
$ rpki-client -vvvf rpkica.twnic.tw/rpki/HCCG_HCEB/1/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.mft
File: 59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.mft (raw, json)
Hash identifier: ahM2+3l1tV5U/f7vSIvNj5sUC2tOOZvA9ybLhksQnHQ=
Subject key identifier: 7A:AC:1D:E9:3A:3F:58:C6:36:0E:65:74:77:F3:0F:3C:80:F9:32:8E
Authority key identifier: 59:D9:8E:8C:BB:AB:DC:DF:7B:22:2D:A5:00:F5:CD:E6:3F:F2:DA:0C
Certificate issuer: /CN=59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C
Certificate serial: 71E818FA8545450E175843DDC1AABF9BE0A19C9D
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/HCCG_HCEB/1/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.mft
Manifest number: B3
Signing time: Mon 21 Sep 2026 03:15:38 +0000
Manifest this update: Mon 21 Sep 2026 03:10:38 +0000
Manifest next update: Tue 22 Sep 2026 06:56:38 +0000
Files and hashes: 1: 59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.crl (hash: ZQJtpdnUjYocLsgNkQhWd1HQ+/BhGyxlu9Du7/ovw5E=)
2: 3134342e37392e36362e302f32332d3234203d3e203138303433.roa (hash: I/nH3WfH4w3frC/mXwjMQ3leEpW2mw7DOz5WWS1+97M=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/HCCG_HCEB/1/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.crl
rsync://rpkica.twnic.tw/rpki/HCCG_HCEB/1/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 06:56:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:e8:18:fa:85:45:45:0e:17:58:43:dd:c1:aa:bf:9b:e0:a1:9c:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C
Validity
Not Before: Sep 21 03:10:38 2026 GMT
Not After : Sep 22 06:56:38 2026 GMT
Subject: CN=7AAC1DE93A3F58C6360E657477F30F3C80F9328E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9e:78:d2:12:a3:e0:7e:a8:d7:3a:6e:a2:25:
4f:9f:d3:fc:a5:00:a9:cf:63:0a:72:fa:88:f8:91:
01:98:09:df:57:cd:10:93:11:42:6c:97:34:39:d4:
53:d7:b3:ef:47:e4:59:03:fd:1d:05:c2:ec:c9:65:
bb:70:5c:05:68:ef:de:c5:5a:11:2c:c8:7f:fe:15:
29:0f:4f:35:92:4d:3f:a2:59:5f:97:85:e6:8f:8f:
79:af:5d:31:c8:11:d8:66:3f:d9:c5:57:6c:ef:86:
38:31:ea:77:2e:40:a4:3b:ed:a5:5d:2a:c3:6c:15:
1c:a6:65:1a:f2:3a:ab:5c:7d:71:48:2d:9b:0b:65:
94:c6:c1:8d:40:94:60:16:b7:be:5e:a0:45:5d:ab:
49:8d:93:a2:0b:13:3f:51:22:80:8e:c4:ea:da:85:
bf:0f:1b:0a:73:24:a3:59:ba:9f:b9:4c:c2:90:60:
b4:bf:06:9a:81:8a:b6:6c:dd:f9:4c:9c:82:82:3c:
a5:6d:e4:8e:81:29:ab:80:13:30:c9:19:b0:e8:b0:
f6:eb:67:29:7d:e7:3f:24:8e:8e:be:bc:43:ac:6a:
df:ce:a7:42:39:a2:50:eb:d5:7f:a4:33:23:e4:bf:
7c:02:96:e4:cb:88:32:14:94:88:90:2e:39:75:05:
b6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:AC:1D:E9:3A:3F:58:C6:36:0E:65:74:77:F3:0F:3C:80:F9:32:8E
X509v3 Authority Key Identifier:
keyid:59:D9:8E:8C:BB:AB:DC:DF:7B:22:2D:A5:00:F5:CD:E6:3F:F2:DA:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/HCCG_HCEB/1/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HCCG_HCEB/1/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:60:f7:c3:f8:45:73:eb:80:4e:a9:2f:6c:ab:8b:7b:28:70:
ed:33:15:3c:b0:c4:07:c1:59:55:a6:9c:d5:b5:72:96:6f:ed:
ba:8a:ea:37:9f:3d:9c:12:b3:aa:19:4d:eb:14:c1:13:5d:24:
a0:72:f8:95:49:a2:57:2b:bb:e9:f4:82:7c:a4:51:00:53:f5:
5f:e5:b5:4a:a2:b1:b0:38:cb:53:24:4c:ba:c2:c7:dd:4d:4b:
34:f6:cb:19:1d:f8:50:fe:3d:15:c8:f8:32:41:0d:51:fd:d6:
e2:c8:1b:db:48:9c:0f:57:f5:b7:2e:67:e6:82:1c:da:ef:ba:
b6:45:00:df:9c:e8:53:ab:9e:39:30:b9:63:08:f9:9a:43:c2:
36:6a:c7:bd:81:cd:c6:ad:65:97:84:b7:64:8b:99:06:22:e5:
e5:66:f6:7d:75:be:83:4b:3e:0d:64:24:ef:60:b8:1c:73:76:
e1:68:d5:a6:97:88:7c:a2:6d:11:e3:ee:3e:1f:10:45:4a:c4:
db:9c:fb:59:5c:1b:46:c3:06:d1:cc:3e:ad:ac:43:1b:a1:56:
36:05:72:9a:da:43:25:26:0b:ae:0b:be:2c:28:f6:6a:13:29:
33:1c:96:8d:c6:a3:be:74:7f:87:86:06:00:08:92:dd:37:26:
36:4c:8c:46
-----BEGIN CERTIFICATE-----
MIIE6jCCA9KgAwIBAgIUcegY+oVFRQ4XWEPdwaq/m+ChnJ0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTlEOThFOENCQkFCRENERjdCMjIyREE1MDBGNUNERTYz
RkYyREEwQzAeFw0yNjA5MjEwMzEwMzhaFw0yNjA5MjIwNjU2MzhaMDMxMTAvBgNV
BAMTKDdBQUMxREU5M0EzRjU4QzYzNjBFNjU3NDc3RjMwRjNDODBGOTMyOEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsnnjSEqPgfqjXOm6iJU+f0/yl
AKnPYwpy+oj4kQGYCd9XzRCTEUJslzQ51FPXs+9H5FkD/R0FwuzJZbtwXAVo797F
WhEsyH/+FSkPTzWSTT+iWV+XheaPj3mvXTHIEdhmP9nFV2zvhjgx6ncuQKQ77aVd
KsNsFRymZRryOqtcfXFILZsLZZTGwY1AlGAWt75eoEVdq0mNk6ILEz9RIoCOxOra
hb8PGwpzJKNZup+5TMKQYLS/BpqBirZs3flMnIKCPKVt5I6BKauAEzDJGbDosPbr
Zyl95z8kjo6+vEOsat/Op0I5olDr1X+kMyPkv3wCluTLiDIUlIiQLjl1BbZxAgMB
AAGjggH0MIIB8DAdBgNVHQ4EFgQUeqwd6To/WMY2DmV0d/MPPID5Mo4wHwYDVR0j
BBgwFoAUWdmOjLur3N97Ii2lAPXN5j/y2gwwDgYDVR0PAQH/BAQDAgeAMGYGA1Ud
HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSENDR19I
Q0VCLzEvNTlEOThFOENCQkFCRENERjdCMjIyREE1MDBGNUNERTYzRkYyREEwQy5j
cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvMC81OUQ5OEU4Q0JCQUJEQ0RGN0IyMjJEQTUw
MEY1Q0RFNjNGRjJEQTBDLmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG
VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSENDR19IQ0VCLzEvNTlEOThF
OENCQkFCRENERjdCMjIyREE1MDBGNUNERTYzRkYyREEwQy5tZnQwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBABNg
98P4RXPrgE6pL2yri3socO0zFTywxAfBWVWmnNW1cpZv7bqK6jefPZwSs6oZTesU
wRNdJKBy+JVJolcru+n0gnykUQBT9V/ltUqisbA4y1MkTLrCx91NSzT2yxkd+FD+
PRXI+DJBDVH91uLIG9tInA9X9bcuZ+aCHNrvurZFAN+c6FOrnjkwuWMI+ZpDwjZq
x72BzcatZZeEt2SLmQYi5eVm9n11voNLPg1kJO9guBxzduFo1aaXiHyibRHj7j4f
EEVKxNuc+1lcG0bDBtHMPq2sQxuhVjYFcpraQyUmC64Lviwo9moTKTMclo3Go750
f4eGBgAIkt03JjZMjEY=
-----END CERTIFICATE-----
Generated at Mon Sep 21 19:39:03 2026 by rpki-client