
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GMICLOUD/jCH-vEkP9giqCpuTTqr2g05UUms.mft
File: jCH-vEkP9giqCpuTTqr2g05UUms.mft (raw, json)
Hash identifier: gtFJWZoNyHlJ5jEi3zMq/U2UIO3y0UPuU85l01Qg3/A=
Subject key identifier: 6C:40:07:38:AD:52:C4:5C:95:3F:10:B8:25:79:EC:42:E9:74:F5:3B
Authority key identifier: 8C:21:FE:BC:49:0F:F6:08:AA:0A:9B:93:4E:AA:F6:83:4E:54:52:6B
Certificate issuer: /CN=8C21FEBC490FF608AA0A9B934EAAF6834E54526B
Certificate serial: 01AF
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/jCH-vEkP9giqCpuTTqr2g05UUms.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GMICLOUD/jCH-vEkP9giqCpuTTqr2g05UUms.mft
Manifest number: 01AF
Signing time: Thu 26 Mar 2026 22:58:47 +0000
Manifest this update: Thu 26 Mar 2026 22:58:47 +0000
Manifest next update: Fri 27 Mar 2026 04:58:47 +0000
Files and hashes: 1: jCH-vEkP9giqCpuTTqr2g05UUms.crl (hash: lzOu3MNDozn0gvF6dKF7M1ydCuRkanYH9Ais7G3vAAs=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/GMICLOUD/jCH-vEkP9giqCpuTTqr2g05UUms.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/GMICLOUD/jCH-vEkP9giqCpuTTqr2g05UUms.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/jCH-vEkP9giqCpuTTqr2g05UUms.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 27 Mar 2026 03:59:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 431 (0x1af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8C21FEBC490FF608AA0A9B934EAAF6834E54526B
Validity
Not Before: Mar 26 22:58:47 2026 GMT
Not After : Nov 12 15:30:20 2026 GMT
Subject: CN=6C400738AD52C45C953F10B82579EC42E974F53B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c3:72:df:cc:fb:5b:90:95:4d:0e:e0:34:a0:
7b:8a:90:fc:fd:92:56:6f:13:85:b6:ce:9f:ef:ee:
9d:77:7a:45:15:c6:5f:9f:8d:5c:40:93:20:20:0a:
75:ad:b1:f0:f3:45:6e:a2:60:c5:12:31:2c:15:49:
5c:4e:23:f1:51:71:a0:6c:b1:46:e6:ba:c4:e1:b5:
cc:7d:7d:36:e6:9f:1f:bf:93:72:94:80:db:de:8c:
72:81:c7:a5:7d:64:32:20:f8:61:87:2d:27:b8:1f:
3e:e4:10:6a:bc:37:0c:87:cb:20:0c:10:84:e1:fa:
cd:8c:dc:6e:97:6d:d5:cf:ae:42:21:7d:b2:03:ee:
00:07:b8:bb:f2:a2:27:95:a1:2b:be:44:f4:b9:93:
7a:ec:52:84:a6:ee:f9:75:cf:2f:0d:ff:d7:84:55:
70:80:29:69:49:2e:bd:09:2c:11:d1:b4:2e:55:1a:
fc:db:07:5d:49:a2:42:61:b8:2d:27:59:78:e5:3c:
51:57:98:12:7d:5e:af:e3:33:03:fe:c5:9b:3c:b0:
2c:1b:98:3d:75:a2:52:f7:b7:62:75:ec:09:39:78:
52:13:47:bc:1e:18:cd:c3:71:86:69:0d:bf:68:f4:
1c:c4:b9:86:0b:a1:0c:96:1d:fa:b7:eb:99:a6:a4:
35:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:40:07:38:AD:52:C4:5C:95:3F:10:B8:25:79:EC:42:E9:74:F5:3B
X509v3 Authority Key Identifier:
