
$ rpki-client -vvvf rpkica.twnic.tw/rpki/YUFENG/0/DF17A9D7D1F0BA49C098D57487B9782B1BC65166.mft
File: DF17A9D7D1F0BA49C098D57487B9782B1BC65166.mft (raw, json)
Hash identifier: Trwgca/rBRZ/i5bP1wRKMSoS8xveNIpdZ738+j8uL70=
Subject key identifier: 2E:E7:7B:9E:13:A9:09:E2:D8:AD:0D:2A:DD:91:7A:D3:AE:8C:12:92
Authority key identifier: DF:17:A9:D7:D1:F0:BA:49:C0:98:D5:74:87:B9:78:2B:1B:C6:51:66
Certificate issuer: /CN=DF17A9D7D1F0BA49C098D57487B9782B1BC65166
Certificate serial: 0EE270ED5499D7267D115386CD51AE60E3F62B8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DF17A9D7D1F0BA49C098D57487B9782B1BC65166.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/YUFENG/0/DF17A9D7D1F0BA49C098D57487B9782B1BC65166.mft
Manifest number: C1
Signing time: Sat 03 Oct 2026 06:38:17 +0000
Manifest this update: Sat 03 Oct 2026 06:33:17 +0000
Manifest next update: Sun 04 Oct 2026 09:22:17 +0000
Files and hashes: 1: DF17A9D7D1F0BA49C098D57487B9782B1BC65166.crl (hash: GMbLs3wn5wr5U/vbiHt6AM8gDVRvp4OAPq2BMMevGzA=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/YUFENG/0/DF17A9D7D1F0BA49C098D57487B9782B1BC65166.crl
rsync://rpkica.twnic.tw/rpki/YUFENG/0/DF17A9D7D1F0BA49C098D57487B9782B1BC65166.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DF17A9D7D1F0BA49C098D57487B9782B1BC65166.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 04:17:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:e2:70:ed:54:99:d7:26:7d:11:53:86:cd:51:ae:60:e3:f6:2b:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DF17A9D7D1F0BA49C098D57487B9782B1BC65166
Validity
Not Before: Oct 3 06:33:17 2026 GMT
Not After : Oct 4 09:22:17 2026 GMT
Subject: CN=2EE77B9E13A909E2D8AD0D2ADD917AD3AE8C1292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:aa:9f:13:c6:de:5b:95:80:51:28:98:d7:0f:
0c:1c:26:16:00:e2:b0:e6:07:ee:3d:33:d9:ae:07:
c2:bc:52:b7:90:bc:06:6e:1c:4e:63:73:ee:64:b7:
3c:6b:5f:70:9d:f3:ec:07:91:0f:1c:37:56:6d:d7:
66:88:f7:97:12:95:34:82:a6:53:0a:2b:c6:5b:0e:
1b:65:b2:2d:37:8d:08:fc:fa:7b:dd:1f:67:7d:2f:
48:f1:52:66:be:58:6b:03:5b:18:19:61:06:e3:5f:
82:2e:98:83:b0:2d:8b:bf:01:7d:ab:e3:ab:48:27:
2f:bc:c0:ac:7b:0d:f1:4c:6b:ae:65:e4:b2:a2:17:
a7:65:e4:d5:ad:70:68:41:40:d9:2d:54:68:7a:a8:
0f:30:a7:07:16:f8:32:fe:20:6b:27:d0:4c:d5:64:
a1:99:67:39:9a:33:67:84:20:bd:13:fc:e4:f9:48:
a2:50:63:f6:13:69:82:7d:52:d7:b9:4c:51:56:5c:
bd:67:e5:fb:f3:7d:60:54:ed:e7:cd:5e:b1:eb:2b:
ad:88:d3:22:8a:40:2d:2b:e9:63:89:63:bb:af:c0:
ca:19:df:27:8a:96:fb:8b:bf:83:16:69:e0:9c:0e:
a3:b1:c6:24:55:94:6e:a4:00:63:a7:f4:51:98:16:
22:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:E7:7B:9E:13:A9:09:E2:D8:AD:0D:2A:DD:91:7A:D3:AE:8C:12:92
X509v3 Authority Key Identifier:
keyid:DF:17:A9:D7:D1:F0:BA:49:C0:98:D5:74:87:B9:78:2B:1B:C6:51:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/YUFENG/0/DF17A9D7D1F0BA49C098D57487B9782B1BC65166.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DF17A9D7D1F0BA49C098D57487B9782B1BC65166.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/YUFENG/0/DF17A9D7D1F0BA49C098D57487B9782B1BC65166.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:26:64:2c:8d:a6:b6:7c:73:82:49:d2:a1:b5:74:d6:86:f3:
0c:c1:61:31:2f:77:05:bb:22:3c:f1:67:45:11:3a:be:cd:14:
33:10:4b:8c:2a:25:bf:21:8c:b0:f4:a1:d3:bb:4f:3b:f8:9e:
42:9e:a1:46:10:55:9c:e4:a8:26:1e:86:94:fc:f5:08:9f:b5:
6d:08:55:38:8b:71:86:12:97:1c:4e:e8:b1:bf:4b:b5:a4:29:
c9:b7:39:61:35:a7:ef:72:21:78:ba:c1:a5:9c:cc:4b:93:3a:
e7:b1:87:ff:c7:96:ac:f2:dc:15:20:08:b5:54:ca:40:f2:24:
81:ea:52:81:47:51:1a:0a:26:33:15:d8:c7:57:22:75:f0:a3:
e6:64:2e:32:12:99:37:61:26:34:45:50:9b:e0:7d:a2:2e:c0:
c3:b6:af:2d:3a:28:9a:48:a4:1b:a6:a9:a7:1b:ad:32:d7:5e:
b7:0d:aa:e2:44:ac:17:67:c5:da:7f:d9:7a:4d:68:50:d0:45:
a8:9b:6f:c8:bb:c3:e9:73:6f:14:01:69:19:dc:cc:b5:f2:a4:
6c:66:72:79:69:73:51:a4:47:68:df:52:3b:0b:a3:93:2e:a9:
d8:32:d9:09:bf:df:9d:10:35:79:41:5c:a2:cd:3c:49:41:dd:
cb:00:9a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 13:05:07 2026 by rpki-client