
$ rpki-client -vvf rpkica.twnic.tw/rpki/STWN/0/28110DE86B5C0A286A9B3545A4369B11A7480010.mft
File: 28110DE86B5C0A286A9B3545A4369B11A7480010.mft (raw, json)
Hash identifier: TA1PkZsdn8sjnHBqoBaESZCQcZEFextLT1SR62TLSzw=
Subject key identifier: 1D:16:62:DF:5F:8E:C9:30:98:2B:E0:DF:38:99:B4:04:41:28:65:68
Authority key identifier: 28:11:0D:E8:6B:5C:0A:28:6A:9B:35:45:A4:36:9B:11:A7:48:00:10
Certificate issuer: /CN=28110DE86B5C0A286A9B3545A4369B11A7480010
Certificate serial: 48F3A7F8CEF0F32B1079ABCACB6539770DCD585B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/28110DE86B5C0A286A9B3545A4369B11A7480010.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/STWN/0/28110DE86B5C0A286A9B3545A4369B11A7480010.mft
Manifest number: 69
Signing time: Tue 28 Jul 2026 14:59:14 +0000
Manifest this update: Tue 28 Jul 2026 14:54:14 +0000
Manifest next update: Wed 29 Jul 2026 15:16:14 +0000
Files and hashes: 1: 28110DE86B5C0A286A9B3545A4369B11A7480010.crl (hash: f8vXoW1I0m0u6b8OtxUPFJNHsH3tpX3y92SZS6j7jUI=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/STWN/0/28110DE86B5C0A286A9B3545A4369B11A7480010.crl
rsync://rpkica.twnic.tw/rpki/STWN/0/28110DE86B5C0A286A9B3545A4369B11A7480010.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/28110DE86B5C0A286A9B3545A4369B11A7480010.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 07:22:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:f3:a7:f8:ce:f0:f3:2b:10:79:ab:ca:cb:65:39:77:0d:cd:58:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28110DE86B5C0A286A9B3545A4369B11A7480010
Validity
Not Before: Jul 28 14:54:14 2026 GMT
Not After : Jul 29 15:16:14 2026 GMT
Subject: CN=1D1662DF5F8EC930982BE0DF3899B40441286568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5f:a3:eb:16:3a:d8:8c:2f:f3:0b:7d:ef:8b:
62:fb:d7:9f:d9:da:f9:2e:81:6b:f5:ed:8f:25:f4:
52:75:4b:b3:f7:9e:bd:d5:7f:41:62:2e:2c:0e:e0:
33:85:ba:9f:af:3d:bc:8a:90:6a:af:43:59:4c:e6:
bf:73:19:3e:c8:a6:d6:7f:23:da:0e:76:70:56:d5:
97:58:4a:e8:c1:52:66:8a:de:50:43:98:e3:92:97:
0a:96:e3:62:70:0d:49:9c:e3:a7:63:a8:46:d8:cb:
5f:a1:4b:ce:3c:c4:b9:e9:d8:49:cf:c8:98:05:27:
f9:78:22:1b:94:60:c3:dc:62:50:09:0e:f7:46:95:
7e:33:f7:31:70:f2:9c:4c:95:ba:3b:6b:aa:83:92:
b9:46:8d:4a:e3:d8:f3:58:60:b9:95:4f:f9:4a:d0:
27:34:7f:a0:50:c1:89:a2:90:88:f6:3b:2f:17:99:
92:30:a6:c3:19:f7:e7:01:da:bd:cb:65:fa:26:66:
5f:6c:8b:88:c7:76:f8:ec:25:15:ac:5f:1b:9c:86:
39:79:a6:d5:eb:06:14:e9:43:92:3c:14:f6:72:59:
8f:d2:23:d2:f9:5f:c3:ce:b3:31:52:51:c0:1f:7b:
e1:8a:f1:c2:14:84:7f:ad:bb:fb:c6:c5:80:55:20:
4c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:16:62:DF:5F:8E:C9:30:98:2B:E0:DF:38:99:B4:04:41:28:65:68
X509v3 Authority Key Identifier:
keyid:28:11:0D:E8:6B:5C:0A:28:6A:9B:35:45:A4:36:9B:11:A7:48:00:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/STWN/0/28110DE86B5C0A286A9B3545A4369B11A7480010.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/28110DE86B5C0A286A9B3545A4369B11A7480010.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/STWN/0/28110DE86B5C0A286A9B3545A4369B11A7480010.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:fc:09:fc:dd:48:bc:10:07:c5:b0:64:c3:c1:14:63:99:26:
1f:59:be:57:4e:9f:28:a9:f6:60:d8:b8:3c:95:58:9f:03:15:
fd:a1:6b:a9:35:f4:80:44:9d:76:df:15:7f:9a:9b:2a:f6:a5:
18:4c:8a:cb:f9:41:96:52:ce:6a:00:c2:ff:19:7f:34:dd:19:
5b:12:80:f8:27:b1:6f:b1:a2:76:3f:1f:cd:08:f6:4a:55:1d:
b8:1d:18:fa:25:08:af:e8:bd:d9:dc:20:ac:59:a5:4a:07:f8:
58:58:b4:50:87:9d:db:4f:67:00:ba:b6:3a:ad:73:63:21:f4:
72:94:1b:3c:aa:0b:ae:e9:43:ca:02:35:7f:2a:a6:be:be:32:
34:1f:b1:0e:2d:56:d1:92:87:a3:a7:77:24:68:31:32:91:f5:
c7:de:c7:d9:d0:de:2e:43:d9:c5:d5:0e:62:da:f1:45:6f:e6:
63:d1:30:09:9e:2e:c1:64:e8:90:82:f9:b3:75:cb:42:86:c4:
c4:22:31:e6:63:8a:b5:af:b9:f8:79:01:ae:51:95:38:28:f8:
dc:85:9b:16:48:e0:b6:dc:6b:2c:62:f1:1d:59:0a:d5:e4:cc:
ad:3d:60:95:8b:ef:e0:4e:8b:21:c2:4f:69:67:ad:12:3a:46:
77:dd:73:18
-----BEGIN CERTIFICATE-----
MIIE4DCCA8igAwIBAgIUSPOn+M7w8ysQeavKy2U5dw3NWFswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjgxMTBERTg2QjVDMEEyODZBOUIzNTQ1QTQzNjlCMTFB
NzQ4MDAxMDAeFw0yNjA3MjgxNDU0MTRaFw0yNjA3MjkxNTE2MTRaMDMxMTAvBgNV
BAMTKDFEMTY2MkRGNUY4RUM5MzA5ODJCRTBERjM4OTlCNDA0NDEyODY1NjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnX6PrFjrYjC/zC33vi2L715/Z
2vkugWv17Y8l9FJ1S7P3nr3Vf0FiLiwO4DOFup+vPbyKkGqvQ1lM5r9zGT7IptZ/
I9oOdnBW1ZdYSujBUmaK3lBDmOOSlwqW42JwDUmc46djqEbYy1+hS848xLnp2EnP
yJgFJ/l4IhuUYMPcYlAJDvdGlX4z9zFw8pxMlbo7a6qDkrlGjUrj2PNYYLmVT/lK
0Cc0f6BQwYmikIj2Oy8XmZIwpsMZ9+cB2r3LZfomZl9si4jHdvjsJRWsXxuchjl5
ptXrBhTpQ5I8FPZyWY/SI9L5X8POszFSUcAfe+GK8cIUhH+tu/vGxYBVIEzFAgMB
AAGjggHqMIIB5jAdBgNVHQ4EFgQUHRZi31+OyTCYK+DfOJm0BEEoZWgwHwYDVR0j
BBgwFoAUKBEN6GtcCihqmzVFpDabEadIABAwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud
HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU1RXTi8w
LzI4MTEwREU4NkI1QzBBMjg2QTlCMzU0NUE0MzY5QjExQTc0ODAwMTAuY3JsMG8G
CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu
dHcvcnBraS9UV05JQ0NBLzEvMjgxMTBERTg2QjVDMEEyODZBOUIzNTQ1QTQzNjlC
MTFBNzQ4MDAxMC5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu
YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1NUV04vMC8yODExMERFODZCNUMwQTI4
NkE5QjM1NDVBNDM2OUIxMUE3NDgwMDEwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG
AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVfwJ/N1IvBAHxbBk
w8EUY5kmH1m+V06fKKn2YNi4PJVYnwMV/aFrqTX0gESddt8Vf5qbKvalGEyKy/lB
llLOagDC/xl/NN0ZWxKA+Cexb7Gidj8fzQj2SlUduB0Y+iUIr+i92dwgrFmlSgf4
WFi0UIed209nALq2Oq1zYyH0cpQbPKoLrulDygI1fyqmvr4yNB+xDi1W0ZKHo6d3
JGgxMpH1x97H2dDeLkPZxdUOYtrxRW/mY9EwCZ4uwWTokIL5s3XLQobExCIx5mOK
ta+5+HkBrlGVOCj43IWbFkjgttxrLGLxHVkK1eTMrT1glYvv4E6LIcJPaWetEjpG
d91zGA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:29:57 2026 by rpki-client