
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GMICLOUD_P/aDMC32pZIOL4OsTvdmVt3OhA9ZM.mft
File: aDMC32pZIOL4OsTvdmVt3OhA9ZM.mft (raw, json)
Hash identifier: Uzg6vhMfdmP5IXHzCZ2DfDbKzInMw803U3ZVm+E9edU=
Subject key identifier: 8D:21:A4:B3:97:4B:0B:F7:AA:F6:C9:D1:3A:27:BC:B2:94:95:C0:67
Authority key identifier: 68:33:02:DF:6A:59:20:E2:F8:3A:C4:EF:76:65:6D:DC:E8:40:F5:93
Certificate issuer: /CN=683302DF6A5920E2F83AC4EF76656DDCE840F593
Certificate serial: 012C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/aDMC32pZIOL4OsTvdmVt3OhA9ZM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GMICLOUD_P/aDMC32pZIOL4OsTvdmVt3OhA9ZM.mft
Manifest number: 012C
Signing time: Thu 26 Mar 2026 17:58:18 +0000
Manifest this update: Thu 26 Mar 2026 17:58:18 +0000
Manifest next update: Thu 26 Mar 2026 23:58:18 +0000
Files and hashes: 1: aDMC32pZIOL4OsTvdmVt3OhA9ZM.crl (hash: ULEH6p7qj2gtUwY9c4Kbe4XVPnVnZ2zFDEakHrWnJz4=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/GMICLOUD_P/aDMC32pZIOL4OsTvdmVt3OhA9ZM.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/GMICLOUD_P/aDMC32pZIOL4OsTvdmVt3OhA9ZM.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/aDMC32pZIOL4OsTvdmVt3OhA9ZM.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0dL1XCbbKFIKeZb_cu0BBCAHmKI.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Mar 2026 23:58:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 300 (0x12c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=683302DF6A5920E2F83AC4EF76656DDCE840F593
Validity
Not Before: Mar 26 17:58:18 2026 GMT
Not After : Jan 27 15:30:18 2027 GMT
Subject: CN=8D21A4B3974B0BF7AAF6C9D13A27BCB29495C067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:dc:64:98:41:09:03:a8:00:65:a2:f4:14:34:
a5:84:77:90:52:53:7a:0f:11:9d:79:01:da:67:f3:
d7:9e:45:8b:00:cf:1a:b5:38:11:e9:11:2d:c2:6e:
32:18:ee:b1:76:06:b1:50:e2:86:bd:fc:69:f9:b5:
46:42:e2:1e:0b:cb:1e:6a:97:96:1a:75:ff:80:99:
cd:f4:13:c4:b4:f9:d1:a6:2d:26:89:c9:76:f2:25:
e8:a7:2c:04:a7:32:cf:51:0e:c7:30:5b:98:8d:ce:
06:c9:c8:35:58:32:cb:25:49:47:47:33:32:96:c7:
88:67:71:17:dd:c6:93:51:2a:ef:a0:38:f6:06:65:
8d:60:aa:1b:e8:00:aa:a3:5b:03:49:70:f7:84:80:
53:9b:13:f5:70:86:b3:60:53:b5:6d:1e:c6:cc:b2:
bc:d9:b7:d7:a4:08:67:1f:79:35:d0:f2:6f:fb:83:
8e:2e:ba:6b:e8:60:69:2a:31:8e:19:fd:97:f0:4d:
02:3f:76:da:db:73:b0:f2:f4:e1:11:5d:96:3f:c8:
c2:03:be:d4:1f:3b:ae:a6:84:76:f7:d6:bb:fc:1b:
ae:81:44:24:28:6b:90:11:d5:b5:d3:df:8e:46:f4:
72:d7:2f:cb:b3:74:4e:0b:7a:3e:b2:5a:69:83:7f:
50:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:21:A4:B3:97:4B:0B:F7:AA:F6:C9:D1:3A:27:BC:B2:94:95:C0:67
X509v3 Authority Key Identifier:
keyid:68:33:02:DF:6A:59:20:E2:F8:3A:C4:EF:76:65:6D:DC:E8:40:F5:93
