
$ rpki-client -vvvf rpkica.twnic.tw/rpki/HLCATV/0/EED0E4E138A33B7827F8D6020B736557137C89A1.mft
File: EED0E4E138A33B7827F8D6020B736557137C89A1.mft (raw, json)
Hash identifier: 8+ondXfejY+jdpLOXDDMK7xtc7pi8A1/e5knNDW9d3E=
Subject key identifier: 97:5E:F5:98:6A:CC:B8:D3:2C:FC:A3:D1:E0:CD:97:63:A4:CF:F7:E4
Authority key identifier: EE:D0:E4:E1:38:A3:3B:78:27:F8:D6:02:0B:73:65:57:13:7C:89:A1
Certificate issuer: /CN=EED0E4E138A33B7827F8D6020B736557137C89A1
Certificate serial: 33C6BF971E64113AEC69BDB4AE6BDBB51BF468FD
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EED0E4E138A33B7827F8D6020B736557137C89A1.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/HLCATV/0/EED0E4E138A33B7827F8D6020B736557137C89A1.mft
Manifest number: B9
Signing time: Fri 25 Sep 2026 20:24:04 +0000
Manifest this update: Fri 25 Sep 2026 20:19:04 +0000
Manifest next update: Sun 27 Sep 2026 00:03:04 +0000
Files and hashes: 1: 3231312e37362e38302e302f32302d3234203d3e2039363736.roa (hash: AiC/2M7/KcT6YdGXOX1G1ZVfe40bTAPtyjVWy0ffZmA=)
2: EED0E4E138A33B7827F8D6020B736557137C89A1.crl (hash: 8ZToHTQUkRJ0rh2NrdLp1z1yoRTm/KXmCRfqC+ErjLo=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/HLCATV/0/EED0E4E138A33B7827F8D6020B736557137C89A1.crl
rsync://rpkica.twnic.tw/rpki/HLCATV/0/EED0E4E138A33B7827F8D6020B736557137C89A1.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EED0E4E138A33B7827F8D6020B736557137C89A1.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 26 Sep 2026 15:15:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:c6:bf:97:1e:64:11:3a:ec:69:bd:b4:ae:6b:db:b5:1b:f4:68:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EED0E4E138A33B7827F8D6020B736557137C89A1
Validity
Not Before: Sep 25 20:19:04 2026 GMT
Not After : Sep 27 00:03:04 2026 GMT
Subject: CN=975EF5986ACCB8D32CFCA3D1E0CD9763A4CFF7E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ee:aa:c0:32:cd:03:c9:51:a1:db:93:e9:39:
94:40:77:d2:dd:e2:dc:70:18:90:3b:ce:d9:62:45:
b1:e5:c0:aa:0a:35:86:2a:35:e4:c6:00:30:4c:e7:
5b:f4:62:dd:4c:9e:77:f9:49:28:f2:b9:b5:d1:47:
3a:87:28:56:79:77:bd:bf:0e:7a:3f:79:c6:a0:af:
ec:a7:e8:d0:27:ae:db:b8:80:41:13:86:29:16:de:
71:7f:0a:d1:3a:02:40:52:c9:32:c9:b7:b0:82:32:
ec:b0:4a:10:54:06:a1:08:c5:42:d9:89:a3:d1:65:
b1:dd:cf:b2:95:ea:32:3d:76:bf:5a:35:83:a7:eb:
dd:06:d9:72:97:a1:9f:ca:af:3e:77:33:45:f7:df:
09:d7:f4:c1:b8:d1:90:96:3b:01:6e:29:44:ef:2d:
ee:97:4b:ea:83:01:b0:ff:39:c7:5d:00:66:8d:1e:
1f:c7:d5:a2:94:b2:a1:bd:83:7d:44:4c:7e:91:1b:
f9:4b:d2:4b:b7:c0:4c:6e:24:a0:9a:59:09:43:c8:
6c:1c:9f:8f:0f:11:5d:ff:ef:57:71:df:ed:8b:9d:
b3:fa:40:58:62:a9:6d:fd:b5:36:2b:16:f5:31:09:
2a:11:68:c4:dd:47:a1:be:73:60:8a:48:2e:d3:60:
6d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:5E:F5:98:6A:CC:B8:D3:2C:FC:A3:D1:E0:CD:97:63:A4:CF:F7:E4
X509v3 Authority Key Identifier:
keyid:EE:D0:E4:E1:38:A3:3B:78:27:F8:D6:02:0B:73:65:57:13:7C:89:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/HLCATV/0/EED0E4E138A33B7827F8D6020B736557137C89A1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EED0E4E138A33B7827F8D6020B736557137C89A1.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HLCATV/0/EED0E4E138A33B7827F8D6020B736557137C89A1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:d2:a2:aa:c9:05:d1:e2:35:9d:f8:2b:a1:cc:8f:86:72:f0:
02:f0:ef:ed:67:51:5c:79:04:ac:cd:fb:3c:ae:23:48:54:16:
33:78:79:a0:ea:68:b9:ee:fc:2d:b2:be:cf:08:bb:e1:ae:79:
b5:76:7a:50:c8:6b:65:84:c0:63:58:48:04:ff:8f:fe:3f:72:
80:19:7b:50:1e:2b:17:b2:be:af:2d:72:9b:6f:13:1a:3d:e6:
fc:ed:70:b2:91:63:86:d4:31:f1:a0:71:3d:90:fc:01:0b:80:
da:0f:03:7e:6e:66:4b:1a:bd:0d:0c:57:3c:a5:46:7e:0a:af:
d0:12:4a:48:bb:4d:b4:6d:0b:28:51:5a:a2:0b:a6:74:04:6b:
5e:6a:56:7b:5e:87:91:5f:ca:d0:70:44:80:b2:02:aa:c7:14:
65:3c:30:c5:3c:45:d2:2b:50:b8:ee:32:aa:2f:29:9b:f8:2f:
aa:f1:b7:f5:ab:be:fd:97:5f:eb:39:fb:7b:40:ea:b8:76:13:
3e:c2:c8:37:67:81:6a:e9:6e:fa:2f:4c:3b:92:81:39:04:19:
b7:18:4e:4b:7c:ca:f1:90:19:ca:ef:b9:c0:3b:f4:e7:1b:d4:
9a:df:04:09:77:bd:d6:96:10:e3:a5:72:d4:7a:9d:b9:ca:97:
eb:ad:e4:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:56:33 2026 by rpki-client