
$ rpki-client -vvf rpkica.twnic.tw/rpki/ERAYINFO/0/E65F87C3415B74DFBBCBE0909A320835EE88E6E5.mft
File: E65F87C3415B74DFBBCBE0909A320835EE88E6E5.mft (raw, json)
Hash identifier: 94GNO3Zg0tsqMY3oZ9LQY32s6a/vBacTcJwbz4P47D4=
Subject key identifier: 52:62:DF:10:CC:91:08:4E:CB:D2:6B:26:47:A0:BC:95:13:8A:39:C4
Authority key identifier: E6:5F:87:C3:41:5B:74:DF:BB:CB:E0:90:9A:32:08:35:EE:88:E6:E5
Certificate issuer: /CN=E65F87C3415B74DFBBCBE0909A320835EE88E6E5
Certificate serial: 54016E1D34BE319AECE2A70AF37F09DB7D75CF9B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E65F87C3415B74DFBBCBE0909A320835EE88E6E5.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/ERAYINFO/0/E65F87C3415B74DFBBCBE0909A320835EE88E6E5.mft
Manifest number: 68
Signing time: Fri 24 Jul 2026 04:07:31 +0000
Manifest this update: Fri 24 Jul 2026 04:02:31 +0000
Manifest next update: Sat 25 Jul 2026 05:33:31 +0000
Files and hashes: 1: 3130332e3136302e3138302e302f32332d3234203d3e203138303431.roa (hash: 18NWi1veGokF/mTHx158Mqd+r/PzLz4vX21G5OQonx8=)
2: 3130332e3136302e3138302e302f32332d3234203d3e203536383530.roa (hash: RzAPn5btTcxQ4JmMexqs2Z3tgOn6EwRXUMKi5on2EDg=)
3: 3130332e3136302e3138302e302f32332d3234203d3e203338313336.roa (hash: vXSGvfe4/SHzbgc1FGIm8W7fF4FtlTo17+zWJlbEFVI=)
4: 323430363a656534303a3a2f33322d3438203d3e203138303431.roa (hash: ENdF+FZ/wshSwMngi/LeNYAxqnXtTR+JIbUWvzMtjvg=)
5: 3130332e3136302e3138302e302f32332d3234203d3e20393833.roa (hash: bSmO+jTWr7YOoJ4NGhuYgKT8sLNYWbbxkJfWN+8zotE=)
6: E65F87C3415B74DFBBCBE0909A320835EE88E6E5.crl (hash: h67fGGYeysEr6tOUoMo7Ybq3shrwhOUida+SoXwAwBc=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/ERAYINFO/0/E65F87C3415B74DFBBCBE0909A320835EE88E6E5.crl
rsync://rpkica.twnic.tw/rpki/ERAYINFO/0/E65F87C3415B74DFBBCBE0909A320835EE88E6E5.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E65F87C3415B74DFBBCBE0909A320835EE88E6E5.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 03:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:01:6e:1d:34:be:31:9a:ec:e2:a7:0a:f3:7f:09:db:7d:75:cf:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E65F87C3415B74DFBBCBE0909A320835EE88E6E5
Validity
Not Before: Jul 24 04:02:31 2026 GMT
Not After : Jul 25 05:33:31 2026 GMT
Subject: CN=5262DF10CC91084ECBD26B2647A0BC95138A39C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:94:da:66:ab:7d:20:05:0b:d6:e3:8f:3d:92:
ed:23:7e:0f:cf:ef:a6:e8:27:87:4e:53:dc:6d:08:
f3:76:2f:1d:79:2b:b9:06:8c:30:bf:d6:27:90:2a:
58:ad:23:6b:17:dc:02:cd:fb:fe:8f:1c:97:1c:92:
9e:14:78:29:ab:64:21:93:71:5c:38:6a:cd:d3:1e:
2d:9a:15:8c:71:a1:c5:04:33:56:65:79:12:87:bf:
d7:d5:ff:dd:cf:c1:27:1b:65:bf:d2:24:d8:23:5e:
eb:c2:44:3e:40:4a:29:b3:25:92:18:ad:d2:25:ca:
de:eb:f3:f5:67:b3:20:34:0e:e2:6f:84:73:32:21:
02:e6:0e:08:4d:1c:40:da:1f:60:ea:b6:2b:d8:d9:
85:17:fb:6f:fc:13:60:32:b7:1a:91:10:6f:b7:30:
1d:5d:82:de:ec:b7:84:93:77:96:ef:40:4b:67:1d:
a5:e2:8a:57:94:b3:63:34:2f:6f:3c:b6:f6:da:d1:
d4:71:0c:60:13:e6:3b:01:7f:f7:30:d6:f4:7a:8c:
17:30:dc:35:7c:85:fb:f1:f3:63:fc:99:d3:14:ba:
55:b9:c1:bb:fa:58:65:19:21:76:db:1a:b3:2c:d1:
f2:83:de:de:ba:60:54:2c:3b:a7:e3:5b:42:ce:1b:
6e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:62:DF:10:CC:91:08:4E:CB:D2:6B:26:47:A0:BC:95:13:8A:39:C4
X509v3 Authority Key Identifier:
keyid:E6:5F:87:C3:41:5B:74:DF:BB:CB:E0:90:9A:32:08:35:EE:88:E6:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/ERAYINFO/0/E65F87C3415B74DFBBCBE0909A320835EE88E6E5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E65F87C3415B74DFBBCBE0909A320835EE88E6E5.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ERAYINFO/0/E65F87C3415B74DFBBCBE0909A320835EE88E6E5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:5e:78:d6:b9:92:a1:3e:09:15:72:18:7d:49:59:32:9c:48:
84:a2:a4:95:5b:28:b7:66:e5:2d:1d:7b:de:eb:90:f1:2a:b3:
f9:e5:f4:b4:43:f7:18:0b:8e:6a:e3:08:ab:2a:ec:43:43:f9:
69:6f:0f:7e:83:7a:74:a7:a5:7d:c3:78:07:01:fa:fe:2e:35:
cd:1f:1d:61:9c:6a:3b:0d:f3:f1:1c:4d:3b:a5:c4:be:5f:4b:
77:aa:15:4e:fa:b9:cf:ec:fb:1f:8c:bf:0e:e8:6e:01:39:98:
e3:15:0b:40:37:7a:1c:cf:af:7f:11:42:b7:e2:31:e7:a0:06:
b5:83:31:fe:2f:5c:a2:1c:ae:2d:2a:5e:28:c5:0f:c3:4d:d0:
e4:91:dd:4b:bf:18:6e:4b:3a:35:0a:ea:d1:d5:f4:45:60:77:
22:bd:71:ba:49:47:a3:0a:2f:67:c3:b0:e4:7b:f2:35:83:19:
d7:c7:10:04:ae:fd:f0:4f:e0:0c:0f:34:ce:d3:ee:57:45:4c:
7c:32:f4:67:fe:8f:ce:0a:af:fa:b8:c2:b1:b5:2f:51:39:8f:
46:86:2e:72:5b:4d:c2:e6:8e:f9:9a:16:c8:93:01:8c:5e:8b:
ac:8c:fd:95:1c:dd:57:04:2b:1b:7e:36:9d:96:24:f7:9b:d0:
90:c9:80:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:47:38 2026 by rpki-client