
$ rpki-client -vvvf rpkica.twnic.tw/rpki/WDKING/0/2BC02246E19787B13282114325AFD3BB8B58D2A9.mft
File: 2BC02246E19787B13282114325AFD3BB8B58D2A9.mft (raw, json)
Hash identifier: PHsdWB5ufGTamlwQzfjw1XOGD59V94a9+zJLY4rQbic=
Subject key identifier: 25:48:83:74:18:CC:D4:2F:D9:E6:AD:49:FD:D6:0E:DC:EA:3E:C8:AD
Authority key identifier: 2B:C0:22:46:E1:97:87:B1:32:82:11:43:25:AF:D3:BB:8B:58:D2:A9
Certificate issuer: /CN=2BC02246E19787B13282114325AFD3BB8B58D2A9
Certificate serial: 07EDE50D9FFA12F2F7446EB1C4549DE12D7EFC0B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2BC02246E19787B13282114325AFD3BB8B58D2A9.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/WDKING/0/2BC02246E19787B13282114325AFD3BB8B58D2A9.mft
Manifest number: B3
Signing time: Mon 21 Sep 2026 18:41:54 +0000
Manifest this update: Mon 21 Sep 2026 18:36:54 +0000
Manifest next update: Tue 22 Sep 2026 20:21:54 +0000
Files and hashes: 1: 3130332e36372e37322e302f32332d3233203d3e20313530373534.roa (hash: KO7LMHRqAHyDh5Mdrii3lyqPMcHUrLNRCeW78l1n++A=)
2: 2BC02246E19787B13282114325AFD3BB8B58D2A9.crl (hash: ruQkSskHtWDklXw2ywHxBXPWrQdEgs6eQJISISY4hdM=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/WDKING/0/2BC02246E19787B13282114325AFD3BB8B58D2A9.crl
rsync://rpkica.twnic.tw/rpki/WDKING/0/2BC02246E19787B13282114325AFD3BB8B58D2A9.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2BC02246E19787B13282114325AFD3BB8B58D2A9.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 20:21:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:ed:e5:0d:9f:fa:12:f2:f7:44:6e:b1:c4:54:9d:e1:2d:7e:fc:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2BC02246E19787B13282114325AFD3BB8B58D2A9
Validity
Not Before: Sep 21 18:36:54 2026 GMT
Not After : Sep 22 20:21:54 2026 GMT
Subject: CN=2548837418CCD42FD9E6AD49FDD60EDCEA3EC8AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8b:ec:f6:b7:cd:d9:b8:c2:6a:69:52:8c:28:
6e:42:19:26:7d:6b:9d:b4:cc:51:a8:e2:3b:b7:32:
a1:5f:09:84:d4:f7:71:a7:89:5d:2b:73:e4:d9:68:
64:92:23:23:6d:38:85:5e:24:f1:ba:f3:8f:5f:1c:
46:04:e1:f1:b9:57:74:bb:0b:1f:0f:2e:e2:66:28:
21:e2:84:0b:08:f6:64:53:23:2f:65:dd:2c:7e:ec:
cc:1e:7f:e1:69:b5:0c:b6:11:ae:ee:18:ef:3c:21:
df:f0:e5:c2:b4:18:4b:9f:bb:c8:0f:82:1d:86:af:
71:3e:66:3b:86:1f:53:51:e6:5c:b9:8c:87:4d:81:
3d:68:17:30:d8:a0:59:4c:c8:8e:08:53:17:fc:60:
b1:d8:f7:83:c7:63:ac:23:5e:0c:af:aa:14:fd:29:
4a:c7:43:12:45:a4:19:ff:01:f7:81:94:93:ae:73:
e4:1c:ad:4d:3a:de:ee:2b:31:40:ec:96:a7:17:03:
a1:02:3d:cd:82:6e:90:e1:61:76:1d:ce:3c:39:84:
a1:f6:97:b4:09:b0:78:80:a3:54:3b:fd:88:bc:30:
a3:64:6d:9a:f7:69:60:c7:fc:7c:bc:30:7b:0b:b4:
95:f7:1e:0a:a2:bb:81:f3:9b:78:33:64:88:23:21:
82:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:48:83:74:18:CC:D4:2F:D9:E6:AD:49:FD:D6:0E:DC:EA:3E:C8:AD
X509v3 Authority Key Identifier:
keyid:2B:C0:22:46:E1:97:87:B1:32:82:11:43:25:AF:D3:BB:8B:58:D2:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/WDKING/0/2BC02246E19787B13282114325AFD3BB8B58D2A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2BC02246E19787B13282114325AFD3BB8B58D2A9.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/WDKING/0/2BC02246E19787B13282114325AFD3BB8B58D2A9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:51:d7:50:42:ce:60:39:f9:c8:2f:e4:f9:34:f4:b1:a2:f7:
50:ed:fe:ea:48:fd:3f:bc:57:1b:70:a7:e0:16:7e:e5:5b:d1:
b5:b5:af:64:14:c3:9f:6e:be:e0:56:24:ee:b2:01:2d:07:aa:
fd:80:d0:c1:3f:0d:a0:c0:b4:9a:32:5c:38:12:d7:6d:d1:c2:
e2:6e:40:31:41:aa:13:38:70:d9:20:a7:70:22:59:4c:db:a6:
f0:32:bb:1b:8e:c8:18:60:e4:0f:4b:aa:19:66:fc:ef:3f:48:
e5:c3:c1:cb:51:0f:a3:4e:5a:af:7c:d7:b3:c4:32:a8:db:0d:
d3:8a:4c:8f:65:62:0a:c3:c9:66:ff:79:34:3d:7d:49:ab:05:
cf:58:98:36:2d:0e:1b:bc:dc:0e:73:e1:73:c6:42:30:e7:5f:
00:28:72:6a:ee:6c:42:90:21:0e:e4:03:f3:94:ec:71:21:5f:
a7:45:5c:0e:88:95:2e:c7:48:fd:4c:dd:e1:1b:91:a6:48:de:
7e:27:a4:6a:a2:1f:fe:ec:91:1d:97:f7:f9:15:06:19:50:ea:
62:d0:3f:34:26:7d:c0:4e:6b:45:07:13:0c:65:b6:fd:96:3f:
6f:7f:e3:1b:b7:37:75:38:df:5c:a5:48:b9:b2:f0:11:6d:6e:
68:f1:3b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 02:01:14 2026 by rpki-client