
$ rpki-client -vvvf rpkica.twnic.tw/rpki/ERAY/0/19C24D64A5637F1F6837D06BA77F1000FF9E54D3.mft
File: 19C24D64A5637F1F6837D06BA77F1000FF9E54D3.mft (raw, json)
Hash identifier: x2Afk06RYVaFc8wcbg5LuHf/ZvZP2HniWiDA1G0S7R4=
Subject key identifier: BA:6C:76:19:C9:20:63:21:88:6E:7A:58:93:7F:34:2B:64:DB:28:E3
Authority key identifier: 19:C2:4D:64:A5:63:7F:1F:68:37:D0:6B:A7:7F:10:00:FF:9E:54:D3
Certificate issuer: /CN=19C24D64A5637F1F6837D06BA77F1000FF9E54D3
Certificate serial: 1215B6814076447E3A553883A8EC5BCA85545E0B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/19C24D64A5637F1F6837D06BA77F1000FF9E54D3.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/ERAY/0/19C24D64A5637F1F6837D06BA77F1000FF9E54D3.mft
Manifest number: B6
Signing time: Thu 24 Sep 2026 20:09:19 +0000
Manifest this update: Thu 24 Sep 2026 20:04:19 +0000
Manifest next update: Fri 25 Sep 2026 23:59:19 +0000
Files and hashes: 1: 19C24D64A5637F1F6837D06BA77F1000FF9E54D3.crl (hash: eyHveisi2ms5CJ2gDrBgJLnmIqQefTSX5xNZTtXwpn8=)
2: 3130332e3235352e3230362e302f32332d3332203d3e20313331313439.roa (hash: Q23OYg/snKDMZT/GrhFuy0UWILnudHwqtr4/Nhp9Yqo=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/ERAY/0/19C24D64A5637F1F6837D06BA77F1000FF9E54D3.crl
rsync://rpkica.twnic.tw/rpki/ERAY/0/19C24D64A5637F1F6837D06BA77F1000FF9E54D3.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/19C24D64A5637F1F6837D06BA77F1000FF9E54D3.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 21:19:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:15:b6:81:40:76:44:7e:3a:55:38:83:a8:ec:5b:ca:85:54:5e:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19C24D64A5637F1F6837D06BA77F1000FF9E54D3
Validity
Not Before: Sep 24 20:04:19 2026 GMT
Not After : Sep 25 23:59:19 2026 GMT
Subject: CN=BA6C7619C9206321886E7A58937F342B64DB28E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:05:1a:7f:44:4b:ef:67:72:a1:b0:45:e8:02:
c2:f9:42:82:bf:45:3f:a5:50:be:41:62:fc:c1:a3:
f4:38:4b:18:40:e4:1d:1d:2e:ea:88:2a:a4:7a:f7:
40:39:9e:24:e8:04:57:f9:a8:3a:c0:ea:5a:75:a7:
24:25:94:73:c6:31:82:bb:03:2d:8b:f6:ec:49:a9:
a3:f7:db:d0:ea:60:33:f9:f4:37:f4:b3:06:58:1e:
12:41:52:c2:74:b9:bc:44:c5:76:c7:f5:60:06:7f:
af:b1:28:90:15:53:23:c7:12:91:9f:db:d7:b8:75:
60:67:c5:cb:8f:bf:43:28:ff:66:17:ff:cf:d8:31:
e2:a7:b1:6d:1a:fa:e6:7e:91:a2:d9:62:e7:eb:d5:
d7:70:e1:af:76:cb:33:7e:ed:5c:2a:93:7f:4a:24:
02:29:03:ea:64:31:27:8c:a2:92:3b:08:75:0c:a5:
7b:6f:8c:3d:2f:1e:9b:ac:2b:a4:61:37:3b:b5:ef:
06:64:37:3c:52:dc:43:9b:1b:ee:b0:f8:96:b7:f1:
cf:93:d4:b7:53:e1:2c:d1:08:ff:99:0f:14:d5:d1:
75:7e:3c:6e:df:5f:c0:f1:c7:30:9d:d0:e7:f7:5c:
c4:93:e3:73:69:47:c7:5f:39:10:7b:ba:16:e3:6d:
f8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:6C:76:19:C9:20:63:21:88:6E:7A:58:93:7F:34:2B:64:DB:28:E3
X509v3 Authority Key Identifier:
keyid:19:C2:4D:64:A5:63:7F:1F:68:37:D0:6B:A7:7F:10:00:FF:9E:54:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/ERAY/0/19C24D64A5637F1F6837D06BA77F1000FF9E54D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/19C24D64A5637F1F6837D06BA77F1000FF9E54D3.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ERAY/0/19C24D64A5637F1F6837D06BA77F1000FF9E54D3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:44:78:5a:86:f2:9e:b5:97:39:c2:0b:2e:a1:b3:b6:e1:8d:
67:34:e5:1e:ff:43:19:1e:f6:78:ac:f3:c3:e8:cb:bb:6c:a8:
84:13:cb:43:d9:da:58:13:39:ab:8f:37:ac:b9:cb:09:d8:48:
da:4d:19:19:7e:1e:3e:4b:54:16:4d:66:84:c1:fc:d0:fd:dd:
a9:fc:01:b2:82:a0:fa:0b:a2:1d:d9:ef:5a:f4:a5:31:36:33:
f6:e4:91:1f:f8:5c:d9:7a:f2:84:bc:cb:f5:6c:2a:f7:60:7b:
d8:6b:b6:6f:24:d0:1d:8f:7a:1f:8a:06:db:6f:1f:20:37:0d:
c1:c0:8b:df:35:be:bd:61:fc:40:9b:60:26:0b:7c:93:7b:44:
dd:51:69:21:fb:53:17:3d:70:97:5a:ab:50:5b:11:0d:af:69:
06:df:2d:8a:79:4f:c2:66:38:41:04:60:a7:10:12:20:01:f6:
ca:12:04:3d:18:ef:50:d4:59:3f:0e:e1:80:b8:da:70:58:4c:
30:e8:ce:cb:e2:72:b1:6e:fc:41:ba:7d:91:b4:d1:8b:22:28:
93:5c:3a:e8:47:b9:eb:bf:2e:65:f7:c1:cb:a5:f5:4d:2f:3d:
5c:1f:27:88:6a:78:0a:8f:c7:a8:17:95:7d:26:13:69:bc:8b:
62:10:a0:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:34:51 2026 by rpki-client