
$ rpki-client -vvf rpkica.twnic.tw/rpki/M2NIM/0/E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.mft
File: E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.mft (raw, json)
Hash identifier: 7rhCvo7LJyLLZfh9Vp61RzNWpAflhM+x6OTGbjKwnag=
Subject key identifier: E3:91:FE:18:11:A7:14:87:07:8A:3D:82:44:48:62:A6:02:18:94:3F
Authority key identifier: E5:AA:3B:0F:9F:58:C9:34:21:C6:48:20:4A:B4:31:A4:AD:C4:B0:CB
Certificate issuer: /CN=E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB
Certificate serial: 1201AF8070A29B4E8D358909A06A37DEEC4032BE
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/M2NIM/0/E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.mft
Manifest number: 6D
Signing time: Tue 28 Jul 2026 04:57:33 +0000
Manifest this update: Tue 28 Jul 2026 04:52:33 +0000
Manifest next update: Wed 29 Jul 2026 07:30:33 +0000
Files and hashes: 1: E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.crl (hash: 9OhgB3HcZDplyjDPTre9cQXbNcXNYOUXqpGS29TY1uM=)
2: 323430313a383432303a3a2f33322d3438203d3e2039393233.roa (hash: mAMCDxxdS5D0xlBjJmg5NjQv1GONdD1Fp7YNezXC9T8=)
3: 323430313a383432303a3a2f33322d3438203d3e203332353935.roa (hash: 7IK6gvzs6uMwoViSpBOdjJrk5WxLH5pe447RiZaITJY=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/M2NIM/0/E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.crl
rsync://rpkica.twnic.tw/rpki/M2NIM/0/E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 07:22:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:01:af:80:70:a2:9b:4e:8d:35:89:09:a0:6a:37:de:ec:40:32:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB
Validity
Not Before: Jul 28 04:52:33 2026 GMT
Not After : Jul 29 07:30:33 2026 GMT
Subject: CN=E391FE1811A71487078A3D82444862A60218943F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:35:1e:a6:f2:66:b8:69:bd:c4:be:02:aa:70:
cc:53:4e:08:93:39:bf:62:65:9b:ac:bc:b5:e9:dc:
70:4d:eb:c0:ce:f3:10:e6:bc:c4:7e:15:67:1d:01:
2d:0b:89:71:0c:38:7c:73:8c:32:94:87:93:4c:e7:
76:ab:d5:ce:00:9c:74:54:ad:ec:47:52:c1:03:fd:
b1:8d:e8:0f:4d:b5:bc:91:b0:90:45:97:d2:15:8a:
44:0f:65:82:e6:ae:16:81:aa:e4:58:b2:1a:01:a3:
e6:99:d6:f4:35:3f:25:1c:e5:f9:bd:48:8f:1e:97:
d4:62:0a:13:f4:b5:81:45:07:d9:76:ed:6c:ac:06:
ae:e0:a4:1c:3e:96:38:da:b8:93:44:f0:51:d0:23:
b2:2d:db:9d:92:9d:08:57:89:09:f2:c1:4b:d9:78:
d1:8b:94:b8:a0:e1:8c:14:b3:5a:16:23:4a:ef:eb:
38:0e:34:91:ba:8f:56:93:41:3a:45:08:1a:60:49:
cb:ff:68:47:12:89:f4:79:6f:d4:8a:8e:f4:08:04:
24:f4:03:2d:87:5c:8c:66:2a:9b:99:83:80:7c:e8:
26:75:45:ab:3e:40:69:0c:3c:98:2a:db:46:08:ba:
09:15:eb:e9:29:12:a6:e4:11:f1:c3:c3:c2:bd:13:
c5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:91:FE:18:11:A7:14:87:07:8A:3D:82:44:48:62:A6:02:18:94:3F
X509v3 Authority Key Identifier:
keyid:E5:AA:3B:0F:9F:58:C9:34:21:C6:48:20:4A:B4:31:A4:AD:C4:B0:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/M2NIM/0/E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/M2NIM/0/E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:bc:67:91:bb:f3:20:59:cb:6d:ec:99:0f:5a:e2:b8:4d:68:
7c:e2:62:95:4d:c9:81:af:40:f0:8e:87:ce:79:fe:96:4d:39:
d3:06:8e:e9:b1:82:e3:f2:c8:37:a1:fb:f6:f4:42:87:e7:35:
50:18:d2:4c:be:8a:1c:f2:5b:a8:c5:be:0d:49:ee:fb:a9:ea:
4c:23:76:c1:41:ac:3e:b6:c9:5c:31:b8:25:21:f9:69:f4:1d:
33:db:90:31:e8:32:a0:2e:97:78:1c:ad:9b:71:5c:2d:68:bc:
dd:c9:93:92:48:70:2c:4f:61:57:23:52:a2:ad:31:75:aa:19:
c7:a4:b2:40:33:db:d1:c0:ea:3c:bc:69:da:9e:29:64:7f:34:
9d:ab:81:18:f5:3d:e3:5c:1a:dd:1f:3c:4d:46:fa:ac:2b:b7:
72:11:6f:0d:83:d2:7a:f8:3b:cc:5f:69:7f:57:99:11:69:b2:
fc:3d:ff:46:2c:f5:6d:e8:9f:52:9e:97:3b:9b:f2:68:e6:2e:
fa:79:38:51:90:10:b4:80:37:3c:7f:d3:8c:be:78:7a:f0:8c:
ff:78:f0:44:1f:2c:0b:85:4b:01:67:37:c1:08:d4:18:f8:28:
6d:54:a3:e9:91:84:a0:d2:3a:8c:16:4e:22:15:a9:39:f6:1d:
83:5d:c5:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:22:44 2026 by rpki-client