
$ rpki-client -vvvf rpkica.twnic.tw/rpki/QISDA/0/8681A4AE9D1E387536C2E0B91C79A876CF7DE4E4.mft
File: 8681A4AE9D1E387536C2E0B91C79A876CF7DE4E4.mft (raw, json)
Hash identifier: 5qIQ0n7E9+TEHcygvq+oqMfXo6H6vFa9zTNmhC7+ow4=
Subject key identifier: 3A:F3:41:8D:D3:9F:92:B1:72:F2:50:CF:88:B7:00:16:A7:8E:A0:C8
Authority key identifier: 86:81:A4:AE:9D:1E:38:75:36:C2:E0:B9:1C:79:A8:76:CF:7D:E4:E4
Certificate issuer: /CN=8681A4AE9D1E387536C2E0B91C79A876CF7DE4E4
Certificate serial: 1390EDD839B70E96BE091A493CAD85F0661E2BA3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8681A4AE9D1E387536C2E0B91C79A876CF7DE4E4.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/QISDA/0/8681A4AE9D1E387536C2E0B91C79A876CF7DE4E4.mft
Manifest number: BB
Signing time: Sun 27 Sep 2026 06:48:17 +0000
Manifest this update: Sun 27 Sep 2026 06:43:17 +0000
Manifest next update: Mon 28 Sep 2026 06:55:17 +0000
Files and hashes: 1: 8681A4AE9D1E387536C2E0B91C79A876CF7DE4E4.crl (hash: UBdBxjqX7DZayGh3jSaH+Gog1vjjiEL1WPnHAQYXpKg=)
2: 323430323a6361303a3a2f33322d3438203d3e20313331363831.roa (hash: S/vvxrC76LtkDDAr3Lwj+sG9Po2jPNI3vSVyXNzI5B0=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/QISDA/0/8681A4AE9D1E387536C2E0B91C79A876CF7DE4E4.crl
rsync://rpkica.twnic.tw/rpki/QISDA/0/8681A4AE9D1E387536C2E0B91C79A876CF7DE4E4.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8681A4AE9D1E387536C2E0B91C79A876CF7DE4E4.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 03:42:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:90:ed:d8:39:b7:0e:96:be:09:1a:49:3c:ad:85:f0:66:1e:2b:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8681A4AE9D1E387536C2E0B91C79A876CF7DE4E4
Validity
Not Before: Sep 27 06:43:17 2026 GMT
Not After : Sep 28 06:55:17 2026 GMT
Subject: CN=3AF3418DD39F92B172F250CF88B70016A78EA0C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:31:9e:8f:12:57:2a:5c:d1:a1:5c:76:c1:ba:
c0:75:94:55:70:92:ab:10:f6:7a:54:b8:e3:0f:1d:
75:08:48:4f:ee:51:40:3b:c8:27:28:5e:9d:68:93:
33:51:06:38:43:08:6e:20:09:7e:0b:11:9b:57:ed:
cc:93:ed:1c:41:a4:6b:26:67:8b:11:1f:97:88:e2:
b9:f4:0a:c3:c2:20:6e:24:97:29:70:10:3f:3b:4e:
b2:7f:6e:90:ab:23:cc:2c:8b:cc:ff:07:78:b3:65:
27:38:c1:0a:f1:27:3f:79:fe:e0:e4:ed:a6:cb:cf:
44:ac:ee:f4:b5:16:00:52:2f:a2:e9:d6:f8:bd:01:
21:72:26:1e:6e:ee:3d:00:33:3c:f6:5d:7f:46:d2:
85:67:32:ba:bc:74:92:cb:c1:82:28:50:f1:b5:08:
f3:5a:c8:ce:db:3d:9b:da:25:7f:9f:e2:14:9b:05:
25:6b:d4:dd:4d:33:0d:42:45:95:10:32:d7:c5:83:
27:47:3c:e8:d1:8f:8c:41:4a:22:c6:b6:6d:47:6c:
6e:25:71:a8:4d:88:7c:93:8a:db:ac:bb:76:54:71:
02:4b:48:00:21:94:91:f4:94:9f:b5:b5:1e:ed:5c:
d6:79:8d:eb:10:ea:e1:f8:7e:53:f6:25:2e:eb:22:
e1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:F3:41:8D:D3:9F:92:B1:72:F2:50:CF:88:B7:00:16:A7:8E:A0:C8
X509v3 Authority Key Identifier:
keyid:86:81:A4:AE:9D:1E:38:75:36:C2:E0:B9:1C:79:A8:76:CF:7D:E4:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/QISDA/0/8681A4AE9D1E387536C2E0B91C79A876CF7DE4E4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8681A4AE9D1E387536C2E0B91C79A876CF7DE4E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/QISDA/0/8681A4AE9D1E387536C2E0B91C79A876CF7DE4E4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:86:ca:1f:5f:c9:1a:32:c4:e2:34:a0:a0:a7:55:4e:a6:0d:
e2:88:1f:c3:ad:c8:73:dd:78:cf:0c:09:e7:0e:7a:77:85:98:
12:0b:c6:2a:44:2c:94:e9:12:99:96:d1:99:6e:98:8e:dd:7e:
99:73:e2:87:5b:84:de:dd:ac:a6:5c:a0:17:0d:a6:8d:3b:91:
65:8b:59:59:1c:6b:77:28:34:db:41:7e:0f:0a:b5:89:0a:30:
26:d6:38:97:05:d9:f1:5d:a5:60:e9:47:0a:d3:21:3f:92:26:
41:8b:8e:f8:11:bf:d5:07:e9:f2:d1:30:e2:6b:8c:39:80:d2:
e3:e3:a9:61:d9:93:ef:84:d5:24:66:80:fd:0f:eb:53:2a:08:
38:48:7f:20:4f:4b:84:b3:dd:7c:f9:3f:d6:fe:a1:9c:e0:15:
86:be:37:d0:5d:b1:10:20:7d:1c:e9:a3:f7:ef:40:76:37:dd:
91:dd:14:18:03:3f:5c:7d:d2:da:cd:44:32:03:6e:a0:0d:58:
a0:d2:70:13:da:6a:14:0c:b5:3f:38:99:05:e9:44:6f:68:6c:
03:1a:c2:20:51:96:c2:4c:39:b0:b7:a3:c7:3c:44:a4:bb:a6:
96:44:a0:e2:d6:9c:26:ab:8e:d3:a7:19:be:f9:ff:f7:b2:88:
28:ef:cb:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:13:15 2026 by rpki-client