
$ rpki-client -vvf rpkica.twnic.tw/rpki/QYCLOUD/0/D1EE894ECDA357FF3B846E2660D95F0535127E79.mft
File: D1EE894ECDA357FF3B846E2660D95F0535127E79.mft (raw, json)
Hash identifier: 7B9MLWB+S43U78zxUAAHNx+y3Zppou04tAkKzMJlkBM=
Subject key identifier: 53:2F:B8:E9:7F:21:9D:03:1B:C3:4C:B2:A4:45:F9:5D:5D:AB:41:50
Authority key identifier: D1:EE:89:4E:CD:A3:57:FF:3B:84:6E:26:60:D9:5F:05:35:12:7E:79
Certificate issuer: /CN=D1EE894ECDA357FF3B846E2660D95F0535127E79
Certificate serial: 44D68BC16EC3AFC5C044C7E89F814A116C8C4946
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D1EE894ECDA357FF3B846E2660D95F0535127E79.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/QYCLOUD/0/D1EE894ECDA357FF3B846E2660D95F0535127E79.mft
Manifest number: 43
Signing time: Tue 30 Jun 2026 07:33:19 +0000
Manifest this update: Tue 30 Jun 2026 07:28:19 +0000
Manifest next update: Wed 01 Jul 2026 07:56:19 +0000
Files and hashes: 1: D1EE894ECDA357FF3B846E2660D95F0535127E79.crl (hash: R0iCT1xYaAs5G/ymTLZDvkgVwfQ3Dtnum2A83ppScMM=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/QYCLOUD/0/D1EE894ECDA357FF3B846E2660D95F0535127E79.crl
rsync://rpkica.twnic.tw/rpki/QYCLOUD/0/D1EE894ECDA357FF3B846E2660D95F0535127E79.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D1EE894ECDA357FF3B846E2660D95F0535127E79.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Jul 2026 07:56:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:d6:8b:c1:6e:c3:af:c5:c0:44:c7:e8:9f:81:4a:11:6c:8c:49:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1EE894ECDA357FF3B846E2660D95F0535127E79
Validity
Not Before: Jun 30 07:28:19 2026 GMT
Not After : Jul 1 07:56:19 2026 GMT
Subject: CN=532FB8E97F219D031BC34CB2A445F95D5DAB4150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c1:e6:c3:b7:72:42:4d:37:36:b0:58:fc:41:
be:b0:f9:09:ba:45:23:34:40:30:83:43:89:ea:31:
5f:13:2b:9a:30:2d:77:01:2e:71:b7:2b:4a:ac:37:
82:8d:d3:47:7d:82:8f:84:b3:98:50:8f:07:70:e6:
2b:f8:0e:ec:2c:0f:69:b5:5d:e4:4c:5a:9c:11:92:
ab:ec:f4:1f:c7:0c:b5:fb:39:c5:71:dc:5e:81:0f:
a0:ef:1a:38:ba:f1:04:fa:71:3a:51:e1:87:e4:db:
a9:f4:45:fc:be:4a:87:6a:5b:11:f3:b7:30:46:d2:
0c:fe:c0:a4:41:73:f6:ab:14:17:67:23:df:4e:17:
68:cd:00:5f:27:d1:c2:20:37:d8:8b:41:df:98:ab:
19:b3:e0:0e:59:3b:aa:a4:e7:bb:e4:73:1d:ba:57:
dc:c7:5d:71:d2:61:1f:69:95:ea:b4:44:05:d9:ec:
2d:51:86:34:46:80:42:0b:eb:1e:f4:a8:e3:40:6a:
9e:58:d5:98:08:cf:c2:a9:3f:53:0d:39:1c:13:57:
4b:6c:bb:e3:55:c8:9e:b4:53:76:cb:9a:80:a6:67:
85:31:02:67:b1:5c:78:c0:da:a4:67:d7:98:d5:75:
4c:2d:c2:f7:a0:75:ff:6d:19:c8:26:89:87:d3:42:
13:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:2F:B8:E9:7F:21:9D:03:1B:C3:4C:B2:A4:45:F9:5D:5D:AB:41:50
X509v3 Authority Key Identifier:
