
$ rpki-client -vvvf rpkica.twnic.tw/rpki/DLER/0/8257DED1A3AE20532C5A9F8135AF34B9476B685C.mft
File: 8257DED1A3AE20532C5A9F8135AF34B9476B685C.mft (raw, json)
Hash identifier: ijZBgQ1awi8OcC+4SMr9CCXjvP0Vn4guhXC4e2wQUNM=
Subject key identifier: 75:B3:9E:6E:CA:EF:BA:55:AD:30:21:5E:65:B0:A3:7A:D3:2E:E3:21
Authority key identifier: 82:57:DE:D1:A3:AE:20:53:2C:5A:9F:81:35:AF:34:B9:47:6B:68:5C
Certificate issuer: /CN=8257DED1A3AE20532C5A9F8135AF34B9476B685C
Certificate serial: 7988E4E6272B195F1BA1DF7345D93595440614B7
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8257DED1A3AE20532C5A9F8135AF34B9476B685C.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/DLER/0/8257DED1A3AE20532C5A9F8135AF34B9476B685C.mft
Manifest number: B0
Signing time: Mon 21 Sep 2026 12:17:05 +0000
Manifest this update: Mon 21 Sep 2026 12:12:05 +0000
Manifest next update: Tue 22 Sep 2026 15:45:05 +0000
Files and hashes: 1: 8257DED1A3AE20532C5A9F8135AF34B9476B685C.crl (hash: gAcgpDvizjbXkyA9xxwJPTCPsUVZx5yfoLBQ0egAxeA=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/DLER/0/8257DED1A3AE20532C5A9F8135AF34B9476B685C.crl
rsync://rpkica.twnic.tw/rpki/DLER/0/8257DED1A3AE20532C5A9F8135AF34B9476B685C.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8257DED1A3AE20532C5A9F8135AF34B9476B685C.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 15:45:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:88:e4:e6:27:2b:19:5f:1b:a1:df:73:45:d9:35:95:44:06:14:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8257DED1A3AE20532C5A9F8135AF34B9476B685C
Validity
Not Before: Sep 21 12:12:05 2026 GMT
Not After : Sep 22 15:45:05 2026 GMT
Subject: CN=75B39E6ECAEFBA55AD30215E65B0A37AD32EE321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0c:98:9c:b4:c6:0b:b2:8e:16:04:8f:8a:19:
b0:dc:0b:4b:58:c5:f5:ac:64:f0:f4:cb:31:e0:ed:
fc:cb:52:15:be:b7:c0:2a:14:38:91:e5:f4:b9:fc:
22:c3:94:b3:bd:89:93:4d:c4:b4:27:75:00:04:ed:
7c:99:d9:27:c4:3d:10:3c:65:a0:68:bf:e4:ce:49:
e1:5d:76:3c:1a:86:24:31:01:c6:58:1a:da:8a:99:
f2:0e:66:6f:99:3c:5b:af:b5:bc:6b:f1:71:c5:fc:
b0:d0:45:47:ab:7f:73:d3:bb:a4:23:76:11:51:08:
58:a5:ce:21:35:e4:32:4a:24:3c:1a:3a:8f:3a:ee:
fb:d3:7b:c0:6a:de:83:92:76:2c:99:32:9f:7d:4a:
d0:50:c8:d1:b6:91:d5:63:35:b4:b7:0b:9a:37:d8:
cb:d9:bd:96:a7:48:54:62:28:33:8b:29:9b:65:86:
d4:59:68:f4:97:94:a3:f6:7a:07:43:09:fa:3b:54:
5e:6c:02:65:d5:02:42:3b:ed:05:28:a0:6d:86:86:
5a:84:ed:4a:58:1c:d8:f8:4a:03:09:6f:d5:05:b7:
5f:88:15:84:0e:09:a4:d4:b0:87:39:e7:c4:45:64:
95:9a:22:64:84:6e:c3:e1:8d:84:d7:da:c9:2e:8f:
e3:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:B3:9E:6E:CA:EF:BA:55:AD:30:21:5E:65:B0:A3:7A:D3:2E:E3:21
X509v3 Authority Key Identifier:
