
$ rpki-client -vvf rpkica.twnic.tw/rpki/SDTV/0/3E0AB786AB86C4D25A7BE864DDD140760CC02EEA.mft
File: 3E0AB786AB86C4D25A7BE864DDD140760CC02EEA.mft (raw, json)
Hash identifier: ANTfMuYaKthhYriccSJCiVwR6AV1IvEBYZ3mxPT7GsE=
Subject key identifier: FE:B5:01:AB:99:A8:14:83:20:B0:02:4F:8C:91:D1:F2:EC:A4:71:63
Authority key identifier: 3E:0A:B7:86:AB:86:C4:D2:5A:7B:E8:64:DD:D1:40:76:0C:C0:2E:EA
Certificate issuer: /CN=3E0AB786AB86C4D25A7BE864DDD140760CC02EEA
Certificate serial: 6AA2718D4ACD65E8C9F94B10C451159844F08650
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3E0AB786AB86C4D25A7BE864DDD140760CC02EEA.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SDTV/0/3E0AB786AB86C4D25A7BE864DDD140760CC02EEA.mft
Manifest number: 63
Signing time: Thu 23 Jul 2026 22:31:51 +0000
Manifest this update: Thu 23 Jul 2026 22:26:51 +0000
Manifest next update: Sat 25 Jul 2026 01:43:51 +0000
Files and hashes: 1: 3E0AB786AB86C4D25A7BE864DDD140760CC02EEA.crl (hash: H8q/xspmH5f5agWvM6x7+rhopbIKJc0Koahn71n3hx0=)
2: 3130332e3130302e3136342e302f32322d3232203d3e20313331363131.roa (hash: LqxzSENA6MQT2gEkGTBGcnDvqFZoJ6iXojpLB0vT1ng=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/SDTV/0/3E0AB786AB86C4D25A7BE864DDD140760CC02EEA.crl
rsync://rpkica.twnic.tw/rpki/SDTV/0/3E0AB786AB86C4D25A7BE864DDD140760CC02EEA.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3E0AB786AB86C4D25A7BE864DDD140760CC02EEA.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 01:43:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:a2:71:8d:4a:cd:65:e8:c9:f9:4b:10:c4:51:15:98:44:f0:86:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E0AB786AB86C4D25A7BE864DDD140760CC02EEA
Validity
Not Before: Jul 23 22:26:51 2026 GMT
Not After : Jul 25 01:43:51 2026 GMT
Subject: CN=FEB501AB99A8148320B0024F8C91D1F2ECA47163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:db:e5:5a:a8:1f:ad:22:b1:2b:22:a0:a7:0a:
9e:a0:ff:2e:19:11:a9:87:c8:16:ee:97:19:fb:9d:
31:9b:91:15:50:18:5c:85:88:09:5a:ed:c9:10:52:
ec:0f:11:24:78:c0:93:51:9d:56:56:18:f7:ba:f8:
30:3c:18:73:94:3a:4b:f5:01:26:7e:a4:9d:93:c2:
44:a1:6a:1f:13:d5:a0:7c:d4:3e:19:ee:7f:f2:a9:
36:8a:6f:3c:cb:8c:98:d0:a1:f1:2a:73:ae:e4:7a:
97:29:16:48:f8:90:d9:ac:6e:ac:74:12:5c:b8:93:
f9:77:49:64:e7:e0:aa:7c:fb:59:49:02:14:c4:7a:
06:2d:6a:bd:dc:64:19:39:c4:5a:f8:0d:9b:84:76:
e8:e9:79:ba:cb:41:81:c2:a4:9b:94:be:f4:6c:bf:
a4:fe:0b:a1:dc:3b:b7:22:00:f7:c0:48:4d:69:05:
61:ce:77:8e:66:02:c1:9d:83:3e:a9:51:56:52:a0:
b6:8a:2b:b3:d9:2d:f2:a6:c7:2c:36:aa:b7:b5:85:
2a:90:d8:6b:b3:d3:d1:ca:e2:8c:8e:eb:80:cc:2c:
86:99:6c:58:17:85:77:59:4e:d1:9b:b1:0d:8a:f6:
e0:2e:05:21:95:6d:3f:46:47:2f:7e:ce:e0:ba:c0:
b6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:B5:01:AB:99:A8:14:83:20:B0:02:4F:8C:91:D1:F2:EC:A4:71:63
X509v3 Authority Key Identifier:
keyid:3E:0A:B7:86:AB:86:C4:D2:5A:7B:E8:64:DD:D1:40:76:0C:C0:2E:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SDTV/0/3E0AB786AB86C4D25A7BE864DDD140760CC02EEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3E0AB786AB86C4D25A7BE864DDD140760CC02EEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SDTV/0/3E0AB786AB86C4D25A7BE864DDD140760CC02EEA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:dd:1a:65:a8:00:2a:0b:4d:41:ea:e4:7b:0d:52:30:af:9c:
10:7e:8d:f7:38:e8:f0:13:3e:72:48:e6:d5:13:2c:b3:1b:3a:
d5:e7:ad:c5:8f:71:b7:44:fc:20:0b:57:bf:4f:0a:ae:e7:25:
cb:1f:9b:5a:4f:38:f2:de:79:53:ac:72:bb:bc:c3:8c:b1:4a:
a2:e5:65:5c:93:b7:3f:ed:76:40:4e:62:eb:8a:4c:c5:9b:15:
55:52:dc:77:a9:9f:67:54:b2:4c:b2:38:1d:65:71:fd:3e:72:
3a:bf:cf:28:6a:8d:19:91:71:68:e8:52:e9:bb:89:7c:aa:f1:
cc:aa:33:ac:7d:aa:8e:af:65:cb:3c:3b:b9:f9:c6:4d:6f:86:
e4:f4:3c:de:c9:ab:b1:56:c9:4a:12:ac:7f:a5:0d:be:e5:21:
c1:76:d9:80:ce:a8:67:cb:f1:95:8b:0f:ef:a3:2f:df:82:a0:
d5:21:1a:40:01:f3:0b:79:4e:8f:bd:7c:5c:f4:72:2c:a3:fe:
9a:c4:93:f7:54:89:f2:24:db:40:1d:ae:b3:83:58:d1:cf:ce:
9e:fd:49:f6:8d:e6:86:8a:91:12:64:ea:b6:71:93:72:e0:e3:
4d:d7:8c:68:50:4f:35:c8:f9:77:c6:d8:f2:f4:18:cb:65:47:
41:21:7b:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:00:12 2026 by rpki-client