
$ rpki-client -vvvf rpkica.twnic.tw/rpki/LEYUN2/0/66D96CED70B44D758AE1282092DC175FEFC03195.mft
File: 66D96CED70B44D758AE1282092DC175FEFC03195.mft (raw, json)
Hash identifier: y3F85QXsYGBTr4FTTZNy459QkmYC9YbdhFZzmdlpw1A=
Subject key identifier: 96:04:3A:DD:00:8D:D0:33:82:9B:49:4C:68:93:57:F1:AF:96:D4:49
Authority key identifier: 66:D9:6C:ED:70:B4:4D:75:8A:E1:28:20:92:DC:17:5F:EF:C0:31:95
Certificate issuer: /CN=66D96CED70B44D758AE1282092DC175FEFC03195
Certificate serial: 779444485796130365A1D0FBBFCCCAD39E301BAD
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/66D96CED70B44D758AE1282092DC175FEFC03195.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/LEYUN2/0/66D96CED70B44D758AE1282092DC175FEFC03195.mft
Manifest number: 2B
Signing time: Thu 24 Sep 2026 10:09:24 +0000
Manifest this update: Thu 24 Sep 2026 10:04:24 +0000
Manifest next update: Fri 25 Sep 2026 12:14:24 +0000
Files and hashes: 1: 66D96CED70B44D758AE1282092DC175FEFC03195.crl (hash: XfPGYZ2OsY9t/3+QlCDSqeK8Jso53nVFaHvevJLCSxg=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/LEYUN2/0/66D96CED70B44D758AE1282092DC175FEFC03195.crl
rsync://rpkica.twnic.tw/rpki/LEYUN2/0/66D96CED70B44D758AE1282092DC175FEFC03195.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/66D96CED70B44D758AE1282092DC175FEFC03195.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 02:19:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:94:44:48:57:96:13:03:65:a1:d0:fb:bf:cc:ca:d3:9e:30:1b:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66D96CED70B44D758AE1282092DC175FEFC03195
Validity
Not Before: Sep 24 10:04:24 2026 GMT
Not After : Sep 25 12:14:24 2026 GMT
Subject: CN=96043ADD008DD033829B494C689357F1AF96D449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:0d:01:1b:ba:81:27:8a:c6:e9:6e:ab:a0:1a:
60:8b:80:1d:fa:75:7d:cf:be:b5:85:45:67:cb:e9:
b2:b2:31:57:cc:d3:c2:0d:7f:37:3d:33:ad:0a:86:
de:d4:55:f9:7b:25:57:d4:ec:3c:26:dc:bc:44:bc:
3f:e3:55:85:6a:57:71:f2:32:b5:1f:2f:1a:64:88:
33:be:64:7f:ec:52:cc:51:a3:13:64:83:fe:bf:b7:
bf:b1:25:bf:c7:21:5c:7c:eb:f3:6c:50:b7:87:ce:
8b:43:fb:21:0e:3f:84:87:0c:44:f0:86:49:76:f1:
7e:1f:49:ea:4b:71:69:c8:ee:b1:0e:3e:8c:9e:70:
70:58:36:77:20:eb:6d:a6:b6:2d:6c:60:ae:9b:c7:
01:73:88:28:49:38:c9:e1:f3:b2:d6:76:5c:d7:e9:
8a:23:50:dd:57:fb:68:f1:62:eb:f0:ac:17:36:02:
1f:01:71:a7:c6:57:dd:f3:90:eb:89:6d:a3:f4:0a:
75:42:05:87:ab:99:d5:db:6a:a5:87:1c:a7:f3:25:
e9:33:0f:9b:59:91:ae:48:34:d5:72:c6:64:41:fe:
19:4b:7c:fe:3a:89:6d:2e:0f:fb:11:ac:a7:a8:cc:
7b:09:d6:fd:c2:8c:e9:07:87:5d:fc:fd:3e:c4:de:
3a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:04:3A:DD:00:8D:D0:33:82:9B:49:4C:68:93:57:F1:AF:96:D4:49
X509v3 Authority Key Identifier:
keyid:66:D9:6C:ED:70:B4:4D:75:8A:E1:28:20:92:DC:17:5F:EF:C0:31:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/LEYUN2/0/66D96CED70B44D758AE1282092DC175FEFC03195.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/66D96CED70B44D758AE1282092DC175FEFC03195.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LEYUN2/0/66D96CED70B44D758AE1282092DC175FEFC03195.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:64:b1:ed:d9:35:fb:dd:b2:07:3b:71:94:45:25:c2:b4:cb:
b4:9b:da:51:f9:5a:10:80:d1:de:a6:53:f8:fa:82:b3:08:3c:
cb:ef:e0:91:63:93:8c:f4:d0:0a:7a:66:50:e8:03:cb:66:53:
f4:59:06:69:12:5b:b4:6e:98:81:a5:90:82:47:93:20:46:3e:
bb:51:1d:38:16:57:a9:74:14:9f:2b:67:dc:24:50:7a:48:df:
0d:ae:06:a6:5f:6a:fe:4e:58:80:90:1f:db:b0:bb:66:3f:76:
59:fd:10:2a:41:5b:09:06:74:4c:2a:03:6f:56:bf:6f:f7:d4:
b5:f6:93:c2:49:24:93:50:8a:c3:e0:91:11:44:6d:85:df:ee:
29:e7:65:d1:4e:78:f9:9f:5e:a7:35:fe:f3:93:c8:83:9f:bf:
bb:d1:13:9a:48:ac:48:82:5d:90:ec:b1:fb:c3:01:a6:cc:27:
fa:12:d2:77:df:ce:75:40:36:77:2a:cf:5a:33:b6:67:89:7f:
07:f6:d2:41:db:11:69:92:3c:8c:9c:e4:1c:86:12:1e:0d:87:
93:4c:74:37:1c:3e:3c:03:38:70:3f:47:3c:34:33:85:d1:fb:
a3:e6:df:40:41:92:1c:6a:2f:d3:ad:c8:ef:1d:1c:a9:45:30:
fe:7b:1e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:45:11 2026 by rpki-client