
$ rpki-client -vvvf rpkica.twnic.tw/rpki/SIMPLECLOU/1/7D73093CA12D6CDAD00E53223480A6F2B7FDB78C.mft
File: 7D73093CA12D6CDAD00E53223480A6F2B7FDB78C.mft (raw, json)
Hash identifier: bXeIWzsWGCUFQuAJzxaoHHKAFIa9lFpxUdNHpaDmKN0=
Subject key identifier: 17:57:0C:73:11:23:92:9A:94:BE:67:EF:F3:00:D7:5C:7A:B9:45:38
Authority key identifier: 7D:73:09:3C:A1:2D:6C:DA:D0:0E:53:22:34:80:A6:F2:B7:FD:B7:8C
Certificate issuer: /CN=7D73093CA12D6CDAD00E53223480A6F2B7FDB78C
Certificate serial: 580111A594027C6DE60C11AD72FDF1E37557E188
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/7D73093CA12D6CDAD00E53223480A6F2B7FDB78C.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SIMPLECLOU/1/7D73093CA12D6CDAD00E53223480A6F2B7FDB78C.mft
Manifest number: B8
Signing time: Thu 24 Sep 2026 16:55:38 +0000
Manifest this update: Thu 24 Sep 2026 16:50:38 +0000
Manifest next update: Fri 25 Sep 2026 20:02:38 +0000
Files and hashes: 1: 3135372e32302e3130382e302f32332d3234203d3e2039393137.roa (hash: ckB7c4m0dSGjfbDc1BMRa8lcfk7IIMuWAbfJoeOYzj8=)
2: 7D73093CA12D6CDAD00E53223480A6F2B7FDB78C.crl (hash: LKg49gRjQ7XM/4/td0PW3eqqIJlbOet0VSPMK0fbkcA=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/SIMPLECLOU/1/7D73093CA12D6CDAD00E53223480A6F2B7FDB78C.crl
rsync://rpkica.twnic.tw/rpki/SIMPLECLOU/1/7D73093CA12D6CDAD00E53223480A6F2B7FDB78C.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/7D73093CA12D6CDAD00E53223480A6F2B7FDB78C.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 02:24:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:01:11:a5:94:02:7c:6d:e6:0c:11:ad:72:fd:f1:e3:75:57:e1:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7D73093CA12D6CDAD00E53223480A6F2B7FDB78C
Validity
Not Before: Sep 24 16:50:38 2026 GMT
Not After : Sep 25 20:02:38 2026 GMT
Subject: CN=17570C731123929A94BE67EFF300D75C7AB94538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:52:12:75:46:e6:3f:79:89:fe:77:c3:6c:fb:
eb:f1:74:ab:a0:fb:ce:45:1d:c2:91:0f:39:83:47:
c0:e2:f5:49:f4:26:29:54:45:35:25:65:47:f8:f8:
67:05:b6:13:c1:20:97:a3:b0:7c:e0:a5:33:55:e2:
8c:b9:34:47:58:32:91:6e:fe:16:2d:4f:8d:3e:03:
6a:f8:8a:e8:ef:3e:44:2b:7e:0f:df:43:13:2b:82:
93:18:1b:11:49:f1:85:52:ba:7f:44:76:bf:e7:59:
69:ae:8c:0d:76:4c:99:06:18:79:24:ed:12:2f:50:
f5:4f:6b:6f:04:e1:8f:54:a5:e2:b3:c8:23:05:d8:
9c:6a:3b:7f:68:86:cc:c2:af:22:bc:e7:c4:bd:51:
b4:72:c8:bc:52:42:10:a4:98:9e:3e:e9:17:58:31:
3c:3b:4b:db:d5:63:1d:79:69:57:73:ea:cf:8a:28:
c5:d1:c1:62:d0:07:74:9f:26:c7:c3:2f:c9:62:91:
d9:06:16:0e:c5:f9:db:fc:49:d7:15:f5:17:34:99:
e2:40:80:56:e3:ca:05:9b:4a:b7:9e:57:c5:33:e2:
38:5a:1f:99:86:9a:54:be:73:ae:e4:d3:be:9d:04:
bc:99:31:79:09:05:30:7b:e5:e8:29:03:d8:ca:15:
a2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:57:0C:73:11:23:92:9A:94:BE:67:EF:F3:00:D7:5C:7A:B9:45:38
X509v3 Authority Key Identifier:
keyid:7D:73:09:3C:A1:2D:6C:DA:D0:0E:53:22:34:80:A6:F2:B7:FD:B7:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SIMPLECLOU/1/7D73093CA12D6CDAD00E53223480A6F2B7FDB78C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/7D73093CA12D6CDAD00E53223480A6F2B7FDB78C.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SIMPLECLOU/1/7D73093CA12D6CDAD00E53223480A6F2B7FDB78C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:78:a7:6f:b4:ab:a8:70:4b:33:fc:30:c4:93:7a:5b:f7:c3:
84:64:df:61:ce:4d:bb:c2:cd:7f:3f:24:78:fb:1c:e4:a7:5a:
ee:1c:57:ac:b4:e5:d0:cb:57:f4:de:c3:e3:32:db:06:a5:42:
37:29:9b:b6:b4:a9:a8:26:d4:e5:30:b7:ca:80:8e:13:da:63:
21:0d:0d:35:39:b2:1e:a1:47:8f:de:3f:38:5b:aa:3a:98:69:
3f:eb:c4:eb:b6:6a:50:31:83:a3:ad:58:4f:e2:59:87:e3:bf:
ed:d2:a3:ea:2a:0a:8c:6d:47:7d:23:96:d1:6f:61:7b:f3:fe:
5c:da:5b:6c:d2:e1:01:46:ea:65:d3:00:c0:99:b9:42:d8:2e:
d7:26:4b:81:a6:d2:e3:69:3a:b0:2b:50:52:fb:2e:93:cd:70:
24:ab:16:3d:19:d6:be:26:4a:7b:e6:b2:10:fc:4c:6e:33:60:
39:cb:13:4c:9b:8c:82:5b:02:89:7d:b8:27:c5:35:3c:e2:df:
c4:3d:49:94:f4:76:71:d4:84:95:00:60:13:27:ed:0d:de:51:
54:42:55:16:80:41:ee:1b:05:ae:5d:05:8a:d4:79:75:d4:a5:
62:d1:1d:f5:83:f3:f2:95:9c:ef:1d:c5:0a:fe:8c:5b:1b:05:
c0:83:1a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 19:41:06 2026 by rpki-client