
$ rpki-client -vvvf rpkica.twnic.tw/rpki/LEARNING36/0/793BFA77CA1E606EDD43BA4DF2C8EAB6F38E62A1.mft
File: 793BFA77CA1E606EDD43BA4DF2C8EAB6F38E62A1.mft (raw, json)
Hash identifier: FQEXL4H0DE/hCi2x92uQdiYKA4hQafJPYlNZuytir/E=
Subject key identifier: CD:12:6D:70:98:C0:A6:D2:72:B2:D8:8B:47:DE:4D:20:92:61:48:CC
Authority key identifier: 79:3B:FA:77:CA:1E:60:6E:DD:43:BA:4D:F2:C8:EA:B6:F3:8E:62:A1
Certificate issuer: /CN=793BFA77CA1E606EDD43BA4DF2C8EAB6F38E62A1
Certificate serial: 0137B44B9123870389BF5C80439E2A87D1500207
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/793BFA77CA1E606EDD43BA4DF2C8EAB6F38E62A1.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/LEARNING36/0/793BFA77CA1E606EDD43BA4DF2C8EAB6F38E62A1.mft
Manifest number: B8
Signing time: Fri 25 Sep 2026 00:04:50 +0000
Manifest this update: Thu 24 Sep 2026 23:59:50 +0000
Manifest next update: Sat 26 Sep 2026 02:32:50 +0000
Files and hashes: 1: 3130332e36342e32322e302f32332d3234203d3e203234313632.roa (hash: vp18jHFsymMwntPhKjDMhUA6YgN91sjf9Qxya1SYqUU=)
2: 3130332e36342e32322e302f32332d3234203d3e2037353336.roa (hash: hF+qaCD0mNB8NHiu7Y54C2GPDlGre0i9TzH42K6b29s=)
3: 793BFA77CA1E606EDD43BA4DF2C8EAB6F38E62A1.crl (hash: PFhUppquJKf56p4JdPyB+lhrsi+0DKiPB9aDK3Tprww=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/LEARNING36/0/793BFA77CA1E606EDD43BA4DF2C8EAB6F38E62A1.crl
rsync://rpkica.twnic.tw/rpki/LEARNING36/0/793BFA77CA1E606EDD43BA4DF2C8EAB6F38E62A1.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/793BFA77CA1E606EDD43BA4DF2C8EAB6F38E62A1.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 21:19:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:37:b4:4b:91:23:87:03:89:bf:5c:80:43:9e:2a:87:d1:50:02:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=793BFA77CA1E606EDD43BA4DF2C8EAB6F38E62A1
Validity
Not Before: Sep 24 23:59:50 2026 GMT
Not After : Sep 26 02:32:50 2026 GMT
Subject: CN=CD126D7098C0A6D272B2D88B47DE4D20926148CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2b:ae:97:36:c4:ec:79:cd:0f:ac:d9:bc:2d:
49:4b:bf:7b:9b:5a:9a:02:1b:7d:76:77:87:0a:fe:
ec:58:42:5c:78:c4:6f:92:0f:eb:9c:5b:f1:9d:a5:
7c:dc:f7:3f:b7:54:7f:9d:c9:5d:84:77:a9:aa:d7:
a6:91:e0:b2:56:62:7c:dd:6a:ba:3a:62:e1:1c:6c:
ee:cb:43:69:da:f3:59:af:17:14:a0:20:c9:a5:94:
36:a3:fc:a4:81:31:84:14:aa:40:7e:c0:52:05:a9:
7c:30:b0:61:69:63:0b:a8:7a:94:b2:d7:ea:33:b4:
f9:8e:d2:97:ec:69:2e:10:4f:7a:9c:ed:25:95:7d:
8e:ef:4a:ca:04:13:1f:3b:dc:d0:a4:4f:86:81:3e:
49:fc:b0:d4:0a:93:1d:f2:fc:80:79:3e:ff:4d:f4:
e4:b4:cb:ab:c0:ac:db:1e:4e:20:9f:7f:c2:e0:f3:
1d:00:1a:11:d8:c5:e2:82:8b:96:11:26:3e:07:c1:
83:f0:68:01:9b:d0:50:26:12:19:4c:4e:67:54:87:
8c:21:e2:ac:01:da:4e:b4:95:6f:5f:75:fd:9b:4f:
1c:b9:02:bf:8c:e7:35:88:43:54:51:07:6d:37:90:
55:37:31:10:5b:ec:e3:1d:3f:e1:cb:bc:f7:88:0f:
99:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:12:6D:70:98:C0:A6:D2:72:B2:D8:8B:47:DE:4D:20:92:61:48:CC
X509v3 Authority Key Identifier:
keyid:79:3B:FA:77:CA:1E:60:6E:DD:43:BA:4D:F2:C8:EA:B6:F3:8E:62:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/LEARNING36/0/793BFA77CA1E606EDD43BA4DF2C8EAB6F38E62A1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/793BFA77CA1E606EDD43BA4DF2C8EAB6F38E62A1.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LEARNING36/0/793BFA77CA1E606EDD43BA4DF2C8EAB6F38E62A1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:72:2b:0f:70:e7:e8:ee:46:0e:ea:c4:9b:41:fd:c6:fa:04:
f4:9b:41:9e:20:5f:6c:f7:5a:2c:93:e8:3d:9e:77:df:55:9c:
29:4e:24:08:37:2b:73:72:11:31:71:e8:a3:cb:e8:bd:9c:7d:
71:f2:2a:d0:e1:ed:e2:25:ff:24:fd:22:7c:46:f2:c3:ac:6d:
97:d1:e2:e3:7a:24:60:91:15:01:9f:31:7f:90:71:bb:b6:0b:
63:c9:a2:b5:dd:ef:aa:61:b6:f3:19:0d:8c:e9:d0:50:09:f8:
eb:f8:05:41:d8:38:3f:57:f2:62:6a:27:93:2f:db:7e:32:38:
a5:49:11:13:fe:60:37:71:ff:02:d6:4a:fa:16:17:8a:d6:54:
5e:69:24:47:82:14:56:be:74:a2:ea:51:81:b4:f5:2c:a1:27:
d1:83:90:be:d4:c6:74:22:cc:4e:86:81:ca:41:58:22:65:86:
7b:d7:89:aa:76:91:49:45:e3:bf:ee:ce:d3:f6:21:ae:94:23:
69:f5:23:04:6c:93:e8:c7:c3:c5:44:6a:5d:d6:fc:6f:6b:7a:
b3:34:31:a9:85:80:1b:a6:e4:39:81:d7:5b:52:5c:a0:b9:5e:
68:df:35:75:38:5d:a6:d7:18:f2:2b:2c:80:e9:47:00:4c:ea:
2c:a3:9a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 10:51:37 2026 by rpki-client