8:7d:d7:ac:b8:1a:3a:e5:8e:
df:46:b4:be:4f:89:4e:3f:0f:9e:6e:f1:f3:b5:25:63:e2:85:
2c:07:4a:11:34:5f:31:5f:15:31:26:44:f5:f7:22:27:42:a5:
ec:3a:00:9a:8a:29:cc:b1:d4:ed:26:18:b6:8d:05:d2:a1:49:
8a:ef:ec:00:93:49:33:d7:7f:29:d0:cf:94:6a:1e:63:15:f3:
4e:e5:c7:3e:b3:b9:e9:6b:4f:85:b1:fc:0d:f5:95:56:1b:73:
e7:b0:a7:f5:ff:13:d8:b5:2f:0f:c0:c0:91:aa:6e:5d:42:bf:
bd:37:d2:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:08:58 2026 by rpki-client