
$ rpki-client -vvf rpkica.twnic.tw/rpki/ERAYINFO/0/E65F87C3415B74DFBBCBE0909A320835EE88E6E5.mft
File: E65F87C3415B74DFBBCBE0909A320835EE88E6E5.mft (raw, json)
Hash identifier: w5hBK1BV0rEeZbSxbmo6pNHobhuBptnhzX5bjkbNzoU=
Subject key identifier: 1F:D3:FF:41:D2:F1:5F:D9:2E:06:BD:4A:00:AA:0C:E4:25:51:38:C7
Authority key identifier: E6:5F:87:C3:41:5B:74:DF:BB:CB:E0:90:9A:32:08:35:EE:88:E6:E5
Certificate issuer: /CN=E65F87C3415B74DFBBCBE0909A320835EE88E6E5
Certificate serial: 24787F08DA9DE6193D79A6221F53A8ED8183EE3C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E65F87C3415B74DFBBCBE0909A320835EE88E6E5.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/ERAYINFO/0/E65F87C3415B74DFBBCBE0909A320835EE88E6E5.mft
Manifest number: 31
Signing time: Sat 13 Jun 2026 00:58:35 +0000
Manifest this update: Sat 13 Jun 2026 00:53:35 +0000
Manifest next update: Sun 14 Jun 2026 02:02:35 +0000
Files and hashes: 1: 3130332e3136302e3138302e302f32332d3234203d3e203536383530.roa (hash: RzAPn5btTcxQ4JmMexqs2Z3tgOn6EwRXUMKi5on2EDg=)
2: 3130332e3136302e3138302e302f32332d3234203d3e20393833.roa (hash: bSmO+jTWr7YOoJ4NGhuYgKT8sLNYWbbxkJfWN+8zotE=)
3: E65F87C3415B74DFBBCBE0909A320835EE88E6E5.crl (hash: 0SRYPalOCvRKfu9s7GsAIwDMJILW+3DvOXQeKNQkJ60=)
4: 3130332e3136302e3138302e302f32332d3234203d3e203338313336.roa (hash: vXSGvfe4/SHzbgc1FGIm8W7fF4FtlTo17+zWJlbEFVI=)
5: 3130332e3136302e3138302e302f32332d3234203d3e203138303431.roa (hash: 18NWi1veGokF/mTHx158Mqd+r/PzLz4vX21G5OQonx8=)
6: 323430363a656534303a3a2f33322d3438203d3e203138303431.roa (hash: ENdF+FZ/wshSwMngi/LeNYAxqnXtTR+JIbUWvzMtjvg=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/ERAYINFO/0/E65F87C3415B74DFBBCBE0909A320835EE88E6E5.crl
rsync://rpkica.twnic.tw/rpki/ERAYINFO/0/E65F87C3415B74DFBBCBE0909A320835EE88E6E5.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E65F87C3415B74DFBBCBE0909A320835EE88E6E5.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 00:20:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:78:7f:08:da:9d:e6:19:3d:79:a6:22:1f:53:a8:ed:81:83:ee:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E65F87C3415B74DFBBCBE0909A320835EE88E6E5
Validity
Not Before: Jun 13 00:53:35 2026 GMT
Not After : Jun 14 02:02:35 2026 GMT
Subject: CN=1FD3FF41D2F15FD92E06BD4A00AA0CE4255138C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f9:43:4f:a8:0f:5c:36:31:c5:d6:c3:35:e0:
b7:d9:42:16:65:3d:71:ce:9b:5d:8f:11:0b:c9:e8:
79:37:bf:8a:45:36:28:85:e1:7b:f6:9f:a5:3b:59:
30:58:55:78:37:dd:81:23:50:84:be:85:65:84:5c:
1a:2f:8c:a8:ea:3a:00:d6:9c:e2:c3:5a:b7:2f:45:
cf:69:3c:72:62:db:70:e1:15:21:76:06:62:84:08:
2a:56:d8:dd:07:d2:77:bc:98:61:fc:01:db:23:bd:
dc:fa:01:7f:2c:8d:f1:c6:df:c7:c2:d9:6d:a6:be:
62:e6:0b:83:aa:ea:1d:8f:58:b0:55:3c:6a:3b:01:
e8:0e:c0:40:b3:88:48:31:c4:b6:1a:67:74:28:16:
48:6c:aa:7f:06:0c:75:ba:1a:c4:e8:70:7d:6e:2e:
0a:aa:c2:6d:e9:e0:8e:4c:bd:22:7d:06:92:20:19:
6b:15:81:31:e7:b0:df:2d:13:56:5a:d3:a9:7c:91:
7a:f2:82:4a:eb:87:93:ae:61:71:17:14:6c:54:68:
54:b4:54:30:82:3d:b8:63:79:44:c7:02:6e:f2:e0:
b1:ee:e2:00:77:8d:e7:03:6a:d1:e0:57:de:c8:4f:
b7:1f:8b:a1:ab:b4:90:92:5c:15:ba:02:2c:1e:39:
4a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:D3:FF:41:D2:F1:5F:D9:2E:06:BD:4A:00:AA:0C:E4:25:51:38:C7
X509v3 Authority Key Identifier:
keyid:E6:5F:87:C3:41:5B:74:DF:BB:CB:E0:90:9A:32:08:35:EE:88:E6:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/ERAYINFO/0/E65F87C3415B74DFBBCBE0909A320835EE88E6E5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E65F87C3415B74DFBBCBE0909A320835EE88E6E5.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ERAYINFO/0/E65F87C3415B74DFBBCBE0909A320835EE88E6E5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:bd:fe:6c:7b:ef:f5:37:1f:c2:8e:7b:d0:56:82:a9:72:e7:
8c:05:a8:fe:ef:f7:d4:41:ba:e4:a5:35:ee:96:f3:5a:aa:0f:
00:9c:e8:70:63:ce:82:2c:f1:b3:a8:10:56:47:21:9e:91:de:
84:63:cf:2c:4a:bc:23:e7:70:4d:ec:ed:f3:7d:5f:6a:4f:c2:
1a:5f:54:54:0b:66:0b:42:20:64:e9:91:e4:d5:6e:f4:9d:e9:
cb:45:03:fb:50:7e:1b:d6:58:56:58:20:da:5c:e3:a1:b1:ea:
7d:fc:c3:2d:80:cb:68:9a:30:33:69:f4:21:cd:92:0c:56:47:
79:86:0e:38:7b:f6:24:17:b6:3b:77:56:ad:98:04:b4:11:fa:
14:58:04:da:d6:14:a9:64:14:ef:64:4b:9d:ee:59:39:94:b8:
70:fc:68:25:62:5d:64:a2:9c:aa:45:ed:92:6c:9f:43:a0:85:
4d:06:83:b3:1d:00:31:91:6a:ee:4b:f2:c6:db:44:95:b1:16:
7e:95:0d:05:13:46:11:8f:37:4e:cf:d1:1f:fc:7d:4f:c6:97:
91:52:c5:01:1f:2d:cd:12:fe:9a:58:cd:dc:db:1a:d5:d9:72:
20:7b:e6:53:3e:60:3e:c2:27:eb:2d:be:bc:81:90:e8:8b:35:
b4:58:db:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:05:20 2026 by rpki-client