
$ rpki-client -vvvf rpkica.twnic.tw/rpki/RAID/0/8E72F95D12197A83EB3E4E8DDB385B148EAA04FF.mft
File: 8E72F95D12197A83EB3E4E8DDB385B148EAA04FF.mft (raw, json)
Hash identifier: N+Vuk1g3PbXExKSgOC9o3h0RlFMuBESadGCpSzUabtA=
Subject key identifier: 88:E6:01:3F:D7:FC:89:8E:02:8C:CD:9E:7B:41:B2:B3:43:79:CE:74
Authority key identifier: 8E:72:F9:5D:12:19:7A:83:EB:3E:4E:8D:DB:38:5B:14:8E:AA:04:FF
Certificate issuer: /CN=8E72F95D12197A83EB3E4E8DDB385B148EAA04FF
Certificate serial: 62A172BC81E536F0C0362A2C4712865D4709D0E8
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8E72F95D12197A83EB3E4E8DDB385B148EAA04FF.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/RAID/0/8E72F95D12197A83EB3E4E8DDB385B148EAA04FF.mft
Manifest number: B3
Signing time: Mon 21 Sep 2026 21:42:15 +0000
Manifest this update: Mon 21 Sep 2026 21:37:15 +0000
Manifest next update: Tue 22 Sep 2026 23:19:15 +0000
Files and hashes: 1: 8E72F95D12197A83EB3E4E8DDB385B148EAA04FF.crl (hash: yE8jAPpHw+M0U/zh2APa5l5mXxdJyCsYVh7KicAi8FA=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/RAID/0/8E72F95D12197A83EB3E4E8DDB385B148EAA04FF.crl
rsync://rpkica.twnic.tw/rpki/RAID/0/8E72F95D12197A83EB3E4E8DDB385B148EAA04FF.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8E72F95D12197A83EB3E4E8DDB385B148EAA04FF.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 23:19:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:a1:72:bc:81:e5:36:f0:c0:36:2a:2c:47:12:86:5d:47:09:d0:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8E72F95D12197A83EB3E4E8DDB385B148EAA04FF
Validity
Not Before: Sep 21 21:37:15 2026 GMT
Not After : Sep 22 23:19:15 2026 GMT
Subject: CN=88E6013FD7FC898E028CCD9E7B41B2B34379CE74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:7e:a2:46:81:ae:5f:39:8d:2b:d1:eb:d3:85:
6e:46:a7:60:f6:dc:3a:6c:5e:51:74:7d:26:1c:74:
87:c0:87:50:dd:e2:2d:fd:7f:46:b0:97:fc:1d:96:
bc:d4:40:06:9c:87:91:ea:62:4d:1e:00:ad:8c:89:
96:06:8d:7b:c0:39:89:e7:6a:e1:ca:fd:49:0d:86:
cf:e3:6e:33:59:a5:13:2f:e4:09:50:13:10:0c:75:
81:41:8b:6e:b7:b2:10:e0:86:e1:e9:c9:ec:cf:96:
7c:82:39:42:42:0d:8a:5b:e4:df:17:53:f5:09:cf:
34:e6:27:92:b3:5f:89:43:c4:22:e8:ee:b9:1d:07:
72:7b:03:f5:79:73:3c:95:e3:23:42:11:86:1a:b0:
70:bf:87:3c:bc:46:26:28:30:bc:c3:73:55:df:c6:
39:6b:41:e4:79:28:01:97:54:bc:77:fe:c2:26:3b:
05:04:57:6f:77:c5:bc:1d:62:c8:97:a7:3a:c7:da:
e2:d4:9e:3b:5b:c3:b5:58:99:9c:10:6b:34:70:f0:
b6:94:80:2f:47:a8:de:2a:f0:75:1a:89:0f:08:b6:
f2:98:ac:3c:09:40:6c:60:1d:b5:28:bb:06:a5:eb:
39:e2:27:d9:0f:69:80:ad:d9:f7:9d:1e:06:61:97:
f2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:E6:01:3F:D7:FC:89:8E:02:8C:CD:9E:7B:41:B2:B3:43:79:CE:74
X509v3 Authority Key Identifier:
keyid:8E:72:F9:5D:12:19:7A:83:EB:3E:4E:8D:DB:38:5B:14:8E:AA:04:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/RAID/0/8E72F95D12197A83EB3E4E8DDB385B148EAA04FF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8E72F95D12197A83EB3E4E8DDB385B148EAA04FF.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/RAID/0/8E72F95D12197A83EB3E4E8DDB385B148EAA04FF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:85:61:25:ce:c7:d6:98:3d:00:80:0f:d9:9d:ba:81:b7:3d:
66:8f:2a:cd:7f:d8:7c:36:52:0f:74:1a:61:43:f9:8d:1f:5e:
8b:2c:d8:09:86:4c:83:7e:d2:1c:38:79:90:13:2d:61:ca:93:
e3:aa:c0:09:48:be:fb:8f:0e:6b:33:d0:1d:bb:b7:9f:d8:86:
47:03:ac:58:f3:56:30:5e:5f:dd:c9:1d:f2:f4:3e:c0:ed:c9:
d7:e6:f2:17:de:6b:a0:67:03:03:ef:a5:5e:0a:ac:9f:f2:8d:
b6:37:e7:d1:8e:74:0b:39:c0:9c:87:03:a6:fc:18:ff:b2:37:
e5:ea:68:3f:b8:10:08:db:f2:85:27:fc:32:17:67:b6:86:77:
c2:7c:f3:36:4b:de:73:d5:a6:68:18:b1:62:89:58:50:0c:42:
57:61:ba:75:8e:21:e5:46:c8:8b:5e:01:76:e4:64:4a:58:02:
eb:a6:6a:d3:5a:50:c0:b6:ca:dc:49:84:7f:a0:5e:07:8b:2d:
ac:06:fe:3b:a9:bf:88:17:c4:17:90:bf:d2:ed:a6:9b:11:a6:
ab:52:13:d3:85:8c:90:68:ab:6d:fc:1c:dd:32:22:e1:14:c8:
bb:0b:42:17:87:9c:35:97:47:c0:e5:d9:e9:02:61:b1:2a:9d:
ee:f8:33:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 15:04:47 2026 by rpki-client