
$ rpki-client -vvvf rpkica.twnic.tw/rpki/SAELW/0/2D63D0213010A74651A161277EB9CBDC9CF65853.mft
File: 2D63D0213010A74651A161277EB9CBDC9CF65853.mft (raw, json)
Hash identifier: EPUm0DnYrbvkJBcztTWWE931xumCuj/Mfuc13d7prbs=
Subject key identifier: 43:F7:10:9B:50:D5:E8:59:B2:CD:A7:EE:57:0C:DB:26:E9:3F:E3:96
Authority key identifier: 2D:63:D0:21:30:10:A7:46:51:A1:61:27:7E:B9:CB:DC:9C:F6:58:53
Certificate issuer: /CN=2D63D0213010A74651A161277EB9CBDC9CF65853
Certificate serial: 6DE7C1DC3596FFF009D85819FAD6888FBC38733D
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2D63D0213010A74651A161277EB9CBDC9CF65853.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SAELW/0/2D63D0213010A74651A161277EB9CBDC9CF65853.mft
Manifest number: C6
Signing time: Mon 05 Oct 2026 00:01:03 +0000
Manifest this update: Sun 04 Oct 2026 23:56:03 +0000
Manifest next update: Tue 06 Oct 2026 01:27:03 +0000
Files and hashes: 1: 2D63D0213010A74651A161277EB9CBDC9CF65853.crl (hash: uJcHdjXh5SfrkzYdLESgSGTHwLYgrMFPcCHURUD4jLo=)
2: 323430313a396536303a3a2f33322d3332203d3e20313532363130.roa (hash: E56+hzTXbNkt4aLzCh5vj/t9pBndJNLPMkIErA3bzpE=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/SAELW/0/2D63D0213010A74651A161277EB9CBDC9CF65853.crl
rsync://rpkica.twnic.tw/rpki/SAELW/0/2D63D0213010A74651A161277EB9CBDC9CF65853.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2D63D0213010A74651A161277EB9CBDC9CF65853.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 06 Oct 2026 01:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:e7:c1:dc:35:96:ff:f0:09:d8:58:19:fa:d6:88:8f:bc:38:73:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D63D0213010A74651A161277EB9CBDC9CF65853
Validity
Not Before: Oct 4 23:56:03 2026 GMT
Not After : Oct 6 01:27:03 2026 GMT
Subject: CN=43F7109B50D5E859B2CDA7EE570CDB26E93FE396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:67:fd:ec:d4:6b:7f:7f:17:a6:63:5b:b6:3b:
b6:bc:b1:62:51:61:08:90:71:2c:db:8c:b4:5b:57:
f5:f3:31:0c:1b:6a:c5:6d:78:e9:0a:16:4c:b6:c6:
7e:72:fa:4f:f1:d7:67:25:cf:05:e9:d0:f3:09:da:
0b:66:58:64:c0:df:c8:aa:e7:07:83:00:5d:3c:9e:
e0:df:a6:a5:cd:4b:c3:5c:0f:65:b5:7a:3f:66:e6:
4d:12:03:03:70:79:05:b9:19:0c:65:92:9e:65:0d:
1f:45:85:6c:9c:0f:c8:6e:e4:43:8c:95:56:67:0c:
41:85:1b:5c:1f:dc:5a:3b:28:ba:bd:39:6a:d8:72:
2b:12:6a:81:d1:27:8f:3d:17:45:8d:53:66:ad:6e:
69:51:78:d4:a8:c1:74:ba:a3:da:67:4e:dd:b9:f2:
b8:44:24:ad:80:16:82:3c:7a:2d:cc:21:53:6c:2d:
58:27:ad:09:02:1c:fd:fc:e5:12:4a:b9:70:8a:25:
c7:78:0f:31:2d:b1:10:53:0f:6e:2c:cb:54:dd:c4:
a9:38:ec:9f:cb:f5:18:8a:f5:f6:e3:f1:4a:70:71:
92:d6:34:59:38:6e:e8:16:8b:53:fa:05:57:94:5d:
63:5f:b4:6f:71:d1:30:64:c3:f6:03:c9:f9:d7:5d:
69:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:F7:10:9B:50:D5:E8:59:B2:CD:A7:EE:57:0C:DB:26:E9:3F:E3:96
X509v3 Authority Key Identifier:
keyid:2D:63:D0:21:30:10:A7:46:51:A1:61:27:7E:B9:CB:DC:9C:F6:58:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SAELW/0/2D63D0213010A74651A161277EB9CBDC9CF65853.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2D63D0213010A74651A161277EB9CBDC9CF65853.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SAELW/0/2D63D0213010A74651A161277EB9CBDC9CF65853.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:0c:14:0d:f0:60:49:02:c9:5e:b8:05:ba:7c:c3:ad:f8:cb:
50:c1:05:54:00:55:91:c1:63:a3:f8:ed:5a:f7:02:d8:cc:da:
46:22:9b:1d:d0:59:f2:a5:1e:75:8b:60:d7:4f:f6:b2:37:b1:
2b:88:da:ac:47:c3:80:72:bb:77:8d:96:ba:39:a8:88:87:51:
2b:50:d1:d2:56:b1:bf:61:57:b8:62:bb:bd:45:a5:ac:fe:c2:
e9:c0:bc:b1:8e:2f:9e:b7:15:0d:09:ca:f1:af:cd:46:f2:d5:
a6:25:04:e9:d3:0c:0e:6f:5a:85:8a:36:54:93:f0:d2:01:bb:
95:55:52:0c:7e:3d:a7:62:04:2a:4b:4d:a6:37:ba:e3:44:df:
38:49:3a:a4:5a:5f:26:d7:57:7f:ac:0e:df:5d:da:54:f1:0c:
8d:ba:35:2f:10:db:b0:bc:82:95:f0:a4:f2:67:22:13:31:1f:
13:ea:6c:61:1a:76:09:98:88:40:9c:74:dd:2b:da:8d:64:ad:
1a:a4:73:bb:4b:a4:58:5c:b7:33:b0:7d:0f:98:dc:db:0a:0f:
38:30:19:a4:ab:ea:d3:67:52:be:5e:27:95:c5:35:d4:e6:7a:
83:f1:96:fc:0f:f9:bc:8f:5d:c5:5a:d8:ae:64:7d:82:3d:56:
02:b0:91:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:10:17 2026 by rpki-client