
$ rpki-client -vvvf rpkica.twnic.tw/rpki/HST/0/E87D26C09449CEB4EE5FD7CC200B073CA53BCA44.mft
File: E87D26C09449CEB4EE5FD7CC200B073CA53BCA44.mft (raw, json)
Hash identifier: G6GxXoIxh96DVE0Go+dbRB6GkpuMAzi7Cnp9rbjRBIc=
Subject key identifier: 6E:17:AD:15:09:13:14:F9:B2:37:2D:02:C3:B7:33:B7:18:55:51:94
Authority key identifier: E8:7D:26:C0:94:49:CE:B4:EE:5F:D7:CC:20:0B:07:3C:A5:3B:CA:44
Certificate issuer: /CN=E87D26C09449CEB4EE5FD7CC200B073CA53BCA44
Certificate serial: 3A924F1B8426F7DC1875941C2514AF1A20D41781
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E87D26C09449CEB4EE5FD7CC200B073CA53BCA44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/HST/0/E87D26C09449CEB4EE5FD7CC200B073CA53BCA44.mft
Manifest number: BD
Signing time: Sat 26 Sep 2026 23:37:28 +0000
Manifest this update: Sat 26 Sep 2026 23:32:28 +0000
Manifest next update: Mon 28 Sep 2026 03:36:28 +0000
Files and hashes: 1: E87D26C09449CEB4EE5FD7CC200B073CA53BCA44.crl (hash: 2pWHjr0aQJS8oDlOps/xDSgxMX+tJBOl3WWLtb9nGRw=)
2: 3231312e37362e3139302e302f32332d3234203d3e20313331363636.roa (hash: dIKzwOV/Rg8kX37DO7rzZtMhciZlDJrIMJrJMoEYC/o=)
3: 323430353a363434303a3a2f33322d3332203d3e20313331363636.roa (hash: QB2gyR5XQYs4MfGBjgJf/jtuHKKTmEl5qfrVI5ynL/A=)
4: 3130332e3134342e33342e302f32332d3234203d3e20313331363636.roa (hash: Wv08z2tY7w2z0229EEvjyYYNTE6epIRCshOK3YEh39Y=)
5: 3230322e3132332e3132342e302f32332d3234203d3e20313331363636.roa (hash: G254ASDsdEOL8B4Bo3zdknO7xdbQNcKopBri7j6oisI=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/HST/0/E87D26C09449CEB4EE5FD7CC200B073CA53BCA44.crl
rsync://rpkica.twnic.tw/rpki/HST/0/E87D26C09449CEB4EE5FD7CC200B073CA53BCA44.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E87D26C09449CEB4EE5FD7CC200B073CA53BCA44.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 03:36:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:92:4f:1b:84:26:f7:dc:18:75:94:1c:25:14:af:1a:20:d4:17:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E87D26C09449CEB4EE5FD7CC200B073CA53BCA44
Validity
Not Before: Sep 26 23:32:28 2026 GMT
Not After : Sep 28 03:36:28 2026 GMT
Subject: CN=6E17AD15091314F9B2372D02C3B733B718555194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3c:31:e1:62:86:99:bb:8c:53:2e:f8:2f:69:
59:6e:58:b4:a6:65:e7:64:bc:10:d9:b9:79:0b:13:
e7:9b:3a:21:f1:ae:8d:48:b0:28:72:e9:61:a8:7d:
e8:b2:a6:89:11:a0:e3:86:93:4e:2a:8d:06:bb:83:
d9:2e:40:a0:ec:16:65:1b:bd:0d:87:68:6e:75:ec:
d5:1d:54:09:26:d6:62:c0:a4:17:58:30:b9:16:87:
d1:57:e4:40:36:e6:9e:37:ce:07:d7:0c:63:0a:c2:
25:fa:08:6d:f5:20:99:23:71:3f:60:f3:2d:63:b8:
32:24:07:b4:a0:22:44:17:8b:8f:1a:11:27:85:97:
00:4a:4c:2d:8a:ef:2f:fc:31:7f:54:97:59:e4:b5:
e3:9e:87:1e:20:9f:9a:5a:b7:25:23:13:20:c9:2e:
9a:1e:7e:ed:65:94:0d:a7:c5:b8:0c:44:66:b3:fa:
a9:cb:e6:22:05:39:87:17:16:53:be:8f:f8:91:e9:
58:76:38:76:6f:59:e6:06:cd:85:50:a6:27:ac:63:
f0:c0:35:50:2d:91:34:66:2f:a7:de:95:09:91:d9:
fa:4a:03:2b:5f:19:e6:d2:da:9b:a9:4a:d6:94:dd:
30:6c:73:50:93:3d:d1:b6:15:18:de:6c:15:57:54:
d5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:17:AD:15:09:13:14:F9:B2:37:2D:02:C3:B7:33:B7:18:55:51:94
X509v3 Authority Key Identifier:
keyid:E8:7D:26:C0:94:49:CE:B4:EE:5F:D7:CC:20:0B:07:3C:A5:3B:CA:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/HST/0/E87D26C09449CEB4EE5FD7CC200B073CA53BCA44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E87D26C09449CEB4EE5FD7CC200B073CA53BCA44.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HST/0/E87D26C09449CEB4EE5FD7CC200B073CA53BCA44.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:e5:fd:f2:1e:d7:26:8c:ce:a8:39:c5:e0:2b:06:ec:af:7e:
c9:38:93:10:32:37:21:5e:47:b8:6f:93:51:3e:c7:1c:a8:64:
5e:cf:41:a8:e6:9e:a3:f6:fa:c6:75:6a:bf:3b:b5:a9:ca:72:
eb:87:19:7b:08:89:83:83:aa:73:c6:91:ed:ac:f0:ea:bb:c3:
fc:f2:a0:d0:83:d9:7c:be:f4:99:86:30:5a:8f:a8:94:49:1d:
44:57:3b:e3:4a:d7:92:7f:78:61:a1:06:88:75:a6:71:1d:54:
4d:b6:e3:37:ff:3b:72:3b:77:85:b6:6d:5c:6e:5d:b9:a6:f3:
85:b1:5e:bf:d0:2d:96:62:11:20:8d:54:46:ef:58:b0:8d:e5:
95:ba:6b:d6:dd:97:41:b1:50:a5:20:91:7f:5b:61:37:78:1f:
9a:90:5e:7a:26:8a:9a:6e:24:79:ca:15:80:87:a2:82:47:86:
6d:f6:32:60:40:81:47:a9:ba:09:4a:fa:d2:d3:2c:50:57:1d:
73:c0:ab:02:de:ac:ae:d5:8c:34:bd:4b:05:33:39:b5:46:06:
cf:ae:b1:c5:13:14:87:64:83:c5:e8:8f:36:ce:60:eb:b2:6c:
ab:6e:62:2e:62:cf:2c:5a:31:b0:b0:8a:53:78:f1:6b:77:08:
da:61:f7:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:08:24 2026 by rpki-client