
$ rpki-client -vvvf rpkica.twnic.tw/rpki/DLER/0/8257DED1A3AE20532C5A9F8135AF34B9476B685C.mft
File: 8257DED1A3AE20532C5A9F8135AF34B9476B685C.mft (raw, json)
Hash identifier: +v6+SfdCF7teLzLLFufZWi6ik7orT17srTIW62T6JeQ=
Subject key identifier: 78:7A:C1:3B:46:A2:44:FB:BB:EC:6F:FF:72:CC:04:A2:D9:ED:93:02
Authority key identifier: 82:57:DE:D1:A3:AE:20:53:2C:5A:9F:81:35:AF:34:B9:47:6B:68:5C
Certificate issuer: /CN=8257DED1A3AE20532C5A9F8135AF34B9476B685C
Certificate serial: 751C215E502784AEA765858ED9F7BCF499F533BF
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8257DED1A3AE20532C5A9F8135AF34B9476B685C.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/DLER/0/8257DED1A3AE20532C5A9F8135AF34B9476B685C.mft
Manifest number: B4
Signing time: Thu 24 Sep 2026 12:59:48 +0000
Manifest this update: Thu 24 Sep 2026 12:54:48 +0000
Manifest next update: Fri 25 Sep 2026 12:59:48 +0000
Files and hashes: 1: 8257DED1A3AE20532C5A9F8135AF34B9476B685C.crl (hash: XlDsTI2u7ZmLwQNYNL1fsV/fKsheLRASWjr3HzhULM8=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/DLER/0/8257DED1A3AE20532C5A9F8135AF34B9476B685C.crl
rsync://rpkica.twnic.tw/rpki/DLER/0/8257DED1A3AE20532C5A9F8135AF34B9476B685C.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8257DED1A3AE20532C5A9F8135AF34B9476B685C.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 12:59:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:1c:21:5e:50:27:84:ae:a7:65:85:8e:d9:f7:bc:f4:99:f5:33:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8257DED1A3AE20532C5A9F8135AF34B9476B685C
Validity
Not Before: Sep 24 12:54:48 2026 GMT
Not After : Sep 25 12:59:48 2026 GMT
Subject: CN=787AC13B46A244FBBBEC6FFF72CC04A2D9ED9302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f8:37:d7:99:69:63:f1:0e:70:a1:f1:66:08:
dc:b3:e1:87:1d:ce:62:0a:de:9c:b5:48:ce:d4:14:
d5:64:d3:63:74:ec:3b:94:24:14:03:b8:a2:57:d6:
dd:02:42:3c:64:44:4e:c4:dc:aa:1e:57:13:a2:79:
6e:0a:40:8c:5c:f4:9b:28:2e:62:db:72:71:6e:c6:
f5:db:e7:76:64:aa:9f:2c:b4:a3:71:ff:42:da:69:
0f:c0:67:68:46:2a:e7:8b:b1:e7:17:a1:5f:4c:3d:
d8:25:79:fe:05:b5:3a:e3:61:57:19:a1:24:db:6d:
96:80:31:cc:3d:82:10:eb:80:d4:1c:50:92:9f:42:
8d:77:31:7b:df:96:34:c5:e7:12:17:ad:99:f5:a5:
32:35:20:1d:c0:b0:39:4d:97:da:b9:8a:7c:88:fa:
6b:2e:ac:70:58:48:e3:d1:ec:4d:0f:57:07:82:3a:
de:e7:aa:b0:c9:aa:bb:ce:60:c4:ec:54:36:60:ba:
f6:e1:f5:71:2a:94:cd:64:d1:81:f1:ba:69:99:e9:
3a:80:e5:55:c1:2c:61:3c:95:cf:61:1f:ef:48:4c:
90:b4:0e:b1:93:6e:38:d4:e2:6a:8a:25:6d:84:3e:
c9:ab:40:0c:e8:e9:6f:e1:88:81:7d:c5:8b:ea:d5:
77:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:7A:C1:3B:46:A2:44:FB:BB:EC:6F:FF:72:CC:04:A2:D9:ED:93:02
X509v3 Authority Key Identifier:
keyid:82:57:DE:D1:A3:AE:20:53:2C:5A:9F:81:35:AF:34:B9:47:6B:68:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/DLER/0/8257DED1A3AE20532C5A9F8135AF34B9476B685C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8257DED1A3AE20532C5A9F8135AF34B9476B685C.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DLER/0/8257DED1A3AE20532C5A9F8135AF34B9476B685C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:b6:ab:10:fb:8f:67:87:a2:8b:0d:ce:15:8c:c0:5e:74:03:
ef:44:76:ce:19:24:b3:95:a9:4c:bd:fa:18:3c:8d:ce:bb:52:
e0:ba:cb:87:53:9a:2d:66:7a:07:87:34:ac:7f:46:0a:43:e8:
94:d5:cb:49:36:9b:2a:1f:e0:dc:05:c9:f7:97:47:e0:5a:56:
ba:92:98:55:10:07:9b:b1:95:eb:4c:f4:40:ea:ca:18:ef:bd:
9c:d1:88:65:fc:48:a7:5a:3b:08:9b:3f:e8:e0:44:c8:f0:d7:
06:0a:fc:0a:9c:a0:73:d9:68:50:42:c0:e3:13:ef:92:3d:89:
b4:32:6d:30:bc:09:f8:6a:08:58:0d:5d:2e:b3:62:47:f8:67:
b1:5f:10:90:d8:f3:87:43:03:e0:4b:7d:2a:f2:ef:9d:1b:fc:
c0:fa:95:18:ad:66:d6:bc:b7:4f:54:b5:9c:79:84:ac:33:42:
dc:0f:66:b1:91:3e:17:2d:d7:47:9b:b0:2b:d9:71:f8:ce:73:
0b:6e:41:e3:03:07:70:e6:a1:82:a0:30:30:f1:99:dc:74:e4:
ec:cc:ac:42:26:9f:2c:2f:b8:06:51:65:7e:d5:dc:1e:da:b1:
5b:21:08:ed:87:d1:e5:93:6b:3d:4c:09:b8:0f:3e:5d:17:d0:
bd:2f:c7:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:30:45 2026 by rpki-client