
$ rpki-client -vvf rpkica.twnic.tw/rpki/SGU/0/86971504F42B7B0AF1883E8DFA5BAA555A8BE849.mft
File: 86971504F42B7B0AF1883E8DFA5BAA555A8BE849.mft (raw, json)
Hash identifier: DNPAIw6iPk2OXwuLWY9eo5167vhCOIQafzvQ8EX6Yeo=
Subject key identifier: F0:1C:7D:65:F7:67:19:1B:04:F0:80:05:B5:2A:AA:4B:66:16:62:6C
Authority key identifier: 86:97:15:04:F4:2B:7B:0A:F1:88:3E:8D:FA:5B:AA:55:5A:8B:E8:49
Certificate issuer: /CN=86971504F42B7B0AF1883E8DFA5BAA555A8BE849
Certificate serial: 0A6BC87BB236DACAFDC4048B1598B5CB98202A4D
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/86971504F42B7B0AF1883E8DFA5BAA555A8BE849.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SGU/0/86971504F42B7B0AF1883E8DFA5BAA555A8BE849.mft
Manifest number: 2E
Signing time: Sat 13 Jun 2026 01:13:36 +0000
Manifest this update: Sat 13 Jun 2026 01:08:36 +0000
Manifest next update: Sun 14 Jun 2026 02:02:36 +0000
Files and hashes: 1: 86971504F42B7B0AF1883E8DFA5BAA555A8BE849.crl (hash: BmvTUcdRGeDobLsNDQxLUatkB/1DNpqiOUIfZNBXEKM=)
2: 323430303a373432303a3a2f33322d3332203d3e20313334383233.roa (hash: qqWWtvqYwHtuTqDmq6KrURru6pr7pReD9Wzh4csu0e4=)
3: 3130332e3138362e3138362e302f32332d3234203d3e20313334383233.roa (hash: sU0nxf0k+bvMj58mzvcqIhIM4sCuxjf2EUmRobYvVAQ=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/SGU/0/86971504F42B7B0AF1883E8DFA5BAA555A8BE849.crl
rsync://rpkica.twnic.tw/rpki/SGU/0/86971504F42B7B0AF1883E8DFA5BAA555A8BE849.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/86971504F42B7B0AF1883E8DFA5BAA555A8BE849.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 00:20:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:6b:c8:7b:b2:36:da:ca:fd:c4:04:8b:15:98:b5:cb:98:20:2a:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86971504F42B7B0AF1883E8DFA5BAA555A8BE849
Validity
Not Before: Jun 13 01:08:36 2026 GMT
Not After : Jun 14 02:02:36 2026 GMT
Subject: CN=F01C7D65F767191B04F08005B52AAA4B6616626C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:84:81:d9:1e:5e:1d:f0:ac:f4:46:18:5b:32:
93:82:c6:c0:e5:5c:b8:2b:a4:f8:92:2d:e8:5c:da:
b6:0f:3e:d5:23:2a:fa:d1:cf:d0:ef:cf:e0:cf:a6:
0f:94:7a:83:08:5a:bc:56:28:0c:dd:2d:12:94:b5:
c6:01:50:e8:0a:2d:b0:44:cc:40:16:4b:32:d1:a1:
02:93:87:8c:e8:a2:0e:d2:3e:d1:58:25:98:82:4a:
21:e7:e5:68:e7:33:24:e3:13:e9:c4:f4:97:1f:9d:
19:73:91:3d:e6:db:8b:55:32:d9:34:9a:70:70:3f:
28:18:2b:ef:69:03:3d:ae:47:fe:c1:85:39:1a:4c:
48:5a:8b:76:1f:3d:7d:74:86:df:45:44:d2:26:88:
e8:5b:eb:50:a1:ab:ad:d2:78:87:23:22:73:d0:78:
f0:eb:1b:3a:72:7b:4c:93:1e:6f:6a:f2:d1:e6:12:
35:dc:3f:cf:dd:f6:35:ca:71:f1:26:62:04:30:55:
c4:2e:ef:d1:c9:ff:cd:09:47:1d:74:3a:32:b6:30:
67:3f:46:82:4f:e1:a7:89:b9:11:36:a1:6d:53:70:
2e:e6:61:8f:f5:19:b9:e1:40:3e:ab:77:dd:75:4f:
5e:28:f9:84:db:17:97:58:50:00:40:95:e9:de:cb:
34:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:1C:7D:65:F7:67:19:1B:04:F0:80:05:B5:2A:AA:4B:66:16:62:6C
X509v3 Authority Key Identifier:
keyid:86:97:15:04:F4:2B:7B:0A:F1:88:3E:8D:FA:5B:AA:55:5A:8B:E8:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SGU/0/86971504F42B7B0AF1883E8DFA5BAA555A8BE849.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/86971504F42B7B0AF1883E8DFA5BAA555A8BE849.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SGU/0/86971504F42B7B0AF1883E8DFA5BAA555A8BE849.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:75:22:10:4a:a7:55:e1:fa:43:bd:4e:dd:be:d8:47:68:c9:
0e:e7:0c:56:83:13:32:6b:fa:58:ac:43:2b:72:5a:22:0c:b7:
58:12:4e:ca:78:c2:bf:48:e3:54:a4:74:c8:44:40:60:6c:97:
a0:a1:27:c4:f9:43:41:bc:67:ba:68:9d:3c:1b:ec:c9:bf:48:
74:ce:21:e0:87:30:cd:1c:c2:71:23:25:3c:ed:7c:94:6a:4e:
73:ff:fa:da:55:99:5c:61:72:78:57:29:09:dd:15:22:db:3a:
a0:bd:77:e7:0a:dc:28:c8:a7:4d:a0:34:98:86:9e:4f:c9:1d:
37:0e:03:54:5d:93:a6:2a:25:bf:29:59:70:2f:24:f9:16:b5:
e6:0b:04:e4:4a:06:95:c8:5d:ed:de:60:0b:b5:e5:c2:3a:28:
d1:1a:b6:dc:43:c0:f1:b7:9f:c7:f2:62:e8:ae:4d:9e:9d:90:
92:78:29:34:4d:7b:bb:1e:20:62:43:fd:b6:d8:35:25:36:dc:
0b:7e:92:f6:ba:a6:29:36:0e:59:f7:4b:74:b0:5f:0b:b8:7f:
c5:e1:09:cf:68:f6:29:0e:ca:ae:8a:4a:01:bf:7e:0d:b5:63:
25:ac:42:2c:f1:62:23:0a:03:d8:49:6b:46:63:4c:83:a2:50:
66:00:d1:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 12:41:18 2026 by rpki-client