
$ rpki-client -vvf rpkica.twnic.tw/rpki/TOPCHINA/0/EC1DB3CB7CE6162748BA2956BC1706446561D664.mft
File: EC1DB3CB7CE6162748BA2956BC1706446561D664.mft (raw, json)
Hash identifier: Ms74RaEGmYj0dCmqg2BhuhPZAdBhh30/DKvXgOfSROA=
Subject key identifier: 2B:D6:C5:DA:34:DE:1F:20:30:E0:51:5A:D4:E8:5D:80:9A:22:C4:3A
Authority key identifier: EC:1D:B3:CB:7C:E6:16:27:48:BA:29:56:BC:17:06:44:65:61:D6:64
Certificate issuer: /CN=EC1DB3CB7CE6162748BA2956BC1706446561D664
Certificate serial: 0F0428C47657B845A9D5AA08C4014B9AD0ED2280
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EC1DB3CB7CE6162748BA2956BC1706446561D664.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TOPCHINA/0/EC1DB3CB7CE6162748BA2956BC1706446561D664.mft
Manifest number: 63
Signing time: Thu 23 Jul 2026 15:48:09 +0000
Manifest this update: Thu 23 Jul 2026 15:43:09 +0000
Manifest next update: Fri 24 Jul 2026 16:28:09 +0000
Files and hashes: 1: EC1DB3CB7CE6162748BA2956BC1706446561D664.crl (hash: WIgJbOe1PhIDRCPWnrOw0BV0lv7ddSDGvWzUldi5u3U=)
2: 3130332e3132342e3235322e302f32322d3234203d3e20313331363539.roa (hash: UJYSu7Fa6tnrzCGk1PLG8hNTofa+kMNC0fV9KXzBeyU=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TOPCHINA/0/EC1DB3CB7CE6162748BA2956BC1706446561D664.crl
rsync://rpkica.twnic.tw/rpki/TOPCHINA/0/EC1DB3CB7CE6162748BA2956BC1706446561D664.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EC1DB3CB7CE6162748BA2956BC1706446561D664.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 13:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:04:28:c4:76:57:b8:45:a9:d5:aa:08:c4:01:4b:9a:d0:ed:22:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC1DB3CB7CE6162748BA2956BC1706446561D664
Validity
Not Before: Jul 23 15:43:09 2026 GMT
Not After : Jul 24 16:28:09 2026 GMT
Subject: CN=2BD6C5DA34DE1F2030E0515AD4E85D809A22C43A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:64:e9:17:09:21:59:ed:f0:46:99:80:80:1b:
46:ce:01:77:5c:e8:eb:6e:f1:11:54:36:82:21:16:
50:b8:b1:7f:d3:70:cf:6d:68:9a:04:2b:65:c4:4b:
da:8c:91:57:ff:75:19:a9:c3:47:a3:9d:e1:fe:81:
a1:fc:00:1f:5e:d4:ed:e9:8b:c2:94:ec:78:fa:f4:
b8:cd:cd:a7:57:31:ff:4f:ac:64:34:f5:4e:81:bb:
f5:8a:91:aa:8d:dd:4a:7d:c6:11:58:de:23:03:57:
22:8e:de:34:21:d7:3d:32:50:26:a0:9f:76:17:fe:
be:3f:2c:28:d1:7a:b4:29:52:2f:77:81:91:33:0b:
4d:0c:8a:b3:6f:a7:27:bb:f9:45:67:02:c9:25:4a:
90:e9:29:13:a8:dc:2a:92:80:d3:66:ac:27:64:9c:
31:6f:c6:c4:8c:81:49:62:71:b2:08:50:e6:eb:4c:
45:01:06:bd:fb:35:79:f6:ac:4b:54:00:e3:90:ee:
62:f0:3a:83:6e:71:4b:e9:46:a2:e5:cf:54:de:56:
2e:45:d0:02:7a:a5:b8:14:7f:10:ec:11:4e:03:00:
9f:47:a0:0f:52:87:39:56:e3:c1:33:04:ed:cd:0d:
8b:0e:cf:2d:30:ef:89:9d:0f:86:6a:a6:1d:fe:a7:
25:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:D6:C5:DA:34:DE:1F:20:30:E0:51:5A:D4:E8:5D:80:9A:22:C4:3A
X509v3 Authority Key Identifier:
keyid:EC:1D:B3:CB:7C:E6:16:27:48:BA:29:56:BC:17:06:44:65:61:D6:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TOPCHINA/0/EC1DB3CB7CE6162748BA2956BC1706446561D664.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EC1DB3CB7CE6162748BA2956BC1706446561D664.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TOPCHINA/0/EC1DB3CB7CE6162748BA2956BC1706446561D664.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:78:32:7d:b6:ed:3b:77:0b:7b:78:db:bb:78:71:1e:f8:26:
4e:0d:4a:b9:be:28:24:66:be:0d:8a:f3:b2:e8:0b:d5:79:97:
9f:42:f0:fe:68:95:d5:b4:cf:81:2f:fd:e9:aa:3d:6f:d3:7c:
33:af:dd:07:1c:88:07:53:1f:00:21:42:2c:a1:ab:53:ee:0d:
ee:a1:24:9f:fd:67:f9:b0:84:dd:1a:6d:6f:30:68:2d:da:4b:
f0:16:26:98:59:25:7e:79:0a:a1:f5:0d:df:e9:26:5a:b9:bb:
5a:a8:32:02:2f:af:fa:b8:5f:60:5f:fc:cc:b1:5c:00:03:2d:
b1:b8:78:e8:f9:78:83:5f:56:95:e8:e9:67:20:60:50:f4:2b:
c0:f8:06:45:64:13:5c:6b:f1:80:82:06:18:a5:3c:68:c9:83:
cc:de:64:3d:fa:62:62:10:71:ce:f3:08:b1:4e:d2:80:89:e1:
97:d8:d0:af:48:02:13:86:98:24:1f:cc:44:c5:a2:71:97:7e:
f3:d9:ad:08:02:29:77:df:22:b9:69:76:e7:de:92:74:4f:e1:
6f:61:38:e8:84:5b:22:60:3d:02:42:f5:a0:5f:39:9a:72:93:
7a:9d:a5:a8:49:bf:d8:8f:f3:8d:93:c0:53:aa:f5:da:35:67:
d5:aa:3f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:31:04 2026 by rpki-client