
$ rpki-client -vvf rpkica.twnic.tw/rpki/RENREN/0/7CD85D0DDA75F492D954402BFEA819ED61FD5B76.mft
File: 7CD85D0DDA75F492D954402BFEA819ED61FD5B76.mft (raw, json)
Hash identifier: W2M3P4/3tEoamW2XPJAV3G2Z1nCJZH/73oABynR09mw=
Subject key identifier: AE:14:ED:65:9A:A1:02:54:79:FD:CD:BB:26:DA:B1:53:F5:A3:6F:7B
Authority key identifier: 7C:D8:5D:0D:DA:75:F4:92:D9:54:40:2B:FE:A8:19:ED:61:FD:5B:76
Certificate issuer: /CN=7CD85D0DDA75F492D954402BFEA819ED61FD5B76
Certificate serial: 28A3D0F8365A7DCA43C0B1F392F0DB2C3DB17001
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7CD85D0DDA75F492D954402BFEA819ED61FD5B76.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/RENREN/0/7CD85D0DDA75F492D954402BFEA819ED61FD5B76.mft
Manifest number: 04
Signing time: Wed 13 May 2026 06:17:19 +0000
Manifest this update: Wed 13 May 2026 06:12:19 +0000
Manifest next update: Thu 14 May 2026 08:34:19 +0000
Files and hashes: 1: 3130332e36392e34382e302f32332d3332203d3e20313331363432.roa (hash: o7B66t9SqLTxpoTquQyKEFqbdaVVWkZmLbtbMwzYiRQ=)
2: 7CD85D0DDA75F492D954402BFEA819ED61FD5B76.crl (hash: Y2ZlXGqx8ArvAkZ9fp8ODU09vVBRcDTGevCy9aBfkFg=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/RENREN/0/7CD85D0DDA75F492D954402BFEA819ED61FD5B76.crl
rsync://rpkica.twnic.tw/rpki/RENREN/0/7CD85D0DDA75F492D954402BFEA819ED61FD5B76.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7CD85D0DDA75F492D954402BFEA819ED61FD5B76.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 08:34:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:a3:d0:f8:36:5a:7d:ca:43:c0:b1:f3:92:f0:db:2c:3d:b1:70:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CD85D0DDA75F492D954402BFEA819ED61FD5B76
Validity
Not Before: May 13 06:12:19 2026 GMT
Not After : May 14 08:34:19 2026 GMT
Subject: CN=AE14ED659AA1025479FDCDBB26DAB153F5A36F7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:60:dd:20:c8:a0:50:cd:30:01:87:ad:af:5c:
5f:f3:ed:6b:99:ad:f8:11:58:98:ce:7c:30:70:8f:
98:e0:e3:f9:1b:7f:1e:9f:11:df:f9:7c:e4:4c:65:
a5:77:d9:05:81:b3:b1:f7:3c:ba:ce:b9:39:ed:a3:
26:61:a4:7f:19:87:b4:a5:c2:3a:8a:35:a4:07:1e:
6b:57:7a:0a:20:fc:a3:8f:9a:58:d2:c9:70:45:b4:
77:2d:cf:14:fd:82:6e:a1:45:cb:45:ca:e1:de:ac:
d0:98:4d:f2:7c:d4:3f:83:67:9e:fd:d4:ac:f8:4e:
8e:fa:f5:39:65:fe:72:f6:a5:ef:b6:d8:07:b9:eb:
69:37:e4:1f:98:2c:fe:84:56:87:3d:8d:90:79:42:
45:0f:8e:10:2c:d9:17:88:d0:56:96:ec:3e:2c:e3:
f8:8e:e5:86:26:5d:12:56:a2:42:d1:ee:03:ce:8f:
0e:bd:b9:a9:27:59:72:65:d3:55:19:98:ce:9f:fd:
1b:d2:db:dd:cb:90:fb:fd:bf:21:cd:37:c7:7e:d8:
cb:d8:40:1d:8a:ee:36:9e:99:98:e4:38:6c:54:f4:
39:e4:c9:ea:c7:38:8b:3f:c0:89:ca:3f:0a:75:6e:
30:49:69:02:d8:fb:8f:ee:99:7c:52:82:28:5f:84:
60:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:14:ED:65:9A:A1:02:54:79:FD:CD:BB:26:DA:B1:53:F5:A3:6F:7B
X509v3 Authority Key Identifier:
keyid:7C:D8:5D:0D:DA:75:F4:92:D9:54:40:2B:FE:A8:19:ED:61:FD:5B:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/RENREN/0/7CD85D0DDA75F492D954402BFEA819ED61FD5B76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7CD85D0DDA75F492D954402BFEA819ED61FD5B76.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/RENREN/0/7CD85D0DDA75F492D954402BFEA819ED61FD5B76.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:2d:6d:fa:ad:01:75:5e:36:a6:60:a9:0c:c5:49:0c:4e:cb:
2f:52:7c:b6:18:30:36:a4:7c:25:67:58:12:0f:e5:87:43:75:
79:af:c9:00:7e:0c:92:03:fe:b1:71:8f:11:78:72:80:d3:7b:
bb:f0:73:8f:ba:97:85:a1:8f:c2:05:59:6d:be:09:ec:79:08:
42:7e:a6:2a:9d:c4:64:12:70:1e:54:dc:7c:78:eb:13:53:66:
32:2e:1f:9f:20:63:73:59:cb:36:a8:42:45:75:e0:08:08:36:
d1:2c:0b:41:a3:a1:23:dd:7f:c0:ea:68:73:b4:70:47:ac:4d:
42:45:c8:15:3a:a1:b8:34:c9:c6:dd:ca:91:02:0c:5e:80:4e:
ce:4b:3d:04:66:75:27:cb:29:c6:c1:52:26:fd:08:5a:c9:a9:
5d:eb:99:e3:b4:a7:73:35:63:ce:74:4a:34:8d:a9:42:16:3f:
e0:97:36:22:33:20:27:4a:8c:2f:4b:8c:99:67:7b:4f:e1:1b:
66:7e:e5:02:82:fc:2f:01:fd:23:e2:bd:89:e3:03:54:75:09:
15:f2:08:fd:77:27:4d:2f:30:d8:f3:4d:5b:d6:85:6e:50:7c:
32:b8:04:60:79:e3:a6:20:e6:37:1e:3e:e6:f5:f2:6e:ed:89:
5d:f3:18:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:33:31 2026 by rpki-client