
$ rpki-client -vvvf rpkica.twnic.tw/rpki/NETFUSION/1/7D7C12FBDEAC578F060A78E872B7B070511079AF.mft
File: 7D7C12FBDEAC578F060A78E872B7B070511079AF.mft (raw, json)
Hash identifier: mgyeu/4LpjKRPbuGIDVNg6GcUHLmxWc7rOO+96OkJ9g=
Subject key identifier: 57:2F:C2:30:43:89:8B:2B:7B:CE:80:1A:8D:66:15:26:E6:12:B8:0F
Authority key identifier: 7D:7C:12:FB:DE:AC:57:8F:06:0A:78:E8:72:B7:B0:70:51:10:79:AF
Certificate issuer: /CN=7D7C12FBDEAC578F060A78E872B7B070511079AF
Certificate serial: 554CB7ED7FC022AE978D99C66FAC6E4B0235CBF0
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/7D7C12FBDEAC578F060A78E872B7B070511079AF.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/NETFUSION/1/7D7C12FBDEAC578F060A78E872B7B070511079AF.mft
Manifest number: 4D
Signing time: Tue 06 Oct 2026 19:34:00 +0000
Manifest this update: Tue 06 Oct 2026 19:29:00 +0000
Manifest next update: Wed 07 Oct 2026 23:09:00 +0000
Files and hashes: 1: 7D7C12FBDEAC578F060A78E872B7B070511079AF.crl (hash: V0p2uuP+7wxum02ET4pNsYqO3I08U20C9ac+wP6h0cw=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/NETFUSION/1/7D7C12FBDEAC578F060A78E872B7B070511079AF.crl
rsync://rpkica.twnic.tw/rpki/NETFUSION/1/7D7C12FBDEAC578F060A78E872B7B070511079AF.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/7D7C12FBDEAC578F060A78E872B7B070511079AF.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 07 Oct 2026 03:58:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:4c:b7:ed:7f:c0:22:ae:97:8d:99:c6:6f:ac:6e:4b:02:35:cb:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7D7C12FBDEAC578F060A78E872B7B070511079AF
Validity
Not Before: Oct 6 19:29:00 2026 GMT
Not After : Oct 7 23:09:00 2026 GMT
Subject: CN=572FC23043898B2B7BCE801A8D661526E612B80F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e8:05:6a:c4:41:b2:1f:6a:52:77:95:e8:0c:
0a:23:a7:6e:6a:b7:50:b0:08:2d:91:f4:89:3b:7c:
6e:ac:19:39:71:0a:ac:ed:62:44:0a:cd:ad:80:90:
8c:e1:d7:bb:3c:5e:0f:71:a6:59:5b:15:67:67:1e:
9a:51:88:48:a0:39:f5:ad:f3:ee:d9:b9:1e:e6:4f:
41:8a:11:28:66:d5:1e:61:42:8a:d5:d0:fb:3f:7b:
f5:f6:08:2c:a9:72:bf:41:d6:4f:86:3a:e8:d0:50:
dc:7f:a8:9d:c0:1c:3d:f4:c7:d2:47:1a:2e:a9:8c:
9c:c5:d0:00:90:25:02:a7:85:99:bd:9b:f1:a0:a4:
30:bd:de:62:b0:85:ba:7f:69:6c:97:d6:fa:58:b5:
1b:1c:d0:38:00:7a:28:88:46:82:b1:32:2b:5f:76:
87:8f:6c:3c:2a:ae:00:b5:17:c3:3d:24:db:25:2e:
7a:6e:1a:b8:91:5b:17:bc:25:d8:40:9b:f2:3c:f9:
28:db:a4:35:90:99:a1:49:51:af:fd:3d:84:b4:4a:
d3:32:50:1b:e0:67:b8:45:05:74:38:74:79:3c:13:
19:b5:55:67:50:23:cb:62:f2:92:83:17:19:7a:47:
80:4a:5f:5a:e4:d7:18:a6:03:53:10:fc:e1:5d:43:
53:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:2F:C2:30:43:89:8B:2B:7B:CE:80:1A:8D:66:15:26:E6:12:B8:0F
X509v3 Authority Key Identifier:
keyid:7D:7C:12:FB:DE:AC:57:8F:06:0A:78:E8:72:B7:B0:70:51:10:79:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/NETFUSION/1/7D7C12FBDEAC578F060A78E872B7B070511079AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/7D7C12FBDEAC578F060A78E872B7B070511079AF.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NETFUSION/1/7D7C12FBDEAC578F060A78E872B7B070511079AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:ae:46:ed:d7:cb:0c:a3:32:8a:2c:df:0d:0a:47:fe:1c:33:
3b:e2:27:8e:d6:3b:5e:d1:7e:21:d8:53:39:f1:6d:3e:bd:bf:
9e:56:50:4a:2c:9d:a5:b0:75:05:94:97:f9:26:7f:b1:42:0d:
ca:c7:3e:d4:d3:58:eb:e3:a4:31:04:b7:49:42:95:15:78:6b:
ce:1b:cd:e7:49:51:95:27:d8:ff:b5:59:1e:da:1a:39:9b:ac:
18:77:b9:e3:e5:3c:4d:17:92:75:b3:36:99:6a:0b:e9:98:ca:
49:0e:d9:69:ae:77:cb:fa:50:84:32:6e:15:40:64:d3:50:90:
c9:37:23:69:11:07:f5:7c:d3:3c:f3:4f:77:f5:88:31:a1:65:
0d:86:22:1a:11:51:1a:f4:d1:43:4e:79:20:a6:c2:31:3b:3b:
0e:10:b7:00:e4:73:6a:35:f7:75:bb:d8:92:95:5d:fd:f3:5e:
40:ef:10:fe:d2:fd:5e:af:d0:b2:c3:28:2e:6d:99:f6:e1:a2:
84:bf:ac:16:0c:62:bf:55:3e:7d:1e:a7:27:1e:25:f6:68:8a:
12:db:f0:cc:08:a7:57:d3:bd:90:30:65:c6:9c:cd:de:95:87:
9e:70:a4:bf:2c:3e:0b:9a:cb:94:75:bc:34:e8:fb:60:a5:64:
b4:0f:57:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 21:46:49 2026 by rpki-client