
$ rpki-client -vvf rpkica.twnic.tw/rpki/NCDR/0/453885A7EEA9583A5124ACD32DCB0BF2FE827148.mft
File: 453885A7EEA9583A5124ACD32DCB0BF2FE827148.mft (raw, json)
Hash identifier: 8UM8SfGzmrzpF6ZVMSSAsdUMHbIV1tTeorkkD7jW7ew=
Subject key identifier: 2E:7B:DB:86:42:65:04:29:6C:0F:E3:65:74:B2:03:B4:32:2F:AD:38
Authority key identifier: 45:38:85:A7:EE:A9:58:3A:51:24:AC:D3:2D:CB:0B:F2:FE:82:71:48
Certificate issuer: /CN=453885A7EEA9583A5124ACD32DCB0BF2FE827148
Certificate serial: 2F10974F71B5F34A91B57E63B799AC3292AB1444
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/453885A7EEA9583A5124ACD32DCB0BF2FE827148.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/NCDR/0/453885A7EEA9583A5124ACD32DCB0BF2FE827148.mft
Manifest number: 43
Signing time: Tue 30 Jun 2026 02:47:58 +0000
Manifest this update: Tue 30 Jun 2026 02:42:58 +0000
Manifest next update: Wed 01 Jul 2026 04:39:58 +0000
Files and hashes: 1: 453885A7EEA9583A5124ACD32DCB0BF2FE827148.crl (hash: 1OQ+7N9p6OkfD/Z6Gx/UCRYXYmxt8Pw9ZBbRbxxLmj4=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/NCDR/0/453885A7EEA9583A5124ACD32DCB0BF2FE827148.crl
rsync://rpkica.twnic.tw/rpki/NCDR/0/453885A7EEA9583A5124ACD32DCB0BF2FE827148.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/453885A7EEA9583A5124ACD32DCB0BF2FE827148.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Jul 2026 04:39:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:10:97:4f:71:b5:f3:4a:91:b5:7e:63:b7:99:ac:32:92:ab:14:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453885A7EEA9583A5124ACD32DCB0BF2FE827148
Validity
Not Before: Jun 30 02:42:58 2026 GMT
Not After : Jul 1 04:39:58 2026 GMT
Subject: CN=2E7BDB86426504296C0FE36574B203B4322FAD38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5c:e7:7c:58:55:c2:37:8e:df:e4:20:b4:fd:
d4:17:de:9f:f4:47:be:37:b1:a9:f8:65:75:cd:2f:
c8:70:db:ba:41:93:ff:8d:2d:88:80:05:24:8b:47:
9f:7e:fa:83:19:1c:29:73:ee:68:f9:c6:d0:45:c6:
66:ac:16:9b:ce:cb:13:69:71:12:b9:fb:9a:14:56:
de:57:83:bf:d3:36:d2:94:09:5c:e0:c7:b8:12:fa:
94:0c:08:a8:71:95:99:d5:78:7a:15:cf:70:e4:db:
15:b3:f5:f1:1e:d4:dc:20:2f:95:d5:88:f3:cb:04:
74:35:f0:bb:44:fa:2a:f4:46:a3:14:da:5f:ea:bf:
36:01:0a:d7:a0:8f:10:76:5b:38:bb:f4:69:cc:46:
ee:e3:19:9c:61:c8:ce:05:12:29:67:25:ee:bd:d0:
20:97:44:e2:14:66:18:65:e9:da:44:35:e8:de:ae:
07:8e:fa:a8:fe:f0:d4:c1:6e:f6:9d:ae:76:0c:fc:
61:40:0f:5e:b5:7b:65:ca:b3:4e:02:73:c5:ea:0f:
3b:24:2a:97:21:2d:fe:c0:30:a9:0a:ad:9d:ea:fa:
77:c0:60:dd:d2:c7:1f:63:b3:77:3f:18:e1:6a:d2:
8e:2d:8c:a7:a1:e6:eb:6e:e9:72:48:42:b0:8a:8c:
c2:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:7B:DB:86:42:65:04:29:6C:0F:E3:65:74:B2:03:B4:32:2F:AD:38
X509v3 Authority Key Identifier:
keyid:45:38:85:A7:EE:A9:58:3A:51:24:AC:D3:2D:CB:0B:F2:FE:82:71:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/NCDR/0/453885A7EEA9583A5124ACD32DCB0BF2FE827148.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/453885A7EEA9583A5124ACD32DCB0BF2FE827148.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NCDR/0/453885A7EEA9583A5124ACD32DCB0BF2FE827148.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:85:a3:23:21:4a:f7:32:54:49:a4:84:e5:50:bd:68:03:cf:
21:94:98:6d:a8:a5:7c:40:f4:3d:5f:01:1f:43:a9:b5:06:00:
2e:b3:80:47:7c:f6:f1:79:a7:fb:55:8a:b8:78:89:77:4e:e1:
f3:06:06:80:3e:d2:ed:06:d3:43:ab:90:b1:0f:d4:7d:74:fe:
4e:5d:ab:34:68:96:9c:6c:1b:16:fb:85:08:d5:36:7b:21:61:
3c:41:dd:f1:01:a7:16:81:86:b5:80:b7:05:e4:10:05:92:57:
4b:86:48:14:5e:03:16:98:67:13:d0:2f:6c:ed:aa:db:53:27:
19:a2:6c:83:b9:09:92:2f:c5:b0:d1:71:a7:de:3d:12:d3:ab:
aa:1a:be:1e:2e:1d:10:b6:c4:c4:0d:c6:ac:1b:3d:cd:19:16:
db:54:70:c0:a4:0c:62:1f:ee:dc:bc:30:11:a9:bd:1c:83:15:
a4:70:0d:86:8c:d8:cd:da:07:42:d0:25:d5:f6:9a:02:b6:b4:
50:b2:89:76:d9:d4:68:a2:81:3c:3b:4f:39:6b:21:77:54:c9:
5c:35:19:da:b9:f1:ea:5a:62:e2:d9:d2:e7:3e:11:29:f8:81:
34:ab:58:e6:c8:41:b7:34:f8:0c:be:56:86:0a:e8:6b:8b:19:
83:b8:7b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:08:56 2026 by rpki-client