
$ rpki-client -vvvf rpkica.twnic.tw/rpki/TAIFU/0/CEF74285903EEA3346FB1E74872895A4CE8D1742.mft
File: CEF74285903EEA3346FB1E74872895A4CE8D1742.mft (raw, json)
Hash identifier: OPbuD9vTqbZBWOxrj/8Y8mJW5NKLDTfAorJMy0n7Yr0=
Subject key identifier: D7:32:E4:1A:F9:D2:FE:F7:2A:A2:69:DC:4B:4C:11:39:EB:1F:F0:C8
Authority key identifier: CE:F7:42:85:90:3E:EA:33:46:FB:1E:74:87:28:95:A4:CE:8D:17:42
Certificate issuer: /CN=CEF74285903EEA3346FB1E74872895A4CE8D1742
Certificate serial: 76CFC5A1141DFA1B4DA3231BBCABF5AFB266633E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CEF74285903EEA3346FB1E74872895A4CE8D1742.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TAIFU/0/CEF74285903EEA3346FB1E74872895A4CE8D1742.mft
Manifest number: B5
Signing time: Mon 21 Sep 2026 10:26:55 +0000
Manifest this update: Mon 21 Sep 2026 10:21:55 +0000
Manifest next update: Tue 22 Sep 2026 12:39:55 +0000
Files and hashes: 1: CEF74285903EEA3346FB1E74872895A4CE8D1742.crl (hash: hdcG7JDLzqvciEWmlc3htsrUYt/N0amrvo0HsG1Km0g=)
2: 3230322e3133332e36382e302f32332d3234203d3e2039393138.roa (hash: iN6E9FfraXQT/WqBz/UUplfXGRYfrwEtSBMCkEDIi4Q=)
3: 323430323a323665303a3a2f33322d3438203d3e2039393138.roa (hash: P3RZ+5yR615iUMzqbYBESP/TjGRguu5CcQeQgKFVanc=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TAIFU/0/CEF74285903EEA3346FB1E74872895A4CE8D1742.crl
rsync://rpkica.twnic.tw/rpki/TAIFU/0/CEF74285903EEA3346FB1E74872895A4CE8D1742.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CEF74285903EEA3346FB1E74872895A4CE8D1742.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 12:39:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:cf:c5:a1:14:1d:fa:1b:4d:a3:23:1b:bc:ab:f5:af:b2:66:63:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CEF74285903EEA3346FB1E74872895A4CE8D1742
Validity
Not Before: Sep 21 10:21:55 2026 GMT
Not After : Sep 22 12:39:55 2026 GMT
Subject: CN=D732E41AF9D2FEF72AA269DC4B4C1139EB1FF0C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:85:9c:1b:7d:7b:9c:bb:e4:f1:87:1a:85:c2:
67:19:5e:33:43:14:23:47:f0:b2:5a:19:84:ca:e6:
a1:ad:f2:b0:eb:7a:7c:52:c5:d1:04:75:96:7a:45:
d7:47:ad:a4:a5:c8:77:b3:d7:47:7e:8a:f0:66:ea:
7a:b9:98:06:8d:13:1d:2e:56:9e:d9:e8:2b:85:fa:
11:38:6b:aa:1a:45:1f:3e:34:ca:87:e1:da:d9:ae:
90:11:aa:5e:f1:ac:78:51:15:5b:82:09:47:ff:17:
3a:a3:0c:85:b9:34:85:86:1e:48:a9:a3:6a:bf:06:
06:eb:22:c1:42:4f:24:79:b8:e5:21:50:b5:6e:14:
4d:6a:ea:2a:9d:b8:a1:05:04:af:84:e0:77:4d:ea:
af:94:62:b5:67:36:9f:b6:90:d1:dd:18:c2:7e:ef:
6d:3c:36:19:d8:9b:e3:eb:68:e7:1b:80:5c:77:cd:
d3:d3:08:10:b1:61:c3:70:5d:49:06:56:b0:49:e6:
c0:1c:7b:19:14:a9:c0:f1:22:b7:dd:fb:25:11:3d:
93:20:43:09:26:e2:34:4f:85:34:c2:38:b4:a3:7c:
93:66:e7:c9:cf:74:ce:5c:30:80:2d:4f:33:5f:93:
85:1d:dd:d0:a8:49:ab:b5:2c:1e:d6:78:6d:26:eb:
d8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:32:E4:1A:F9:D2:FE:F7:2A:A2:69:DC:4B:4C:11:39:EB:1F:F0:C8
X509v3 Authority Key Identifier:
keyid:CE:F7:42:85:90:3E:EA:33:46:FB:1E:74:87:28:95:A4:CE:8D:17:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TAIFU/0/CEF74285903EEA3346FB1E74872895A4CE8D1742.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CEF74285903EEA3346FB1E74872895A4CE8D1742.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TAIFU/0/CEF74285903EEA3346FB1E74872895A4CE8D1742.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:8b:38:de:d1:d3:79:62:5c:c3:72:a9:a6:51:a2:ff:01:24:
3b:17:57:e3:88:5e:4d:46:c1:f0:60:37:3c:e0:b9:60:6a:cc:
a7:70:6b:1f:e0:6f:3e:b1:b8:41:1a:ec:4e:db:99:d0:60:8c:
db:e6:34:80:c6:88:09:36:fc:12:59:d5:e1:3e:13:b6:37:d4:
db:c0:24:5f:e7:91:6e:d0:49:84:21:cf:36:ef:98:d2:a8:53:
b7:54:6d:ec:fa:f3:f3:36:fd:a9:f3:85:be:4b:3f:cd:19:dc:
8e:c4:43:98:5d:0e:d8:01:d4:b6:83:9c:a2:32:b9:17:87:c2:
79:7b:f7:1c:1a:c9:e5:84:3d:dd:e9:07:c3:11:02:40:ed:55:
94:49:8b:b8:5a:c3:9c:3b:e9:4e:ec:f1:65:e7:a0:c5:fd:2f:
da:ab:75:c6:1b:b2:27:fe:85:b1:82:c6:f3:e7:66:f9:44:af:
ac:60:2c:23:77:67:55:47:3b:d1:c0:f5:68:d2:9a:c9:64:bb:
bf:ef:5b:a0:13:5f:d3:43:2c:f7:21:97:af:d6:67:43:67:bf:
42:cd:e3:99:45:4e:3b:3b:45:f5:43:b7:3f:9a:ae:3b:4a:f1:
0a:97:61:8c:a9:9c:8e:13:2e:be:76:c0:6b:ea:8c:4b:72:cd:
e2:9a:17:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:46:30 2026 by rpki-client