
$ rpki-client -vvvf rpkica.twnic.tw/rpki/TISNET/0/DB2467FD0A914F9A79D336637AAB8F1AEFADAABD.mft
File: DB2467FD0A914F9A79D336637AAB8F1AEFADAABD.mft (raw, json)
Hash identifier: 3HVrsesArLsKJ8lFw3UezU9BuW6c6SlSdYk/8jVi48U=
Subject key identifier: 43:BA:1B:65:B1:E0:1B:EE:CA:F3:BD:32:B4:0C:DA:16:99:30:10:11
Authority key identifier: DB:24:67:FD:0A:91:4F:9A:79:D3:36:63:7A:AB:8F:1A:EF:AD:AA:BD
Certificate issuer: /CN=DB2467FD0A914F9A79D336637AAB8F1AEFADAABD
Certificate serial: 0391C23538511F89C9E3B8CE7E880488DD3DC32D
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DB2467FD0A914F9A79D336637AAB8F1AEFADAABD.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TISNET/0/DB2467FD0A914F9A79D336637AAB8F1AEFADAABD.mft
Manifest number: B2
Signing time: Mon 21 Sep 2026 19:52:04 +0000
Manifest this update: Mon 21 Sep 2026 19:47:04 +0000
Manifest next update: Tue 22 Sep 2026 21:22:04 +0000
Files and hashes: 1: DB2467FD0A914F9A79D336637AAB8F1AEFADAABD.crl (hash: 20AYsqg4thFvbOBFJjH7ZZomJMeE7/c8EoJCq2zsPvk=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TISNET/0/DB2467FD0A914F9A79D336637AAB8F1AEFADAABD.crl
rsync://rpkica.twnic.tw/rpki/TISNET/0/DB2467FD0A914F9A79D336637AAB8F1AEFADAABD.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DB2467FD0A914F9A79D336637AAB8F1AEFADAABD.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 21:22:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:91:c2:35:38:51:1f:89:c9:e3:b8:ce:7e:88:04:88:dd:3d:c3:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DB2467FD0A914F9A79D336637AAB8F1AEFADAABD
Validity
Not Before: Sep 21 19:47:04 2026 GMT
Not After : Sep 22 21:22:04 2026 GMT
Subject: CN=43BA1B65B1E01BEECAF3BD32B40CDA1699301011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:6b:4b:cf:e1:6f:ec:9b:8d:46:72:15:52:40:
68:7f:49:19:27:46:56:30:37:42:ff:53:3f:a4:19:
c5:db:09:7c:89:4c:67:8a:b9:1a:e2:f6:94:43:a9:
8c:22:14:05:c8:16:98:29:80:63:8d:95:e9:2b:73:
7b:cb:7d:34:d2:8d:7c:61:53:5c:95:4a:bf:96:d4:
b7:13:44:fb:25:03:69:41:00:28:e0:52:8f:da:01:
df:fa:37:c0:15:b6:4c:bf:67:8b:d0:b9:24:a3:56:
95:c8:c7:30:98:6b:05:75:20:5c:a7:e7:01:be:11:
2e:03:a0:1f:70:af:e4:e5:25:25:9d:d4:ea:30:fd:
cd:cf:69:16:af:ad:65:26:a7:47:98:95:af:37:c2:
34:95:31:ff:84:90:bd:bb:5b:45:3c:a5:8d:79:55:
65:57:ce:e9:f0:e9:72:1e:95:6e:44:0a:f8:4c:55:
71:14:85:28:f0:60:70:df:f0:d8:3c:00:c9:af:e2:
d3:dc:e3:57:2d:77:4a:42:1d:98:1b:f7:51:ac:3d:
a2:de:aa:92:2c:42:f1:1c:fc:51:e6:08:2d:7e:4b:
0d:b2:00:ee:c4:e1:82:f3:59:38:14:af:4d:3c:ed:
26:cf:3e:43:f8:cb:20:bc:6a:12:29:a4:60:be:7b:
6c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:BA:1B:65:B1:E0:1B:EE:CA:F3:BD:32:B4:0C:DA:16:99:30:10:11
X509v3 Authority Key Identifier:
keyid:DB:24:67:FD:0A:91:4F:9A:79:D3:36:63:7A:AB:8F:1A:EF:AD:AA:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TISNET/0/DB2467FD0A914F9A79D336637AAB8F1AEFADAABD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DB2467FD0A914F9A79D336637AAB8F1AEFADAABD.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TISNET/0/DB2467FD0A914F9A79D336637AAB8F1AEFADAABD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:4f:29:66:04:74:5d:0a:3b:43:a9:e2:0e:b7:77:62:52:44:
f7:31:ee:0f:ee:53:0c:7d:14:58:49:62:29:37:11:91:fc:3c:
f8:a6:8c:de:81:0e:7c:e6:d8:95:8e:19:4d:e8:fc:e2:5f:a0:
e2:29:2e:a2:6c:f7:58:f5:61:54:ca:6f:99:69:d9:7a:23:fa:
08:b1:0a:16:78:6f:41:a6:f8:b7:0c:0c:05:00:0b:d5:97:f3:
a4:70:6d:c9:c3:a5:a3:d3:ae:2c:92:cf:57:81:b3:e5:3b:01:
6c:82:2b:0d:6e:e3:e7:24:9e:1a:4e:aa:92:2f:17:21:24:da:
ce:66:ee:ff:cd:e7:8b:f0:c6:74:a7:52:e5:e8:58:e4:6b:18:
82:00:bb:d1:98:be:f9:03:f9:47:4d:e0:1f:b7:c6:84:3d:92:
ae:3e:fd:3e:8a:b4:e0:ac:63:28:9b:24:30:77:4d:83:69:5b:
1d:cc:ae:78:86:61:9f:ba:95:08:5d:c4:4d:20:fd:94:4e:86:
0b:60:f5:4f:5f:b8:d8:13:62:2d:4c:b4:24:21:77:ce:95:62:
dc:b2:a2:fa:5b:de:bc:54:df:04:58:f5:46:79:4e:a2:d5:09:
34:4b:99:ed:d7:a4:fb:3e:9e:b7:22:a7:a3:2a:2d:70:95:47:
36:8b:94:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:25:56 2026 by rpki-client