keyid:D1:EE:89:4E:CD:A3:57:FF:3B:84:6E:26:60:D9:5F:05:35:12:7E:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/QYCLOUD/0/D1EE894ECDA357FF3B846E2660D95F0535127E79.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D1EE894ECDA357FF3B846E2660D95F0535127E79.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/QYCLOUD/0/D1EE894ECDA357FF3B846E2660D95F0535127E79.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:8f:b5:d2:63:1c:3f:36:2d:ba:78:c0:7f:7e:63:eb:d3:44:
95:ba:71:39:67:4e:3e:6f:1a:c3:fb:46:f4:29:87:d2:58:44:
85:13:70:3a:1a:ab:c8:3b:a1:48:ca:14:8e:de:c8:c6:c7:c4:
45:f2:bd:5a:1b:7a:6b:72:f7:c2:62:6e:ab:d4:16:b7:98:3b:
82:7e:50:82:7a:b8:c4:1c:a4:0e:71:68:79:37:d4:ab:33:7d:
5f:0a:2b:4c:0a:0b:5d:57:ff:32:77:19:41:8f:26:c8:90:02:
e4:ec:9e:0c:84:95:1c:3f:92:01:c9:89:b8:54:41:63:4f:14:
d2:1e:eb:b2:87:30:41:6e:5d:5e:fe:0f:fe:64:e9:eb:47:53:
99:83:5c:92:04:5d:cb:0f:37:46:74:0e:9a:b4:c0:d7:ce:7d:
7d:87:f9:b1:85:dc:98:28:24:00:01:07:b2:31:69:88:01:96:
87:87:45:47:db:09:c9:69:8d:7c:00:b2:58:fc:ef:f6:bc:2b:
55:63:d2:46:2e:f6:b3:43:6d:81:68:71:34:40:42:05:29:21:
d8:16:cc:f3:72:cc:33:67:4e:1c:52:9b:18:99:14:28:78:f9:
35:fb:a0:57:df:bb:96:ad:05:c5:c7:28:d6:b6:4f:70:7e:08:
83:db:70:67
-----BEGIN CERTIFICATE-----
MIIE5jCCA86gAwIBAgIURNaLwW7Dr8XARMfon4FKEWyMSUYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDFFRTg5NEVDREEzNTdGRjNCODQ2RTI2NjBEOTVGMDUz
NTEyN0U3OTAeFw0yNjA2MzAwNzI4MTlaFw0yNjA3MDEwNzU2MTlaMDMxMTAvBgNV
BAMTKDUzMkZCOEU5N0YyMTlEMDMxQkMzNENCMkE0NDVGOTVENURBQjQxNTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5webDt3JCTTc2sFj8Qb6w+Qm6
RSM0QDCDQ4nqMV8TK5owLXcBLnG3K0qsN4KN00d9go+Es5hQjwdw5iv4DuwsD2m1
XeRMWpwRkqvs9B/HDLX7OcVx3F6BD6DvGji68QT6cTpR4Yfk26n0Rfy+SodqWxHz
tzBG0gz+wKRBc/arFBdnI99OF2jNAF8n0cIgN9iLQd+Yqxmz4A5ZO6qk57vkcx26
V9zHXXHSYR9pleq0RAXZ7C1RhjRGgEIL6x70qONAap5Y1ZgIz8KpP1MNORwTV0ts
u+NVyJ60U3bLmoCmZ4UxAmexXHjA2qRn15jVdUwtwvegdf9tGcgmiYfTQhOjAgMB
AAGjggHwMIIB7DAdBgNVHQ4EFgQUUy+46X8hnQMbw0yypEX5XV2rQVAwHwYDVR0j
BBgwFoAU0e6JTs2jV/87hG4mYNlfBTUSfnkwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvUVlDTE9V
RC8wL0QxRUU4OTRFQ0RBMzU3RkYzQjg0NkUyNjYwRDk1RjA1MzUxMjdFNzkuY3Js
MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu
aWMudHcvcnBraS9UV05JQ0NBLzEvRDFFRTg5NEVDREEzNTdGRjNCODQ2RTI2NjBE
OTVGMDUzNTEyN0U3OS5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy
c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1FZQ0xPVUQvMC9EMUVFODk0RUNE
QTM1N0ZGM0I4NDZFMjY2MEQ5NUYwNTM1MTI3RTc5Lm1mdDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZI+10mMc
PzYtunjAf35j69NElbpxOWdOPm8aw/tG9CmH0lhEhRNwOhqryDuhSMoUjt7IxsfE
RfK9Wht6a3L3wmJuq9QWt5g7gn5Qgnq4xBykDnFoeTfUqzN9XworTAoLXVf/MncZ
QY8myJAC5OyeDISVHD+SAcmJuFRBY08U0h7rsocwQW5dXv4P/mTp60dTmYNckgRd
yw83RnQOmrTA1859fYf5sYXcmCgkAAEHsjFpiAGWh4dFR9sJyWmNfACyWPzv9rwr
VWPSRi72s0NtgWhxNEBCBSkh2BbM83LMM2dOHFKbGJkUKHj5NfugV9+7lq0Fxcco
1rZPcH4Ig9twZw==
-----END CERTIFICATE-----
Generated at Tue Jun 30 19:09:07 2026 by rpki-client