
$ rpki-client -vvf rpkica.twnic.tw/rpki/QISDA/0/8681A4AE9D1E387536C2E0B91C79A876CF7DE4E4.mft
File: 8681A4AE9D1E387536C2E0B91C79A876CF7DE4E4.mft (raw, json)
Hash identifier: jbymEDbRYEt4CdNfuZ5K75V78aO0/djxJryV0sRnjw0=
Subject key identifier: 34:FA:8A:32:7F:0D:A1:A4:DF:26:D2:9C:B0:78:3A:22:D9:DB:4E:22
Authority key identifier: 86:81:A4:AE:9D:1E:38:75:36:C2:E0:B9:1C:79:A8:76:CF:7D:E4:E4
Certificate issuer: /CN=8681A4AE9D1E387536C2E0B91C79A876CF7DE4E4
Certificate serial: 2DF466FEAC9A65A6B1E3D9DEC347A70AC2C7C035
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8681A4AE9D1E387536C2E0B91C79A876CF7DE4E4.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/QISDA/0/8681A4AE9D1E387536C2E0B91C79A876CF7DE4E4.mft
Manifest number: 04
Signing time: Tue 12 May 2026 11:55:49 +0000
Manifest this update: Tue 12 May 2026 11:50:49 +0000
Manifest next update: Wed 13 May 2026 13:19:49 +0000
Files and hashes: 1: 8681A4AE9D1E387536C2E0B91C79A876CF7DE4E4.crl (hash: g0Pa6jjZcK6Djhd7m89zw7XHKWDQnvrBwjhPGqy4uq8=)
2: 323430323a6361303a3a2f33322d3438203d3e20313331363831.roa (hash: S/vvxrC76LtkDDAr3Lwj+sG9Po2jPNI3vSVyXNzI5B0=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/QISDA/0/8681A4AE9D1E387536C2E0B91C79A876CF7DE4E4.crl
rsync://rpkica.twnic.tw/rpki/QISDA/0/8681A4AE9D1E387536C2E0B91C79A876CF7DE4E4.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8681A4AE9D1E387536C2E0B91C79A876CF7DE4E4.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 13:19:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:f4:66:fe:ac:9a:65:a6:b1:e3:d9:de:c3:47:a7:0a:c2:c7:c0:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8681A4AE9D1E387536C2E0B91C79A876CF7DE4E4
Validity
Not Before: May 12 11:50:49 2026 GMT
Not After : May 13 13:19:49 2026 GMT
Subject: CN=34FA8A327F0DA1A4DF26D29CB0783A22D9DB4E22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2b:1c:01:4b:d4:a8:68:67:80:7b:04:18:14:
76:26:e4:3c:69:5c:6f:e6:32:df:99:a8:ee:89:f9:
42:2d:25:9c:e1:a5:d0:f7:50:ae:66:9f:cb:68:ed:
d0:62:b2:27:a0:d2:47:ef:fb:88:7c:bd:fa:a9:9f:
27:d0:e4:b4:8e:e2:65:df:9a:09:80:ed:ea:3c:f5:
8a:7b:a5:b0:4e:73:5f:c4:c5:5a:b4:0c:ef:ea:59:
1a:38:12:cb:a4:69:a9:e7:63:da:6a:56:c6:7a:26:
4f:16:bf:d2:23:e4:dc:cd:b0:76:73:65:97:70:a7:
d1:d7:51:8d:f9:33:51:56:3b:b7:0d:9e:6e:90:fb:
8a:d6:18:48:95:2a:68:de:bd:c6:d5:e1:aa:82:5d:
6b:d2:8f:03:58:5f:bc:68:96:ac:5a:f1:36:06:a3:
78:f5:a3:c6:53:38:8f:95:53:5c:25:76:be:05:10:
bf:1f:65:f5:9f:11:a4:72:8c:6e:44:c3:7d:24:c1:
e6:9f:47:39:ef:cf:91:96:8f:22:9c:8f:fe:57:f5:
8a:85:20:83:7b:39:6d:38:62:7d:92:00:a0:f9:1c:
04:5d:3a:60:7a:33:cd:2a:04:35:94:32:c9:bd:40:
2c:e3:57:69:dc:8c:26:30:16:47:a5:1c:03:76:67:
66:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:FA:8A:32:7F:0D:A1:A4:DF:26:D2:9C:B0:78:3A:22:D9:DB:4E:22
X509v3 Authority Key Identifier:
keyid:86:81:A4:AE:9D:1E:38:75:36:C2:E0:B9:1C:79:A8:76:CF:7D:E4:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/QISDA/0/8681A4AE9D1E387536C2E0B91C79A876CF7DE4E4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8681A4AE9D1E387536C2E0B91C79A876CF7DE4E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/QISDA/0/8681A4AE9D1E387536C2E0B91C79A876CF7DE4E4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:e2:d5:40:98:09:99:ba:d5:8c:c1:6b:f0:cc:d6:f5:aa:f8:
01:66:e2:76:ff:fc:5a:de:85:ed:a7:65:25:f6:28:6b:53:ea:
2d:87:e3:7d:f9:7c:fc:cd:46:26:aa:c6:89:82:e4:30:3c:65:
3b:b7:7f:b5:06:18:a2:ca:e7:21:77:7c:9b:00:7c:9d:78:24:
fd:1c:11:ee:70:65:d9:f9:f9:a9:2b:2d:9e:2e:40:96:3b:50:
0f:08:8b:d6:40:48:76:5d:66:ff:92:45:39:29:3a:66:ca:36:
5f:e8:5c:c3:40:2a:57:b0:b9:e4:bd:0a:30:fd:77:51:c9:25:
21:ab:9b:7b:e0:1d:41:17:31:a2:e1:f1:5f:f0:d3:03:21:bc:
d4:16:07:c4:3e:ab:2a:9d:12:56:97:ea:5f:a8:d0:fc:fc:c4:
21:e0:fd:6c:11:06:ff:ec:50:05:8f:55:24:4f:3a:d1:b1:5f:
de:d3:1f:33:20:80:b3:bf:dc:a2:2e:04:ea:88:f3:3a:e8:be:
04:80:f6:90:a6:44:bb:d7:a0:2c:3d:c0:bd:47:91:63:3b:50:
f6:45:99:2d:d1:51:d8:30:cf:d9:64:3c:9b:60:7d:9f:2e:93:
ba:8e:9e:ed:7a:d2:6f:bb:99:70:ef:51:af:31:c2:41:23:ec:
7e:69:4b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:27:05 2026 by rpki-client