
$ rpki-client -vvf rpkica.twnic.tw/rpki/NCDR/0/453885A7EEA9583A5124ACD32DCB0BF2FE827148.mft
File: 453885A7EEA9583A5124ACD32DCB0BF2FE827148.mft (raw, json)
Hash identifier: wECeGL++kQS6s6J8mxaRbC8jDFIoQIDOPmi/n2GZ2RA=
Subject key identifier: C8:D4:87:B9:04:FB:44:DF:73:DE:14:9B:EE:68:2F:DF:93:E8:00:3D
Authority key identifier: 45:38:85:A7:EE:A9:58:3A:51:24:AC:D3:2D:CB:0B:F2:FE:82:71:48
Certificate issuer: /CN=453885A7EEA9583A5124ACD32DCB0BF2FE827148
Certificate serial: 4D71E7045CDBE7935FB9678334FB00E902C715C3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/453885A7EEA9583A5124ACD32DCB0BF2FE827148.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/NCDR/0/453885A7EEA9583A5124ACD32DCB0BF2FE827148.mft
Manifest number: 63
Signing time: Thu 23 Jul 2026 19:56:38 +0000
Manifest this update: Thu 23 Jul 2026 19:51:38 +0000
Manifest next update: Fri 24 Jul 2026 22:15:38 +0000
Files and hashes: 1: 453885A7EEA9583A5124ACD32DCB0BF2FE827148.crl (hash: gCxUGSrC8Ji4rtGA8bcMjlaJ4GCpg8Ne5y7Rqjqk7Fs=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/NCDR/0/453885A7EEA9583A5124ACD32DCB0BF2FE827148.crl
rsync://rpkica.twnic.tw/rpki/NCDR/0/453885A7EEA9583A5124ACD32DCB0BF2FE827148.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/453885A7EEA9583A5124ACD32DCB0BF2FE827148.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 22:15:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:71:e7:04:5c:db:e7:93:5f:b9:67:83:34:fb:00:e9:02:c7:15:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453885A7EEA9583A5124ACD32DCB0BF2FE827148
Validity
Not Before: Jul 23 19:51:38 2026 GMT
Not After : Jul 24 22:15:38 2026 GMT
Subject: CN=C8D487B904FB44DF73DE149BEE682FDF93E8003D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:34:1c:ac:e7:99:32:0d:97:64:75:f7:8b:d6:
1c:af:a6:b3:11:e0:36:5c:62:90:6f:be:e0:ad:ca:
c9:17:21:42:7d:9a:c8:9d:79:51:fd:65:b7:00:67:
e3:98:7d:44:06:71:cd:87:f3:16:ed:ea:8b:19:ec:
5a:00:eb:d7:d3:bd:a9:7d:68:14:b6:77:f2:bb:21:
53:88:ba:e2:c3:24:be:29:f9:70:39:49:90:d5:35:
62:a9:1a:7b:44:e2:25:9c:8f:37:0c:ee:1a:f9:ae:
23:39:ee:e7:5c:1e:9b:81:7d:8e:95:68:29:1e:c1:
3e:26:46:25:6e:79:2a:fe:aa:84:15:d1:cf:21:c7:
9c:f4:2e:8b:e1:1f:b2:73:d0:4a:87:2c:63:09:ce:
41:bb:06:b3:f0:ac:d9:15:65:97:42:70:a2:96:f8:
ea:d6:7b:c5:8b:74:f4:91:2e:71:ab:0d:22:43:d8:
de:96:6e:2f:04:63:b1:37:e8:15:4b:68:71:ee:85:
9a:1e:8a:d2:a8:57:82:99:9c:32:55:e1:48:c7:e8:
69:66:db:cd:5b:e1:1b:7a:01:56:20:f9:ae:1d:24:
61:90:d7:ec:ae:08:c8:62:18:af:c0:e2:d0:56:ed:
3c:3a:1f:04:92:ff:f5:d2:6d:20:ec:d1:34:11:85:
b8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:D4:87:B9:04:FB:44:DF:73:DE:14:9B:EE:68:2F:DF:93:E8:00:3D
X509v3 Authority Key Identifier:
keyid:45:38:85:A7:EE:A9:58:3A:51:24:AC:D3:2D:CB:0B:F2:FE:82:71:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/NCDR/0/453885A7EEA9583A5124ACD32DCB0BF2FE827148.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/453885A7EEA9583A5124ACD32DCB0BF2FE827148.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NCDR/0/453885A7EEA9583A5124ACD32DCB0BF2FE827148.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:21:27:23:72:f3:db:45:9b:f5:b6:16:ed:5e:63:20:f7:e3:
e7:48:cc:ec:63:03:7b:69:01:48:c7:e8:74:f0:6c:8e:e1:91:
a1:af:ca:15:58:8d:33:00:03:50:8d:b1:ea:fb:c5:c7:3e:d1:
e6:58:c5:11:ce:27:19:e1:bb:87:c0:3a:29:22:c4:b5:ea:61:
39:b8:bd:9f:16:de:95:21:a4:c5:93:fc:28:d4:ae:7b:f9:35:
89:6c:6d:db:e8:78:62:2f:f7:3b:ff:64:81:c8:52:25:39:81:
68:ac:f8:d3:1a:79:09:27:19:02:10:c3:23:6d:ce:26:c5:03:
51:9a:21:5f:54:34:12:78:e3:0f:9a:f6:c6:d8:19:d3:b1:46:
b8:ef:39:3c:df:80:29:aa:2b:bd:e2:48:ba:2a:3f:56:25:9a:
5e:27:aa:e5:a2:f3:cc:c1:ba:da:23:a3:2c:d8:ec:21:5f:25:
44:e7:49:20:64:62:4c:0b:d8:0e:82:8f:a3:9e:c1:7a:0d:de:
55:23:7d:c0:23:35:ef:58:03:3a:b7:b7:11:80:57:09:92:82:
be:51:6f:ce:fb:1c:19:f6:5d:6b:39:79:68:0a:19:1d:49:d1:
a4:f3:a4:7e:64:df:42:2a:7b:36:63:81:df:3f:d5:22:87:5a:
b3:5b:25:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:37:53 2026 by rpki-client