
$ rpki-client -vvf rpkica.twnic.tw/rpki/YUFENG/0/DF17A9D7D1F0BA49C098D57487B9782B1BC65166.mft
File: DF17A9D7D1F0BA49C098D57487B9782B1BC65166.mft (raw, json)
Hash identifier: LOUSLibcsouUVba0+s8+O29GcTQ0mIrW6kCec4CGsC4=
Subject key identifier: 37:64:DD:94:98:0E:E4:B0:2E:D9:D9:65:63:C6:87:28:24:BA:51:8F
Authority key identifier: DF:17:A9:D7:D1:F0:BA:49:C0:98:D5:74:87:B9:78:2B:1B:C6:51:66
Certificate issuer: /CN=DF17A9D7D1F0BA49C098D57487B9782B1BC65166
Certificate serial: 321AE92500FB083AAB91F17B8D10C2A67A79EF7B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DF17A9D7D1F0BA49C098D57487B9782B1BC65166.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/YUFENG/0/DF17A9D7D1F0BA49C098D57487B9782B1BC65166.mft
Manifest number: 2C
Signing time: Fri 12 Jun 2026 17:52:35 +0000
Manifest this update: Fri 12 Jun 2026 17:47:35 +0000
Manifest next update: Sat 13 Jun 2026 21:13:35 +0000
Files and hashes: 1: DF17A9D7D1F0BA49C098D57487B9782B1BC65166.crl (hash: F8QHAgCpZXKFuvwfs/xx/GANSQT+l/zrEqALvJp8xbI=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/YUFENG/0/DF17A9D7D1F0BA49C098D57487B9782B1BC65166.crl
rsync://rpkica.twnic.tw/rpki/YUFENG/0/DF17A9D7D1F0BA49C098D57487B9782B1BC65166.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DF17A9D7D1F0BA49C098D57487B9782B1BC65166.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 21:13:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:1a:e9:25:00:fb:08:3a:ab:91:f1:7b:8d:10:c2:a6:7a:79:ef:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DF17A9D7D1F0BA49C098D57487B9782B1BC65166
Validity
Not Before: Jun 12 17:47:35 2026 GMT
Not After : Jun 13 21:13:35 2026 GMT
Subject: CN=3764DD94980EE4B02ED9D96563C6872824BA518F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:76:d7:b8:2e:f0:87:0b:b8:5f:fe:63:dc:5b:
ba:fc:ce:1f:33:53:89:72:7d:ee:d1:a4:64:ba:e4:
9e:ce:7c:db:b3:08:d5:b8:27:38:88:de:1b:50:6f:
a0:95:5d:3c:35:b2:07:04:c9:97:c9:a5:e2:47:5f:
c8:a7:d9:b1:9a:02:e8:3a:e1:7a:2b:ba:a1:67:44:
0c:36:aa:29:73:18:d5:06:cb:55:5b:7d:4e:35:f3:
8b:89:f1:7d:7e:21:0d:e2:e0:c6:f7:31:b1:9a:39:
91:9a:31:0e:e4:2d:5e:81:ca:d8:ad:d4:bd:75:96:
c9:b5:2d:df:d2:2a:29:d2:b6:df:04:48:1e:96:b9:
90:9a:c3:58:9a:0f:3d:72:d5:e4:5f:03:38:ec:d4:
c6:d9:eb:14:fb:5a:95:74:4e:5e:9d:39:b9:c3:4a:
6b:7f:f6:d2:24:fb:db:15:0c:0e:08:93:cb:78:ef:
a0:f8:85:40:d5:cd:2f:2c:39:60:1d:fd:da:c2:c4:
98:c9:e7:80:6f:d6:28:61:c6:14:86:22:72:2a:ab:
12:81:65:87:6e:47:ed:56:f6:fd:50:ba:94:aa:ae:
f0:1f:84:f9:6e:6b:d7:97:32:36:21:0d:b6:8a:86:
12:ac:5d:87:5a:94:99:54:aa:6b:0d:bd:9d:bc:dc:
4f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:64:DD:94:98:0E:E4:B0:2E:D9:D9:65:63:C6:87:28:24:BA:51:8F
X509v3 Authority Key Identifier:
