
$ rpki-client -vvf rpkica.twnic.tw/rpki/HLCATV/0/EED0E4E138A33B7827F8D6020B736557137C89A1.mft
File: EED0E4E138A33B7827F8D6020B736557137C89A1.mft (raw, json)
Hash identifier: 6fThiSy3RTyAJ1Rst7c4xZVIdUqSH7I3RKXXri+vxes=
Subject key identifier: 7C:88:1B:BE:40:EE:44:75:67:30:BE:7B:CA:0A:CF:AF:09:D9:F8:46
Authority key identifier: EE:D0:E4:E1:38:A3:3B:78:27:F8:D6:02:0B:73:65:57:13:7C:89:A1
Certificate issuer: /CN=EED0E4E138A33B7827F8D6020B736557137C89A1
Certificate serial: 5104E01D0A435B17AD9240F09C53ED5040FD98D5
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EED0E4E138A33B7827F8D6020B736557137C89A1.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/HLCATV/0/EED0E4E138A33B7827F8D6020B736557137C89A1.mft
Manifest number: 2D
Signing time: Fri 12 Jun 2026 18:27:40 +0000
Manifest this update: Fri 12 Jun 2026 18:22:40 +0000
Manifest next update: Sat 13 Jun 2026 21:59:40 +0000
Files and hashes: 1: 3231312e37362e38302e302f32302d3234203d3e2039363736.roa (hash: AiC/2M7/KcT6YdGXOX1G1ZVfe40bTAPtyjVWy0ffZmA=)
2: EED0E4E138A33B7827F8D6020B736557137C89A1.crl (hash: 33QDZ4xTF+BH14WbGKbZMss72wkhUA+QCS4cSJShVE8=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/HLCATV/0/EED0E4E138A33B7827F8D6020B736557137C89A1.crl
rsync://rpkica.twnic.tw/rpki/HLCATV/0/EED0E4E138A33B7827F8D6020B736557137C89A1.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EED0E4E138A33B7827F8D6020B736557137C89A1.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 21:59:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:04:e0:1d:0a:43:5b:17:ad:92:40:f0:9c:53:ed:50:40:fd:98:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EED0E4E138A33B7827F8D6020B736557137C89A1
Validity
Not Before: Jun 12 18:22:40 2026 GMT
Not After : Jun 13 21:59:40 2026 GMT
Subject: CN=7C881BBE40EE44756730BE7BCA0ACFAF09D9F846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c5:f4:7c:75:b3:b2:be:59:78:9d:3e:47:a4:
27:be:e0:c1:9c:3a:d9:6c:82:dd:a8:84:2b:ee:e8:
65:c0:77:b4:9d:85:62:1d:c6:fe:ae:58:71:2e:ab:
de:d6:32:f2:00:6c:a8:a7:7e:16:c7:86:ea:f7:b0:
e2:6e:0b:d8:12:4a:05:51:d3:e8:de:94:cb:e9:7a:
43:e0:2c:47:1e:12:17:46:fa:07:86:78:e2:cf:ee:
18:bc:2e:29:7b:43:d1:f6:bd:d0:f2:e9:2e:3a:11:
1e:cf:61:75:c7:b8:4a:e0:9a:8f:18:ae:2a:d8:56:
4f:7b:35:a7:f7:91:de:94:b2:73:b9:73:64:a0:ba:
10:71:b3:b9:d6:7d:49:d4:ff:95:6e:9c:c0:5f:b9:
4a:74:a7:9c:2f:7c:ee:be:a1:0a:43:35:12:59:37:
b5:bc:3c:2f:65:81:ff:0d:15:16:aa:d4:e9:ae:4e:
02:76:b1:55:b6:74:f9:28:b2:5c:52:95:1e:41:63:
b0:b7:f4:49:0f:ab:78:79:7d:14:a5:a6:b6:c0:7a:
83:62:58:49:f4:77:80:9d:5e:03:57:2b:ff:9f:c4:
dd:3f:88:13:d3:b8:17:26:2b:16:74:84:de:d5:10:
da:1e:37:0b:5d:84:b9:5e:45:12:a4:6c:6d:fe:01:
33:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:88:1B:BE:40:EE:44:75:67:30:BE:7B:CA:0A:CF:AF:09:D9:F8:46
X509v3 Authority Key Identifier:
keyid:EE:D0:E4:E1:38:A3:3B:78:27:F8:D6:02:0B:73:65:57:13:7C:89:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/HLCATV/0/EED0E4E138A33B7827F8D6020B736557137C89A1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EED0E4E138A33B7827F8D6020B736557137C89A1.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HLCATV/0/EED0E4E138A33B7827F8D6020B736557137C89A1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:95:2f:3a:7f:7c:3a:20:3c:c8:46:60:89:69:cb:25:8d:7e:
93:56:1c:bc:ad:68:f4:c8:8f:28:85:39:ae:d0:cd:c2:13:8a:
d8:c9:e3:4f:32:87:6f:13:d2:4f:83:63:81:d6:83:86:15:e1:
71:1a:82:9c:4e:a0:e1:a9:c3:2e:74:54:38:98:14:f1:6a:70:
f7:6d:3a:4c:54:87:d1:12:58:12:2e:bc:67:d5:e0:47:07:f3:
65:24:54:f8:44:e6:0a:a1:c2:48:94:1d:76:3c:02:eb:d3:a9:
61:7c:a9:ee:95:dc:d2:ce:ff:98:b3:96:76:7e:67:e5:18:ae:
dd:2f:2b:cc:19:29:94:4e:14:64:bf:17:48:18:6c:5f:90:1b:
2e:8a:8c:bd:66:96:a8:61:62:9f:6f:4b:da:fe:68:ef:57:f1:
b1:79:81:78:d7:d9:b9:2a:14:0d:0c:f5:e4:c5:39:f8:c9:66:
2b:3b:05:8a:f1:0a:24:e4:71:3d:a4:72:e8:6e:99:15:fe:26:
88:16:76:63:7d:10:27:97:96:ab:ea:4c:37:36:8a:52:85:b0:
91:e6:4b:ba:3f:08:ca:fe:37:67:f9:dd:d5:9e:5c:a2:0b:c2:
cf:a5:d2:4d:1a:57:c9:e0:2b:af:51:8a:46:67:c8:2c:1f:45:
53:19:3d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:06:58 2026 by rpki-client