
$ rpki-client -vvf rpkica.twnic.tw/rpki/DLER/0/8257DED1A3AE20532C5A9F8135AF34B9476B685C.mft
File: 8257DED1A3AE20532C5A9F8135AF34B9476B685C.mft (raw, json)
Hash identifier: Osbg2ftUHSyqOU5rQuZiit6OCv4/h37QM849YoSQIQ0=
Subject key identifier: 9A:1B:FF:47:F2:2E:82:5B:87:C3:32:2D:BC:B4:36:46:1A:91:F9:40
Authority key identifier: 82:57:DE:D1:A3:AE:20:53:2C:5A:9F:81:35:AF:34:B9:47:6B:68:5C
Certificate issuer: /CN=8257DED1A3AE20532C5A9F8135AF34B9476B685C
Certificate serial: 3E44A1DBE23CDDC0AF1AA980C1AFF4F782016269
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8257DED1A3AE20532C5A9F8135AF34B9476B685C.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/DLER/0/8257DED1A3AE20532C5A9F8135AF34B9476B685C.mft
Manifest number: 2B
Signing time: Fri 12 Jun 2026 15:22:03 +0000
Manifest this update: Fri 12 Jun 2026 15:17:03 +0000
Manifest next update: Sat 13 Jun 2026 15:59:03 +0000
Files and hashes: 1: 8257DED1A3AE20532C5A9F8135AF34B9476B685C.crl (hash: slF0Yahe9QZWclb0Ydmjig3Ap7WsDLL9Qf1/I3hkrHg=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/DLER/0/8257DED1A3AE20532C5A9F8135AF34B9476B685C.crl
rsync://rpkica.twnic.tw/rpki/DLER/0/8257DED1A3AE20532C5A9F8135AF34B9476B685C.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8257DED1A3AE20532C5A9F8135AF34B9476B685C.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 15:59:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:44:a1:db:e2:3c:dd:c0:af:1a:a9:80:c1:af:f4:f7:82:01:62:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8257DED1A3AE20532C5A9F8135AF34B9476B685C
Validity
Not Before: Jun 12 15:17:03 2026 GMT
Not After : Jun 13 15:59:03 2026 GMT
Subject: CN=9A1BFF47F22E825B87C3322DBCB436461A91F940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d9:11:1a:89:72:78:b5:2f:59:68:62:08:d1:
a2:e1:ab:b4:8a:2f:ff:95:01:c8:bf:6b:ed:5a:7d:
ac:a7:39:77:6d:b2:4e:6f:7e:a3:7c:36:8d:48:5c:
0a:04:6c:d7:88:cc:11:7f:13:fb:c0:83:f9:61:52:
f6:dc:0d:d7:69:7b:6b:71:3d:5f:39:84:d6:56:2a:
ac:9d:49:36:56:a0:ec:02:a9:ed:10:df:2f:5a:bd:
f3:e6:9c:a4:b5:69:52:c2:98:40:42:4f:27:24:2c:
36:a2:66:14:f8:39:d3:58:e3:f5:04:58:5f:ef:18:
7a:2f:05:48:83:cf:df:b2:02:53:c3:5d:06:8b:a7:
9d:32:2a:aa:ac:6c:9f:c3:98:8a:33:25:69:9f:8d:
25:80:c2:aa:1c:73:f2:79:7e:66:d5:5e:8b:f9:cb:
e8:74:77:ae:27:64:02:61:ae:75:8f:76:bf:80:96:
89:e9:f3:ba:5d:96:79:ed:b5:2e:14:c0:2a:27:07:
80:e2:06:92:b3:09:af:56:6e:40:e8:aa:2e:e0:bc:
5c:ab:8d:d9:60:e7:b6:b7:ac:89:63:41:88:7b:dc:
b9:7b:b8:d9:bb:e9:96:75:6f:91:08:4f:0d:13:b9:
e5:7c:4f:6c:69:7a:01:fb:34:a0:bb:b8:e5:53:25:
9a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:1B:FF:47:F2:2E:82:5B:87:C3:32:2D:BC:B4:36:46:1A:91:F9:40
X509v3 Authority Key Identifier:
keyid:82:57:DE:D1:A3:AE:20:53:2C:5A:9F:81:35:AF:34:B9:47:6B:68:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/DLER/0/8257DED1A3AE20532C5A9F8135AF34B9476B685C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8257DED1A3AE20532C5A9F8135AF34B9476B685C.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DLER/0/8257DED1A3AE20532C5A9F8135AF34B9476B685C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:3b:fc:b1:85:e2:29:61:fe:a1:4a:60:41:18:04:74:15:8e:
5f:32:07:16:04:11:84:56:b9:46:7e:e6:e8:43:f9:46:73:fd:
65:39:36:4c:94:d8:45:72:a2:5b:f7:7d:a1:b6:3a:73:2d:b2:
e3:3d:ee:59:2f:1b:8a:9c:c4:11:87:9c:6d:48:97:63:a7:44:
db:a7:4c:d8:ee:41:ba:c4:83:e6:ba:4e:27:14:65:8e:d7:cd:
2d:b4:47:96:07:ad:26:b8:6b:10:78:aa:54:a1:16:11:54:ee:
a4:04:96:d8:fc:bd:97:78:9f:64:a0:9b:bf:4a:ae:a8:ea:c3:
90:b0:14:60:3e:fb:39:f6:8d:48:cc:a4:3a:b2:e9:1b:55:58:
18:25:64:2e:09:43:c8:c0:a1:22:db:79:14:9b:54:ec:e0:9c:
0a:54:2e:36:88:0f:b4:17:6c:6f:d7:a2:01:f8:a8:38:93:cf:
3c:e7:03:33:13:92:b7:1c:30:bb:0a:32:c6:e3:1a:51:a2:fa:
fb:fb:e9:85:8f:f8:44:ed:db:7c:76:77:a1:a5:6a:7b:df:63:
c0:a4:c5:78:3f:c2:fd:9a:81:11:92:5b:04:b5:8e:8e:e2:d8:
3c:87:2a:5e:54:00:bf:c8:f3:00:18:92:18:7c:68:c9:2d:0b:
d3:78:22:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:06:13 2026 by rpki-client