
$ rpki-client -vvvf rpkica.twnic.tw/rpki/CXT/0/BD2262C0D264051F4D27D9E92807D2B80A8CE136.mft
File: BD2262C0D264051F4D27D9E92807D2B80A8CE136.mft (raw, json)
Hash identifier: VMXMsZxOI+I7MFdbRMEW4gsgjqJIHq8H7MMxsE4bTLw=
Subject key identifier: 5B:43:79:12:C7:A0:9A:ED:09:40:9A:48:80:5B:63:C9:05:E6:FA:E3
Authority key identifier: BD:22:62:C0:D2:64:05:1F:4D:27:D9:E9:28:07:D2:B8:0A:8C:E1:36
Certificate issuer: /CN=BD2262C0D264051F4D27D9E92807D2B80A8CE136
Certificate serial: 65183663937BF3DB0581F3D5C62631585974B1D1
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BD2262C0D264051F4D27D9E92807D2B80A8CE136.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CXT/0/BD2262C0D264051F4D27D9E92807D2B80A8CE136.mft
Manifest number: 18
Signing time: Fri 25 Sep 2026 14:58:26 +0000
Manifest this update: Fri 25 Sep 2026 14:53:26 +0000
Manifest next update: Sat 26 Sep 2026 17:39:26 +0000
Files and hashes: 1: BD2262C0D264051F4D27D9E92807D2B80A8CE136.crl (hash: l9/LfM6fiSwuUYcDrCUBrGdZrkJez0YbnluBibX3xOc=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/CXT/0/BD2262C0D264051F4D27D9E92807D2B80A8CE136.crl
rsync://rpkica.twnic.tw/rpki/CXT/0/BD2262C0D264051F4D27D9E92807D2B80A8CE136.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BD2262C0D264051F4D27D9E92807D2B80A8CE136.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 26 Sep 2026 15:15:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:18:36:63:93:7b:f3:db:05:81:f3:d5:c6:26:31:58:59:74:b1:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BD2262C0D264051F4D27D9E92807D2B80A8CE136
Validity
Not Before: Sep 25 14:53:26 2026 GMT
Not After : Sep 26 17:39:26 2026 GMT
Subject: CN=5B437912C7A09AED09409A48805B63C905E6FAE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1f:ea:b0:be:67:e9:94:4a:de:37:66:8d:d1:
9a:b0:e0:b8:04:43:fd:79:ca:8b:28:c1:09:b3:ed:
c9:96:19:8c:9b:6f:ed:84:ff:26:7c:e7:c8:9c:3a:
d7:a2:1f:30:b4:5d:94:cb:15:04:4b:0e:ec:f5:be:
3c:43:5d:41:dc:2d:05:c0:94:76:87:ea:ed:59:71:
fe:e3:81:25:d6:86:e8:67:e1:bf:a0:8f:31:8c:35:
f3:6d:96:1a:fe:81:1d:e9:96:98:bf:94:76:f7:e2:
29:17:cb:9a:1c:aa:97:a4:29:02:01:60:39:ec:31:
4f:7f:2f:6a:36:f4:fb:5d:1c:34:28:68:25:9f:60:
32:cb:01:26:6b:d1:ed:f2:20:9b:3a:d9:76:06:81:
e7:0b:ce:ad:64:4c:c5:fe:73:98:84:53:c5:45:9d:
33:84:0d:ab:8c:b0:11:35:af:0e:c5:4e:1d:3e:5b:
51:84:db:c5:56:b5:fe:96:c3:fc:24:5c:d7:97:50:
f6:1b:7e:e3:57:78:68:2e:04:18:fa:e4:a1:6a:cc:
32:dd:ad:71:c3:be:4f:4e:e4:e6:17:64:17:c1:f4:
b0:cd:de:55:8b:96:aa:76:3a:00:00:9a:6b:1c:9f:
6a:75:53:ff:6b:99:41:06:5d:3f:d3:84:88:81:5a:
8c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:43:79:12:C7:A0:9A:ED:09:40:9A:48:80:5B:63:C9:05:E6:FA:E3
X509v3 Authority Key Identifier:
keyid:BD:22:62:C0:D2:64:05:1F:4D:27:D9:E9:28:07:D2:B8:0A:8C:E1:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CXT/0/BD2262C0D264051F4D27D9E92807D2B80A8CE136.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BD2262C0D264051F4D27D9E92807D2B80A8CE136.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CXT/0/BD2262C0D264051F4D27D9E92807D2B80A8CE136.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:f6:8c:8c:90:be:ba:e8:a4:87:81:87:a1:38:e9:9e:4c:f3:
4c:7e:aa:18:f2:f2:b4:4c:13:c5:c8:ed:bb:66:b5:03:d4:c3:
2a:ad:65:41:66:1c:80:08:bd:aa:05:e3:f8:3b:bb:ef:f5:90:
c3:eb:4a:cf:50:29:53:a5:2e:78:af:ba:ad:1a:7b:54:4d:2d:
e6:ef:0e:92:c2:bc:34:12:76:24:44:34:ff:ee:f1:ff:bf:c7:
39:79:7b:f8:8b:e8:e6:ce:e6:49:a4:56:ee:c3:81:96:bc:35:
8f:ec:24:33:ce:43:4a:4b:e8:84:b6:d8:7a:30:4f:82:46:e3:
49:a9:dd:bb:60:86:a1:0c:50:ea:25:70:42:48:0c:17:33:e8:
33:3f:6d:3c:ac:a8:a0:af:fc:3f:d1:d2:a0:a2:2b:ed:ec:e0:
99:74:7d:7e:00:de:9e:0c:06:61:89:13:27:b7:80:cb:3b:db:
45:38:13:0c:bf:5e:42:16:ad:19:f7:87:ab:c1:95:51:d4:ff:
81:da:53:54:38:72:a5:e9:bc:9c:19:b4:de:2c:82:25:13:aa:
4e:19:85:73:d4:d0:f9:02:23:de:68:74:d1:59:a7:ec:be:a4:
73:77:d4:f9:37:c2:c7:a6:ed:9c:6d:d7:91:9b:65:10:66:56:
24:39:ac:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:24:58 2026 by rpki-client