keyid:DF:17:A9:D7:D1:F0:BA:49:C0:98:D5:74:87:B9:78:2B:1B:C6:51:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/YUFENG/0/DF17A9D7D1F0BA49C098D57487B9782B1BC65166.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DF17A9D7D1F0BA49C098D57487B9782B1BC65166.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/YUFENG/0/DF17A9D7D1F0BA49C098D57487B9782B1BC65166.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:5d:6e:39:39:13:f6:09:eb:63:37:28:70:95:7e:30:27:6a:
f9:09:d7:72:70:4b:cc:ff:7d:36:64:60:21:54:56:b9:8f:b3:
d5:bb:ab:ba:ce:be:1e:06:99:75:bd:35:35:dd:c0:df:37:4e:
4c:6e:8a:a9:3a:fd:69:78:c6:f5:46:49:ae:3d:8e:a8:26:9c:
b5:7c:fe:8f:22:a0:b4:f7:78:d7:83:73:a9:bc:5c:a5:64:48:
d6:a4:ab:eb:78:3b:1f:fc:f9:00:4d:eb:46:77:85:5b:85:99:
8c:ad:83:47:29:00:4d:44:79:bd:b7:86:bc:56:95:0c:f1:b5:
40:ef:3c:58:c9:b4:e6:b5:1b:94:79:55:ea:1c:32:29:2e:8e:
a7:8e:3a:b4:fc:22:2c:c2:f5:fc:4d:e8:68:5c:47:c3:15:5b:
91:af:22:4d:50:95:f8:2e:df:eb:ff:b7:11:b7:6a:31:00:8f:
dd:ac:64:72:fc:8f:13:14:5d:2c:b7:40:a0:0d:ff:37:32:03:
aa:ae:ab:72:65:1a:66:a7:f7:fa:fa:a0:f8:6b:e0:8a:25:b1:
df:fe:cc:1c:8f:cb:4a:9c:51:45:74:f0:7e:da:60:e4:1f:ba:
57:2a:15:ed:1e:cc:06:af:33:4a:aa:96:c4:13:45:13:ca:b9:
10:2b:a5:46
-----BEGIN CERTIFICATE-----
MIIE5DCCA8ygAwIBAgIUMhrpJQD7CDqrkfF7jRDCpnp573swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREYxN0E5RDdEMUYwQkE0OUMwOThENTc0ODdCOTc4MkIx
QkM2NTE2NjAeFw0yNjA2MTIxNzQ3MzVaFw0yNjA2MTMyMTEzMzVaMDMxMTAvBgNV
BAMTKDM3NjRERDk0OTgwRUU0QjAyRUQ5RDk2NTYzQzY4NzI4MjRCQTUxOEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcdte4LvCHC7hf/mPcW7r8zh8z
U4lyfe7RpGS65J7OfNuzCNW4JziI3htQb6CVXTw1sgcEyZfJpeJHX8in2bGaAug6
4XoruqFnRAw2qilzGNUGy1VbfU4184uJ8X1+IQ3i4Mb3MbGaOZGaMQ7kLV6Bytit
1L11lsm1Ld/SKinStt8ESB6WuZCaw1iaDz1y1eRfAzjs1MbZ6xT7WpV0Tl6dObnD
Smt/9tIk+9sVDA4Ik8t476D4hUDVzS8sOWAd/drCxJjJ54Bv1ihhxhSGInIqqxKB
ZYduR+1W9v1QupSqrvAfhPlua9eXMjYhDbaKhhKsXYdalJlUqmsNvZ283E/JAgMB
AAGjggHuMIIB6jAdBgNVHQ4EFgQUN2TdlJgO5LAu2dllY8aHKCS6UY8wHwYDVR0j
BBgwFoAU3xep19HwuknAmNV0h7l4KxvGUWYwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud
HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvWVVGRU5H
LzAvREYxN0E5RDdEMUYwQkE0OUMwOThENTc0ODdCOTc4MkIxQkM2NTE2Ni5jcmww
bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p
Yy50dy9ycGtpL1RXTklDQ0EvMS9ERjE3QTlEN0QxRjBCQTQ5QzA5OEQ1NzQ4N0I5
NzgyQjFCQzY1MTY2LmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz
eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvWVVGRU5HLzAvREYxN0E5RDdEMUYw
QkE0OUMwOThENTc0ODdCOTc4MkIxQkM2NTE2Ni5tZnQwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG
CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBABddbjk5E/YJ
62M3KHCVfjAnavkJ13JwS8z/fTZkYCFUVrmPs9W7q7rOvh4GmXW9NTXdwN83Tkxu
iqk6/Wl4xvVGSa49jqgmnLV8/o8ioLT3eNeDc6m8XKVkSNakq+t4Ox/8+QBN60Z3
hVuFmYytg0cpAE1Eeb23hrxWlQzxtUDvPFjJtOa1G5R5VeocMikujqeOOrT8IizC
9fxN6GhcR8MVW5GvIk1Qlfgu3+v/txG3ajEAj92sZHL8jxMUXSy3QKAN/zcyA6qu
q3JlGman9/r6oPhr4Iolsd/+zByPy0qcUUV08H7aYOQfulcqFe0ezAavM0qqlsQT
RRPKuRArpUY=
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:16:09 2026 by rpki-client