
$ rpki-client -vvvf rpkica.twnic.tw/rpki/LUOSI/0/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.mft
File: 034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.mft (raw, json)
Hash identifier: hN/ydAPrkpPGuqdWM3dOA0hEVwpWAwd+eT4y3ntnTgA=
Subject key identifier: 5B:47:AF:FC:11:F2:43:52:0D:3D:E0:A6:A6:B1:BA:41:F2:A9:46:70
Authority key identifier: 03:4B:41:A1:3A:BB:0D:61:A1:54:AB:31:89:C9:BF:D2:DA:ED:4D:EA
Certificate issuer: /CN=034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA
Certificate serial: 561C3961891CE231CAC35A09F675534BDF72BDC6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/LUOSI/0/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.mft
Manifest number: FC
Signing time: Sat 14 Nov 2026 16:44:13 +0000
Manifest this update: Sat 14 Nov 2026 16:39:13 +0000
Manifest next update: Sun 15 Nov 2026 20:28:13 +0000
Files and hashes: 1: 3130332e3137362e35302e302f32332d3234203d3e203138303436.roa (hash: nI0+2spKrN4Xv9D36qIey0CsWmeOODfk2dYZVrt7wH8=)
2: 034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.crl (hash: CahDYDbOjBwhp/pyDKEy1/6HdBpp5PcWE4qC2ZxH7H4=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/LUOSI/0/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.crl
rsync://rpkica.twnic.tw/rpki/LUOSI/0/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 15 Nov 2026 15:30:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:1c:39:61:89:1c:e2:31:ca:c3:5a:09:f6:75:53:4b:df:72:bd:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA
Validity
Not Before: Nov 14 16:39:13 2026 GMT
Not After : Nov 15 20:28:13 2026 GMT
Subject: CN=5B47AFFC11F243520D3DE0A6A6B1BA41F2A94670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d2:76:32:d2:1f:af:d7:17:8f:1f:82:41:d8:
fa:8d:3c:42:4a:07:71:ef:d2:a8:57:1d:06:a7:03:
3e:48:8c:43:96:03:d8:4c:4a:96:15:6c:f0:f1:10:
7e:8b:ae:6d:6c:f0:8d:1a:34:f5:f9:68:6a:39:a2:
53:3a:35:68:85:bd:4d:ac:e7:aa:b8:2d:ee:19:b4:
63:6a:e6:2c:fe:89:dd:93:43:48:9c:82:d3:da:29:
0d:cb:61:fb:c8:d0:3e:39:41:8d:d3:ad:00:1d:47:
34:ed:cd:41:5a:08:99:1a:8c:46:08:88:ae:11:06:
0f:81:ee:61:b7:ac:d7:5e:42:3c:b7:79:f2:66:42:
8b:40:e5:9b:62:19:c9:44:61:b5:a0:5f:58:33:35:
59:78:a3:b8:6d:e1:6e:29:e0:3c:d4:2f:71:b2:70:
0e:0d:30:19:0c:f0:ba:57:1a:3c:1a:c5:1a:e7:11:
b9:c2:88:e9:2d:74:2c:19:1a:a8:d9:47:3b:f5:0a:
03:46:a6:08:c2:08:51:99:f9:42:df:64:44:2d:9c:
7b:ad:36:dd:00:f6:2c:50:64:1d:e9:3c:f1:0c:f3:
32:dd:db:35:d7:96:8e:cb:04:26:66:bd:0e:b8:9c:
7c:45:85:5a:08:32:a1:eb:ff:e8:98:96:28:05:9d:
b6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:47:AF:FC:11:F2:43:52:0D:3D:E0:A6:A6:B1:BA:41:F2:A9:46:70
X509v3 Authority Key Identifier:
keyid:03:4B:41:A1:3A:BB:0D:61:A1:54:AB:31:89:C9:BF:D2:DA:ED:4D:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/LUOSI/0/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LUOSI/0/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:1e:a7:c4:fc:03:c5:19:f3:38:5e:fd:ca:1d:fe:d5:92:ee:
34:3a:80:3f:69:92:f3:55:e4:5d:38:3f:67:b7:e7:df:0f:73:
a4:46:86:dd:e9:c8:d3:b7:2d:9b:86:f4:19:f0:02:3c:e6:f4:
30:85:ba:d9:20:02:23:e8:fe:fb:5b:82:c4:0d:db:23:e8:35:
46:2b:0e:4f:02:06:ff:5d:16:bf:78:17:c2:3b:6a:49:fc:56:
2d:21:09:6a:98:15:6b:30:92:8b:a3:9d:f2:b2:58:a6:ad:78:
1d:c7:39:3c:80:b5:c4:f4:ce:fb:4b:7e:f1:8f:1b:c0:ae:93:
fb:29:44:00:79:a6:21:0f:f0:62:fe:50:85:1b:d1:c7:94:87:
38:10:41:fb:e0:f8:49:63:6f:f5:68:e2:bd:39:05:54:83:97:
67:30:24:e5:14:63:0d:eb:51:49:fb:7a:e8:41:9b:f0:f3:9f:
a8:8d:a0:fc:f6:1b:a9:7b:8f:da:53:4c:6f:1e:8c:8b:08:4d:
e0:79:55:c2:66:b4:b5:84:6e:b3:c0:5a:b8:fc:33:17:17:ad:
21:a7:4e:60:4c:92:8f:4e:d1:5f:e0:59:d6:9c:05:1a:10:31:
32:e8:85:67:4b:8d:b4:6f:88:1c:9d:96:4f:19:1c:04:8b:48:
12:41:2c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 01:17:52 2026 by rpki-client