
$ rpki-client -vvvf rpkica.twnic.tw/rpki/QYCLOUD/0/D1EE894ECDA357FF3B846E2660D95F0535127E79.mft
File: D1EE894ECDA357FF3B846E2660D95F0535127E79.mft (raw, json)
Hash identifier: Lp//XmY7TVT2Zx0WeICSI+wkhOh9IRH1dYbHiJ0AQCA=
Subject key identifier: CC:FA:3D:91:88:8E:07:B1:AB:07:F1:9D:92:37:48:BA:64:C4:37:ED
Authority key identifier: D1:EE:89:4E:CD:A3:57:FF:3B:84:6E:26:60:D9:5F:05:35:12:7E:79
Certificate issuer: /CN=D1EE894ECDA357FF3B846E2660D95F0535127E79
Certificate serial: 09B8A5FCFA81C3385EEA85B6B35F36B8543629E2
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D1EE894ECDA357FF3B846E2660D95F0535127E79.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/QYCLOUD/0/D1EE894ECDA357FF3B846E2660D95F0535127E79.mft
Manifest number: B2
Signing time: Mon 21 Sep 2026 02:30:03 +0000
Manifest this update: Mon 21 Sep 2026 02:25:03 +0000
Manifest next update: Tue 22 Sep 2026 03:26:03 +0000
Files and hashes: 1: D1EE894ECDA357FF3B846E2660D95F0535127E79.crl (hash: RsyFKyhuOcLVm8a3T75cFtVdwvyFFOe2ef3fBKTIDC4=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/QYCLOUD/0/D1EE894ECDA357FF3B846E2660D95F0535127E79.crl
rsync://rpkica.twnic.tw/rpki/QYCLOUD/0/D1EE894ECDA357FF3B846E2660D95F0535127E79.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D1EE894ECDA357FF3B846E2660D95F0535127E79.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 03:26:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:b8:a5:fc:fa:81:c3:38:5e:ea:85:b6:b3:5f:36:b8:54:36:29:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1EE894ECDA357FF3B846E2660D95F0535127E79
Validity
Not Before: Sep 21 02:25:03 2026 GMT
Not After : Sep 22 03:26:03 2026 GMT
Subject: CN=CCFA3D91888E07B1AB07F19D923748BA64C437ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3d:74:37:dc:62:bf:b4:db:10:af:25:60:de:
76:a0:c6:3e:b4:4e:e8:b1:35:c9:3c:42:87:43:45:
88:50:32:d5:e8:ce:6c:c7:63:3a:62:61:d0:45:5b:
1e:9d:01:5c:dc:89:01:62:d6:03:0a:7c:49:44:a1:
71:3f:56:e5:28:4e:0b:d1:93:fe:df:89:fb:b1:0c:
3a:bc:3e:2f:1e:00:f2:64:aa:80:8a:6c:66:02:ef:
a0:74:25:b1:d0:38:f9:4b:92:17:89:4f:bd:a2:af:
b3:5d:db:0a:ec:6a:a9:d6:e7:3e:09:32:45:d6:32:
be:75:73:bd:fe:26:fe:4a:29:cc:e9:8f:b2:fe:9b:
d7:ad:a0:6c:db:6a:e4:ca:26:ba:28:97:9f:9a:5a:
f6:01:07:38:e2:3e:a3:7c:c8:95:43:9b:b3:6b:5f:
ae:6c:c5:20:01:00:0f:ed:6d:77:99:f7:38:70:4b:
4e:89:21:67:df:7c:6d:a7:87:13:b6:96:6f:30:97:
56:17:ca:b6:e7:f2:42:af:41:ac:2c:08:14:17:4d:
c0:9d:e0:36:61:10:d5:10:c5:b3:a2:a9:66:d5:3d:
9f:1e:ed:b5:71:31:cc:90:f7:28:13:b9:f2:a3:66:
cf:d8:59:be:1d:0a:63:f0:21:ea:e6:8f:1d:61:51:
b9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:FA:3D:91:88:8E:07:B1:AB:07:F1:9D:92:37:48:BA:64:C4:37:ED
X509v3 Authority Key Identifier:
keyid:D1:EE:89:4E:CD:A3:57:FF:3B:84:6E:26:60:D9:5F:05:35:12:7E:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/QYCLOUD/0/D1EE894ECDA357FF3B846E2660D95F0535127E79.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D1EE894ECDA357FF3B846E2660D95F0535127E79.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/QYCLOUD/0/D1EE894ECDA357FF3B846E2660D95F0535127E79.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:13:c6:5e:96:2e:56:d3:1a:e4:75:ed:4b:79:f0:2b:43:e2:
a9:74:40:03:4b:a2:55:b4:15:74:51:83:11:31:1b:35:e0:a5:
ba:c5:51:50:d7:0a:76:b7:50:14:2a:0b:7d:23:6c:3f:57:b6:
7b:ef:5d:41:0e:19:94:72:04:bf:e4:31:57:92:bc:30:ba:41:
79:1d:6e:1f:63:b2:c8:31:9f:07:09:5b:0f:0c:71:a0:d6:f3:
40:85:e4:d1:04:3d:91:ea:c9:44:02:7a:9a:ed:f2:37:40:b6:
8e:20:6d:4d:cd:80:fe:40:d6:67:a8:87:2f:e5:09:94:c0:65:
21:05:68:59:e2:5b:bb:6c:7c:c5:15:cb:64:25:8c:e1:ef:10:
f8:a8:af:29:f2:d0:c9:a5:c9:12:97:32:96:55:c8:94:90:7f:
65:1c:1a:52:47:40:e5:b0:de:df:7e:9d:f0:ab:2c:99:21:0f:
d1:d1:85:06:38:7d:66:bc:ae:09:c8:bc:69:7c:e0:fa:47:8a:
f5:14:b1:fe:21:85:cd:15:df:be:84:14:12:de:81:a1:a6:93:
48:2b:5a:5e:76:52:e2:aa:73:cc:d1:be:29:12:68:98:66:75:
65:4e:57:69:14:d9:41:43:4d:d2:5e:72:da:ed:5e:0b:5d:11:
ea:f9:99:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:05:30 2026 by rpki-client