
$ rpki-client -vvf rpkica.twnic.tw/rpki/CHUAN-CHAN/1/95B1A62479B36C1414FF17CE759F45E2E7E421A3.mft
File: 95B1A62479B36C1414FF17CE759F45E2E7E421A3.mft (raw, json)
Hash identifier: MPJAqh4HRvlkuYpRWBVbaspQzRl0bkDrdDhY+Fud1Iw=
Subject key identifier: 64:6B:28:0B:99:83:AD:78:CE:01:AE:59:6C:0D:8C:B0:7D:1C:09:E0
Authority key identifier: 95:B1:A6:24:79:B3:6C:14:14:FF:17:CE:75:9F:45:E2:E7:E4:21:A3
Certificate issuer: /CN=95B1A62479B36C1414FF17CE759F45E2E7E421A3
Certificate serial: 030514422CDF769FF272D027B1CF8AF2888CDC06
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/2/95B1A62479B36C1414FF17CE759F45E2E7E421A3.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/1/95B1A62479B36C1414FF17CE759F45E2E7E421A3.mft
Manifest number: 75
Signing time: Tue 28 Jul 2026 15:09:15 +0000
Manifest this update: Tue 28 Jul 2026 15:04:15 +0000
Manifest next update: Wed 29 Jul 2026 16:23:15 +0000
Files and hashes: 1: 95B1A62479B36C1414FF17CE759F45E2E7E421A3.crl (hash: u4pgrlvG/i7he/KSnMbR60oa9GUQQ4rWRuP3hzdQlpo=)
2: 3138372e37392e3232342e302f32302d3234203d3e203138303436.roa (hash: a4aDafUrsQCLesXMzcaRXwN1eTgcdL6Z2dzVNg6CuYE=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/1/95B1A62479B36C1414FF17CE759F45E2E7E421A3.crl
rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/1/95B1A62479B36C1414FF17CE759F45E2E7E421A3.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/2/95B1A62479B36C1414FF17CE759F45E2E7E421A3.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 06:32:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:05:14:42:2c:df:76:9f:f2:72:d0:27:b1:cf:8a:f2:88:8c:dc:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95B1A62479B36C1414FF17CE759F45E2E7E421A3
Validity
Not Before: Jul 28 15:04:15 2026 GMT
Not After : Jul 29 16:23:15 2026 GMT
Subject: CN=646B280B9983AD78CE01AE596C0D8CB07D1C09E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:cb:21:fa:ef:6d:57:38:85:55:fa:62:af:ec:
79:eb:b5:80:31:e9:d0:31:96:7c:18:9a:f3:e3:20:
3e:27:6f:96:e0:f8:d2:aa:81:4e:46:0a:55:1b:1d:
5b:66:8c:67:88:a8:ef:a9:ba:fa:d8:0a:ea:73:0b:
a0:90:38:c3:aa:25:9c:b2:a3:8f:38:94:38:1a:16:
a1:da:36:e7:48:8a:83:7c:44:fc:53:e1:17:68:3e:
89:41:06:6f:d9:ca:52:38:0f:9f:81:6c:f9:99:b1:
67:63:c5:17:23:4b:95:1e:51:66:a1:44:9d:94:e6:
27:9e:ac:fd:4e:6f:bb:fd:9e:84:33:71:11:8d:67:
e9:e4:4f:4e:f7:0e:9c:cf:41:e7:c0:c7:dd:c5:51:
b3:89:c3:95:99:91:69:6f:b1:84:18:1c:68:d6:1f:
39:4b:ab:7b:bc:3e:d7:e3:b8:5d:4f:f6:b4:90:8a:
9a:7f:71:05:fc:71:81:bb:97:3c:57:ba:da:4f:5e:
57:f7:a4:71:46:4c:55:c8:65:d8:f7:2d:e8:37:7a:
a7:d9:0d:19:e4:61:09:c3:40:24:d4:a1:e5:04:e1:
89:5d:55:bd:f2:a6:ed:3e:fc:8d:c4:10:8f:2c:93:
7b:c8:75:a1:47:3f:f6:9a:c5:6a:99:96:76:3f:ae:
d6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:6B:28:0B:99:83:AD:78:CE:01:AE:59:6C:0D:8C:B0:7D:1C:09:E0
X509v3 Authority Key Identifier:
keyid:95:B1:A6:24:79:B3:6C:14:14:FF:17:CE:75:9F:45:E2:E7:E4:21:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/1/95B1A62479B36C1414FF17CE759F45E2E7E421A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2/95B1A62479B36C1414FF17CE759F45E2E7E421A3.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/1/95B1A62479B36C1414FF17CE759F45E2E7E421A3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:dd:e0:1b:f9:27:8f:e2:6c:74:85:22:75:24:70:6d:0b:1e:
bd:c0:0f:c0:c3:24:62:4b:54:b4:01:00:d5:27:95:6d:f7:48:
67:ef:7b:9a:76:bf:07:d2:a9:15:03:14:e4:c2:a8:49:9a:eb:
14:67:4f:c1:35:15:a1:50:f7:72:8e:29:04:29:a0:f1:5f:24:
94:3e:47:ad:0a:fb:36:4c:df:4c:01:c9:50:81:cb:57:4e:d1:
f9:bf:2a:d5:83:e1:f8:54:cd:da:e2:54:56:ee:e0:9f:20:50:
89:9d:2d:ed:50:ff:00:6b:b7:07:f3:81:74:bf:d6:30:f9:45:
0e:df:a3:7e:17:e4:38:b2:7c:64:02:fc:67:47:8e:ea:c5:be:
7e:e2:86:82:88:b9:55:e0:a2:91:25:b9:ce:3e:ff:58:ed:5d:
91:06:e0:b7:8c:47:56:d6:47:08:74:c4:59:fd:82:b0:fc:fb:
49:03:00:a6:74:37:97:36:ef:92:4e:dc:a0:54:33:34:ba:dc:
65:7a:af:a6:de:5d:69:71:e3:57:68:13:94:1b:39:75:eb:a4:
9d:82:ae:06:5c:7b:4c:8b:b9:b4:79:f7:36:33:99:9a:8b:1e:
ee:78:37:41:2b:89:c1:22:b7:ce:f3:92:92:f2:d5:95:08:fe:
f9:8c:de:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:43:04 2026 by rpki-client