keyid:8C:21:FE:BC:49:0F:F6:08:AA:0A:9B:93:4E:AA:F6:83:4E:54:52:6B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GMICLOUD/jCH-vEkP9giqCpuTTqr2g05UUms.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/jCH-vEkP9giqCpuTTqr2g05UUms.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GMICLOUD/jCH-vEkP9giqCpuTTqr2g05UUms.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:61:c7:5f:0b:f7:5a:9c:b2:8d:7e:46:d9:09:fe:4b:94:36:
40:b9:2c:45:a3:65:49:6f:ca:95:d1:75:a9:d5:ed:27:58:ab:
69:8b:68:b4:ca:75:1b:d2:a9:b3:66:5b:29:16:18:4d:dc:bb:
8e:db:03:69:6a:5f:7e:6c:21:03:28:6a:c9:c9:d6:dd:5d:32:
02:8d:b0:24:32:28:92:94:da:f5:4f:9e:c8:58:a7:26:5b:1f:
3c:91:70:50:9c:a0:72:91:66:8e:4c:83:91:c4:df:a9:06:e5:
f3:f8:46:53:88:51:7a:de:72:51:4f:a7:c7:ae:22:a1:90:e4:
81:5c:e5:b5:96:ca:a3:06:52:88:71:7f:f6:00:58:73:78:7b:
95:52:17:ac:16:2b:61:3f:47:26:bc:80:13:08:86:d1:0e:b6:
c2:6e:4e:f8:5e:e8:54:25:5a:23:71:77:35:17:96:4a:c8:2c:
67:ec:f0:4a:b5:40:f1:10:f3:9d:fd:7e:9a:eb:16:0c:db:15:
ea:7a:47:fb:98:b7:b9:6a:a9:0a:36:86:1d:0b:9d:19:c4:d3:
91:51:6a:98:28:ec:83:34:25:aa:b8:e0:fb:9a:66:38:4d:5f:
28:06:68:86:44:31:ec:da:4f:21:37:2c:e5:30:16:28:34:ad:
13:43:9a:61
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgICAa8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEMy
MUZFQkM0OTBGRjYwOEFBMEE5QjkzNEVBQUY2ODM0RTU0NTI2QjAeFw0yNjAzMjYy
MjU4NDdaFw0yNjExMTIxNTMwMjBaMDMxMTAvBgNVBAMTKDZDNDAwNzM4QUQ1MkM0
NUM5NTNGMTBCODI1NzlFQzQyRTk3NEY1M0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCnw3LfzPtbkJVNDuA0oHuKkPz9klZvE4W2zp/v7p13ekUVxl+f
jVxAkyAgCnWtsfDzRW6iYMUSMSwVSVxOI/FRcaBssUbmusThtcx9fTbmnx+/k3KU
gNvejHKBx6V9ZDIg+GGHLSe4Hz7kEGq8NwyHyyAMEITh+s2M3G6XbdXPrkIhfbID
7gAHuLvyoieVoSu+RPS5k3rsUoSm7vl1zy8N/9eEVXCAKWlJLr0JLBHRtC5VGvzb
B11JokJhuC0nWXjlPFFXmBJ9Xq/jMwP+xZs8sCwbmD11olL3t2J17Ak5eFITR7we
GM3DcYZpDb9o9BzEuYYLoQyWHfq365mmpDXdAgMBAAGjggILMIICBzAdBgNVHQ4E
FgQUbEAHOK1SxFyVPxC4JXnsQul09TswHwYDVR0jBBgwFoAUjCH+vEkP9giqCpuT
Tqr2g05UUmswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvR01JQ0xP
VUQvakNILXZFa1A5Z2lxQ3B1VFRxcjJnMDVVVW1zLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9qQ0gtdkVrUDlnaXFDcHVUVHFyMmcwNVVVbXMuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9HTUlDTE9VRC9qQ0gtdkVrUDlnaXFD
cHVUVHFyMmcwNVVVbXMubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAe2HHXwv3WpyyjX5G2Qn+S5Q2QLksRaNlSW/KldF1qdXtJ1iraYtotMp1G9Kp
s2ZbKRYYTdy7jtsDaWpffmwhAyhqycnW3V0yAo2wJDIokpTa9U+eyFinJlsfPJFw
UJygcpFmjkyDkcTfqQbl8/hGU4hRet5yUU+nx64ioZDkgVzltZbKowZSiHF/9gBY
c3h7lVIXrBYrYT9HJryAEwiG0Q62wm5O+F7oVCVaI3F3NReWSsgsZ+zwSrVA8RDz
nf1+musWDNsV6npH+5i3uWqpCjaGHQudGcTTkVFqmCjsgzQlqrjg+5pmOE1fKAZo
hkQx7NpPITcs5TAWKDStE0OaYQ==
-----END CERTIFICATE-----
Generated at Fri Mar 27 01:53:48 2026 by rpki-client