
$ rpki-client -vvvf rpkica.twnic.tw/rpki/QISDA/1/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.mft
File: 5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.mft (raw, json)
Hash identifier: +3z2BE8P34gSRmaaLx1UwGVwE00n15nWR7bxadG7mJI=
Subject key identifier: 6D:7A:D2:CB:5D:57:8E:5A:44:84:E2:42:A6:A2:43:8C:00:2F:BE:5A
Authority key identifier: 50:31:E6:5A:98:D8:27:3F:95:79:BF:A5:B8:FE:6C:A5:2D:01:C4:1B
Certificate issuer: /CN=5031E65A98D8273F9579BFA5B8FE6CA52D01C41B
Certificate serial: 1A2CEB190512E2B75742D85FB9B471F45D03E778
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/QISDA/1/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.mft
Manifest number: BE
Signing time: Tue 29 Sep 2026 10:02:27 +0000
Manifest this update: Tue 29 Sep 2026 09:57:27 +0000
Manifest next update: Wed 30 Sep 2026 13:14:27 +0000
Files and hashes: 1: 5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.crl (hash: nJ3foo9+Nj2mrDuRoTiWy4rwk/dG2qf5gxofYNbZl9c=)
2: 3136352e39392e3131322e302f32332d3234203d3e20313331363831.roa (hash: WrYPkf0InVKyICQINH//KXuGgao1vX5GBqZA6/+9gHc=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/QISDA/1/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.crl
rsync://rpkica.twnic.tw/rpki/QISDA/1/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 09:53:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:2c:eb:19:05:12:e2:b7:57:42:d8:5f:b9:b4:71:f4:5d:03:e7:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5031E65A98D8273F9579BFA5B8FE6CA52D01C41B
Validity
Not Before: Sep 29 09:57:27 2026 GMT
Not After : Sep 30 13:14:27 2026 GMT
Subject: CN=6D7AD2CB5D578E5A4484E242A6A2438C002FBE5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:89:99:c4:22:7d:3c:ed:cc:63:fe:c1:91:c5:
db:32:e8:63:b1:7e:21:f1:b7:78:47:08:67:3c:e9:
5a:5e:e8:56:77:7e:12:84:0f:d8:d4:ca:73:d8:55:
00:73:e1:80:90:8f:a1:da:68:63:11:09:8d:46:2c:
69:9b:ac:3b:97:a1:39:73:89:62:9d:f1:57:19:4c:
4a:25:6d:d7:25:7b:bd:eb:3f:c8:59:17:4e:42:66:
38:18:21:45:3a:da:a0:5c:f8:df:0b:45:04:35:1a:
78:c3:80:ed:fc:ec:c2:1d:87:a2:46:65:d3:62:ba:
14:c2:76:a1:60:8a:8f:61:2d:6e:86:c9:f4:ea:ed:
3e:c2:d1:ad:5d:8e:1c:13:84:6f:0d:f9:7d:56:0f:
84:4b:b8:8a:7d:53:14:70:b8:6e:76:fa:1d:88:bc:
bd:1c:95:2f:1a:0e:6a:9a:dc:c8:90:b7:23:53:d5:
45:cf:96:3e:42:f2:33:e8:7a:3d:3f:ed:a7:9b:e3:
64:5f:b3:f5:a5:ff:6a:3c:30:6a:e7:07:be:c7:7e:
e5:99:20:25:c1:d2:e1:e9:11:07:f4:96:00:c2:91:
81:83:d0:b6:eb:5f:4a:8a:9e:ad:2f:e3:e6:32:0f:
8d:f9:46:4a:df:fd:3c:dc:30:9d:68:d8:b4:95:c2:
e9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:7A:D2:CB:5D:57:8E:5A:44:84:E2:42:A6:A2:43:8C:00:2F:BE:5A
X509v3 Authority Key Identifier:
keyid:50:31:E6:5A:98:D8:27:3F:95:79:BF:A5:B8:FE:6C:A5:2D:01:C4:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/QISDA/1/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/QISDA/1/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:ad:5e:5b:1b:04:93:4a:20:42:3d:bf:69:b7:ba:37:a0:4e:
df:c3:fc:a2:34:6a:f9:b2:3e:de:e5:db:5d:3c:e3:8c:27:ec:
62:b6:f0:65:2b:f7:87:42:62:96:02:1a:0a:1f:73:75:55:00:
4a:85:69:b1:0c:52:41:75:bd:97:e6:7d:0e:0a:1e:d2:58:e0:
d3:32:f7:71:d7:c5:79:8e:5b:5a:d6:57:3e:48:d2:25:7b:5a:
62:dd:56:db:31:a5:7e:4e:c8:d6:65:19:83:cb:ea:4e:01:3d:
dc:83:e3:b6:38:e6:f9:5f:11:75:c2:67:e2:73:77:4f:ee:71:
34:da:4c:74:44:ec:1a:a4:62:19:35:e5:8c:e3:4b:82:ed:ef:
d6:06:e8:4d:a5:6e:95:f8:e7:cd:fd:3f:1c:b1:9d:f5:1f:78:
f3:f5:d9:cf:05:36:1f:b3:71:65:26:4a:3a:04:2b:ed:a3:0e:
ba:90:01:78:6a:5a:94:4d:d4:74:b3:a0:fb:54:87:10:3b:55:
87:69:b5:57:10:35:be:fd:9e:14:9f:19:98:47:43:ff:11:b1:
ff:7b:f4:a2:96:c1:bc:6b:3c:0b:b4:e8:a2:e1:02:ca:9a:78:
c0:d1:1e:c5:08:cd:eb:e6:b6:2a:14:a3:4d:87:7e:66:c0:28:
80:c2:b4:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 17:43:46 2026 by rpki-client