
$ rpki-client -vvvf rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft
File: 71525972E3C1153DE53054798F51A5BD55C75019.mft (raw, json)
Hash identifier: I5CfcYTT8bu2iM5UOz0RDAAd9wZrfZgqD5AXT1ipen8=
Subject key identifier: 16:34:C6:49:AE:01:00:5D:15:F9:41:AD:8D:06:FC:9C:A1:42:B4:34
Authority key identifier: 71:52:59:72:E3:C1:15:3D:E5:30:54:79:8F:51:A5:BD:55:C7:50:19
Certificate issuer: /CN=A91BDB290000/serialNumber=71525972E3C1153DE53054798F51A5BD55C75019
Certificate serial: 17F7F4EB4BDE1FA510A67DF0AEF79E14BEA40AC0
Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft
Manifest number: 027E
Signing time: Wed 09 Sep 2026 11:27:26 +0000
Manifest this update: Wed 09 Sep 2026 11:22:26 +0000
Manifest next update: Thu 10 Sep 2026 13:53:26 +0000
Files and hashes: 1: 3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.cer (hash: R1kblQJMjAsS/YNh6d7aaVt7qie9Fxfl9yAQ//XEynw=)
2: DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.cer (hash: igsdE4f1Y42tZEivMwx3eHh5HVhFmHDZJfR7gCVbVBY=)
3: 95B1A62479B36C1414FF17CE759F45E2E7E421A3.cer (hash: BPhgrofW+MPV8EIXWYSG7NFjsYgtzBTWs7BZJx8QvFg=)
4: 71525972E3C1153DE53054798F51A5BD55C75019.crl (hash: snvR/fjoXconCiZKhm1yW94evXoZGuxbKI5xN7qEifI=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 13:53:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:f7:f4:eb:4b:de:1f:a5:10:a6:7d:f0:ae:f7:9e:14:be:a4:0a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=71525972E3C1153DE53054798F51A5BD55C75019
Validity
Not Before: Sep 9 11:22:26 2026 GMT
Not After : Sep 10 13:53:26 2026 GMT
Subject: CN=1634C649AE01005D15F941AD8D06FC9CA142B434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:bb:9e:98:53:c7:76:da:0a:26:a7:82:eb:21:
d6:27:f0:89:d9:9b:3d:dc:b5:24:da:01:87:94:7a:
dc:06:cc:3b:63:3e:57:90:29:06:9f:9f:25:4c:ca:
0e:af:30:b2:48:7c:2e:84:4d:23:cc:a8:6f:af:50:
df:e4:95:f1:0b:32:74:14:c0:06:ed:8d:67:a7:f9:
b6:ad:63:19:35:2e:10:50:9f:cf:81:fa:d1:64:41:
bf:57:e2:86:d3:18:00:e8:c2:86:0d:9a:74:e6:f3:
ef:9d:fd:ec:8b:26:a8:6a:2f:52:61:31:ff:c5:03:
30:e7:0c:43:2f:03:15:15:12:a1:68:2a:43:0c:de:
0a:ed:c7:08:10:06:72:ef:8f:d1:3e:f6:54:12:e4:
af:a2:aa:a7:20:f3:45:e0:a0:0b:4b:a5:96:5b:32:
6b:86:3a:fb:54:25:9c:98:2a:28:31:04:30:43:5e:
49:21:22:b6:98:7f:01:b0:ca:34:1a:37:a1:cc:a3:
4f:bf:a8:4e:c4:a9:e8:b5:3b:6f:cf:f2:e8:05:cd:
1f:75:91:ab:bb:07:ea:3b:e3:53:1d:e5:3a:72:23:
51:fa:28:1a:25:bb:ab:5d:ff:77:89:da:f2:8a:52:
78:45:3a:67:e6:aa:06:60:4e:30:70:83:23:22:75:
40:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:34:C6:49:AE:01:00:5D:15:F9:41:AD:8D:06:FC:9C:A1:42:B4:34
X509v3 Authority Key Identifier:
keyid:71:52:59:72:E3:C1:15:3D:E5:30:54:79:8F:51:A5:BD:55:C7:50:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:80:6c:64:8f:12:58:25:5a:0e:ae:e5:8e:17:44:30:bd:98:
35:2e:f0:d7:4b:7b:05:ad:16:25:76:0e:1e:90:6f:dc:55:e8:
a8:4f:35:a6:f9:aa:27:63:76:43:08:c2:24:a1:35:1f:f7:69:
a5:15:d3:7d:5e:63:e9:92:31:1e:7f:50:cc:ea:63:c3:d5:f9:
2d:46:c5:1b:1c:f1:47:cb:8d:e0:a7:e2:3c:72:4d:bc:77:bd:
43:9f:3e:67:e8:6b:fa:4d:31:ee:f6:6f:d5:a3:f6:27:99:22:
73:c6:eb:4f:40:a6:78:22:a2:99:09:8e:e3:13:07:e5:c3:78:
4c:cb:c1:58:6b:bc:f8:3a:fd:63:a2:d6:15:ae:30:b2:3b:0e:
45:71:35:5f:bd:60:1f:5a:12:1f:07:68:87:3f:26:7f:7b:33:
07:c6:5c:ed:17:17:96:e8:d6:ed:1c:6a:13:1d:3d:1d:26:4d:
77:eb:5c:9c:69:94:3b:2a:f4:0f:8b:c7:6f:ed:9e:ac:e0:5d:
71:5b:36:0f:29:66:75:ba:9d:a4:0b:61:5b:8d:64:fd:a5:83:
86:8e:e8:57:2d:1f:86:ef:87:ec:4a:a4:49:8c:cd:8e:ac:5f:
a3:2d:83:dc:6a:a9:33:b0:ee:04:89:94:8f:18:c4:16:2c:8c:
79:10:d7:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 05:20:08 2026 by rpki-client