
$ rpki-client -vvf rpkica.twnic.tw/rpki/SHANGFU/0/D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.mft
File: D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.mft (raw, json)
Hash identifier: aOsHlRn/ew77XtvDknP62Kk6hnmMJJ7V+UWU0WoqUCU=
Subject key identifier: 48:21:48:E2:2C:4E:65:47:2D:22:B8:EE:0A:BC:F2:66:39:DA:3B:3E
Authority key identifier: D1:AE:33:38:03:5B:FC:A7:C4:E8:6F:BC:28:1A:1F:DF:0B:E6:9B:90
Certificate issuer: /CN=D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90
Certificate serial: 669D008EE5395835D126A9F2586498F026B0B3CF
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SHANGFU/0/D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.mft
Manifest number: 2E
Signing time: Fri 12 Jun 2026 21:18:08 +0000
Manifest this update: Fri 12 Jun 2026 21:13:08 +0000
Manifest next update: Sun 14 Jun 2026 00:44:08 +0000
Files and hashes: 1: D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.crl (hash: vNidAOoqhRWhcBLirLPL9gPfEdluK0DylIx4xXVL3XA=)
2: 3130332e3132362e38382e302f32322d3234203d3e203138303436.roa (hash: WYxsc8T18C1jcbx9ZCaeGlpS/rFD1h17zovXNmt5VJk=)
3: 3130332e3132362e38382e302f32342d3234203d3e203438303234.roa (hash: Sd6Q7YbX3hdrc0mji0ubguZvwyQj1Zh6EbmfJzdspl4=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/SHANGFU/0/D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.crl
rsync://rpkica.twnic.tw/rpki/SHANGFU/0/D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 00:20:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:9d:00:8e:e5:39:58:35:d1:26:a9:f2:58:64:98:f0:26:b0:b3:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90
Validity
Not Before: Jun 12 21:13:08 2026 GMT
Not After : Jun 14 00:44:08 2026 GMT
Subject: CN=482148E22C4E65472D22B8EE0ABCF26639DA3B3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c7:16:a8:87:78:fb:7e:d8:ce:a5:29:24:dd:
fc:42:b3:95:33:2f:7e:75:8d:25:65:9e:b2:13:99:
d4:27:6c:8c:c7:33:3d:f5:d7:e0:f5:75:2b:cc:fb:
f9:eb:7d:b4:cd:a3:72:37:83:f7:ef:75:82:86:a9:
1e:1b:4c:ef:7f:27:d0:a8:ca:54:0c:82:5f:ef:78:
f7:e1:d6:01:c4:69:b5:e1:d1:33:5b:f9:81:81:e4:
d2:8d:91:0b:39:67:5b:0b:44:42:d0:a0:ac:3e:c7:
e6:95:13:81:29:5d:ad:30:ad:ae:c3:4c:5d:9a:e1:
bf:57:62:43:b6:02:56:bf:aa:0a:65:c2:d7:c0:46:
13:94:41:4a:17:35:7e:7c:bb:04:b9:80:6d:92:16:
a4:41:05:0a:cd:65:3d:29:cd:f2:15:d8:36:05:f1:
c4:4f:1b:2e:b3:7a:14:54:1f:26:1d:9c:c9:0c:fa:
6f:97:71:ea:8f:0b:f9:d5:98:b4:f1:3d:32:c5:a6:
df:b2:7c:33:67:b7:c8:0e:1f:ff:27:27:e1:f2:8c:
3d:9a:97:70:e9:21:e9:94:8e:e1:d3:22:46:1f:f2:
4b:4e:6b:70:c4:64:ab:3b:b8:f4:95:f2:e2:46:cf:
f0:9f:60:8a:e5:b3:32:1a:94:db:5c:81:86:24:85:
4f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:21:48:E2:2C:4E:65:47:2D:22:B8:EE:0A:BC:F2:66:39:DA:3B:3E
X509v3 Authority Key Identifier:
keyid:D1:AE:33:38:03:5B:FC:A7:C4:E8:6F:BC:28:1A:1F:DF:0B:E6:9B:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SHANGFU/0/D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SHANGFU/0/D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:54:00:fc:9a:20:45:44:81:3e:9f:57:0d:68:e5:d6:92:7c:
78:5d:d6:9b:6c:43:7f:d4:00:72:af:ee:e7:83:67:8f:ee:cb:
01:c0:e7:58:8e:6c:94:ab:34:73:cd:b2:90:0f:95:b1:42:95:
c7:22:70:d1:4b:5e:f2:49:1f:4f:ca:5e:4d:96:7e:5d:90:5b:
d8:e0:b6:2a:ef:1c:97:c4:af:1f:e9:f0:74:df:c1:66:ad:6c:
83:4f:0e:8c:59:65:54:4d:9a:68:84:53:60:7b:26:40:92:17:
d7:cb:fc:cd:1a:f3:fb:73:14:e4:9e:77:f9:31:8b:4a:0d:53:
2c:8e:5b:de:e9:76:44:87:e7:97:6a:c7:e0:2a:71:4b:72:7b:
39:34:5d:66:70:a0:d8:09:54:ef:46:85:d9:3b:d9:37:e7:78:
d3:d9:86:9c:19:39:a7:60:69:55:d6:09:4a:c4:02:c2:a0:58:
7f:79:60:67:d8:46:43:c2:4d:a1:cd:cc:e4:7e:62:f1:44:9d:
f0:ea:fd:9a:07:8e:15:7b:80:e2:eb:fb:1f:ed:81:41:3a:64:
24:80:af:5f:3e:b1:d9:92:0e:c9:cd:68:02:53:64:70:93:3b:
d3:cf:a0:0b:10:52:31:b4:21:3c:2a:1e:9f:b1:e3:20:54:a2:
3d:46:a8:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:05:16 2026 by rpki-client