
$ rpki-client -vvvf rpkica.twnic.tw/rpki/RAID/0/8E72F95D12197A83EB3E4E8DDB385B148EAA04FF.mft
File: 8E72F95D12197A83EB3E4E8DDB385B148EAA04FF.mft (raw, json)
Hash identifier: U0ZrmNiyUR6rduW3FgD+j598sDTEE4j5uw03b6x1Ux0=
Subject key identifier: 08:BC:94:9C:C9:A8:68:CA:77:3D:15:BE:EC:C2:AB:6A:87:DE:25:CA
Authority key identifier: 8E:72:F9:5D:12:19:7A:83:EB:3E:4E:8D:DB:38:5B:14:8E:AA:04:FF
Certificate issuer: /CN=8E72F95D12197A83EB3E4E8DDB385B148EAA04FF
Certificate serial: 6ACDAD92CC06DA37634454BBC0BF346281B15C9B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8E72F95D12197A83EB3E4E8DDB385B148EAA04FF.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/RAID/0/8E72F95D12197A83EB3E4E8DDB385B148EAA04FF.mft
Manifest number: B7
Signing time: Thu 24 Sep 2026 22:39:38 +0000
Manifest this update: Thu 24 Sep 2026 22:34:38 +0000
Manifest next update: Sat 26 Sep 2026 01:55:38 +0000
Files and hashes: 1: 8E72F95D12197A83EB3E4E8DDB385B148EAA04FF.crl (hash: alNuP7ucG3ReI0hoX/ucyIPcYncMZ8bBeKG6oah9psM=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/RAID/0/8E72F95D12197A83EB3E4E8DDB385B148EAA04FF.crl
rsync://rpkica.twnic.tw/rpki/RAID/0/8E72F95D12197A83EB3E4E8DDB385B148EAA04FF.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8E72F95D12197A83EB3E4E8DDB385B148EAA04FF.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 21:19:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:cd:ad:92:cc:06:da:37:63:44:54:bb:c0:bf:34:62:81:b1:5c:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8E72F95D12197A83EB3E4E8DDB385B148EAA04FF
Validity
Not Before: Sep 24 22:34:38 2026 GMT
Not After : Sep 26 01:55:38 2026 GMT
Subject: CN=08BC949CC9A868CA773D15BEECC2AB6A87DE25CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:84:39:e6:c3:e7:6c:ce:1a:10:fa:ef:50:d2:
4b:3d:b6:82:77:00:6f:cd:79:9e:e3:84:28:ba:eb:
e7:75:d3:a2:5a:3f:90:e9:75:cd:6c:d8:4b:6a:db:
af:ac:ca:c3:9e:af:ca:8c:21:72:06:4d:26:89:cc:
02:01:6a:f0:ef:a2:12:25:1b:b7:2b:36:83:35:ae:
8f:74:ad:4c:31:02:8c:16:e7:18:c5:61:c7:4f:b6:
eb:4a:fc:eb:da:63:57:16:7b:4c:27:48:6a:09:f8:
d1:52:2c:53:be:b4:91:ff:56:48:a8:db:26:8f:8c:
82:2d:58:89:f3:ad:eb:53:9a:c0:53:9c:86:b8:44:
fd:a6:7c:5e:97:db:03:b7:44:57:17:16:f4:66:02:
80:20:e6:61:35:73:21:d5:cd:43:49:1c:f4:21:5c:
da:96:2e:3d:7f:9a:54:08:31:90:33:0f:e1:16:34:
42:25:96:32:14:8f:0f:e6:a5:86:a4:4c:47:7a:23:
fe:05:66:75:b3:62:e2:c4:f3:45:9c:d1:f8:7e:ae:
e7:f3:3b:bf:88:af:f8:00:05:ef:9a:55:99:9c:63:
73:7a:97:94:b9:cf:94:bc:96:4e:7d:9a:5c:d6:fb:
38:b1:28:8a:b0:ff:d6:c1:46:1b:f2:58:2c:65:c2:
31:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:BC:94:9C:C9:A8:68:CA:77:3D:15:BE:EC:C2:AB:6A:87:DE:25:CA
X509v3 Authority Key Identifier:
