
$ rpki-client -vvvf rpkica.twnic.tw/rpki/HUSHENGXIN/0/2730CF9F132716F178F88FB1F268CE51CA264C9F.mft
File: 2730CF9F132716F178F88FB1F268CE51CA264C9F.mft (raw, json)
Hash identifier: ofTAE4ytHPLFfXfdNHsrS9FM4yJwlz1959jMj50A4JY=
Subject key identifier: E6:68:A7:D8:23:1D:8F:7A:C1:EB:C3:08:25:C3:0F:38:0A:C5:0E:70
Authority key identifier: 27:30:CF:9F:13:27:16:F1:78:F8:8F:B1:F2:68:CE:51:CA:26:4C:9F
Certificate issuer: /CN=2730CF9F132716F178F88FB1F268CE51CA264C9F
Certificate serial: 7BA6121CCD2F49A737336B008537385DA670CDEF
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2730CF9F132716F178F88FB1F268CE51CA264C9F.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/HUSHENGXIN/0/2730CF9F132716F178F88FB1F268CE51CA264C9F.mft
Manifest number: B3
Signing time: Mon 21 Sep 2026 23:33:03 +0000
Manifest this update: Mon 21 Sep 2026 23:28:03 +0000
Manifest next update: Wed 23 Sep 2026 01:39:03 +0000
Files and hashes: 1: 2730CF9F132716F178F88FB1F268CE51CA264C9F.crl (hash: +UzUtsyjhMydE6auh5YvCO2CLEyxQhmiZppOQzQN+3A=)
2: 3130332e3132372e3231362e302f32332d3332203d3e20313331363432.roa (hash: 9QLLKde7xB+44T3GJTEMGiTgMX83XZhXuc69+/0GzrU=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/HUSHENGXIN/0/2730CF9F132716F178F88FB1F268CE51CA264C9F.crl
rsync://rpkica.twnic.tw/rpki/HUSHENGXIN/0/2730CF9F132716F178F88FB1F268CE51CA264C9F.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2730CF9F132716F178F88FB1F268CE51CA264C9F.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 22:16:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:a6:12:1c:cd:2f:49:a7:37:33:6b:00:85:37:38:5d:a6:70:cd:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2730CF9F132716F178F88FB1F268CE51CA264C9F
Validity
Not Before: Sep 21 23:28:03 2026 GMT
Not After : Sep 23 01:39:03 2026 GMT
Subject: CN=E668A7D8231D8F7AC1EBC30825C30F380AC50E70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:40:28:85:8a:11:b8:fb:df:36:18:5e:51:2c:
2e:04:3e:bc:ac:26:8b:86:88:b4:d5:a2:46:72:6b:
65:d9:b6:d4:56:86:26:4a:37:b7:6f:88:76:f8:7a:
79:49:8e:a7:53:ee:da:ef:60:d2:a1:5b:6c:e8:76:
7d:eb:d9:cc:45:2e:7e:92:03:17:45:82:f2:72:95:
6b:86:f3:dc:80:ee:e2:08:de:62:74:81:fe:74:ff:
da:d5:e7:0e:4c:47:f0:b6:7d:d6:4d:5b:06:0a:49:
7c:5c:1b:a0:9d:37:da:7e:85:9f:37:aa:bf:93:f4:
31:e9:10:43:1d:83:31:57:99:f9:35:67:7b:bd:7e:
29:ad:45:da:f3:95:e1:46:05:68:8f:8c:49:51:41:
f2:da:7c:84:75:ae:cb:d0:97:26:6a:0f:6d:df:4a:
b7:da:a1:bd:bf:31:cd:d4:8a:9b:46:25:86:f0:0c:
52:18:2b:69:a9:e6:46:0e:47:16:b0:f0:ae:d3:5a:
6a:06:b9:0a:bf:3f:2b:99:06:cd:b5:da:39:68:2a:
cd:b3:8c:64:d6:65:fe:8f:f2:f9:ac:5b:bc:7b:70:
87:ee:cc:c2:63:78:00:92:8e:9a:3a:15:47:c9:88:
fa:57:8f:28:4a:99:21:80:b8:20:63:af:4a:be:0f:
a1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:68:A7:D8:23:1D:8F:7A:C1:EB:C3:08:25:C3:0F:38:0A:C5:0E:70
X509v3 Authority Key Identifier:
keyid:27:30:CF:9F:13:27:16:F1:78:F8:8F:B1:F2:68:CE:51:CA:26:4C:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/HUSHENGXIN/0/2730CF9F132716F178F88FB1F268CE51CA264C9F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2730CF9F132716F178F88FB1F268CE51CA264C9F.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HUSHENGXIN/0/2730CF9F132716F178F88FB1F268CE51CA264C9F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:c3:45:be:ab:3a:ad:e7:8a:4e:b5:83:d9:86:57:cb:b8:89:
6c:c1:0a:12:ad:6a:97:ca:a3:66:76:e5:06:38:fd:99:1c:39:
7a:6a:b3:c9:80:9e:82:d8:03:c7:98:be:1b:31:f2:9e:d0:d5:
7c:22:21:46:04:c2:b1:b5:22:1b:35:0d:cc:0b:b7:e8:03:c2:
0b:19:cd:4b:66:1b:ae:6f:04:68:2e:ee:14:c3:50:26:1a:f0:
49:42:bb:2a:09:b3:f7:8d:55:eb:71:4b:2b:42:c9:d2:5d:00:
79:72:b4:a7:23:84:f2:e9:e2:70:ce:57:c7:f3:c7:97:3e:90:
e9:34:83:6f:ae:7a:40:c9:68:f7:81:53:e4:35:19:65:fd:6e:
7b:de:ef:6a:a6:d8:e7:41:7a:d8:e7:a6:5a:dd:d0:6f:b8:a3:
e0:85:f7:72:df:b9:6a:0f:f2:42:f5:18:65:04:b0:ed:91:96:
9e:75:a5:23:73:74:8c:60:d7:e0:88:bb:5a:d2:45:04:cd:56:
ba:36:d7:1a:8c:fe:30:9c:24:ff:c6:74:26:3f:01:b6:e3:51:
40:88:b1:f6:99:5c:94:94:76:ea:6d:b5:00:8c:0a:9b:e9:22:
e2:55:a9:8f:07:47:88:02:78:cb:32:75:18:ba:da:09:ea:69:
5a:6a:34:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:37:39 2026 by rpki-client