
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SAKURAHOST/mT9ygPH5tlQ53WWt-2jKDWyZvsU.mft
File: mT9ygPH5tlQ53WWt-2jKDWyZvsU.mft (raw, json)
Hash identifier: KcsXLEp9i9IoRV9O7CpLZIVc/cWNwXyPsEH+TFnJ2ic=
Subject key identifier: B1:4F:CA:ED:DE:09:C7:ED:F4:B2:AD:6D:75:B2:10:5C:13:E5:10:DA
Authority key identifier: 99:3F:72:80:F1:F9:B6:54:39:DD:65:AD:FB:68:CA:0D:6C:99:BE:C5
Certificate issuer: /CN=993F7280F1F9B65439DD65ADFB68CA0D6C99BEC5
Certificate serial: 0E02
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mT9ygPH5tlQ53WWt-2jKDWyZvsU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SAKURAHOST/mT9ygPH5tlQ53WWt-2jKDWyZvsU.mft
Manifest number: 0DCA
Signing time: Sat 28 Feb 2026 23:23:01 +0000
Manifest this update: Sat 28 Feb 2026 23:23:01 +0000
Manifest next update: Mon 02 Mar 2026 23:23:01 +0000
Files and hashes: 1: mT9ygPH5tlQ53WWt-2jKDWyZvsU.crl (hash: CXMGeyRyWN/MTWlggtU1OkaGHfdQ+uMA6/wNn6fJwFc=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SAKURAHOST/mT9ygPH5tlQ53WWt-2jKDWyZvsU.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/SAKURAHOST/mT9ygPH5tlQ53WWt-2jKDWyZvsU.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/mT9ygPH5tlQ53WWt-2jKDWyZvsU.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Mar 2026 12:24:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3586 (0xe02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=993F7280F1F9B65439DD65ADFB68CA0D6C99BEC5
Validity
Not Before: Feb 28 23:23:01 2026 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=B14FCAEDDE09C7EDF4B2AD6D75B2105C13E510DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1f:7d:d7:f2:fb:38:76:98:a8:cf:87:5e:96:
a4:87:e0:8f:41:48:98:04:bc:be:35:bc:f7:92:9d:
e4:0a:e6:f8:a4:64:5a:d6:b3:ca:59:71:9e:cc:36:
00:6d:63:4e:48:f9:b4:ea:93:18:84:d1:6b:9d:74:
15:c8:71:5a:a6:72:c0:17:fc:21:4d:41:d3:59:25:
ce:3a:38:05:ec:ce:1f:16:f6:31:3a:a9:9c:df:d9:
95:ae:e7:05:48:77:df:cf:54:7b:d8:14:6e:d6:9a:
e7:8e:dc:ce:8b:2e:36:aa:ee:c3:1a:76:25:b1:0b:
59:a3:e9:64:77:65:f4:2e:97:22:54:1b:1e:51:99:
72:f2:92:59:e0:49:03:48:9f:8b:93:ec:32:f1:1b:
b3:c4:92:25:4c:00:e8:8e:87:4f:71:27:15:28:e4:
60:cd:f8:cd:ef:a2:30:8e:6b:f5:09:0d:e8:f1:10:
55:cf:ca:f3:16:c9:2d:d6:07:cb:d3:b3:e3:f4:38:
b3:70:c7:3c:c3:d3:c3:01:9f:72:14:5c:00:7c:a7:
27:20:f5:1e:ab:7d:3e:83:78:4b:75:f3:bd:86:90:
24:15:90:31:7d:b6:69:2a:ee:c0:ad:cf:5d:17:4d:
0b:74:36:1b:c2:4a:c8:1d:c5:91:d7:66:7c:fd:6f:
45:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:4F:CA:ED:DE:09:C7:ED:F4:B2:AD:6D:75:B2:10:5C:13:E5:10:DA
X509v3 Authority Key Identifier:
keyid:99:3F:72:80:F1:F9:B6:54:39:DD:65:AD:FB:68:CA:0D:6C:99:BE:C5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAKURAHOST/mT9ygPH5tlQ53WWt-2jKDWyZvsU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mT9ygPH5tlQ53WWt-2jKDWyZvsU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAKURAHOST/mT9ygPH5tlQ53WWt-2jKDWyZvsU.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:d2:36:41:32:9b:76:80:23:f3:dc:fa:60:0c:0d:ee:24:dc:
22:41:66:32:51:ee:a8:aa:98:82:29:38:a3:d1:af:61:70:ce:
34:d3:dc:14:c0:ee:9c:04:64:eb:7e:97:42:e6:e2:c1:ef:94:
38:44:39:85:b1:03:9c:12:dd:25:73:1c:e1:48:be:50:c7:66:
72:58:8a:a1:ce:70:34:e1:c8:db:db:f5:ac:a7:65:16:62:3a:
6d:d7:b8:50:9b:27:81:9e:41:3e:f9:10:24:73:83:a5:df:2d:
25:19:81:d0:e9:fc:94:2a:1e:34:85:db:d9:14:ec:1e:75:3e:
a2:af:3a:9c:e0:aa:89:9d:78:ec:3a:ea:92:82:75:5f:fd:af:
98:a5:ec:8a:12:98:8a:a2:d3:94:7d:89:5f:15:a1:d3:cc:bc:
54:94:86:7c:e7:fc:13:1d:96:42:19:32:66:c0:ef:70:db:61:
50:af:4c:6b:60:e0:50:0d:3b:b1:6e:45:e1:f5:cc:13:c5:10:
6c:e6:a3:cf:2c:04:e1:0e:3b:4f:10:05:b5:76:fb:59:5d:ee:
b1:d9:00:00:14:59:09:41:2c:b4:fe:61:48:f6:a9:7e:e4:1f:
51:c3:d6:16:88:84:48:fd:b0:2c:00:d5:85:f1:c4:48:bf:52:
bb:3a:08:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:54:04 2026 by rpki-client