
$ rpki-client -vvf rpkica.twnic.tw/rpki/TOPCHINA/0/EC1DB3CB7CE6162748BA2956BC1706446561D664.mft
File: EC1DB3CB7CE6162748BA2956BC1706446561D664.mft (raw, json)
Hash identifier: l5V37J1mOWfN8qO1tKT5uAhHG9LJy6jOBXS/lcybc8U=
Subject key identifier: 02:B3:70:AB:77:46:E7:52:09:D8:F1:FE:03:F8:74:01:1C:BF:0D:4F
Authority key identifier: EC:1D:B3:CB:7C:E6:16:27:48:BA:29:56:BC:17:06:44:65:61:D6:64
Certificate issuer: /CN=EC1DB3CB7CE6162748BA2956BC1706446561D664
Certificate serial: 7E646E256531EDA7B303A6F86F60BA0F75B87DAB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EC1DB3CB7CE6162748BA2956BC1706446561D664.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TOPCHINA/0/EC1DB3CB7CE6162748BA2956BC1706446561D664.mft
Manifest number: 2D
Signing time: Fri 12 Jun 2026 23:03:21 +0000
Manifest this update: Fri 12 Jun 2026 22:58:21 +0000
Manifest next update: Sun 14 Jun 2026 02:11:21 +0000
Files and hashes: 1: EC1DB3CB7CE6162748BA2956BC1706446561D664.crl (hash: R2/DUWUe2KgwQPqLv9TWQmjefVkudvOB0OzSuQkX9q4=)
2: 3130332e3132342e3235322e302f32322d3234203d3e20313331363539.roa (hash: UJYSu7Fa6tnrzCGk1PLG8hNTofa+kMNC0fV9KXzBeyU=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TOPCHINA/0/EC1DB3CB7CE6162748BA2956BC1706446561D664.crl
rsync://rpkica.twnic.tw/rpki/TOPCHINA/0/EC1DB3CB7CE6162748BA2956BC1706446561D664.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EC1DB3CB7CE6162748BA2956BC1706446561D664.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 00:20:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:64:6e:25:65:31:ed:a7:b3:03:a6:f8:6f:60:ba:0f:75:b8:7d:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC1DB3CB7CE6162748BA2956BC1706446561D664
Validity
Not Before: Jun 12 22:58:21 2026 GMT
Not After : Jun 14 02:11:21 2026 GMT
Subject: CN=02B370AB7746E75209D8F1FE03F874011CBF0D4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:70:e2:cf:81:5c:21:e2:21:4a:e6:85:e0:17:
04:ae:75:41:90:6a:d3:18:e0:49:75:9b:9b:bc:25:
56:c2:47:55:e2:44:14:a2:95:41:e6:0f:b9:e2:75:
7b:42:cc:24:f2:1a:e8:0d:0c:47:c1:2e:d3:d0:09:
67:ba:77:4a:64:8c:13:5e:ed:fa:81:5f:66:80:49:
8c:88:28:26:f8:26:ff:be:f0:95:70:e3:7a:8c:46:
3e:1b:7c:7a:b5:3f:7c:6b:11:62:31:c5:ed:c2:5f:
2e:da:b7:9a:34:51:f8:5d:c9:88:80:c3:86:59:7b:
e6:aa:23:c2:ac:f1:b8:be:ee:1a:66:fc:62:57:ef:
36:a7:2f:ed:36:10:86:ad:a4:fe:f4:61:64:ff:90:
2e:8a:d1:53:43:01:85:92:74:bc:9c:a4:0e:b6:70:
3a:25:51:aa:dd:30:0c:0e:27:58:72:31:a0:f3:b8:
67:2c:b6:f4:bd:55:7f:4d:ba:9b:89:90:15:11:fc:
03:d6:a5:2d:b9:8d:6f:c7:c9:4b:31:34:51:fb:04:
74:5c:46:27:f7:7c:ee:f6:25:61:52:10:aa:6f:62:
1a:3e:35:33:0e:ee:9f:15:cd:b8:63:7f:b1:64:54:
e1:86:84:e8:f6:04:65:78:cb:2d:a7:b1:21:fe:11:
de:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:B3:70:AB:77:46:E7:52:09:D8:F1:FE:03:F8:74:01:1C:BF:0D:4F
X509v3 Authority Key Identifier:
keyid:EC:1D:B3:CB:7C:E6:16:27:48:BA:29:56:BC:17:06:44:65:61:D6:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TOPCHINA/0/EC1DB3CB7CE6162748BA2956BC1706446561D664.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EC1DB3CB7CE6162748BA2956BC1706446561D664.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TOPCHINA/0/EC1DB3CB7CE6162748BA2956BC1706446561D664.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:f6:51:d3:f5:4d:cf:bb:31:63:67:65:50:dc:78:91:8a:d2:
86:23:c5:38:86:da:68:f4:86:f2:a0:de:c9:3e:01:50:64:d0:
ae:01:97:af:b9:4a:fb:a2:04:81:91:88:a3:26:90:85:5a:dc:
20:3a:bb:bc:c1:77:6f:a1:b7:c8:73:31:42:7a:5b:d2:02:fc:
40:6c:4b:32:c2:90:50:d5:1b:da:7a:e1:80:54:98:8a:31:aa:
6b:59:64:5d:7d:f8:dc:df:db:67:e3:1f:24:ee:a7:94:7a:16:
ae:c7:15:cd:6c:7a:24:99:88:41:7a:73:b2:ac:60:f6:8f:6c:
c9:7d:d1:68:e0:c0:d9:48:27:b8:6e:88:f4:85:d0:36:c7:9b:
bd:ca:f7:5c:44:e0:96:73:95:d9:5a:e4:84:84:85:f0:98:2b:
d9:ab:9d:82:73:35:44:d3:78:2d:cf:df:df:0f:d9:08:de:23:
67:6b:6e:0e:cd:f7:b4:f5:19:ff:a9:76:44:55:95:e7:b7:c8:
9b:8e:a2:e5:47:4b:5b:32:76:d5:4d:17:69:c1:6c:4a:09:39:
60:b5:bf:c7:0d:29:e2:b8:11:8e:0a:45:01:16:91:0c:cb:17:
f1:21:64:eb:08:70:42:36:30:d7:f4:b4:4e:11:a3:74:49:de:
b3:3f:5b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:28:36 2026 by rpki-client