
$ rpki-client -vvf rpkica.twnic.tw/rpki/TAIFU/0/CEF74285903EEA3346FB1E74872895A4CE8D1742.mft
File: CEF74285903EEA3346FB1E74872895A4CE8D1742.mft (raw, json)
Hash identifier: M07l+RomCWbOnKwINaYnMXFNwRU5YfplJQFQsswIQ+I=
Subject key identifier: 09:8D:84:F9:1E:5C:46:E3:DC:4A:BE:29:81:9A:41:3B:C6:1D:C6:E5
Authority key identifier: CE:F7:42:85:90:3E:EA:33:46:FB:1E:74:87:28:95:A4:CE:8D:17:42
Certificate issuer: /CN=CEF74285903EEA3346FB1E74872895A4CE8D1742
Certificate serial: 334D5648F30FE512F5D3B9AC67988C379CBBBE0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CEF74285903EEA3346FB1E74872895A4CE8D1742.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TAIFU/0/CEF74285903EEA3346FB1E74872895A4CE8D1742.mft
Manifest number: 82
Signing time: Sat 15 Aug 2026 01:39:02 +0000
Manifest this update: Sat 15 Aug 2026 01:34:02 +0000
Manifest next update: Sun 16 Aug 2026 05:25:02 +0000
Files and hashes: 1: CEF74285903EEA3346FB1E74872895A4CE8D1742.crl (hash: 5obaGn0zNyKuCs4BTB7GWST57mpsn026lJp2YOj+I4Y=)
2: 323430323a323665303a3a2f33322d3438203d3e2039393138.roa (hash: P3RZ+5yR615iUMzqbYBESP/TjGRguu5CcQeQgKFVanc=)
3: 3230322e3133332e36382e302f32332d3234203d3e2039393138.roa (hash: iN6E9FfraXQT/WqBz/UUplfXGRYfrwEtSBMCkEDIi4Q=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TAIFU/0/CEF74285903EEA3346FB1E74872895A4CE8D1742.crl
rsync://rpkica.twnic.tw/rpki/TAIFU/0/CEF74285903EEA3346FB1E74872895A4CE8D1742.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CEF74285903EEA3346FB1E74872895A4CE8D1742.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 16 Aug 2026 03:24:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:4d:56:48:f3:0f:e5:12:f5:d3:b9:ac:67:98:8c:37:9c:bb:be:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CEF74285903EEA3346FB1E74872895A4CE8D1742
Validity
Not Before: Aug 15 01:34:02 2026 GMT
Not After : Aug 16 05:25:02 2026 GMT
Subject: CN=098D84F91E5C46E3DC4ABE29819A413BC61DC6E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:7c:86:a7:4b:1c:24:a7:66:be:3d:88:79:9a:
c6:9d:b4:aa:8c:c0:13:0c:64:55:23:c8:0b:a6:e0:
e6:e5:d9:bf:5b:e1:40:4f:8b:69:4e:67:0e:a6:98:
c2:1f:88:30:b1:c4:f9:17:a1:17:f2:2c:2a:70:01:
ac:ec:c2:80:71:b0:4f:53:8b:ed:4d:d7:c6:71:f7:
59:43:ee:cd:3b:fa:c8:74:74:d4:8d:b3:07:3f:28:
ba:5b:32:be:ec:bd:89:13:e7:59:33:3a:06:54:2d:
21:b7:59:d8:a1:e8:ab:ca:e2:1e:5f:78:1a:b4:3f:
a6:22:4a:8d:d7:78:02:03:00:b9:7c:c5:f6:ac:d2:
78:81:a2:3c:55:a8:39:22:72:48:e5:b1:ae:41:ea:
07:01:c2:15:78:07:04:5a:0f:64:29:aa:aa:91:c9:
be:98:1b:6b:74:c4:c5:57:2e:d4:3d:63:1b:f5:c3:
f5:73:e3:ef:63:aa:3d:33:d2:a6:bd:6d:91:5f:92:
ea:ae:ff:1b:d7:36:2f:17:e0:86:64:ed:1d:f2:0e:
fe:47:b5:2c:31:d5:cc:fa:71:77:b5:3c:5d:7c:49:
45:1e:e8:a3:d3:ba:48:96:67:f7:77:f4:1b:96:ad:
e4:c3:cc:cd:13:a5:98:04:93:18:84:3c:3c:10:fd:
04:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:8D:84:F9:1E:5C:46:E3:DC:4A:BE:29:81:9A:41:3B:C6:1D:C6:E5
X509v3 Authority Key Identifier:
keyid:CE:F7:42:85:90:3E:EA:33:46:FB:1E:74:87:28:95:A4:CE:8D:17:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TAIFU/0/CEF74285903EEA3346FB1E74872895A4CE8D1742.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CEF74285903EEA3346FB1E74872895A4CE8D1742.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TAIFU/0/CEF74285903EEA3346FB1E74872895A4CE8D1742.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:e2:6c:6b:aa:b5:45:b0:e6:34:a7:71:a5:02:27:b5:9c:1c:
8f:cd:9e:e4:db:1d:83:8a:1e:87:3c:42:7b:08:cc:f0:81:fa:
e3:68:42:5d:30:82:a3:eb:c1:08:a6:80:31:50:31:28:fb:5b:
82:d3:d2:17:b5:d3:1a:4c:68:8f:13:0f:93:d5:30:dc:eb:ee:
ef:ae:6e:52:2a:89:cf:f2:34:6a:d5:5d:09:bb:66:b8:57:e8:
1f:e1:55:a3:2d:0e:45:b1:2e:64:25:5a:b1:a6:24:7f:78:a2:
71:93:4e:4d:a7:52:e2:ac:b6:62:6e:f8:25:bb:39:e3:0b:70:
c8:4b:af:6a:15:c9:0b:45:82:99:31:45:2e:08:eb:87:46:e4:
74:2b:ab:1d:dc:df:d4:af:c3:bc:22:8f:75:82:ae:de:1e:dd:
bb:a5:61:2b:57:75:73:2d:7b:a3:b4:0d:83:68:77:62:25:86:
35:6a:11:a1:97:01:f5:5b:c2:ad:3f:bb:e6:ef:dd:77:df:a9:
ac:16:93:42:d5:16:02:77:1e:c2:ba:fc:af:06:9e:2b:54:3c:
15:bf:8c:14:b2:6a:46:fe:5d:c6:5b:56:51:d8:c9:c5:a2:ff:
84:5a:b7:bf:5e:ca:0f:bc:9b:93:e4:c1:00:01:95:f3:90:33:
32:be:44:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:21:40 2026 by rpki-client