
$ rpki-client -vvf rpkica.twnic.tw/rpki/QYCLOUD/0/D1EE894ECDA357FF3B846E2660D95F0535127E79.mft
File: D1EE894ECDA357FF3B846E2660D95F0535127E79.mft (raw, json)
Hash identifier: rvvP3psh9QjucP7ALJJmCiD3LpWakGcS7QCjO75HS4g=
Subject key identifier: B7:68:52:5E:5C:CE:56:B1:2A:6A:D6:CF:52:A6:AC:25:25:46:CB:2B
Authority key identifier: D1:EE:89:4E:CD:A3:57:FF:3B:84:6E:26:60:D9:5F:05:35:12:7E:79
Certificate issuer: /CN=D1EE894ECDA357FF3B846E2660D95F0535127E79
Certificate serial: 45601DE73C08B9C1D4CDB88A8996362907859634
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D1EE894ECDA357FF3B846E2660D95F0535127E79.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/QYCLOUD/0/D1EE894ECDA357FF3B846E2660D95F0535127E79.mft
Manifest number: 03
Signing time: Wed 13 May 2026 05:42:10 +0000
Manifest this update: Wed 13 May 2026 05:37:10 +0000
Manifest next update: Thu 14 May 2026 09:10:10 +0000
Files and hashes: 1: D1EE894ECDA357FF3B846E2660D95F0535127E79.crl (hash: GwrIC3WEGwHFBp8Hhu49+DxYkgcfRD1AmMRu2AY9XtM=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/QYCLOUD/0/D1EE894ECDA357FF3B846E2660D95F0535127E79.crl
rsync://rpkica.twnic.tw/rpki/QYCLOUD/0/D1EE894ECDA357FF3B846E2660D95F0535127E79.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D1EE894ECDA357FF3B846E2660D95F0535127E79.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 09:10:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:60:1d:e7:3c:08:b9:c1:d4:cd:b8:8a:89:96:36:29:07:85:96:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1EE894ECDA357FF3B846E2660D95F0535127E79
Validity
Not Before: May 13 05:37:10 2026 GMT
Not After : May 14 09:10:10 2026 GMT
Subject: CN=B768525E5CCE56B12A6AD6CF52A6AC252546CB2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d4:49:e9:ba:e8:0c:7c:e5:b7:8d:8d:f4:55:
45:01:0f:32:1d:8b:10:7c:b1:8d:ff:af:bc:f6:68:
2b:3b:9f:0b:32:51:2b:00:6b:be:a4:8d:7a:59:df:
c5:4f:5e:a0:01:ab:5c:85:65:fa:88:e6:03:18:04:
8b:29:e2:17:e7:2b:bb:84:be:8e:09:55:29:85:58:
c6:05:18:25:74:b5:56:17:ce:ba:a2:b1:27:eb:2d:
48:c5:2b:db:a0:4b:47:2b:4e:06:4a:c4:54:fe:12:
be:0e:12:f0:54:62:b0:0b:a2:d6:1d:1c:c7:06:3d:
88:02:5d:77:0d:52:26:1b:ab:ac:48:05:2b:0d:8f:
bd:f1:f5:b5:ab:60:7f:87:da:38:50:86:46:7d:1d:
ac:91:c0:e6:fa:e9:9f:b4:50:72:d2:56:31:fa:5e:
2a:28:46:83:99:9a:16:92:c9:31:1f:b9:ab:ad:60:
ab:9a:bf:1d:77:bf:c0:10:7f:9f:db:75:f3:e5:7e:
a8:78:a3:f0:65:5d:16:31:b4:14:7a:ad:bc:01:86:
0d:6d:48:62:6e:ff:02:80:4f:f3:9e:ad:e3:97:13:
0c:e7:6b:40:29:83:d3:15:52:3d:b8:98:45:e5:c2:
ce:78:f9:e6:23:de:bc:7f:27:a2:e0:68:50:60:47:
9f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:68:52:5E:5C:CE:56:B1:2A:6A:D6:CF:52:A6:AC:25:25:46:CB:2B
X509v3 Authority Key Identifier:
keyid:D1:EE:89:4E:CD:A3:57:FF:3B:84:6E:26:60:D9:5F:05:35:12:7E:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/QYCLOUD/0/D1EE894ECDA357FF3B846E2660D95F0535127E79.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D1EE894ECDA357FF3B846E2660D95F0535127E79.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/QYCLOUD/0/D1EE894ECDA357FF3B846E2660D95F0535127E79.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:a7:6f:14:27:6f:1f:2a:15:07:7e:41:52:a3:bb:14:3b:58:
fa:5c:9a:85:02:06:5e:33:33:46:2f:a2:de:5d:5f:40:41:4b:
d2:69:9f:25:94:03:05:9e:17:0d:12:ea:f0:b3:f5:71:46:fa:
b8:ec:86:8d:66:f6:29:31:3b:4c:f2:9c:94:9e:ae:38:a9:42:
c5:1d:9a:76:c2:27:8e:97:8f:0f:49:de:71:ad:94:85:ec:1c:
50:f5:93:4d:bc:2e:b6:16:f5:ae:1e:59:e1:9f:42:f4:25:d4:
32:0d:25:0d:bc:91:34:67:ac:f2:02:56:84:03:1c:ca:f3:67:
5a:c5:ea:30:0b:75:f3:86:f5:97:47:45:ba:f2:09:1f:8c:8a:
a8:4e:b7:0b:22:23:d3:f8:a5:6f:0f:d8:3e:5b:52:06:03:56:
b4:e9:61:c0:94:a2:90:24:94:08:eb:3d:b2:13:9b:75:f2:e1:
da:8e:30:4f:ce:af:8b:e1:81:ec:36:05:e3:fc:9b:da:c0:0c:
13:f2:46:d0:f9:02:91:c8:8e:75:fe:e5:e7:71:16:fe:fd:fb:
1e:35:5b:5e:8e:d7:ba:df:48:35:36:3d:63:bc:44:b4:64:48:
e1:2b:c7:e5:08:36:6b:c0:e4:29:c9:f0:15:e7:d1:0b:b0:d7:
fb:62:91:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:33:37 2026 by rpki-client