
$ rpki-client -vvf rpkica.twnic.tw/rpki/SHINETEL/0/DF363D7461650156F76A26CBA12EB3420DB3D849.mft
File: DF363D7461650156F76A26CBA12EB3420DB3D849.mft (raw, json)
Hash identifier: JmwYkKp8Rgx9OPlFHwsZC45WVlgX1rwjEMbAW/IETog=
Subject key identifier: 7B:36:39:4D:A9:A0:84:C0:26:F2:34:81:49:CE:D8:0C:03:85:9B:89
Authority key identifier: DF:36:3D:74:61:65:01:56:F7:6A:26:CB:A1:2E:B3:42:0D:B3:D8:49
Certificate issuer: /CN=DF363D7461650156F76A26CBA12EB3420DB3D849
Certificate serial: 67C34E6EEE2AE7F393E95EE808011C4C100B2597
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DF363D7461650156F76A26CBA12EB3420DB3D849.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SHINETEL/0/DF363D7461650156F76A26CBA12EB3420DB3D849.mft
Manifest number: 2D
Signing time: Sat 13 Jun 2026 00:18:29 +0000
Manifest this update: Sat 13 Jun 2026 00:13:29 +0000
Manifest next update: Sun 14 Jun 2026 02:55:29 +0000
Files and hashes: 1: 3130332e3131362e31342e302f32332d3234203d3e203633393032.roa (hash: ngTeNrAtpPC35YX71ipwovbw5e/8zCnuwIl4yirC2Qs=)
2: DF363D7461650156F76A26CBA12EB3420DB3D849.crl (hash: POBC70EgP7HsH+ImRPTjYVKSUNbtPCykSL08E2ngNXM=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/SHINETEL/0/DF363D7461650156F76A26CBA12EB3420DB3D849.crl
rsync://rpkica.twnic.tw/rpki/SHINETEL/0/DF363D7461650156F76A26CBA12EB3420DB3D849.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DF363D7461650156F76A26CBA12EB3420DB3D849.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 00:20:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:c3:4e:6e:ee:2a:e7:f3:93:e9:5e:e8:08:01:1c:4c:10:0b:25:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DF363D7461650156F76A26CBA12EB3420DB3D849
Validity
Not Before: Jun 13 00:13:29 2026 GMT
Not After : Jun 14 02:55:29 2026 GMT
Subject: CN=7B36394DA9A084C026F2348149CED80C03859B89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d2:44:e7:f5:27:98:78:78:98:49:17:93:68:
28:f4:99:e5:60:b5:65:8d:d7:b9:a3:3b:df:b1:0e:
93:f5:15:49:63:3a:0e:cf:e1:d3:e6:ca:4d:c3:dd:
4f:e3:28:c5:b2:32:90:90:4e:d8:0e:f7:0e:8c:19:
ee:b7:69:d9:95:c5:3f:ed:b5:ac:0e:5a:14:2e:2c:
1d:da:10:e3:4d:3e:7c:f3:55:03:50:fa:f1:4c:b0:
48:ba:0f:0f:75:70:79:40:33:75:fa:cd:60:63:69:
11:5d:a8:6b:29:d8:a4:4b:b8:7d:89:cc:d1:3f:2d:
6d:0d:1a:6d:92:00:a4:91:96:34:90:6b:fd:33:63:
d2:31:09:4b:cd:05:39:2e:59:a8:37:18:34:0f:0d:
80:00:36:01:f9:e7:77:00:06:42:91:d3:80:88:a4:
2e:a9:b2:9c:56:09:e2:d3:48:f4:1c:f3:51:8b:5d:
f5:3f:6a:f1:1c:bb:8c:7a:fa:ba:1c:1f:22:d6:13:
4d:b0:bd:1c:67:a9:f5:5e:52:28:90:47:44:67:9a:
ff:c5:5f:b5:17:fa:8c:95:cf:07:a5:9a:9a:22:36:
6c:f3:f7:f9:ff:c4:f3:88:44:95:37:5e:e5:bc:c7:
22:91:11:8a:3a:cd:1d:2f:28:e7:45:2d:11:7e:1e:
f7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:36:39:4D:A9:A0:84:C0:26:F2:34:81:49:CE:D8:0C:03:85:9B:89
X509v3 Authority Key Identifier:
keyid:DF:36:3D:74:61:65:01:56:F7:6A:26:CB:A1:2E:B3:42:0D:B3:D8:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SHINETEL/0/DF363D7461650156F76A26CBA12EB3420DB3D849.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DF363D7461650156F76A26CBA12EB3420DB3D849.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SHINETEL/0/DF363D7461650156F76A26CBA12EB3420DB3D849.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:4b:92:3d:9b:53:f6:33:fe:4e:37:a1:07:c6:f1:eb:ef:e2:
43:52:48:25:fc:da:c8:ec:85:f8:23:44:2c:c5:f8:aa:24:9c:
62:72:1d:c3:53:bf:68:45:9c:72:16:6e:83:98:a2:3c:b8:de:
20:62:93:8d:72:b0:78:e9:85:cf:a0:ec:40:34:e2:83:03:f1:
b9:f8:25:d6:e5:2a:14:24:5d:39:2e:ba:41:e6:16:d9:1a:c0:
78:3c:aa:0f:1a:f0:55:15:2f:e9:1d:40:c9:4f:3b:4a:10:ee:
ec:1a:2e:49:d6:35:2a:40:e3:91:c3:85:54:24:1b:7a:57:d4:
7b:b5:dc:fc:43:f4:7c:9b:43:c1:f9:6a:fd:a2:66:f2:eb:d1:
ed:a0:19:57:ed:69:c6:7a:2b:5e:ca:14:2d:d1:de:c5:86:3d:
1a:c4:97:54:24:6a:17:0e:fc:3c:26:22:90:c2:f4:36:13:c3:
75:56:d1:d8:09:cc:91:23:cb:5b:13:95:3d:59:4e:f3:ff:30:
95:6a:ac:b1:c9:5e:ed:7b:74:7f:ba:26:3d:f3:79:43:e7:a3:
43:90:8c:eb:5b:9b:ae:72:c3:e0:d1:6c:89:9c:0e:66:14:8e:
e6:19:3b:7b:7f:db:3e:70:a5:39:92:f3:ea:5f:03:ab:73:40:
d2:fd:6f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:17:08 2026 by rpki-client