keyid:82:57:DE:D1:A3:AE:20:53:2C:5A:9F:81:35:AF:34:B9:47:6B:68:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/DLER/0/8257DED1A3AE20532C5A9F8135AF34B9476B685C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8257DED1A3AE20532C5A9F8135AF34B9476B685C.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DLER/0/8257DED1A3AE20532C5A9F8135AF34B9476B685C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:59:eb:b5:54:fa:a0:b3:8b:7b:a3:d5:36:f9:28:59:30:da:
9c:ea:cb:4b:df:b3:96:7c:1c:06:6a:a2:cd:35:2a:5a:d8:5a:
59:61:93:c6:ee:d0:5c:98:fb:f7:cb:ad:bd:6d:11:f0:41:f3:
12:b1:7c:1c:e9:55:e9:c5:ef:34:d8:13:bf:ee:6a:7b:9d:6d:
21:c0:aa:ad:98:85:25:bc:7f:6d:90:45:4c:82:a4:4b:97:7a:
62:22:d6:af:de:88:97:03:ed:81:71:30:40:70:5e:89:fe:8f:
4a:f6:b5:8b:58:24:1a:eb:1c:c0:75:0a:83:25:92:ee:b0:89:
0c:6f:4d:70:15:c0:c0:da:ac:ba:3b:eb:38:f2:a5:a4:fa:33:
bc:2c:72:0f:be:c4:69:23:f8:66:0c:33:f4:cd:01:da:c3:81:
cd:f8:37:a3:6a:2b:03:fa:f0:b4:4f:44:08:f2:b7:d3:67:9b:
ae:5a:45:e8:cb:b9:c0:64:57:fd:b3:ce:a5:5c:93:f7:8d:9a:
bc:38:ec:f7:b4:4c:36:0a:c5:be:9f:75:dd:71:39:8c:49:9b:
40:1f:42:e2:8b:4f:0a:56:36:12:d5:d6:1f:98:bc:d0:ff:70:
2b:19:4d:10:a1:cd:e8:85:74:73:2d:05:93:6d:aa:17:88:36:
7c:26:8e:13
-----BEGIN CERTIFICATE-----
MIIE4DCCA8igAwIBAgIUeYjk5icrGV8bod9zRdk1lUQGFLcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODI1N0RFRDFBM0FFMjA1MzJDNUE5RjgxMzVBRjM0Qjk0
NzZCNjg1QzAeFw0yNjA5MjExMjEyMDVaFw0yNjA5MjIxNTQ1MDVaMDMxMTAvBgNV
BAMTKDc1QjM5RTZFQ0FFRkJBNTVBRDMwMjE1RTY1QjBBMzdBRDMyRUUzMjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDDJictMYLso4WBI+KGbDcC0tY
xfWsZPD0yzHg7fzLUhW+t8AqFDiR5fS5/CLDlLO9iZNNxLQndQAE7XyZ2SfEPRA8
ZaBov+TOSeFddjwahiQxAcZYGtqKmfIOZm+ZPFuvtbxr8XHF/LDQRUerf3PTu6Qj
dhFRCFilziE15DJKJDwaOo867vvTe8Bq3oOSdiyZMp99StBQyNG2kdVjNbS3C5o3
2MvZvZanSFRiKDOLKZtlhtRZaPSXlKP2egdDCfo7VF5sAmXVAkI77QUooG2GhlqE
7UpYHNj4SgMJb9UFt1+IFYQOCaTUsIc558RFZJWaImSEbsPhjYTX2skuj+PDAgMB
AAGjggHqMIIB5jAdBgNVHQ4EFgQUdbOebsrvulWtMCFeZbCjetMu4yEwHwYDVR0j
BBgwFoAUglfe0aOuIFMsWp+BNa80uUdraFwwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud
HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRExFUi8w
LzgyNTdERUQxQTNBRTIwNTMyQzVBOUY4MTM1QUYzNEI5NDc2QjY4NUMuY3JsMG8G
CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu
dHcvcnBraS9UV05JQ0NBLzEvODI1N0RFRDFBM0FFMjA1MzJDNUE5RjgxMzVBRjM0
Qjk0NzZCNjg1Qy5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu
YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0RMRVIvMC84MjU3REVEMUEzQUUyMDUz
MkM1QTlGODEzNUFGMzRCOTQ3NkI2ODVDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG
AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc1nrtVT6oLOLe6PV
NvkoWTDanOrLS9+zlnwcBmqizTUqWthaWWGTxu7QXJj798utvW0R8EHzErF8HOlV
6cXvNNgTv+5qe51tIcCqrZiFJbx/bZBFTIKkS5d6YiLWr96IlwPtgXEwQHBeif6P
Sva1i1gkGuscwHUKgyWS7rCJDG9NcBXAwNqsujvrOPKlpPozvCxyD77EaSP4Zgwz
9M0B2sOBzfg3o2orA/rwtE9ECPK302ebrlpF6Mu5wGRX/bPOpVyT942avDjs97RM
NgrFvp913XE5jEmbQB9C4otPClY2EtXWH5i80P9wKxlNEKHN6IV0cy0Fk22qF4g2
fCaOEw==
-----END CERTIFICATE-----
Generated at Tue Sep 22 07:47:30 2026 by rpki-client