
$ rpki-client -vvf rpkica.twnic.tw/rpki/HUANGDEXIA/0/D2F622A04A47823AB003C84A0427E20441C8BE5E.mft
File: D2F622A04A47823AB003C84A0427E20441C8BE5E.mft (raw, json)
Hash identifier: D3J/IPvYRYJrrYh1w2xEz8kOTWX97Ufcwp6bgKc+5Rs=
Subject key identifier: 81:40:BC:B2:38:6C:37:5A:49:07:87:58:3A:A5:9B:0C:0A:D7:87:19
Authority key identifier: D2:F6:22:A0:4A:47:82:3A:B0:03:C8:4A:04:27:E2:04:41:C8:BE:5E
Certificate issuer: /CN=D2F622A04A47823AB003C84A0427E20441C8BE5E
Certificate serial: 659EFC888528C2D7A748189F6B66468CBF24B2E4
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D2F622A04A47823AB003C84A0427E20441C8BE5E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/HUANGDEXIA/0/D2F622A04A47823AB003C84A0427E20441C8BE5E.mft
Manifest number: 69
Signing time: Tue 28 Jul 2026 04:37:30 +0000
Manifest this update: Tue 28 Jul 2026 04:32:30 +0000
Manifest next update: Wed 29 Jul 2026 07:26:30 +0000
Files and hashes: 1: D2F622A04A47823AB003C84A0427E20441C8BE5E.crl (hash: 0bCvfnH0YZIOHVFQRJ9Lf+UqAYe4Uw/fJVNi4frJq/U=)
2: 3130332e39392e3134322e302f32332d3332203d3e20313331363432.roa (hash: rL2ri6udnHer5sw3p78xlE4EFTw2M/n/E1Kn2KyLNqI=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/HUANGDEXIA/0/D2F622A04A47823AB003C84A0427E20441C8BE5E.crl
rsync://rpkica.twnic.tw/rpki/HUANGDEXIA/0/D2F622A04A47823AB003C84A0427E20441C8BE5E.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D2F622A04A47823AB003C84A0427E20441C8BE5E.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 07:22:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:9e:fc:88:85:28:c2:d7:a7:48:18:9f:6b:66:46:8c:bf:24:b2:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2F622A04A47823AB003C84A0427E20441C8BE5E
Validity
Not Before: Jul 28 04:32:30 2026 GMT
Not After : Jul 29 07:26:30 2026 GMT
Subject: CN=8140BCB2386C375A490787583AA59B0C0AD78719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:97:9f:98:1b:2d:59:2f:d3:bf:ed:d1:d0:9e:
85:dd:4e:09:c4:27:70:f8:a2:c8:86:f7:22:ca:79:
98:d0:50:b1:c5:2b:bd:ed:1a:c6:64:30:36:e8:d5:
f1:41:47:dc:23:de:62:a4:04:91:eb:b4:81:7f:98:
8a:8c:84:bb:a3:37:4f:33:26:02:7d:bf:c2:e9:0a:
e4:44:21:87:28:28:bc:ba:68:55:d0:82:9e:09:6e:
7d:99:7a:b7:36:06:43:72:e5:23:dd:b7:6d:84:37:
f8:2c:ce:9a:db:f8:a2:1e:ed:68:88:78:22:47:97:
01:d0:71:aa:c0:22:19:d2:a7:48:41:9c:7d:e9:ed:
22:29:b6:68:58:f4:10:9c:f6:6a:07:9b:2b:c7:07:
2f:54:59:c6:c3:f7:87:ed:f8:de:fc:e4:78:f7:80:
91:42:8f:d1:48:00:f1:13:8f:ad:3d:b3:6a:f5:a1:
b5:d8:05:1d:e1:25:de:20:cf:2a:a8:18:09:77:ea:
eb:9c:4c:ad:ac:62:ce:de:8e:40:95:56:b0:f7:e0:
e4:06:db:ae:38:2b:0b:5d:df:50:a6:4f:d2:01:3b:
90:e7:cd:5d:db:ea:9e:8e:cd:1d:cb:0e:52:e1:11:
4f:8b:5b:ef:6e:25:13:51:55:83:8a:d9:fd:59:20:
62:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:40:BC:B2:38:6C:37:5A:49:07:87:58:3A:A5:9B:0C:0A:D7:87:19
X509v3 Authority Key Identifier:
keyid:D2:F6:22:A0:4A:47:82:3A:B0:03:C8:4A:04:27:E2:04:41:C8:BE:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/HUANGDEXIA/0/D2F622A04A47823AB003C84A0427E20441C8BE5E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D2F622A04A47823AB003C84A0427E20441C8BE5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HUANGDEXIA/0/D2F622A04A47823AB003C84A0427E20441C8BE5E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:3e:c5:4d:f1:1e:50:7e:4d:a1:1c:53:4c:52:5b:72:54:8b:
c8:01:84:94:b6:b4:38:86:fa:a9:4b:04:e0:67:fd:7e:66:10:
a9:94:09:99:48:1e:3b:2e:57:d0:c3:9e:b2:fd:26:90:2e:32:
6f:2b:7a:28:0f:43:d9:5b:4d:76:6b:d5:a2:40:aa:d2:96:b5:
a7:cf:1c:c9:8f:86:d5:04:78:a4:67:c8:32:be:a9:40:2c:5d:
33:6e:48:7c:a0:fa:9f:b6:52:47:d8:4d:1d:51:63:ad:36:85:
c8:53:55:53:d5:48:f7:9a:38:39:1d:78:80:fd:ee:bd:fe:0a:
aa:ce:80:0a:1d:6c:b3:b0:c2:6f:a0:40:0c:14:16:c0:32:1e:
6c:44:c7:ba:52:f2:00:80:9a:50:ad:43:f7:a5:2e:28:fd:64:
66:83:dc:f6:9f:f2:79:58:78:de:9b:6d:e4:40:60:eb:c5:c9:
86:0f:c0:4c:2d:79:42:7f:95:d5:50:ed:c6:cf:bd:d7:a1:da:
11:e0:5a:88:a2:14:40:11:18:64:19:51:a3:78:e8:39:8b:06:
1d:ab:b9:b9:f2:b8:3d:c3:4b:04:59:6a:5a:09:2a:a7:2b:14:
67:e9:86:75:45:e8:1e:aa:a7:d1:b9:bc:1b:0b:e1:76:2e:85:
68:ea:ee:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:46:35 2026 by rpki-client