
$ rpki-client -vvf rpkica.twnic.tw/rpki/HINET/1/8E0565D2526D4F41D07E73B0B5CA69AF65FF6B7D.mft
File: 8E0565D2526D4F41D07E73B0B5CA69AF65FF6B7D.mft (raw, json)
Hash identifier: MFOtH6gtG9LXS0eXRBgW/qTysaswpMV1r0W6H8DUWgw=
Subject key identifier: 6C:E8:D1:D0:80:75:5F:89:99:A4:AC:05:EE:2D:74:35:F6:2D:C8:40
Authority key identifier: 8E:05:65:D2:52:6D:4F:41:D0:7E:73:B0:B5:CA:69:AF:65:FF:6B:7D
Certificate issuer: /CN=8E0565D2526D4F41D07E73B0B5CA69AF65FF6B7D
Certificate serial: 7E3D704168C4E29702B7F5BCD4C8FCD557B9DC2E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/8E0565D2526D4F41D07E73B0B5CA69AF65FF6B7D.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/HINET/1/8E0565D2526D4F41D07E73B0B5CA69AF65FF6B7D.mft
Manifest number: 0128
Signing time: Tue 28 Jul 2026 12:33:57 +0000
Manifest this update: Tue 28 Jul 2026 12:28:57 +0000
Manifest next update: Wed 29 Jul 2026 13:27:57 +0000
Files and hashes: 1: 3136382e39352e3234362e302f32342d3234203d3e20313331363630.roa (hash: /rFAcJo7WRKr9Y04XWoxK2EUrySSmtYzHuftb6eEQmg=)
2: 3136382e39352e3234352e302f32342d3234203d3e20313331363630.roa (hash: Kjhl9MPmHYnY/7lPcRnwvpNRHP/np0GYKwvgXIOkK14=)
3: 3136382e39352e302e302f31362d3234203d3e2033343632.roa (hash: cny9oftOlaQBIAKAW7fI9Ii4iukGeOomSH0pO2tpe4g=)
4: 8E0565D2526D4F41D07E73B0B5CA69AF65FF6B7D.crl (hash: Fysfqwdl3tPvh4IR19wfKZk66pnToHMoMYPNsa+PgS4=)
5: 3136382e39352e3234362e302f32342d3234203d3e2039363830.roa (hash: qY8G/piGZoFsrv4yVakDlSNULKnbFiE++pH3LF+STH8=)
6: 3136382e39352e3234352e302f32342d3234203d3e2039363830.roa (hash: oRHHKePxUG1yomUaLROcDL8sz+AFa9+6Nv92YC2lcwk=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/HINET/1/8E0565D2526D4F41D07E73B0B5CA69AF65FF6B7D.crl
rsync://rpkica.twnic.tw/rpki/HINET/1/8E0565D2526D4F41D07E73B0B5CA69AF65FF6B7D.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/8E0565D2526D4F41D07E73B0B5CA69AF65FF6B7D.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 07:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:3d:70:41:68:c4:e2:97:02:b7:f5:bc:d4:c8:fc:d5:57:b9:dc:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8E0565D2526D4F41D07E73B0B5CA69AF65FF6B7D
Validity
Not Before: Jul 28 12:28:57 2026 GMT
Not After : Jul 29 13:27:57 2026 GMT
Subject: CN=6CE8D1D080755F8999A4AC05EE2D7435F62DC840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f3:a5:5a:67:53:17:20:03:35:3f:16:e9:94:
49:a9:51:14:66:3d:42:79:ad:af:62:45:0b:9a:a7:
c8:89:fd:1b:d8:ce:5c:1e:49:30:fd:42:04:80:bb:
6d:8b:82:62:fe:d5:84:73:9b:25:f6:6c:f5:05:3e:
e6:7f:15:95:11:fe:fc:49:87:b1:8e:8a:a4:c5:2a:
c0:dc:a1:3d:57:98:12:64:1a:22:d2:80:14:50:45:
c0:7a:6b:34:9f:e0:76:df:bd:b9:ec:18:d0:05:1c:
3c:5a:14:02:37:20:71:f8:f1:de:89:de:d7:f9:30:
84:59:2e:60:f2:74:7d:2e:6a:f5:df:e5:bf:44:92:
81:20:a4:61:78:c5:4d:0a:6a:b7:b7:77:9f:95:cd:
b6:b0:04:76:fe:10:c3:95:18:ca:44:17:41:7c:3b:
bc:24:bf:85:73:6b:92:31:e9:1f:4e:06:f2:33:ca:
03:2d:ee:cf:18:38:b9:22:4a:67:c5:75:e5:07:65:
34:cd:5c:17:b4:5c:b1:cc:49:1c:af:84:06:02:d3:
df:c3:88:d0:fa:4d:aa:91:8f:7c:d4:67:f4:51:a2:
09:73:61:cf:1e:4c:12:58:2e:2f:3b:a7:e9:fe:d9:
bf:52:0d:26:9b:aa:f4:af:17:e0:01:2d:ed:4b:0a:
