
$ rpki-client -vvvf rpkica.twnic.tw/rpki/SHANGFU/0/D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.mft
File: D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.mft (raw, json)
Hash identifier: yIvq7vNgem1Wb5CA+O8VZoMTP9Q43XQGBnY8qkgoM70=
Subject key identifier: 56:74:49:D3:7A:97:97:42:EF:87:F6:99:64:4C:BF:81:23:B7:70:4B
Authority key identifier: D1:AE:33:38:03:5B:FC:A7:C4:E8:6F:BC:28:1A:1F:DF:0B:E6:9B:90
Certificate issuer: /CN=D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90
Certificate serial: 42BDC2A4543CD9F64F41537211E89BCD249C8304
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SHANGFU/0/D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.mft
Manifest number: C2
Signing time: Fri 02 Oct 2026 07:21:03 +0000
Manifest this update: Fri 02 Oct 2026 07:16:03 +0000
Manifest next update: Sat 03 Oct 2026 09:50:03 +0000
Files and hashes: 1: D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.crl (hash: 8EsEfTxg8J0YTcs0zGwRZqPkytuDRCOLPuzMhm1pASc=)
2: 3130332e3132362e38382e302f32342d3234203d3e203438303234.roa (hash: Sd6Q7YbX3hdrc0mji0ubguZvwyQj1Zh6EbmfJzdspl4=)
3: 3130332e3132362e38382e302f32322d3234203d3e203138303436.roa (hash: WYxsc8T18C1jcbx9ZCaeGlpS/rFD1h17zovXNmt5VJk=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/SHANGFU/0/D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.crl
rsync://rpkica.twnic.tw/rpki/SHANGFU/0/D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 09:50:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:bd:c2:a4:54:3c:d9:f6:4f:41:53:72:11:e8:9b:cd:24:9c:83:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90
Validity
Not Before: Oct 2 07:16:03 2026 GMT
Not After : Oct 3 09:50:03 2026 GMT
Subject: CN=567449D37A979742EF87F699644CBF8123B7704B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ef:db:d5:2f:a7:01:79:d3:0c:44:ef:e9:0e:
c5:57:de:c2:b7:21:92:59:74:80:3e:de:f6:55:a9:
6b:0d:61:46:7b:b4:5f:fa:4e:d0:e1:6a:31:9b:02:
94:a1:a9:3d:00:1d:2a:f0:e3:01:55:36:b9:a7:c5:
84:66:9d:3f:91:67:81:04:d4:26:a0:dd:33:e1:a8:
24:82:6b:fe:83:85:71:15:67:81:d1:2e:f9:85:ef:
9e:ad:83:05:95:07:4b:5f:2b:15:07:ef:da:94:27:
3b:2a:e1:65:7a:be:72:20:aa:e1:85:8a:fc:14:1b:
d5:56:10:84:44:06:b0:85:72:8f:bd:bf:85:18:87:
2b:f5:43:9a:c8:13:7c:e9:20:5f:78:fb:39:63:f4:
9f:23:15:19:1b:33:44:57:c7:0a:bd:d8:14:55:40:
e2:5d:72:e3:5c:34:6b:a1:be:6e:bf:00:38:4a:23:
a1:1f:91:5d:1f:54:6e:92:58:1d:7f:54:40:16:8d:
40:ee:aa:b0:62:1d:16:de:37:4b:68:e2:80:5f:09:
e5:87:09:f0:66:2c:1d:fe:7c:83:55:7d:69:86:eb:
ed:08:0c:9e:20:21:67:b2:74:f5:ea:45:c1:b8:92:
15:36:b0:22:f1:48:a1:8e:cb:a4:e8:31:9f:6c:09:
27:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:74:49:D3:7A:97:97:42:EF:87:F6:99:64:4C:BF:81:23:B7:70:4B
X509v3 Authority Key Identifier:
keyid:D1:AE:33:38:03:5B:FC:A7:C4:E8:6F:BC:28:1A:1F:DF:0B:E6:9B:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SHANGFU/0/D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SHANGFU/0/D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:e9:68:84:b0:f3:e2:ee:2b:fa:73:35:94:26:99:c7:ba:f3:
23:46:72:b2:f5:b1:fc:75:9d:4d:f9:fe:c8:64:f3:01:60:ef:
cc:8a:b3:7f:c3:8a:78:65:44:7d:42:76:3f:62:6d:8b:2e:2a:
3b:68:13:50:0d:06:df:8e:4c:a8:79:b7:ef:17:a7:40:54:62:
54:5e:59:96:e5:4e:3e:5f:43:e8:d6:8d:84:35:8c:55:4e:ed:
76:25:3c:56:3d:21:ce:c4:3b:c8:19:a8:8b:ea:df:f2:16:22:
b3:3e:7a:80:fe:56:f1:d3:a3:65:42:68:05:9e:37:61:76:bf:
26:5c:14:95:9c:2b:1b:c1:e6:ab:97:21:60:66:c4:0d:67:01:
20:ce:12:a3:93:6c:f6:d0:5e:19:03:ff:a5:5a:7f:eb:0d:4d:
a2:18:a5:81:06:a8:d7:c7:6d:87:41:d2:ea:eb:08:20:89:10:
b9:10:6d:69:a3:b6:e2:79:59:54:44:34:16:b1:d7:7c:77:3f:
05:2a:33:a6:77:e1:07:c5:36:cb:b2:51:2d:f3:54:32:4c:4b:
8e:13:1c:e4:31:00:b6:62:2f:16:6a:31:09:eb:60:0c:31:01:
62:c9:f0:3b:da:f7:cb:fd:cf:d4:94:52:e8:85:6a:51:2b:3f:
07:29:ba:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 14:48:54 2026 by rpki-client