
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HUANGDEXIA/yqhAXL2M5q4eo6napneXVuxu3EI.mft
File: yqhAXL2M5q4eo6napneXVuxu3EI.mft (raw, json)
Hash identifier: IKIUWSV11l7jRVe1S+VbjeOPg1LxLsXOObLuFTZpQbY=
Subject key identifier: CC:CE:F5:62:85:9D:52:F3:51:52:30:26:E8:8B:33:76:FC:17:F3:90
Authority key identifier: CA:A8:40:5C:BD:8C:E6:AE:1E:A3:A9:DA:A6:77:97:56:EC:6E:DC:42
Certificate issuer: /CN=CAA8405CBD8CE6AE1EA3A9DAA6779756EC6EDC42
Certificate serial: 027F
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/yqhAXL2M5q4eo6napneXVuxu3EI.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HUANGDEXIA/yqhAXL2M5q4eo6napneXVuxu3EI.mft
Manifest number: 0275
Signing time: Sat 25 Oct 2025 21:58:45 +0000
Manifest this update: Sat 25 Oct 2025 21:58:45 +0000
Manifest next update: Mon 27 Oct 2025 21:58:45 +0000
Files and hashes: 1: DdJ-7UfiK73AI2I9-j_h4VBta6k.roa (hash: FxHrcdMcXw5ctXSPqllV4Y87DMdr5ht4OlkhaHDpHCA=)
2: yqhAXL2M5q4eo6napneXVuxu3EI.crl (hash: YG/216Y4wH3PDkBQlHY2FN8Sgv3jz1BBWHihFwTkTFA=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HUANGDEXIA/yqhAXL2M5q4eo6napneXVuxu3EI.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/HUANGDEXIA/yqhAXL2M5q4eo6napneXVuxu3EI.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/yqhAXL2M5q4eo6napneXVuxu3EI.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Oct 2025 06:57:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 639 (0x27f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CAA8405CBD8CE6AE1EA3A9DAA6779756EC6EDC42
Validity
Not Before: Oct 25 21:58:45 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=CCCEF562859D52F351523026E88B3376FC17F390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:56:a0:45:fb:d8:73:31:d6:78:63:17:c2:3e:
06:0e:e6:07:bb:30:9f:77:ed:64:95:ba:3e:50:d4:
97:b6:e1:e2:fa:2e:bb:9f:83:7e:bd:10:f2:ba:ee:
90:27:13:90:7a:ef:8f:d0:9b:83:f9:88:ae:80:b6:
ed:34:00:07:bc:26:f3:be:bc:3f:18:17:55:3d:4f:
45:61:ec:11:f6:fa:da:1e:e0:2b:8d:4d:77:e3:29:
36:39:cb:64:8d:2d:9f:fd:80:ee:bb:b5:94:5f:ea:
a9:33:5a:1d:26:84:f8:d8:7f:96:09:a1:e6:5a:c5:
8f:3d:ed:95:72:c8:ba:96:6e:5c:65:fb:1f:97:46:
b1:e3:9e:31:0c:7c:b4:3d:da:2f:1b:d0:b4:7d:2f:
d9:05:a6:eb:a2:5f:08:2f:1c:4d:dc:bf:63:52:b7:
1f:ea:09:a3:e7:a4:ed:72:d0:d0:77:11:43:35:ec:
39:9e:89:b0:df:d4:00:03:ec:aa:2d:87:e1:27:f2:
43:50:f1:e9:1e:26:0b:2a:33:70:56:01:c5:05:5f:
25:cf:a3:3a:24:85:8a:c9:83:7b:7c:28:ef:ef:41:
ea:72:f4:59:1b:73:0b:2b:c7:e7:6a:d0:4f:28:35:
5e:eb:16:96:89:d6:f4:41:e3:a5:34:0d:2d:00:33:
7b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:CE:F5:62:85:9D:52:F3:51:52:30:26:E8:8B:33:76:FC:17:F3:90
X509v3 Authority Key Identifier:
keyid:CA:A8:40:5C:BD:8C:E6:AE:1E:A3:A9:DA:A6:77:97:56:EC:6E:DC:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HUANGDEXIA/yqhAXL2M5q4eo6napneXVuxu3EI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/yqhAXL2M5q4eo6napneXVuxu3EI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HUANGDEXIA/yqhAXL2M5q4eo6napneXVuxu3EI.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:17:71:b3:16:0a:6e:a9:ee:c6:99:d8:54:9f:ab:1d:69:99:
c9:6c:d8:02:c0:22:96:40:1a:d7:5e:63:2d:72:27:05:c8:85:
d7:55:ac:df:e8:f8:ae:1a:d6:42:47:8c:c6:06:36:be:24:ae:
a0:ff:af:e8:ed:19:58:31:8e:4d:3d:89:e2:8c:de:14:d9:71:
5e:03:cf:ca:22:8e:0b:75:7a:58:4e:e9:cd:48:1e:e9:8d:29:
04:db:ee:e1:de:46:37:04:6a:f5:22:a6:1e:7f:79:ad:63:42:
7a:0f:0f:15:1b:b6:12:5c:38:fd:d1:40:36:53:3c:97:68:45:
99:c5:f8:ac:d4:b9:4b:07:ac:0c:6d:c3:88:0f:ff:7e:c0:05:
8b:e3:e3:4b:a0:c0:d9:c7:39:e1:97:18:25:53:6a:4b:7c:11:
a9:a8:39:b7:48:a2:d0:30:0f:aa:ab:16:ab:9a:68:72:59:c5:
67:a3:7a:11:14:dc:9e:65:c2:bb:22:7f:09:b7:9f:03:28:76:
14:7e:13:b3:ef:80:54:96:58:36:df:c0:f6:b8:d2:df:8a:0f:
d6:04:b9:1e:0b:5b:d3:05:76:9d:54:7e:d0:82:6a:0d:bb:5b:
d8:80:1a:19:af:62:ce:95:7d:f4:02:e3:58:f9:82:c0:d5:8c:
71:a7:93:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 06:18:58 2025 by rpki-client