
$ rpki-client -vvvf rpkica.twnic.tw/rpki/RENREN/0/7CD85D0DDA75F492D954402BFEA819ED61FD5B76.mft
File: 7CD85D0DDA75F492D954402BFEA819ED61FD5B76.mft (raw, json)
Hash identifier: bypnb8EH5VrMX+DkjIF6uyWMfbmn5oP/N/IKMmyvBFA=
Subject key identifier: D6:DD:5A:6B:DE:69:7A:3F:65:68:71:0C:1F:A4:AB:EC:51:50:D4:17
Authority key identifier: 7C:D8:5D:0D:DA:75:F4:92:D9:54:40:2B:FE:A8:19:ED:61:FD:5B:76
Certificate issuer: /CN=7CD85D0DDA75F492D954402BFEA819ED61FD5B76
Certificate serial: 618C3747B3134B8FBCF3D30F426CEA1BA4F1BFF4
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7CD85D0DDA75F492D954402BFEA819ED61FD5B76.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/RENREN/0/7CD85D0DDA75F492D954402BFEA819ED61FD5B76.mft
Manifest number: B2
Signing time: Sun 20 Sep 2026 11:34:19 +0000
Manifest this update: Sun 20 Sep 2026 11:29:19 +0000
Manifest next update: Mon 21 Sep 2026 12:16:19 +0000
Files and hashes: 1: 7CD85D0DDA75F492D954402BFEA819ED61FD5B76.crl (hash: lknKSPoM3QpLt+E/lhttVWFT9tsjNm3tmet7uw8ExJ8=)
2: 3130332e36392e34382e302f32332d3332203d3e20313331363432.roa (hash: o7B66t9SqLTxpoTquQyKEFqbdaVVWkZmLbtbMwzYiRQ=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/RENREN/0/7CD85D0DDA75F492D954402BFEA819ED61FD5B76.crl
rsync://rpkica.twnic.tw/rpki/RENREN/0/7CD85D0DDA75F492D954402BFEA819ED61FD5B76.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7CD85D0DDA75F492D954402BFEA819ED61FD5B76.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 21 Sep 2026 08:58:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:8c:37:47:b3:13:4b:8f:bc:f3:d3:0f:42:6c:ea:1b:a4:f1:bf:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CD85D0DDA75F492D954402BFEA819ED61FD5B76
Validity
Not Before: Sep 20 11:29:19 2026 GMT
Not After : Sep 21 12:16:19 2026 GMT
Subject: CN=D6DD5A6BDE697A3F6568710C1FA4ABEC5150D417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:3f:71:20:67:62:8e:2d:d4:79:a1:db:3a:07:
41:04:5e:90:80:0f:95:17:53:51:2b:68:9a:40:9f:
d0:3a:20:17:7b:77:32:fa:69:d3:9b:07:2c:50:9d:
71:42:3a:4a:7e:16:f1:6c:ce:c4:2e:82:eb:76:f9:
03:5a:ce:90:fa:72:51:b9:f3:d3:77:cf:90:79:e6:
39:68:27:d9:70:fb:56:1c:9a:c3:a4:12:18:79:ec:
78:49:fe:10:8d:9b:8c:52:9f:72:77:dd:e9:99:49:
8f:44:a5:ba:80:cf:bc:59:2d:83:4d:b8:7c:aa:d9:
2a:da:de:f6:b9:d3:59:6d:67:49:e9:7d:58:b8:a0:
29:10:01:4f:d4:8c:24:f3:91:66:5d:2c:8c:35:25:
92:f2:a4:de:83:33:94:80:e7:90:dd:bf:e5:03:4d:
fe:c7:f9:dc:92:74:37:79:26:3d:7b:ee:b0:4b:d9:
97:c0:79:40:77:a2:ae:6e:82:99:45:99:1f:66:e7:
cb:66:ab:c7:88:1f:cc:ad:79:05:ce:44:ce:1f:a5:
35:d4:43:6a:7e:e6:24:71:f0:82:ea:81:2d:6c:68:
bc:5e:9b:1d:8a:7b:bb:0a:64:02:77:85:41:ce:39:
6c:c4:9e:66:c8:01:21:97:e2:84:9c:ad:37:52:27:
4d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:DD:5A:6B:DE:69:7A:3F:65:68:71:0C:1F:A4:AB:EC:51:50:D4:17
X509v3 Authority Key Identifier:
keyid:7C:D8:5D:0D:DA:75:F4:92:D9:54:40:2B:FE:A8:19:ED:61:FD:5B:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/RENREN/0/7CD85D0DDA75F492D954402BFEA819ED61FD5B76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7CD85D0DDA75F492D954402BFEA819ED61FD5B76.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/RENREN/0/7CD85D0DDA75F492D954402BFEA819ED61FD5B76.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:69:f9:1d:e2:c6:bf:59:d4:c6:4a:6c:29:34:82:20:d8:4a:
24:97:de:2d:82:4c:c1:49:a5:2d:b8:a4:20:9f:f6:fc:c0:00:
5e:63:ed:ec:85:ce:0d:09:83:86:3a:5f:79:d6:3e:4a:17:cf:
ad:46:27:99:f9:93:fa:63:1f:83:67:f3:32:aa:c9:78:46:66:
4d:e1:b6:40:e3:41:89:b7:ed:ca:5f:b0:e4:a4:6a:d7:27:a5:
b5:ba:dc:d2:d6:43:88:8d:f1:ff:31:88:1d:0b:85:09:31:68:
6c:bf:1f:14:02:07:73:65:2d:bf:21:17:f4:5a:83:a8:1f:ed:
1c:d5:c4:e3:b9:20:6e:d3:3a:1a:fa:a0:10:f8:6f:73:4b:4b:
14:ec:cb:fe:ec:fc:99:ff:4e:ed:32:6d:37:30:67:15:b9:df:
c4:30:74:a3:4d:8e:d1:e8:af:87:da:52:90:04:dc:29:d5:70:
e3:08:95:04:bc:10:22:86:4c:b0:04:74:51:82:66:3d:15:99:
ab:67:7a:5f:d4:b5:0f:dc:1f:d0:b4:24:5d:9d:ef:fc:48:14:
6e:a1:e7:90:79:53:47:2f:0f:78:6d:45:a9:66:6a:9e:dd:1d:
a6:ad:cb:93:fe:36:21:e4:32:df:0b:75:8b:b3:1d:48:24:34:
60:32:f7:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 02:25:02 2026 by rpki-client