
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.mft
File: AFcumcZO1lL6gdUB76Fs-dRK6Zw.mft (raw, json)
Hash identifier: j7DOtqw14GO2UWKquCwid3jwAkIgjU0Ofa608D/rwhs=
Subject key identifier: 37:2D:66:D0:89:BD:7D:DF:C0:D3:FA:CB:22:09:81:ED:E0:C5:96:8D
Authority key identifier: 00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C
Certificate issuer: /CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
Certificate serial: 0EED
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.mft
Manifest number: 0E51
Signing time: Thu 16 Apr 2026 12:32:31 +0000
Manifest this update: Thu 16 Apr 2026 12:32:31 +0000
Manifest next update: Sat 18 Apr 2026 12:32:31 +0000
Files and hashes: 1: AFcumcZO1lL6gdUB76Fs-dRK6Zw.crl (hash: VciCBTiVi6TKrnIspr9UmAmjN+YiCSYSpeS08wbvnyE=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 17 Apr 2026 11:03:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3821 (0xeed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
Validity
Not Before: Apr 16 12:32:31 2026 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=372D66D089BD7DDFC0D3FACB220981EDE0C5968D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7c:a5:83:b4:12:b1:26:3f:09:69:85:93:4f:
e3:76:ec:36:6c:ae:7c:2c:a9:40:28:2a:07:a7:c4:
8b:01:38:42:c8:0d:ea:c9:84:83:a7:a8:4a:6d:46:
c5:19:31:8e:b9:ec:19:d7:af:89:81:99:81:b0:14:
2b:9e:14:e4:78:97:c7:40:fc:84:95:21:28:83:6f:
bb:bc:b5:ad:37:75:5c:a2:84:c1:b2:00:a2:58:2f:
66:1e:18:3e:13:6d:c3:c6:81:30:5c:bf:0c:bf:a0:
fd:05:1d:34:f7:cc:c2:ad:6e:34:64:00:98:40:37:
01:4f:f1:a5:55:4b:85:5e:44:5a:e5:bd:a8:7c:ec:
03:97:f6:68:46:d1:a5:6b:25:a7:26:29:07:69:df:
7f:59:4f:d0:0a:a6:16:09:e0:4b:f6:a6:59:51:79:
ba:0c:fc:cb:20:b5:55:40:43:b6:12:2c:62:c6:3e:
2c:9a:11:6d:b7:da:7f:3d:7f:fb:2c:08:43:4e:37:
f9:c8:55:c0:2d:5a:09:8a:08:e4:a6:44:e6:cb:73:
6b:f9:95:01:88:4b:7b:92:72:8b:22:7b:3a:b9:b4:
67:ff:8c:56:f0:4e:21:07:2c:76:02:7b:2e:d1:0b:
ed:8a:d4:36:9f:3f:95:21:5c:bd:36:ba:34:fe:36:
6a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:2D:66:D0:89:BD:7D:DF:C0:D3:FA:CB:22:09:81:ED:E0:C5:96:8D
X509v3 Authority Key Identifier:
keyid:00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:04:6c:17:f1:29:74:fc:6e:7d:92:03:4d:a1:93:a5:f4:bb:
ee:ba:0c:95:87:53:cc:03:11:59:33:ce:61:95:87:78:e8:17:
81:a6:d8:e8:f8:26:55:df:0e:57:80:8c:f6:83:ba:b8:f3:2d:
c3:47:c3:02:e0:0c:a7:22:8b:25:63:1d:4c:07:78:07:4c:42:
6d:2d:21:64:43:41:32:3a:9c:0c:ba:c2:7f:42:07:67:31:a8:
c3:90:d9:51:43:16:56:b9:81:ed:be:1e:15:42:78:75:c5:70:
e9:15:45:43:1d:68:28:38:73:04:d3:7b:01:b6:41:31:8c:68:
0a:1d:d8:ee:a6:9f:67:dc:9c:54:ef:ad:65:33:85:00:fb:12:
52:ea:bd:dd:d5:08:bc:cc:50:19:a8:cf:f3:a0:fc:b6:81:4e:
ff:30:db:1d:ea:5c:bf:b4:8b:f8:4f:1b:c9:ca:df:5c:a6:05:
b7:8c:a5:77:56:9e:86:f7:cd:ea:bc:d4:a5:fe:a0:15:c0:ce:
b6:67:7d:2c:21:e1:cd:ca:bf:e7:af:f7:e7:1c:a1:4f:24:03:
0a:89:ea:0d:16:89:b0:0b:31:05:3a:c1:0d:a2:7d:1c:00:88:
df:2f:43:87:b1:9c:c3:ec:16:d2:31:aa:21:27:e0:f3:06:cc:
54:3f:49:d9
-----BEGIN CERTIFICATE-----
MIIE8TCCA9mgAwIBAgICDu0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDA1
NzJFOTlDNjRFRDY1MkZBODFENTAxRUZBMTZDRjlENDRBRTk5QzAeFw0yNjA0MTYx
MjMyMzFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDM3MkQ2NkQwODlCRDdE
REZDMEQzRkFDQjIyMDk4MUVERTBDNTk2OEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDFfKWDtBKxJj8JaYWTT+N27DZsrnwsqUAoKgenxIsBOELIDerJ
hIOnqEptRsUZMY657BnXr4mBmYGwFCueFOR4l8dA/ISVISiDb7u8ta03dVyihMGy
AKJYL2YeGD4TbcPGgTBcvwy/oP0FHTT3zMKtbjRkAJhANwFP8aVVS4VeRFrlvah8
7AOX9mhG0aVrJacmKQdp339ZT9AKphYJ4Ev2pllReboM/MsgtVVAQ7YSLGLGPiya
EW232n89f/ssCENON/nIVcAtWgmKCOSmRObLc2v5lQGIS3uScosiezq5tGf/jFbw
TiEHLHYCey7RC+2K1DafP5UhXL02ujT+NmoFAgMBAAGjggINMIICCTAdBgNVHQ4E
FgQUNy1m0Im9fd/A0/rLIgmB7eDFlo0wHwYDVR0jBBgwFoAUAFcumcZO1lL6gdUB
76Fs+dRK6ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg
UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0hJTkNI
RU5HL0FGY3VtY1pPMWxMNmdkVUI3NkZzLWRSSzZady5jcmwwYAYIKwYBBQUHAQEE
VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX
TklDQ0EvQUZjdW1jWk8xbEw2Z2RVQjc2RnMtZFJLNlp3LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw
a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0hJTkNIRU5HL0FGY3VtY1pPMWxM
NmdkVUI3NkZzLWRSSzZady5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50
d25pYy50dy9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAh
BggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUA
A4IBAQAqBGwX8Sl0/G59kgNNoZOl9LvuugyVh1PMAxFZM85hlYd46BeBptjo+CZV
3w5XgIz2g7q48y3DR8MC4AynIoslYx1MB3gHTEJtLSFkQ0EyOpwMusJ/QgdnMajD
kNlRQxZWuYHtvh4VQnh1xXDpFUVDHWgoOHME03sBtkExjGgKHdjupp9n3JxU761l
M4UA+xJS6r3d1Qi8zFAZqM/zoPy2gU7/MNsd6ly/tIv4TxvJyt9cpgW3jKV3Vp6G
983qvNSl/qAVwM62Z30sIeHNyr/nr/fnHKFPJAMKieoNFomwCzEFOsENon0cAIjf
L0OHsZzD7BbSMaohJ+DzBsxUP0nZ
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:56:23 2026 by rpki-client