
$ rpki-client -vvf rpkica.twnic.tw/rpki/HINET/1/8E0565D2526D4F41D07E73B0B5CA69AF65FF6B7D.mft
File: 8E0565D2526D4F41D07E73B0B5CA69AF65FF6B7D.mft (raw, json)
Hash identifier: XK17AWZcCveJiX+V1EgBGSyrVzX+5HkrqEp6rTOyOeg=
Subject key identifier: D0:8F:40:71:9F:7D:13:29:92:2A:F3:EE:21:8E:93:43:8D:1F:53:D3
Authority key identifier: 8E:05:65:D2:52:6D:4F:41:D0:7E:73:B0:B5:CA:69:AF:65:FF:6B:7D
Certificate issuer: /CN=8E0565D2526D4F41D07E73B0B5CA69AF65FF6B7D
Certificate serial: 2D3586C741A20DDB0BABF47B4F1359F199920B08
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/8E0565D2526D4F41D07E73B0B5CA69AF65FF6B7D.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/HINET/1/8E0565D2526D4F41D07E73B0B5CA69AF65FF6B7D.mft
Manifest number: EC
Signing time: Sat 13 Jun 2026 00:43:32 +0000
Manifest this update: Sat 13 Jun 2026 00:38:32 +0000
Manifest next update: Sun 14 Jun 2026 03:33:32 +0000
Files and hashes: 1: 3136382e39352e3234352e302f32342d3234203d3e2039363830.roa (hash: oRHHKePxUG1yomUaLROcDL8sz+AFa9+6Nv92YC2lcwk=)
2: 3136382e39352e302e302f31362d3234203d3e2033343632.roa (hash: cny9oftOlaQBIAKAW7fI9Ii4iukGeOomSH0pO2tpe4g=)
3: 8E0565D2526D4F41D07E73B0B5CA69AF65FF6B7D.crl (hash: 4JmlaWexFDMZRopE11a/McBWy2eh9aApJ9YQoAgmsXA=)
4: 3136382e39352e3234362e302f32342d3234203d3e20313331363630.roa (hash: /rFAcJo7WRKr9Y04XWoxK2EUrySSmtYzHuftb6eEQmg=)
5: 3136382e39352e3234352e302f32342d3234203d3e20313331363630.roa (hash: Kjhl9MPmHYnY/7lPcRnwvpNRHP/np0GYKwvgXIOkK14=)
6: 3136382e39352e3234362e302f32342d3234203d3e2039363830.roa (hash: qY8G/piGZoFsrv4yVakDlSNULKnbFiE++pH3LF+STH8=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/HINET/1/8E0565D2526D4F41D07E73B0B5CA69AF65FF6B7D.crl
rsync://rpkica.twnic.tw/rpki/HINET/1/8E0565D2526D4F41D07E73B0B5CA69AF65FF6B7D.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/8E0565D2526D4F41D07E73B0B5CA69AF65FF6B7D.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 22:38:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:35:86:c7:41:a2:0d:db:0b:ab:f4:7b:4f:13:59:f1:99:92:0b:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8E0565D2526D4F41D07E73B0B5CA69AF65FF6B7D
Validity
Not Before: Jun 13 00:38:32 2026 GMT
Not After : Jun 14 03:33:32 2026 GMT
Subject: CN=D08F40719F7D1329922AF3EE218E93438D1F53D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:55:1d:85:71:1a:78:5a:99:d3:f3:7c:2e:d7:
db:22:70:82:d0:a5:43:4a:65:4e:77:e7:82:c2:33:
4b:c8:cd:bf:81:d9:1a:e6:9b:25:5f:3c:19:26:80:
b2:65:ee:9d:9d:87:91:2b:02:4d:c9:74:fa:e7:24:
82:f3:ae:c0:ec:13:39:c9:8b:92:df:82:15:a1:a6:
5f:67:fa:2d:ad:0c:4e:37:e6:74:e0:72:a5:64:fe:
9a:73:44:24:a3:63:aa:30:9b:a9:c0:b6:b3:fa:ed:
8a:a1:9b:1c:05:c9:a7:1e:c9:6f:cd:69:0d:14:67:
a2:ae:e8:3f:3e:6d:64:56:ec:cb:c2:36:85:0c:eb:
a7:13:2a:bc:ff:64:19:f4:7d:b3:6b:0f:af:f4:f0:
6f:7d:c0:e6:20:78:0d:1d:27:bb:5a:d6:33:e1:78:
c5:9f:55:bf:00:b1:5f:5f:c3:f0:e0:f1:9c:72:04:
6a:3c:9e:52:5d:0f:fe:74:28:16:0c:15:9b:51:ac:
13:24:3a:1f:5a:0a:69:98:18:26:45:57:28:44:6a:
a7:12:1e:fa:d4:18:3f:e1:35:4e:13:1f:e2:c1:ae:
ac:18:d2:ee:a2:fa:48:f1:21:3c:aa:2e:5f:72:57:
2c:ff:d8:f6:cb:a8:5e:0e:0a:a9:6a:7d:36:58:7c:
da:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:8F:40:71:9F:7D:13:29:92:2A:F3:EE:21:8E:93:43:8D:1F:53:D3
X509v3 Authority Key Identifier:
keyid:8E:05:65:D2:52:6D:4F:41:D0:7E:73:B0:B5:CA:69:AF:65:FF:6B:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/HINET/1/8E0565D2526D4F41D07E73B0B5CA69AF65FF6B7D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/8E0565D2526D4F41D07E73B0B5CA69AF65FF6B7D.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HINET/1/8E0565D2526D4F41D07E73B0B5CA69AF65FF6B7D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:ca:f9:a9:44:c8:c7:17:3b:be:c2:7a:22:b7:8f:18:df:89:
26:a3:20:9e:87:2e:e4:5c:50:86:6c:41:78:6f:44:51:1d:02:
1e:a3:46:07:39:ba:fe:f1:32:70:3c:ca:f5:ba:70:ec:3c:5b:
b8:1b:be:ac:e8:94:d7:1e:cf:a9:6b:c2:cc:d4:d1:8c:db:67:
28:5b:b2:ae:87:e8:bd:9e:70:36:59:fe:22:6a:27:9b:71:4e:
b5:bf:a7:73:15:32:49:1b:77:4b:6c:34:be:55:a0:39:b4:0a:
4b:52:86:41:ba:5a:6f:8e:ca:d0:9c:7a:a5:86:93:84:e3:ce:
27:7e:d4:81:e0:b0:63:cd:a4:46:15:44:e6:02:cd:20:9f:a3:
f8:d9:88:4e:b7:8b:9e:03:46:e8:cc:56:17:d2:c4:01:24:5d:
82:0f:d3:c0:f4:3e:2f:05:c3:85:84:10:67:11:e6:fe:08:fa:
7f:92:c4:a3:78:3f:0f:06:06:54:5a:d5:a5:06:9c:66:18:5b:
ae:d8:af:af:98:37:d8:40:3b:ad:42:e7:8e:45:0d:b0:e7:4c:
23:0c:8d:6b:d8:5b:5d:3a:66:35:53:7b:21:2c:7a:a3:3e:37:
01:40:bc:32:95:39:b7:7d:14:05:f3:b8:dc:32:3a:4f:29:b5:
ca:55:e9:19
-----BEGIN CERTIFICATE-----
MIIE4jCCA8qgAwIBAgIULTWGx0GiDdsLq/R7TxNZ8ZmSCwgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEUwNTY1RDI1MjZENEY0MUQwN0U3M0IwQjVDQTY5QUY2
NUZGNkI3RDAeFw0yNjA2MTMwMDM4MzJaFw0yNjA2MTQwMzMzMzJaMDMxMTAvBgNV
BAMTKEQwOEY0MDcxOUY3RDEzMjk5MjJBRjNFRTIxOEU5MzQzOEQxRjUzRDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoVR2FcRp4WpnT83wu19sicILQ
pUNKZU5354LCM0vIzb+B2RrmmyVfPBkmgLJl7p2dh5ErAk3JdPrnJILzrsDsEznJ
i5LfghWhpl9n+i2tDE435nTgcqVk/ppzRCSjY6owm6nAtrP67YqhmxwFyaceyW/N
aQ0UZ6Ku6D8+bWRW7MvCNoUM66cTKrz/ZBn0fbNrD6/08G99wOYgeA0dJ7ta1jPh
eMWfVb8AsV9fw/Dg8ZxyBGo8nlJdD/50KBYMFZtRrBMkOh9aCmmYGCZFVyhEaqcS
HvrUGD/hNU4TH+LBrqwY0u6i+kjxITyqLl9yVyz/2PbLqF4OCqlqfTZYfNqrAgMB
AAGjggHsMIIB6DAdBgNVHQ4EFgQU0I9AcZ99EymSKvPuIY6TQ40fU9MwHwYDVR0j
BBgwFoAUjgVl0lJtT0HQfnOwtcppr2X/a30wDgYDVR0PAQH/BAQDAgeAMGIGA1Ud
HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSElORVQv
MS84RTA1NjVEMjUyNkQ0RjQxRDA3RTczQjBCNUNBNjlBRjY1RkY2QjdELmNybDBv
BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS8wLzhFMDU2NUQyNTI2RDRGNDFEMDdFNzNCMEI1Q0E2
OUFGNjVGRjZCN0QuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5
bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9ISU5FVC8xLzhFMDU2NUQyNTI2RDRG
NDFEMDdFNzNCMEI1Q0E2OUFGNjVGRjZCN0QubWZ0MBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCJyvmpRMjHFzu+
wnoit48Y34kmoyCehy7kXFCGbEF4b0RRHQIeo0YHObr+8TJwPMr1unDsPFu4G76s
6JTXHs+pa8LM1NGM22coW7Kuh+i9nnA2Wf4iaiebcU61v6dzFTJJG3dLbDS+VaA5
tApLUoZBulpvjsrQnHqlhpOE484nftSB4LBjzaRGFUTmAs0gn6P42YhOt4ueA0bo
zFYX0sQBJF2CD9PA9D4vBcOFhBBnEeb+CPp/ksSjeD8PBgZUWtWlBpxmGFuu2K+v
mDfYQDutQueORQ2w50wjDI1r2FtdOmY1U3shLHqjPjcBQLwylTm3fRQF87jcMjpP
KbXKVekZ
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:16:27 2026 by rpki-client