
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/IAMT/bKW4t-CigcRnJiJG3wyFnfX4fx8.mft
File: bKW4t-CigcRnJiJG3wyFnfX4fx8.mft (raw, json)
Hash identifier: 8xaM4fLowGfJTw4oFg69Xs4BnGJBQxWqrvDLJwHiK2w=
Subject key identifier: D7:62:F2:FD:46:30:B4:60:04:B4:DC:69:56:A9:96:5F:50:00:63:37
Authority key identifier: 6C:A5:B8:B7:E0:A2:81:C4:67:26:22:46:DF:0C:85:9D:F5:F8:7F:1F
Certificate issuer: /CN=6CA5B8B7E0A281C467262246DF0C859DF5F87F1F
Certificate serial: 0318
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/bKW4t-CigcRnJiJG3wyFnfX4fx8.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/bKW4t-CigcRnJiJG3wyFnfX4fx8.mft
Manifest number: 0311
Signing time: Thu 16 Apr 2026 09:26:41 +0000
Manifest this update: Thu 16 Apr 2026 09:26:41 +0000
Manifest next update: Sat 18 Apr 2026 09:26:41 +0000
Files and hashes: 1: bKW4t-CigcRnJiJG3wyFnfX4fx8.crl (hash: Ku1m852wHTgYROSvEXCyPP9uefhK4CrvDRaKnS0TjF4=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/bKW4t-CigcRnJiJG3wyFnfX4fx8.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/bKW4t-CigcRnJiJG3wyFnfX4fx8.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/bKW4t-CigcRnJiJG3wyFnfX4fx8.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 17 Apr 2026 11:03:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 792 (0x318)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6CA5B8B7E0A281C467262246DF0C859DF5F87F1F
Validity
Not Before: Apr 16 09:26:41 2026 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=D762F2FD4630B46004B4DC6956A9965F50006337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:90:b7:8c:80:8b:3e:ae:56:61:8e:87:ba:af:
d9:44:2c:dd:ab:f0:fc:5c:87:fb:b0:d7:b4:1a:b8:
7f:84:9c:82:ae:e5:88:66:f9:2b:53:b3:2f:33:52:
85:5a:fc:34:3c:b1:e4:3f:c2:21:62:0d:8b:a4:67:
3d:43:42:00:73:e1:57:43:24:38:e3:76:3d:59:41:
00:4e:80:7f:e6:a5:c6:e6:7b:cc:20:72:09:76:b7:
59:5c:40:d3:be:09:63:f8:12:6f:0c:10:be:ec:ab:
f0:88:84:8e:6f:f6:87:64:cc:fc:0e:f1:85:eb:c2:
7a:c2:2f:fb:80:f6:5b:2a:25:86:14:ec:07:cb:e5:
29:ae:b3:89:7f:24:74:6b:a9:ba:66:b5:9f:03:b6:
03:67:35:3c:0a:42:4c:07:7a:45:38:c8:30:3a:3f:
7f:5d:81:01:6b:de:49:b9:51:06:2c:31:ef:cc:2c:
7b:31:2e:8e:0b:3c:d1:e2:9e:d6:4b:b5:ca:6c:0a:
54:d7:61:65:fe:5a:eb:4a:c3:e9:81:5f:e6:76:76:
b1:e5:d3:12:b5:7e:5c:2f:26:1d:ff:3e:27:73:74:
5c:8a:ca:56:73:f2:d3:68:4e:ff:60:9a:b3:3e:03:
b9:6e:44:77:09:d4:5e:b8:82:d0:cd:e2:60:43:30:
77:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:62:F2:FD:46:30:B4:60:04:B4:DC:69:56:A9:96:5F:50:00:63:37
X509v3 Authority Key Identifier:
keyid:6C:A5:B8:B7:E0:A2:81:C4:67:26:22:46:DF:0C:85:9D:F5:F8:7F:1F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/bKW4t-CigcRnJiJG3wyFnfX4fx8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/bKW4t-CigcRnJiJG3wyFnfX4fx8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/bKW4t-CigcRnJiJG3wyFnfX4fx8.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:92:b8:93:9a:61:6b:92:3e:d4:b7:73:c3:b0:92:40:3a:5a:
9f:83:8c:43:29:4e:83:46:55:2a:a6:09:f2:8c:a8:84:df:f0:
af:8f:8c:11:a2:8e:d0:24:63:3a:9f:05:98:13:49:e2:6b:e3:
7c:63:5e:59:41:57:72:97:e6:3f:75:39:0b:97:f1:12:97:db:
ee:03:55:cf:3c:f6:b2:81:41:30:3c:ee:34:42:c9:00:94:98:
11:b9:d1:82:60:28:21:23:cf:d7:28:11:da:7f:c8:0a:31:88:
a7:f5:6f:fa:2f:8d:68:00:3e:3b:29:47:62:af:ae:4d:f2:68:
e8:d6:8c:c0:b8:1c:fb:19:2d:40:e4:0b:65:b7:16:b1:59:b7:
35:d7:b2:b4:2d:46:f6:58:14:f5:a6:de:5e:c0:c9:1d:bb:89:
d2:e3:6a:55:f8:e4:4c:f6:5b:b6:28:e4:ad:b8:7f:45:6e:04:
c3:d7:eb:0b:85:38:66:e8:89:97:69:7b:3e:46:e6:85:07:be:
93:3f:a7:cd:1a:23:17:42:62:fd:e1:6e:b1:1b:5e:b0:12:86:
f4:dd:b8:11:10:01:42:2f:a4:e9:94:eb:27:bf:dd:7c:23:87:
af:96:ec:83:74:f6:5c:b6:ad:f3:85:fc:5d:09:c1:fb:7a:c3:
5c:bc:5c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:02:19 2026 by rpki-client