keyid:8E:72:F9:5D:12:19:7A:83:EB:3E:4E:8D:DB:38:5B:14:8E:AA:04:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/RAID/0/8E72F95D12197A83EB3E4E8DDB385B148EAA04FF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8E72F95D12197A83EB3E4E8DDB385B148EAA04FF.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/RAID/0/8E72F95D12197A83EB3E4E8DDB385B148EAA04FF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:9f:ca:88:3d:7a:4b:9d:cf:3c:cd:27:d7:37:8d:3a:a0:35:
2c:da:53:48:e0:7f:dc:e7:8f:28:3b:5f:a7:45:b4:ff:ac:7f:
5c:f7:ae:ca:bd:e6:9e:fe:95:ba:b0:ca:ff:ca:1a:d5:20:90:
09:3f:d6:52:f3:f2:69:c7:eb:f4:7b:99:7d:bd:59:2f:68:3c:
25:6e:c1:17:55:3c:44:a1:e8:4e:0e:0e:a7:1d:df:f4:20:a1:
6d:23:da:d6:84:ce:8c:c5:fe:af:79:0c:c7:57:4a:91:92:6a:
13:2f:24:9d:f9:b6:a5:be:fd:e3:57:2a:19:ca:1e:1c:42:0c:
d8:b3:34:7f:b2:ab:10:42:74:44:29:35:06:b1:d1:20:ce:35:
b9:93:30:cb:05:d0:ab:84:5f:1f:82:c9:f7:e2:76:ff:b6:d9:
b0:dc:1b:ef:7f:5c:ef:1f:07:49:6f:aa:51:80:7b:00:48:ad:
91:7b:d3:6a:da:be:12:90:19:c4:07:0a:17:a3:17:2f:39:96:
48:55:ab:86:11:a2:98:78:ed:47:07:d6:d4:70:09:ca:2c:5b:
84:16:1e:80:1c:e9:53:d9:b2:5e:93:ed:85:a2:33:c4:7b:dc:
59:39:34:9d:1e:dc:f4:f3:d5:a9:c4:ec:74:62:b5:9e:8a:95:
d1:5a:83:2d
-----BEGIN CERTIFICATE-----
MIIE4DCCA8igAwIBAgIUas2tkswG2jdjRFS7wL80YoGxXJswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEU3MkY5NUQxMjE5N0E4M0VCM0U0RThEREIzODVCMTQ4
RUFBMDRGRjAeFw0yNjA5MjQyMjM0MzhaFw0yNjA5MjYwMTU1MzhaMDMxMTAvBgNV
BAMTKDA4QkM5NDlDQzlBODY4Q0E3NzNEMTVCRUVDQzJBQjZBODdERTI1Q0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQhDnmw+dszhoQ+u9Q0ks9toJ3
AG/NeZ7jhCi66+d106JaP5Dpdc1s2Etq26+sysOer8qMIXIGTSaJzAIBavDvohIl
G7crNoM1ro90rUwxAowW5xjFYcdPtutK/OvaY1cWe0wnSGoJ+NFSLFO+tJH/Vkio
2yaPjIItWInzretTmsBTnIa4RP2mfF6X2wO3RFcXFvRmAoAg5mE1cyHVzUNJHPQh
XNqWLj1/mlQIMZAzD+EWNEIlljIUjw/mpYakTEd6I/4FZnWzYuLE80Wc0fh+rufz
O7+Ir/gABe+aVZmcY3N6l5S5z5S8lk59mlzW+zixKIqw/9bBRhvyWCxlwjGLAgMB
AAGjggHqMIIB5jAdBgNVHQ4EFgQUCLyUnMmoaMp3PRW+7MKraofeJcowHwYDVR0j
BBgwFoAUjnL5XRIZeoPrPk6N2zhbFI6qBP8wDgYDVR0PAQH/BAQDAgeAMGEGA1Ud
HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvUkFJRC8w
LzhFNzJGOTVEMTIxOTdBODNFQjNFNEU4RERCMzg1QjE0OEVBQTA0RkYuY3JsMG8G
CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu
dHcvcnBraS9UV05JQ0NBLzEvOEU3MkY5NUQxMjE5N0E4M0VCM0U0RThEREIzODVC
MTQ4RUFBMDRGRi5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu
YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1JBSUQvMC84RTcyRjk1RDEyMTk3QTgz
RUIzRTRFOEREQjM4NUIxNDhFQUEwNEZGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG
AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUJ/KiD16S53PPM0n
1zeNOqA1LNpTSOB/3OePKDtfp0W0/6x/XPeuyr3mnv6VurDK/8oa1SCQCT/WUvPy
acfr9HuZfb1ZL2g8JW7BF1U8RKHoTg4Opx3f9CChbSPa1oTOjMX+r3kMx1dKkZJq
Ey8knfm2pb7941cqGcoeHEIM2LM0f7KrEEJ0RCk1BrHRIM41uZMwywXQq4RfH4LJ
9+J2/7bZsNwb739c7x8HSW+qUYB7AEitkXvTatq+EpAZxAcKF6MXLzmWSFWrhhGi
mHjtRwfW1HAJyixbhBYegBzpU9myXpPthaIzxHvcWTk0nR7c9PPVqcTsdGK1noqV
0VqDLQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 09:22:10 2026 by rpki-client