
$ rpki-client -vvf rpkica.twnic.tw/rpki/TOPCHINA/0/EC1DB3CB7CE6162748BA2956BC1706446561D664.mft
File: EC1DB3CB7CE6162748BA2956BC1706446561D664.mft (raw, json)
Hash identifier: v2O6N209bdkzQh0nzbVRW9h8Jgp/Cj/6lWECfpBn2Wg=
Subject key identifier: A7:D6:A0:14:50:52:99:2D:84:5F:28:B4:27:E3:3F:6F:3A:1F:CF:49
Authority key identifier: EC:1D:B3:CB:7C:E6:16:27:48:BA:29:56:BC:17:06:44:65:61:D6:64
Certificate issuer: /CN=EC1DB3CB7CE6162748BA2956BC1706446561D664
Certificate serial: 615D6736E32648B626C3943711D09BC0FB82E40B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EC1DB3CB7CE6162748BA2956BC1706446561D664.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TOPCHINA/0/EC1DB3CB7CE6162748BA2956BC1706446561D664.mft
Manifest number: 44
Signing time: Tue 30 Jun 2026 10:18:39 +0000
Manifest this update: Tue 30 Jun 2026 10:13:39 +0000
Manifest next update: Wed 01 Jul 2026 13:34:39 +0000
Files and hashes: 1: EC1DB3CB7CE6162748BA2956BC1706446561D664.crl (hash: kVfUe3pReEDxgsEBefSVR3ygI/BhCO5scPAU73Y8KDU=)
2: 3130332e3132342e3235322e302f32322d3234203d3e20313331363539.roa (hash: UJYSu7Fa6tnrzCGk1PLG8hNTofa+kMNC0fV9KXzBeyU=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TOPCHINA/0/EC1DB3CB7CE6162748BA2956BC1706446561D664.crl
rsync://rpkica.twnic.tw/rpki/TOPCHINA/0/EC1DB3CB7CE6162748BA2956BC1706446561D664.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EC1DB3CB7CE6162748BA2956BC1706446561D664.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Jul 2026 13:34:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:5d:67:36:e3:26:48:b6:26:c3:94:37:11:d0:9b:c0:fb:82:e4:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC1DB3CB7CE6162748BA2956BC1706446561D664
Validity
Not Before: Jun 30 10:13:39 2026 GMT
Not After : Jul 1 13:34:39 2026 GMT
Subject: CN=A7D6A0145052992D845F28B427E33F6F3A1FCF49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1e:ff:d4:48:0b:dc:84:00:6b:9f:30:38:68:
7d:7a:68:78:41:5a:95:13:6e:8b:74:40:9e:b9:ca:
98:68:58:53:f0:d9:7f:ec:21:a5:14:ec:3b:21:10:
a8:93:95:88:60:df:72:4e:5d:39:5d:a0:86:49:39:
1d:8e:ac:80:a9:f6:70:27:28:32:53:fd:35:9d:7b:
b7:65:28:2d:11:1f:b5:b9:9e:7a:f3:19:33:53:54:
36:35:e8:4f:42:92:8d:5d:eb:e5:43:d1:01:65:c6:
95:92:a6:6f:f6:f8:57:2e:d6:b2:f1:c1:04:f6:5f:
6e:8d:3b:3a:4d:37:65:64:c6:87:48:d4:3b:ed:5a:
a9:6b:17:d7:0a:62:3a:e3:1b:ff:93:20:70:ef:e8:
72:d6:b6:41:58:01:24:66:aa:59:d4:35:29:30:22:
f2:c0:a8:58:8c:b0:eb:20:41:3e:96:ee:4f:bb:39:
ac:c4:7c:22:59:bb:87:53:fd:ca:73:38:c6:22:35:
6c:31:60:84:67:ad:28:7e:e1:08:b5:d5:8a:cb:d9:
bc:61:cb:b2:30:db:73:6e:5b:79:96:ac:9f:3e:8e:
52:68:a6:bb:4b:a4:a8:5b:f8:7f:34:7b:e5:c8:d5:
b7:7c:6f:89:0a:29:f1:46:f0:b5:9f:df:30:4a:c2:
1b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D6:A0:14:50:52:99:2D:84:5F:28:B4:27:E3:3F:6F:3A:1F:CF:49
X509v3 Authority Key Identifier:
keyid:EC:1D:B3:CB:7C:E6:16:27:48:BA:29:56:BC:17:06:44:65:61:D6:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TOPCHINA/0/EC1DB3CB7CE6162748BA2956BC1706446561D664.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EC1DB3CB7CE6162748BA2956BC1706446561D664.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TOPCHINA/0/EC1DB3CB7CE6162748BA2956BC1706446561D664.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:3e:6e:28:c0:78:a0:b4:78:42:49:93:eb:0a:5f:c7:f1:44:
de:af:e4:b7:8c:91:04:68:b4:fe:5f:2d:c4:3f:cc:13:82:21:
2e:ec:9c:a4:b3:af:a8:a2:41:fd:04:54:e3:0c:bf:b5:24:8f:
eb:0c:a1:a1:81:a9:b7:fa:e2:9f:7f:df:92:63:d4:7f:9d:cf:
29:ac:ad:8e:8f:96:bb:44:64:89:8c:18:ae:dc:8b:08:b7:42:
e2:8b:03:5f:df:ba:22:a9:38:0a:2e:36:39:7f:15:95:c0:99:
e1:e5:bc:0b:12:c5:86:10:c6:31:3d:0f:3f:6d:09:e7:97:74:
1f:f9:63:ff:b6:e5:29:f9:73:0f:04:eb:2b:42:84:eb:f7:7c:
fd:b3:66:a6:a8:5f:ab:f9:53:29:06:35:74:35:ee:7c:04:89:
ba:ee:fe:8c:b1:a6:d5:58:d0:eb:a2:5a:06:66:4c:ad:48:b7:
c9:69:f8:05:1c:1c:7c:6a:ad:67:55:01:fd:60:51:02:ff:57:
8e:d7:ec:59:ca:a9:a1:b4:98:02:9b:41:a5:0c:f6:98:b9:d3:
d0:59:35:35:d5:10:01:f3:ae:03:e6:d3:fd:4b:65:d8:50:95:
9d:2a:5f:39:03:c6:f7:f5:a0:7f:ec:b7:c2:9d:bc:c5:e1:b9:
23:44:3f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:07:17 2026 by rpki-client