
$ rpki-client -vvvf rpkica.twnic.tw/rpki/CHUANGLI/0/295FAD27AFED0134764CB0F6CA702AF930C0AC18.mft
File: 295FAD27AFED0134764CB0F6CA702AF930C0AC18.mft (raw, json)
Hash identifier: x+HO3A+bau9KV9zG948FhtOJpoDOZSawqddGoQlhCws=
Subject key identifier: CB:B3:66:41:FE:50:75:66:0D:F3:04:94:F9:A1:3E:1F:99:BC:68:C9
Authority key identifier: 29:5F:AD:27:AF:ED:01:34:76:4C:B0:F6:CA:70:2A:F9:30:C0:AC:18
Certificate issuer: /CN=295FAD27AFED0134764CB0F6CA702AF930C0AC18
Certificate serial: 32EEB8B3541F70AFA55CC66B1160C7E85C4914C9
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/295FAD27AFED0134764CB0F6CA702AF930C0AC18.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CHUANGLI/0/295FAD27AFED0134764CB0F6CA702AF930C0AC18.mft
Manifest number: B5
Signing time: Thu 24 Sep 2026 10:34:33 +0000
Manifest this update: Thu 24 Sep 2026 10:29:33 +0000
Manifest next update: Fri 25 Sep 2026 13:44:33 +0000
Files and hashes: 1: 295FAD27AFED0134764CB0F6CA702AF930C0AC18.crl (hash: cefKto/tFNUAy7uCytwjey+jleXJ9hq8hUyO4Q+w2eA=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/CHUANGLI/0/295FAD27AFED0134764CB0F6CA702AF930C0AC18.crl
rsync://rpkica.twnic.tw/rpki/CHUANGLI/0/295FAD27AFED0134764CB0F6CA702AF930C0AC18.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/295FAD27AFED0134764CB0F6CA702AF930C0AC18.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 13:44:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:ee:b8:b3:54:1f:70:af:a5:5c:c6:6b:11:60:c7:e8:5c:49:14:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295FAD27AFED0134764CB0F6CA702AF930C0AC18
Validity
Not Before: Sep 24 10:29:33 2026 GMT
Not After : Sep 25 13:44:33 2026 GMT
Subject: CN=CBB36641FE5075660DF30494F9A13E1F99BC68C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c2:b3:35:08:e3:75:bc:5c:57:cf:5c:ba:fe:
6e:b4:42:c9:40:62:b8:9c:00:b0:3a:4f:58:92:3a:
56:ab:8b:1c:cf:16:9e:28:c2:4f:11:70:ce:2c:89:
6c:fe:7a:66:89:ec:99:38:76:f5:6e:41:e6:b0:60:
3d:c5:4f:50:52:91:c4:2e:ec:d7:3c:7a:58:a1:f4:
f7:07:c0:3e:03:60:c2:3f:70:a5:24:56:20:29:54:
d1:6c:e4:c0:c6:7b:c6:f5:42:6f:fb:a0:b6:04:81:
55:c6:8a:45:a9:2d:42:59:60:79:7f:f4:30:13:7c:
74:35:14:d8:ea:a3:bd:64:7c:72:c8:75:2b:34:a2:
ad:f7:17:fc:43:94:d3:d3:f0:f9:64:49:ab:d1:7d:
bb:ee:fe:aa:0d:d9:3d:b5:4e:00:f1:ea:ee:2b:fa:
04:80:ae:71:e8:5c:bb:56:3a:19:50:67:d3:25:31:
9e:a0:97:dd:ff:42:e1:2e:35:0b:64:df:ff:74:8b:
17:e2:15:a9:cd:05:48:0c:95:80:4d:96:90:b1:71:
7d:84:88:10:62:c3:d4:6f:66:dc:69:05:27:e5:bb:
bb:99:59:64:ef:32:3a:95:7d:25:32:b3:11:78:d4:
f0:c7:22:7f:eb:1b:02:2b:fd:99:12:2d:ba:ca:21:
da:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:B3:66:41:FE:50:75:66:0D:F3:04:94:F9:A1:3E:1F:99:BC:68:C9
X509v3 Authority Key Identifier:
keyid:29:5F:AD:27:AF:ED:01:34:76:4C:B0:F6:CA:70:2A:F9:30:C0:AC:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CHUANGLI/0/295FAD27AFED0134764CB0F6CA702AF930C0AC18.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/295FAD27AFED0134764CB0F6CA702AF930C0AC18.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHUANGLI/0/295FAD27AFED0134764CB0F6CA702AF930C0AC18.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:f3:b1:8d:3d:6b:cd:6a:5f:80:eb:ab:cb:a1:14:72:4f:49:
8a:18:5d:c8:82:c4:d2:7a:02:9a:55:a3:21:64:76:73:3b:bf:
62:06:80:84:db:b4:4d:c8:23:21:86:5f:16:61:e4:d1:61:fe:
9e:04:92:6e:d7:e1:bf:73:cc:2a:e8:1f:09:b2:96:fa:bd:43:
5b:0e:c4:78:46:b6:74:3e:44:4f:bc:28:fd:e7:1b:32:cc:25:
9c:b1:6f:6c:b5:de:40:95:72:bc:c2:32:6c:3b:4c:bf:f2:d0:
65:56:76:8c:9d:b6:dd:94:3c:f4:3f:69:07:20:24:74:9f:30:
c9:ba:cf:59:e6:ba:ce:76:3a:be:d3:4e:10:5a:dd:72:ad:a8:
1c:1e:20:ba:ce:96:0a:bf:f7:27:1d:81:61:5f:bf:54:c7:45:
77:8c:f0:87:d9:10:b8:d9:ae:ad:18:4d:aa:f0:d6:8e:92:28:
56:ef:0b:b6:5f:b3:0b:0e:6c:c1:5d:71:f6:63:53:ff:b0:d7:
93:e5:b7:5e:a6:fa:b1:e4:49:11:09:88:16:88:ea:bd:cc:1c:
7f:c5:0a:39:8b:00:a2:52:e8:02:d7:e6:41:81:16:15:32:1e:
73:a1:77:75:31:cf:f4:6e:5f:c7:bc:25:70:65:40:4a:0b:70:
3b:1d:55:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:56:50 2026 by rpki-client