
$ rpki-client -vvf rpkica.twnic.tw/rpki/HCCG_HCEB/1/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.mft
File: 59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.mft (raw, json)
Hash identifier: Q2dPI+WHuILvN5KYP3IbwfBItP0WBJzPjEK/JOIYEmI=
Subject key identifier: 08:BF:8E:A2:95:84:EF:BD:6D:3D:88:0D:4B:12:82:CD:2F:9C:15:87
Authority key identifier: 59:D9:8E:8C:BB:AB:DC:DF:7B:22:2D:A5:00:F5:CD:E6:3F:F2:DA:0C
Certificate issuer: /CN=59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C
Certificate serial: 4622854B5C76338DDB963A7CB5BFB2A0276BBF63
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/HCCG_HCEB/1/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.mft
Manifest number: 2F
Signing time: Sat 13 Jun 2026 22:50:45 +0000
Manifest this update: Sat 13 Jun 2026 22:45:45 +0000
Manifest next update: Sun 14 Jun 2026 23:21:45 +0000
Files and hashes: 1: 59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.crl (hash: JoI7gjdBJQIGyEKAVQD7RwtQMLT2W9ORPD+dyGdSR8M=)
2: 3134342e37392e36362e302f32332d3234203d3e203138303433.roa (hash: I/nH3WfH4w3frC/mXwjMQ3leEpW2mw7DOz5WWS1+97M=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/HCCG_HCEB/1/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.crl
rsync://rpkica.twnic.tw/rpki/HCCG_HCEB/1/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 17:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:22:85:4b:5c:76:33:8d:db:96:3a:7c:b5:bf:b2:a0:27:6b:bf:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C
Validity
Not Before: Jun 13 22:45:45 2026 GMT
Not After : Jun 14 23:21:45 2026 GMT
Subject: CN=08BF8EA29584EFBD6D3D880D4B1282CD2F9C1587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b2:e4:64:cb:56:a9:b2:04:90:49:f9:6c:81:
fa:35:8a:f9:d5:d0:cb:a8:1c:a3:8a:b2:7f:21:a6:
52:37:41:8f:e3:4c:a4:03:e3:c4:44:43:99:26:40:
b7:a8:df:c7:a9:6d:91:00:b5:f1:b6:95:e8:2e:28:
e3:b3:fd:f4:94:2f:f0:61:25:5e:29:55:0b:4c:2e:
6c:a3:8a:7f:cd:3c:af:7b:fb:54:2b:dd:c7:4d:da:
c2:e5:04:ae:d1:bc:7c:b7:64:6a:af:4b:bf:e0:9e:
c5:fd:89:95:13:fc:2e:a3:1a:ae:61:61:46:69:e2:
d0:e1:16:8b:74:74:24:ca:c6:19:f5:8d:8e:43:6c:
3d:37:e2:ed:18:40:0c:54:55:da:40:10:bf:92:5e:
3a:1d:5b:f2:70:d2:b3:01:e7:5f:f5:4c:13:73:fc:
e4:17:48:40:40:3d:6d:67:cc:32:4f:27:bf:c0:08:
4a:e6:8a:31:4d:e9:9c:d1:fb:c6:9a:94:ce:97:55:
8f:bd:c0:75:24:cf:49:34:c9:5c:57:01:29:3b:7e:
65:80:21:54:cb:db:fb:f2:88:90:22:4d:9d:72:1f:
d7:93:34:b3:39:b6:54:1c:ba:09:7d:9d:7a:57:74:
9a:2e:b1:22:11:6f:f1:d0:dd:42:20:5e:57:ca:a3:
08:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:BF:8E:A2:95:84:EF:BD:6D:3D:88:0D:4B:12:82:CD:2F:9C:15:87
X509v3 Authority Key Identifier:
keyid:59:D9:8E:8C:BB:AB:DC:DF:7B:22:2D:A5:00:F5:CD:E6:3F:F2:DA:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/HCCG_HCEB/1/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HCCG_HCEB/1/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:63:ea:2e:b6:77:7e:b7:6f:54:27:cc:77:71:3a:4c:47:5e:
fe:e4:fe:b1:b1:3e:4b:a8:14:9b:aa:1a:0e:bd:6b:58:a1:bc:
db:57:cc:0c:13:51:6e:44:52:c8:b1:f3:73:06:6d:e4:04:ef:
47:c1:a9:6a:8b:90:4a:8d:b0:f8:c1:28:92:8b:d7:56:cf:fa:
48:84:a3:f6:27:f1:4a:46:2b:59:c0:60:5a:14:12:10:50:ab:
17:04:fb:e7:9d:b6:73:d3:a5:f5:2d:17:c2:ea:28:81:ac:a7:
98:51:fa:b1:13:df:89:28:d3:51:bc:5f:b8:aa:9a:18:b4:6b:
34:f3:d9:78:aa:49:24:81:6a:06:bb:e1:1d:ea:05:74:39:aa:
90:10:c3:7d:d1:a0:e5:16:85:22:2d:24:d1:5f:ab:cc:82:2a:
85:9f:d0:50:f8:6d:5c:a6:1c:34:bb:df:0e:fd:a3:a9:55:b8:
2b:ef:af:af:bd:e2:d3:bd:81:c3:17:71:78:15:7d:e7:10:20:
31:08:bc:90:01:2c:08:3f:5a:18:34:19:83:41:08:7f:06:dd:
3c:99:f7:60:54:92:78:cc:64:e1:b8:fa:f7:89:c1:f7:0a:7a:
43:6a:33:07:8c:ed:10:ad:cc:6f:4d:d7:ac:af:c1:dc:bf:53:
a0:77:3a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:30:55 2026 by rpki-client