
$ rpki-client -vvf rpkica.twnic.tw/rpki/ARCHE/0/CAD362F3BFAFE5B9307917E23B93FE8D0393085C.mft
File: CAD362F3BFAFE5B9307917E23B93FE8D0393085C.mft (raw, json)
Hash identifier: yCAc4dT1bblyXbmhbvkZ0jg54Bj4fmKgX3LK6wAcEh8=
Subject key identifier: F3:94:05:4F:05:C0:E8:17:C6:9F:79:68:96:D7:A0:EF:44:F8:D7:22
Authority key identifier: CA:D3:62:F3:BF:AF:E5:B9:30:79:17:E2:3B:93:FE:8D:03:93:08:5C
Certificate issuer: /CN=CAD362F3BFAFE5B9307917E23B93FE8D0393085C
Certificate serial: 095DC1C3D2D8F20787D9D955C76AC1391CEE75F8
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CAD362F3BFAFE5B9307917E23B93FE8D0393085C.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/ARCHE/0/CAD362F3BFAFE5B9307917E23B93FE8D0393085C.mft
Manifest number: 2E
Signing time: Fri 12 Jun 2026 18:22:39 +0000
Manifest this update: Fri 12 Jun 2026 18:17:39 +0000
Manifest next update: Sat 13 Jun 2026 21:25:39 +0000
Files and hashes: 1: CAD362F3BFAFE5B9307917E23B93FE8D0393085C.crl (hash: ECKQGqi520+sM/0yAt2/ywys6TgDFuhTcbYdProI6ZY=)
2: 323430313a376136303a3a2f33322d3332203d3e203138303431.roa (hash: qxUkmVDTlYC49rIGKj7zr8ivSmLfXGtp1JCdVnCFlN8=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/ARCHE/0/CAD362F3BFAFE5B9307917E23B93FE8D0393085C.crl
rsync://rpkica.twnic.tw/rpki/ARCHE/0/CAD362F3BFAFE5B9307917E23B93FE8D0393085C.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CAD362F3BFAFE5B9307917E23B93FE8D0393085C.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 21:25:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:5d:c1:c3:d2:d8:f2:07:87:d9:d9:55:c7:6a:c1:39:1c:ee:75:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CAD362F3BFAFE5B9307917E23B93FE8D0393085C
Validity
Not Before: Jun 12 18:17:39 2026 GMT
Not After : Jun 13 21:25:39 2026 GMT
Subject: CN=F394054F05C0E817C69F796896D7A0EF44F8D722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3b:4c:11:5c:47:6e:23:16:67:d6:21:36:21:
81:a0:04:7a:b5:99:e5:9a:de:94:aa:f4:af:3b:77:
d6:c4:b5:e2:71:9f:92:61:a8:0c:da:0f:32:87:ea:
40:da:90:e6:3a:96:19:c9:e1:9d:76:5a:94:18:e1:
0e:4e:4a:68:f8:22:11:97:12:4e:a8:82:bc:4f:de:
04:eb:71:e1:dd:b9:ec:93:af:ae:c3:ed:e0:b5:20:
bc:8f:d8:1a:e0:77:a7:a0:73:73:04:6c:89:49:75:
21:71:06:ef:b4:6f:28:48:d2:b2:ec:16:b7:c4:19:
bb:b8:b4:ef:86:13:13:0d:99:a0:10:e2:e4:c6:d4:
97:34:58:29:93:6f:3b:25:f9:63:ae:3f:c4:d0:db:
3c:3a:ee:93:58:32:d1:50:b3:49:63:89:84:22:cd:
4a:81:16:13:5c:a3:14:98:17:71:16:ee:00:03:9e:
20:ac:be:5b:c0:6d:8b:a0:24:6a:c5:d4:5f:15:a6:
99:d9:2e:52:8e:31:eb:ec:70:37:1a:75:c7:36:73:
29:97:aa:bd:38:fe:50:32:32:8d:da:11:6b:d1:70:
c3:05:34:2e:90:fb:e8:0b:05:bb:70:f5:30:ad:63:
20:53:25:78:69:9c:c3:b6:2a:ba:90:64:b2:09:63:
2c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:94:05:4F:05:C0:E8:17:C6:9F:79:68:96:D7:A0:EF:44:F8:D7:22
X509v3 Authority Key Identifier:
keyid:CA:D3:62:F3:BF:AF:E5:B9:30:79:17:E2:3B:93:FE:8D:03:93:08:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/ARCHE/0/CAD362F3BFAFE5B9307917E23B93FE8D0393085C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CAD362F3BFAFE5B9307917E23B93FE8D0393085C.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ARCHE/0/CAD362F3BFAFE5B9307917E23B93FE8D0393085C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:46:69:d9:ae:61:cc:5e:5a:10:4d:1b:69:bd:51:e7:7c:bb:
34:3f:9e:8a:ff:87:69:65:25:a1:d4:16:ac:8d:9c:6a:e4:63:
5b:8b:61:15:89:b6:53:ea:16:0e:ae:0b:06:9d:e9:e5:f2:35:
4c:cb:a0:30:3c:50:24:62:5f:6b:3b:f6:33:01:8e:ff:ac:f0:
40:cc:00:e7:71:a7:4a:97:ed:31:9f:2d:f2:5b:bb:0b:f1:00:
ad:92:ef:23:fd:1c:c8:29:42:88:4e:98:1f:5f:15:e0:90:0e:
92:1f:ce:33:be:9f:69:5b:9c:1e:2b:e2:ac:56:c5:98:71:7c:
bb:a8:85:45:aa:e3:93:12:ee:d8:8d:0e:f4:f0:15:b7:49:dd:
17:92:81:32:f3:9e:51:32:6c:be:a7:78:6e:b4:af:e4:03:d2:
5d:ad:ca:40:d9:5b:8a:a9:19:e0:ec:af:05:8f:73:5d:e0:d1:
58:ba:1a:64:31:49:7f:00:76:16:36:ff:ed:d0:0a:bc:21:0c:
d9:1f:8f:00:95:34:7a:ed:02:5a:18:4f:86:87:b4:74:46:cb:
ff:12:b7:bf:5a:46:51:12:ab:83:24:90:c1:e3:9c:5c:b3:f1:
2a:87:17:4a:32:fa:e3:f5:76:f4:64:30:41:e4:7f:42:fd:5b:
c1:65:e9:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:17:03 2026 by rpki-client