
$ rpki-client -vvf rpkica.twnic.tw/rpki/CXT/0/2E8003B145695D652CFF3D58625D3B0A3535AD84.mft
File: 2E8003B145695D652CFF3D58625D3B0A3535AD84.mft (raw, json)
Hash identifier: hNtplWz+hdTQ2ETOVzKTutyaVP65gawmr+eVgtr5DbA=
Subject key identifier: 0F:D3:0A:4C:46:3E:3F:2A:FF:76:03:FB:E7:09:DB:E5:D1:51:DD:42
Authority key identifier: 2E:80:03:B1:45:69:5D:65:2C:FF:3D:58:62:5D:3B:0A:35:35:AD:84
Certificate issuer: /CN=2E8003B145695D652CFF3D58625D3B0A3535AD84
Certificate serial: 16483E9D027F1C0E8C3CDF3E93BBAC50AD11894D
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2E8003B145695D652CFF3D58625D3B0A3535AD84.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CXT/0/2E8003B145695D652CFF3D58625D3B0A3535AD84.mft
Manifest number: 2C
Signing time: Sat 13 Jun 2026 03:38:54 +0000
Manifest this update: Sat 13 Jun 2026 03:33:54 +0000
Manifest next update: Sun 14 Jun 2026 03:55:54 +0000
Files and hashes: 1: 2E8003B145695D652CFF3D58625D3B0A3535AD84.crl (hash: CtngSNnkdCEZoN1CtWz1RklLSTbNGe4n0WKCNgdsQhI=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/CXT/0/2E8003B145695D652CFF3D58625D3B0A3535AD84.crl
rsync://rpkica.twnic.tw/rpki/CXT/0/2E8003B145695D652CFF3D58625D3B0A3535AD84.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2E8003B145695D652CFF3D58625D3B0A3535AD84.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 00:20:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:48:3e:9d:02:7f:1c:0e:8c:3c:df:3e:93:bb:ac:50:ad:11:89:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E8003B145695D652CFF3D58625D3B0A3535AD84
Validity
Not Before: Jun 13 03:33:54 2026 GMT
Not After : Jun 14 03:55:54 2026 GMT
Subject: CN=0FD30A4C463E3F2AFF7603FBE709DBE5D151DD42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2e:b3:cc:ee:06:bb:df:58:bc:29:78:36:23:
1d:b4:b7:07:91:57:a0:b5:f8:ad:1c:a9:98:21:86:
c8:a8:1e:ab:a9:2a:75:82:2c:89:b6:8d:df:0f:bc:
74:1a:b5:d3:07:a7:4a:10:bf:d3:48:5f:7d:09:6f:
86:d5:50:24:31:e8:99:3e:37:4d:63:4d:13:e5:83:
d1:fc:da:2a:6c:4f:3e:e0:d1:a6:de:bd:fa:f6:4d:
3e:e5:fe:f4:92:c5:a8:75:f3:68:4c:fb:f6:2f:6a:
0e:4a:82:0c:73:10:9d:b2:45:6f:2d:0b:c9:4f:d9:
53:d8:52:f3:5a:f3:12:e1:88:6e:97:3b:d2:45:9f:
7f:e2:2b:64:dd:36:27:ee:e4:5d:86:e0:0f:7a:35:
1d:79:c5:e3:c0:79:9c:d1:c4:b2:45:ef:24:58:d6:
30:2c:a5:c1:7f:98:41:63:33:6e:15:99:e6:33:76:
a5:24:86:8b:52:65:6b:60:88:e1:a1:f4:df:7d:04:
cf:3f:54:19:9f:66:1f:a3:15:c5:16:79:85:eb:cb:
8c:49:8a:9a:5c:af:4a:99:14:ca:3e:ce:7f:ec:df:
a7:09:d9:ed:3f:be:3e:42:8f:c0:ce:d9:91:9d:21:
59:65:93:b7:19:68:90:86:45:66:b0:27:c5:74:15:
f6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:D3:0A:4C:46:3E:3F:2A:FF:76:03:FB:E7:09:DB:E5:D1:51:DD:42
X509v3 Authority Key Identifier:
keyid:2E:80:03:B1:45:69:5D:65:2C:FF:3D:58:62:5D:3B:0A:35:35:AD:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CXT/0/2E8003B145695D652CFF3D58625D3B0A3535AD84.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2E8003B145695D652CFF3D58625D3B0A3535AD84.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CXT/0/2E8003B145695D652CFF3D58625D3B0A3535AD84.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:2f:ee:31:76:44:57:bb:5d:9f:19:7b:3e:8c:54:a9:37:0a:
29:69:34:df:bd:3a:a9:e8:58:1e:53:09:1e:91:1a:f2:f2:f2:
24:a0:50:75:1b:6e:7f:9e:c0:e0:50:d8:f9:5b:56:a9:96:08:
4f:49:46:08:a7:17:a7:5d:6c:0e:c4:7b:65:de:85:0b:82:4e:
f5:ad:bd:f7:95:95:1a:8a:08:10:e1:07:24:a1:e1:60:c5:ce:
74:96:a5:d5:6b:a4:37:12:a5:d8:bf:6b:59:0a:84:8e:f3:b4:
68:e6:8f:20:96:50:8f:3b:b5:79:ef:fe:e7:59:38:06:73:92:
c3:86:eb:ad:77:ea:35:8e:62:5f:e6:55:b7:b2:50:e9:f7:10:
2f:e0:04:a7:65:01:c5:43:47:c6:d9:46:65:a1:7d:ec:5a:90:
40:2f:49:15:6e:26:db:13:8b:fe:24:b5:22:ce:35:e1:9f:5c:
f9:58:5e:2a:39:83:c4:ad:6b:2b:e4:c8:66:55:84:aa:42:05:
9f:70:87:21:0b:0c:38:47:78:8a:0b:d3:fa:41:a5:39:a9:9e:
5e:f1:03:19:14:2a:c0:dd:5b:70:f4:d1:18:4c:55:fb:33:9b:
2e:08:65:5d:20:a3:9a:e2:3d:29:ba:cc:f7:3c:73:47:78:02:
73:e2:59:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:17:03 2026 by rpki-client