
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NETEASE/3qCUi7d5HEcQmTqPH8zpZ62gnAA.mft
File: 3qCUi7d5HEcQmTqPH8zpZ62gnAA.mft (raw, json)
Hash identifier: bHpYKnSu92qCk3O9MoxyS+OsQG+vqkRA8s/93VHnfIk=
Subject key identifier: 79:64:51:2D:EA:5D:B3:37:93:5C:48:DF:79:6F:21:2B:67:CC:FB:8C
Authority key identifier: DE:A0:94:8B:B7:79:1C:47:10:99:3A:8F:1F:CC:E9:67:AD:A0:9C:00
Certificate issuer: /CN=DEA0948BB7791C4710993A8F1FCCE967ADA09C00
Certificate serial: 13F6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/3qCUi7d5HEcQmTqPH8zpZ62gnAA.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NETEASE/3qCUi7d5HEcQmTqPH8zpZ62gnAA.mft
Manifest number: 13EC
Signing time: Wed 05 Nov 2025 10:01:02 +0000
Manifest this update: Wed 05 Nov 2025 10:01:02 +0000
Manifest next update: Fri 07 Nov 2025 10:01:02 +0000
Files and hashes: 1: 39reJrBVbfx7jwwB4eLJaNpwG9w.roa (hash: U/yZRPwwoo1ciYrHNNnwxQkeJ7ZzVTKvvJVYx34E6a4=)
2: 3qCUi7d5HEcQmTqPH8zpZ62gnAA.crl (hash: xtsljFDW89ujkMjdz3+fzQuMOaqckc8EQH/SVzivcOU=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NETEASE/3qCUi7d5HEcQmTqPH8zpZ62gnAA.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/NETEASE/3qCUi7d5HEcQmTqPH8zpZ62gnAA.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/3qCUi7d5HEcQmTqPH8zpZ62gnAA.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Nov 2025 20:59:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5110 (0x13f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DEA0948BB7791C4710993A8F1FCCE967ADA09C00
Validity
Not Before: Nov 5 10:01:02 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=7964512DEA5DB337935C48DF796F212B67CCFB8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:56:59:e8:21:d3:88:2d:02:5b:48:cf:4c:8e:
1b:04:5f:b7:fa:16:45:a9:97:8d:95:69:4d:60:da:
19:f4:2c:c7:4e:b8:b3:b9:ce:3b:ee:10:f1:65:a6:
f5:14:72:b0:98:87:7e:20:63:15:30:bb:6e:60:96:
d8:a8:43:2d:e5:d9:f5:ac:d5:62:6e:08:22:56:a1:
7f:4e:02:3d:5a:27:3f:fb:07:64:d7:7e:9b:ad:fe:
fd:cb:55:71:8a:1a:f6:c6:15:11:35:63:43:d8:d7:
cf:cd:54:ed:a5:19:8a:6a:d7:8d:d8:8b:dd:b3:1a:
ae:10:ce:09:d2:a6:e7:46:e0:24:4a:0b:d2:5b:95:
e8:be:30:fe:63:10:b8:af:94:46:af:c5:ed:78:de:
09:6c:bd:e7:3b:07:a3:60:ec:7b:d7:a4:bf:34:4d:
0a:9e:be:fa:ec:ed:0e:40:95:a2:b5:93:d2:5a:d6:
ea:4e:ea:45:b5:e9:64:fe:85:f0:cd:ce:5a:1a:da:
b9:0f:7a:ef:05:1a:b0:a7:88:93:7b:1c:bc:36:89:
fc:10:0f:0b:0c:89:ce:b9:f4:33:3f:6f:42:c5:df:
40:99:16:b0:81:34:2b:d1:8a:b4:23:e1:a7:0d:dc:
3f:78:2b:4a:47:78:20:97:64:50:1c:6b:c9:7d:ff:
81:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:64:51:2D:EA:5D:B3:37:93:5C:48:DF:79:6F:21:2B:67:CC:FB:8C
X509v3 Authority Key Identifier:
keyid:DE:A0:94:8B:B7:79:1C:47:10:99:3A:8F:1F:CC:E9:67:AD:A0:9C:00
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NETEASE/3qCUi7d5HEcQmTqPH8zpZ62gnAA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3qCUi7d5HEcQmTqPH8zpZ62gnAA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NETEASE/3qCUi7d5HEcQmTqPH8zpZ62gnAA.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:02:6b:ad:a1:ae:85:42:43:68:6a:61:6e:d4:5a:7a:31:1a:
81:9a:a6:49:a9:79:5b:b9:88:2f:2e:34:6b:63:8d:f4:96:5e:
6f:19:a2:b9:db:c5:8f:70:cd:91:05:eb:1f:d2:cd:f0:d0:1f:
a8:4b:c2:9c:13:e2:4b:fa:8b:8c:dc:65:86:34:4f:73:8c:ad:
c4:f6:00:65:1b:66:62:16:42:51:1e:b9:76:cc:3d:88:bd:a8:
c6:2f:cf:46:20:b6:74:07:3e:26:4a:fb:9e:f8:84:d6:b4:16:
c9:21:0a:1a:ea:1d:28:85:de:8e:31:aa:cb:11:d9:99:b5:c9:
f9:b6:55:be:1e:46:6e:86:3c:33:0c:4d:a1:15:73:b1:77:bb:
38:1d:ee:3d:4b:86:e4:53:15:9c:09:84:cd:51:eb:52:d5:bd:
2c:c7:ef:5e:a0:03:58:b2:8d:d8:0a:f8:73:9f:c9:bd:d3:a0:
67:05:4d:c6:5b:ec:dd:16:c7:46:22:95:ac:88:69:68:11:de:
5a:7a:26:29:b2:bb:da:f1:58:02:ff:e5:56:88:80:3c:85:2a:
5e:59:25:38:fb:4f:30:1d:5b:d4:a4:63:e5:6d:ce:d8:dc:8b:
4c:c3:86:aa:49:8f:59:45:a5:ec:c5:4d:36:48:50:a2:4c:92:
5c:1d:32:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:17:06 2025 by rpki-client