d1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:E8:D1:D0:80:75:5F:89:99:A4:AC:05:EE:2D:74:35:F6:2D:C8:40
X509v3 Authority Key Identifier:
keyid:8E:05:65:D2:52:6D:4F:41:D0:7E:73:B0:B5:CA:69:AF:65:FF:6B:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/HINET/1/8E0565D2526D4F41D07E73B0B5CA69AF65FF6B7D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/8E0565D2526D4F41D07E73B0B5CA69AF65FF6B7D.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HINET/1/8E0565D2526D4F41D07E73B0B5CA69AF65FF6B7D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:6e:9a:53:18:62:e6:cf:ec:26:16:e2:7c:9f:19:8a:e0:72:
8a:42:c9:99:13:ce:da:f8:16:63:0a:0b:a0:7c:14:04:ce:67:
1f:6f:05:69:0a:6b:2f:5e:d9:d1:fd:e4:e2:96:c9:a4:92:44:
3e:d5:6b:a3:ff:f2:80:11:b9:8c:ce:49:c0:e2:94:f0:28:41:
9c:5d:bd:7e:55:2e:43:00:61:78:8a:14:9c:3f:4e:fe:30:cb:
f4:d7:97:a7:c0:51:3d:50:e2:10:4f:2f:3e:9d:41:78:39:2e:
7e:a9:fa:d3:50:5d:49:7a:a0:d0:b1:b4:60:0f:77:0d:f7:9e:
1c:63:17:37:f3:86:37:d5:9b:01:f6:5d:58:b2:85:66:60:d3:
4a:37:88:8b:b2:c5:d7:5b:50:b9:a5:b4:68:29:41:ce:01:06:
f9:f4:f4:12:4c:8d:ba:b1:3f:0d:f0:d2:51:30:48:f7:35:c9:
c6:23:87:20:5e:26:3a:83:6b:6f:db:f8:32:03:7a:a4:3e:a0:
29:8b:91:75:fa:d0:7a:51:00:22:ca:d0:bb:3b:08:da:09:96:
fe:37:b9:40:2a:a3:5f:5e:ed:d4:78:f9:df:c6:42:f3:fe:44:
e2:f1:d6:1f:51:b4:b8:96:1c:19:67:8c:c5:f1:c2:a1:5f:99:
89:a0:08:31
-----BEGIN CERTIFICATE-----
MIIE4jCCA8qgAwIBAgIUfj1wQWjE4pcCt/W81Mj81Ve53C4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEUwNTY1RDI1MjZENEY0MUQwN0U3M0IwQjVDQTY5QUY2
NUZGNkI3RDAeFw0yNjA3MjgxMjI4NTdaFw0yNjA3MjkxMzI3NTdaMDMxMTAvBgNV
BAMTKDZDRThEMUQwODA3NTVGODk5OUE0QUMwNUVFMkQ3NDM1RjYyREM4NDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy86VaZ1MXIAM1PxbplEmpURRm
PUJ5ra9iRQuap8iJ/RvYzlweSTD9QgSAu22LgmL+1YRzmyX2bPUFPuZ/FZUR/vxJ
h7GOiqTFKsDcoT1XmBJkGiLSgBRQRcB6azSf4HbfvbnsGNAFHDxaFAI3IHH48d6J
3tf5MIRZLmDydH0uavXf5b9EkoEgpGF4xU0Kare3d5+VzbawBHb+EMOVGMpEF0F8
O7wkv4Vza5Ix6R9OBvIzygMt7s8YOLkiSmfFdeUHZTTNXBe0XLHMSRyvhAYC09/D
iND6TaqRj3zUZ/RRoglzYc8eTBJYLi87p+n+2b9SDSabqvSvF+ABLe1LCtH3AgMB
AAGjggHsMIIB6DAdBgNVHQ4EFgQUbOjR0IB1X4mZpKwF7i10NfYtyEAwHwYDVR0j
BBgwFoAUjgVl0lJtT0HQfnOwtcppr2X/a30wDgYDVR0PAQH/BAQDAgeAMGIGA1Ud
HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSElORVQv
MS84RTA1NjVEMjUyNkQ0RjQxRDA3RTczQjBCNUNBNjlBRjY1RkY2QjdELmNybDBv
BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS8wLzhFMDU2NUQyNTI2RDRGNDFEMDdFNzNCMEI1Q0E2
OUFGNjVGRjZCN0QuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5
bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9ISU5FVC8xLzhFMDU2NUQyNTI2RDRG
NDFEMDdFNzNCMEI1Q0E2OUFGNjVGRjZCN0QubWZ0MBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBAbppTGGLmz+wm
FuJ8nxmK4HKKQsmZE87a+BZjCgugfBQEzmcfbwVpCmsvXtnR/eTilsmkkkQ+1Wuj
//KAEbmMzknA4pTwKEGcXb1+VS5DAGF4ihScP07+MMv015enwFE9UOIQTy8+nUF4
OS5+qfrTUF1JeqDQsbRgD3cN954cYxc384Y31ZsB9l1YsoVmYNNKN4iLssXXW1C5
pbRoKUHOAQb59PQSTI26sT8N8NJRMEj3NcnGI4cgXiY6g2tv2/gyA3qkPqApi5F1
+tB6UQAiytC7OwjaCZb+N7lAKqNfXu3UePnfxkLz/kTi8dYfUbS4lhwZZ4zF8cKh
X5mJoAgx
-----END CERTIFICATE-----
Generated at Wed Jul 29 00:24:09 2026 by rpki-client