
$ rpki-client -vvvf rpkica.twnic.tw/rpki/CHUANGLI/0/295FAD27AFED0134764CB0F6CA702AF930C0AC18.mft
File: 295FAD27AFED0134764CB0F6CA702AF930C0AC18.mft (raw, json)
Hash identifier: gm0FtsuOySTQrqmCA48qP995NlILpuj0BzJeOFrU4S8=
Subject key identifier: DA:BB:F8:45:8B:8D:B8:0D:DE:EC:DE:4A:7C:E6:48:AE:11:ED:BF:3D
Authority key identifier: 29:5F:AD:27:AF:ED:01:34:76:4C:B0:F6:CA:70:2A:F9:30:C0:AC:18
Certificate issuer: /CN=295FAD27AFED0134764CB0F6CA702AF930C0AC18
Certificate serial: 0E5D739E20F388726B20169DB688915DF0DFC4C2
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/295FAD27AFED0134764CB0F6CA702AF930C0AC18.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CHUANGLI/0/295FAD27AFED0134764CB0F6CA702AF930C0AC18.mft
Manifest number: F3
Signing time: Tue 10 Nov 2026 00:56:59 +0000
Manifest this update: Tue 10 Nov 2026 00:51:59 +0000
Manifest next update: Wed 11 Nov 2026 02:55:59 +0000
Files and hashes: 1: 295FAD27AFED0134764CB0F6CA702AF930C0AC18.crl (hash: +Nk9uyvoFzRWXNteMN6f/qq4B6wAYkvTY99R3Mz+iz0=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/CHUANGLI/0/295FAD27AFED0134764CB0F6CA702AF930C0AC18.crl
rsync://rpkica.twnic.tw/rpki/CHUANGLI/0/295FAD27AFED0134764CB0F6CA702AF930C0AC18.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/295FAD27AFED0134764CB0F6CA702AF930C0AC18.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 11 Nov 2026 02:10:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:5d:73:9e:20:f3:88:72:6b:20:16:9d:b6:88:91:5d:f0:df:c4:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295FAD27AFED0134764CB0F6CA702AF930C0AC18
Validity
Not Before: Nov 10 00:51:59 2026 GMT
Not After : Nov 11 02:55:59 2026 GMT
Subject: CN=DABBF8458B8DB80DDEECDE4A7CE648AE11EDBF3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:50:e8:2d:61:17:41:73:03:78:6a:9e:ba:2c:
50:ef:63:99:9e:87:0f:7e:88:9d:b7:53:43:6b:5b:
53:c9:b5:01:db:e0:cd:46:22:92:a5:2b:00:5e:5d:
ca:e3:86:a8:84:77:5b:82:a4:1d:1d:35:51:33:b1:
d3:6f:2c:76:9e:07:3b:2b:7e:bc:51:7b:4f:19:2f:
4c:18:ee:4e:1a:60:03:d6:d5:44:b9:f1:4d:75:9e:
7a:ab:6a:6f:b4:86:84:3b:df:02:ec:b4:d9:0a:8f:
93:b3:3f:fa:ca:0b:1d:8b:e1:9f:75:46:7d:dd:99:
d7:a1:2c:ca:62:9d:c6:f1:8c:90:fc:da:d3:05:fd:
6f:5c:d0:7b:2e:2d:3b:02:5d:c7:a5:23:5d:7e:c5:
34:4b:59:41:ee:b8:c7:42:11:79:7d:a3:2f:eb:b6:
b1:0c:aa:19:54:61:c6:d6:df:38:e6:1d:c6:e2:13:
42:3c:62:dc:a9:56:4a:72:a8:36:b7:68:82:d6:ca:
ca:c2:66:e1:cf:de:bf:f4:ef:fd:2d:ea:2a:fe:3a:
6f:bc:52:ab:c3:97:3c:2e:72:e1:f6:6c:99:02:d4:
ef:12:30:90:e1:33:24:c0:77:f8:9d:84:99:07:2c:
84:d7:c0:01:46:40:2b:5e:d4:a6:80:95:b6:95:66:
da:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:BB:F8:45:8B:8D:B8:0D:DE:EC:DE:4A:7C:E6:48:AE:11:ED:BF:3D
X509v3 Authority Key Identifier:
keyid:29:5F:AD:27:AF:ED:01:34:76:4C:B0:F6:CA:70:2A:F9:30:C0:AC:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CHUANGLI/0/295FAD27AFED0134764CB0F6CA702AF930C0AC18.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/295FAD27AFED0134764CB0F6CA702AF930C0AC18.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHUANGLI/0/295FAD27AFED0134764CB0F6CA702AF930C0AC18.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:ea:d6:e3:2f:d3:ff:e4:1b:b6:f5:73:61:d3:9d:83:eb:5f:
0f:d2:26:e8:09:a7:f4:46:2c:3a:51:bd:bf:21:d7:5c:69:78:
88:8d:5f:b4:de:ec:9a:2a:b7:27:94:82:58:bf:c6:50:df:58:
f3:9e:7a:cf:7b:08:f8:7e:e1:6c:21:1d:c5:7b:a6:be:e6:62:
f2:f2:5c:ef:8b:3e:d3:02:c8:79:b6:10:7e:28:ad:be:c9:28:
1b:60:b4:bd:3c:d6:77:c9:19:8f:a4:be:65:94:31:61:1a:40:
1d:06:23:d8:db:2e:42:fd:26:1d:d8:9b:a1:8a:d3:3a:80:1c:
60:b6:19:4c:41:3f:9f:8c:af:cf:22:ee:c0:96:67:16:81:54:
63:59:3d:76:3d:8a:81:07:36:fa:ac:81:9e:ad:e5:c9:3b:de:
ad:73:4f:b8:01:e0:9d:29:2e:63:48:fd:33:ac:54:d5:03:c5:
2b:68:2f:02:a6:da:9e:fe:8e:7b:a4:98:eb:8d:43:f7:92:aa:
14:29:90:f5:3d:f5:46:1e:c0:da:d4:8c:51:5a:35:da:f7:0d:
58:2b:85:a7:35:13:5d:aa:b9:5a:a8:b7:b1:df:d3:9a:a8:00:
6c:f4:6d:61:b8:e3:87:1d:85:27:68:9f:95:4f:78:be:74:93:
19:35:54:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 07:12:05 2026 by rpki-client