
$ rpki-client -vvvf rpkica.twnic.tw/rpki/CROWN/0/E4763E7E7DC8760889BF64C180AA4F95C50445AB.mft
File: E4763E7E7DC8760889BF64C180AA4F95C50445AB.mft (raw, json)
Hash identifier: KXmYyVVey2XPgVUlKEYvozhuSocmK/F+K0LJXJ9GwPc=
Subject key identifier: 13:63:96:E5:E2:C0:0E:49:69:45:BB:CD:1D:D6:3B:8A:25:CD:F7:22
Authority key identifier: E4:76:3E:7E:7D:C8:76:08:89:BF:64:C1:80:AA:4F:95:C5:04:45:AB
Certificate issuer: /CN=E4763E7E7DC8760889BF64C180AA4F95C50445AB
Certificate serial: 4ED73D1BA79D0733900F8F05CE73539B84468080
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E4763E7E7DC8760889BF64C180AA4F95C50445AB.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CROWN/0/E4763E7E7DC8760889BF64C180AA4F95C50445AB.mft
Manifest number: B4
Signing time: Mon 21 Sep 2026 16:32:38 +0000
Manifest this update: Mon 21 Sep 2026 16:27:38 +0000
Manifest next update: Tue 22 Sep 2026 18:47:38 +0000
Files and hashes: 1: E4763E7E7DC8760889BF64C180AA4F95C50445AB.crl (hash: r+uZoRg/2QFfDxUXwdQyc9iyXuz7QTSx0peJYIaXAag=)
2: 3130332e3235352e3231302e302f32332d3332203d3e20313331363432.roa (hash: FaPlqa1DeUZTg3kaDmHEbki3z5vF9i3TucSszJSHI3U=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/CROWN/0/E4763E7E7DC8760889BF64C180AA4F95C50445AB.crl
rsync://rpkica.twnic.tw/rpki/CROWN/0/E4763E7E7DC8760889BF64C180AA4F95C50445AB.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E4763E7E7DC8760889BF64C180AA4F95C50445AB.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 18:47:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:d7:3d:1b:a7:9d:07:33:90:0f:8f:05:ce:73:53:9b:84:46:80:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4763E7E7DC8760889BF64C180AA4F95C50445AB
Validity
Not Before: Sep 21 16:27:38 2026 GMT
Not After : Sep 22 18:47:38 2026 GMT
Subject: CN=136396E5E2C00E496945BBCD1DD63B8A25CDF722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fd:83:bd:58:fb:28:8a:ac:8f:b0:1d:4d:a8:
89:d1:f3:60:e7:88:5e:8d:15:1c:aa:90:c7:1c:1c:
68:bb:5a:1f:63:be:0b:a1:4d:e5:bc:b3:3f:89:91:
5b:17:18:30:47:67:3b:61:37:c4:36:be:08:bd:d7:
da:24:4d:6a:63:2c:51:a8:5e:bf:58:1c:12:f6:38:
e3:2a:d6:96:49:c6:c0:01:88:2a:0f:04:bf:6c:1c:
a9:e6:ef:85:31:d8:01:61:eb:cb:cb:36:ae:82:99:
92:8f:c1:4e:09:54:6c:c0:a4:9c:31:6e:91:a7:3e:
6b:11:ac:f9:bf:94:73:22:d7:62:98:56:03:a4:7c:
d9:e4:36:35:45:43:77:fc:24:ac:80:52:b1:43:77:
3c:76:3f:65:5c:df:5c:26:6d:9c:69:2b:95:2b:17:
a6:a0:26:ce:f6:b5:88:e9:d9:2c:ce:76:bb:43:f3:
87:ef:ef:0d:45:29:d9:a2:cb:ce:eb:9a:ac:38:40:
d9:77:93:ad:c9:55:77:e2:bb:f5:9a:58:c6:15:33:
a1:6d:f5:a0:4e:71:af:e4:9f:14:6e:c2:be:6e:73:
32:dc:46:57:33:0c:4c:71:a5:43:a9:2b:8d:51:77:
e4:2b:41:3e:d9:85:e7:74:6a:eb:43:f1:79:d9:9b:
37:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:63:96:E5:E2:C0:0E:49:69:45:BB:CD:1D:D6:3B:8A:25:CD:F7:22
X509v3 Authority Key Identifier:
keyid:E4:76:3E:7E:7D:C8:76:08:89:BF:64:C1:80:AA:4F:95:C5:04:45:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CROWN/0/E4763E7E7DC8760889BF64C180AA4F95C50445AB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E4763E7E7DC8760889BF64C180AA4F95C50445AB.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CROWN/0/E4763E7E7DC8760889BF64C180AA4F95C50445AB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:ef:f2:31:7a:ac:67:9e:86:71:92:12:d4:c4:4a:71:d0:6f:
25:c5:66:be:31:21:6d:df:bd:5e:57:7c:95:54:fc:b4:1e:d5:
90:9f:93:e3:d8:d8:7e:95:3b:04:ad:7d:17:3b:ea:09:4f:33:
88:e9:c5:d2:9c:f6:10:b3:61:b3:3a:7a:cf:8a:cf:d1:e7:f9:
f0:c9:a3:ea:d2:6b:77:17:db:1e:4f:2f:38:aa:62:97:2a:f0:
4d:6a:53:84:cf:1e:56:0c:30:2d:e6:65:21:98:42:92:39:02:
fd:3d:56:54:10:01:2c:bd:6a:73:67:e2:03:bc:09:57:33:12:
2f:09:91:96:02:81:b5:29:30:f6:d7:38:9a:18:c7:d1:29:5c:
19:1f:86:cf:a1:92:81:5e:25:ca:2a:bc:9b:69:7d:de:2b:20:
41:c4:0d:27:37:48:bc:4a:3d:55:d3:24:c5:88:38:1b:01:60:
ca:18:c5:0a:1e:f9:2a:cd:54:9b:aa:69:39:3d:b4:09:a8:e9:
75:ae:39:ff:b2:08:11:d4:6a:9e:64:ae:6d:29:d6:27:a7:0e:
a3:4c:57:cf:8e:73:ae:85:6c:94:28:00:0b:f1:13:1e:0c:7b:
40:c0:45:13:cc:72:0a:7d:5d:c6:7a:29:53:bd:79:e0:d0:6c:
fd:1d:b4:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:05:15 2026 by rpki-client