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GMICLOUD_P/aDMC32pZIOL4OsTvdmVt3OhA9ZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/aDMC32pZIOL4OsTvdmVt3OhA9ZM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GMICLOUD_P/aDMC32pZIOL4OsTvdmVt3OhA9ZM.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:00:a0:d3:28:ad:97:80:a2:96:40:7b:78:f3:49:a8:ec:28:
a3:76:56:bd:09:bd:42:e0:73:df:28:81:43:c4:7c:df:0f:1f:
ba:f9:b2:7d:47:be:42:f4:3e:8f:74:64:0d:ee:ac:33:3a:ba:
0b:55:a1:23:39:87:1c:1c:ec:b4:b2:41:de:f9:b5:95:12:d9:
f5:8a:1f:29:d7:88:5f:e4:0c:dc:b0:d0:1f:2b:24:59:0b:ab:
3f:f2:df:8f:4c:9f:84:87:7e:1a:ea:3e:a7:5d:c9:4f:b1:45:
42:0f:2f:66:c1:fe:9d:b7:4f:9a:ad:7f:5d:8e:7f:16:ba:a7:
3a:c7:be:cb:fe:a1:4f:82:85:b4:30:4e:1e:db:6c:70:61:c0:
a6:bf:f3:d4:18:54:c3:42:da:1a:3c:31:22:85:76:63:3e:af:
87:d4:58:52:2b:1c:d4:fb:91:83:51:d8:19:90:e1:1b:7f:7f:
87:6a:68:84:76:e2:bb:52:d9:b3:82:be:f4:94:f3:d7:60:91:
9c:e6:eb:fe:b7:fd:20:f0:7f:dd:c2:69:c6:f4:8d:b4:5a:9f:
cb:ef:20:66:f4:e7:ab:80:d7:a0:45:4f:a8:08:76:e0:fe:06:
08:78:79:0a:ce:f0:7d:d6:7b:67:58:15:7e:ed:14:63:2f:1c:
60:e8:31:fc
-----BEGIN CERTIFICATE-----
MIIE8zCCA9ugAwIBAgICASwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjgz
MzAyREY2QTU5MjBFMkY4M0FDNEVGNzY2NTZERENFODQwRjU5MzAeFw0yNjAzMjYx
NzU4MThaFw0yNzAxMjcxNTMwMThaMDMxMTAvBgNVBAMTKDhEMjFBNEIzOTc0QjBC
RjdBQUY2QzlEMTNBMjdCQ0IyOTQ5NUMwNjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDa3GSYQQkDqABlovQUNKWEd5BSU3oPEZ15Adpn89eeRYsAzxq1
OBHpES3CbjIY7rF2BrFQ4oa9/Gn5tUZC4h4Lyx5ql5Yadf+Amc30E8S0+dGmLSaJ
yXbyJeinLASnMs9RDscwW5iNzgbJyDVYMsslSUdHMzKWx4hncRfdxpNRKu+gOPYG
ZY1gqhvoAKqjWwNJcPeEgFObE/VwhrNgU7VtHsbMsrzZt9ekCGcfeTXQ8m/7g44u
umvoYGkqMY4Z/ZfwTQI/dtrbc7Dy9OERXZY/yMIDvtQfO66mhHb31rv8G66BRCQo
a5AR1bXT345G9HLXL8uzdE4Lej6yWmmDf1CNAgMBAAGjggIPMIICCzAdBgNVHQ4E
FgQUjSGks5dLC/eq9snROie8spSVwGcwHwYDVR0jBBgwFoAUaDMC32pZIOL4OsTv
dmVt3OhA9ZMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg
U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvR01JQ0xP
VURfUC9hRE1DMzJwWklPTDRPc1R2ZG1WdDNPaEE5Wk0uY3JsMGAGCCsGAQUFBwEB
BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U
V05JQ0NBL2FETUMzMnBaSU9MNE9zVHZkbVZ0M09oQTlaTS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y
cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL0dNSUNMT1VEX1AvYURNQzMycFpJ
T0w0T3NUdmRtVnQzT2hBOVpNLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw
LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAIoAoNMorZeAopZAe3jzSajsKKN2Vr0JvULgc98ogUPEfN8PH7r5sn1H
vkL0Po90ZA3urDM6ugtVoSM5hxwc7LSyQd75tZUS2fWKHynXiF/kDNyw0B8rJFkL
qz/y349Mn4SHfhrqPqddyU+xRUIPL2bB/p23T5qtf12Ofxa6pzrHvsv+oU+ChbQw
Th7bbHBhwKa/89QYVMNC2ho8MSKFdmM+r4fUWFIrHNT7kYNR2BmQ4Rt/f4dqaIR2
4rtS2bOCvvSU89dgkZzm6/63/SDwf93Cacb0jbRan8vvIGb056uA16BFT6gIduD+
Bgh4eQrO8H3We2dYFX7tFGMvHGDoMfw=
-----END CERTIFICATE-----
Generated at Thu Mar 26 23:14:24 2026 by rpki-client