
$ rpki-client -vvf rpkica.twnic.tw/rpki/WANTEASY/0/E2FEF6929D00129C0EC91DE25524363E78F319D7.mft
File: E2FEF6929D00129C0EC91DE25524363E78F319D7.mft (raw, json)
Hash identifier: TRUu9J8jVuNC/8iuV7ag5I4iFDwM1ITNByEHZan/+zU=
Subject key identifier: 4C:D6:F6:A4:69:BC:D5:1A:D5:FE:7B:A5:C2:70:61:04:0D:DF:A9:0C
Authority key identifier: E2:FE:F6:92:9D:00:12:9C:0E:C9:1D:E2:55:24:36:3E:78:F3:19:D7
Certificate issuer: /CN=E2FEF6929D00129C0EC91DE25524363E78F319D7
Certificate serial: 106DE32D40B5D2313DDA46914727B019A1E17621
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E2FEF6929D00129C0EC91DE25524363E78F319D7.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/WANTEASY/0/E2FEF6929D00129C0EC91DE25524363E78F319D7.mft
Manifest number: 35
Signing time: Wed 17 Jun 2026 04:16:44 +0000
Manifest this update: Wed 17 Jun 2026 04:11:44 +0000
Manifest next update: Thu 18 Jun 2026 06:14:44 +0000
Files and hashes: 1: 3130332e3133382e3130372e302f32342d3234203d3e203137343038.roa (hash: De1HIXtsANXzLfuAQRrXgqC4plFB3ZURvmTwZ7qHlC8=)
2: 3130332e3133382e3130362e302f32332d3234203d3e203137343038.roa (hash: nhkWWbEcHMQGryDxoH+6rKNwicNf5iRZvw6pvqc84z4=)
3: E2FEF6929D00129C0EC91DE25524363E78F319D7.crl (hash: Ta4h0uGjF4MrgJ4aJlIATdeYoqKAe8mNBwUoMKEQBj8=)
4: 3130332e3133382e3130362e302f32342d3234203d3e203137343038.roa (hash: 7hhipyt4Di6KylqpdZkFLgokgRg/ZHGamIeaZ0lFOO0=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/WANTEASY/0/E2FEF6929D00129C0EC91DE25524363E78F319D7.crl
rsync://rpkica.twnic.tw/rpki/WANTEASY/0/E2FEF6929D00129C0EC91DE25524363E78F319D7.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E2FEF6929D00129C0EC91DE25524363E78F319D7.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 18:58:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:6d:e3:2d:40:b5:d2:31:3d:da:46:91:47:27:b0:19:a1:e1:76:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E2FEF6929D00129C0EC91DE25524363E78F319D7
Validity
Not Before: Jun 17 04:11:44 2026 GMT
Not After : Jun 18 06:14:44 2026 GMT
Subject: CN=4CD6F6A469BCD51AD5FE7BA5C27061040DDFA90C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:71:1c:b1:b6:f7:42:4e:78:c5:26:02:66:a6:
45:31:66:b9:15:06:8e:fd:b1:0f:d3:45:f2:99:97:
77:4a:15:87:0f:5b:48:b7:a0:8f:4d:ec:19:1b:33:
a7:04:79:69:8b:57:98:4d:d9:bf:f5:14:26:1a:61:
97:dc:e0:a8:64:80:8f:7c:bd:fd:c9:7b:97:50:1b:
97:a5:f4:90:54:8c:9f:1b:8b:0a:5f:4e:5c:cd:c6:
e6:e3:be:c5:0c:76:38:ed:c4:bb:15:0d:62:1a:f0:
5c:2a:08:e9:1e:08:f8:f2:67:d7:6a:33:cc:c8:de:
69:95:e3:58:58:bf:2d:30:99:72:f5:f7:77:67:8b:
50:a2:e2:18:00:09:d7:d2:68:e2:9e:15:64:8e:12:
d7:21:43:15:d9:b3:de:8f:c8:b2:b0:1a:54:5c:c4:
6f:82:7c:43:e9:4a:47:3c:3d:59:2a:c2:d9:71:e6:
b1:d3:a1:37:10:81:b9:8d:c0:8b:ac:85:7d:9a:9c:
55:91:e2:10:31:50:18:75:88:fe:e8:01:bd:87:76:
66:6b:74:27:9c:6d:3b:59:d2:2c:50:b3:a8:b9:41:
a8:2a:5d:a1:90:89:58:bf:cf:25:3b:47:3f:dd:24:
7e:ee:7c:d3:07:f1:12:6d:27:61:04:db:b5:e3:62:
cd:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:D6:F6:A4:69:BC:D5:1A:D5:FE:7B:A5:C2:70:61:04:0D:DF:A9:0C
X509v3 Authority Key Identifier:
keyid:E2:FE:F6:92:9D:00:12:9C:0E:C9:1D:E2:55:24:36:3E:78:F3:19:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/WANTEASY/0/E2FEF6929D00129C0EC91DE25524363E78F319D7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E2FEF6929D00129C0EC91DE25524363E78F319D7.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/WANTEASY/0/E2FEF6929D00129C0EC91DE25524363E78F319D7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:26:6d:7b:55:ac:6b:52:1b:57:e9:1b:55:9a:40:aa:d3:40:
78:38:ac:9e:8c:68:2c:52:1c:6f:3d:28:14:58:86:99:c9:8a:
8c:5c:93:07:fd:f4:3d:b9:f0:06:9d:98:7b:62:74:2d:a5:38:
ee:06:fe:5e:59:3a:55:46:68:b3:2a:fb:04:4d:bd:12:7b:fe:
3d:7d:a6:44:a7:6f:e8:b7:34:6c:85:f6:8a:24:0a:3e:da:1a:
00:49:c3:44:4d:2d:fb:1c:1d:6f:13:78:4b:78:52:ff:72:3b:
ec:8c:50:00:e6:ec:94:e0:f5:31:d2:e6:33:20:0b:8b:9f:27:
ce:55:93:9b:77:15:04:af:43:1c:4c:a7:65:33:fb:74:6f:9a:
de:38:30:25:9c:87:12:bc:57:13:0e:41:fb:fd:2f:68:7f:b2:
8e:9d:e7:9d:8b:a8:d7:3a:bf:dd:93:83:98:15:5a:9d:bc:51:
2e:ab:1b:d5:02:58:17:71:34:37:fc:4b:6f:07:c0:6d:62:73:
cc:ca:53:d5:c3:e4:8b:f7:34:35:e2:76:45:a4:da:2e:77:b2:
60:52:b7:bb:68:6d:b7:c9:c6:26:a9:43:d4:26:bb:c2:59:cf:
5c:9a:2f:a1:26:30:bc:87:d3:37:56:a2:65:f3:b9:32:64:79:
fe:31:95:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:27:05 2026 by rpki-client