
$ rpki-client -vvvf rpkica.twnic.tw/rpki/SMTRTCH/0/08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.mft
File: 08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.mft (raw, json)
Hash identifier: Ghza22i2VWtxwh5nHJzRc7bHQGgsMWnDpJCicMxvQrw=
Subject key identifier: 93:B9:1D:1D:35:F0:99:83:F4:B8:65:50:66:9C:8C:B4:63:5A:19:8F
Authority key identifier: 08:A0:3C:F9:C1:D3:AF:93:CF:DB:0A:2C:1D:87:8D:A6:02:75:D4:FE
Certificate issuer: /CN=08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE
Certificate serial: 39BCCAB3BD45F420759EEC9EE553427F36C736E3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SMTRTCH/0/08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.mft
Manifest number: FD
Signing time: Sat 14 Nov 2026 22:42:50 +0000
Manifest this update: Sat 14 Nov 2026 22:37:50 +0000
Manifest next update: Sun 15 Nov 2026 22:44:50 +0000
Files and hashes: 1: 3130332e33372e342e302f32342d3234203d3e2039363738.roa (hash: hQIZ2hKwplVh7xrppd5ykMhUFjuzMmmFpmHvfAwSwiU=)
2: 3130332e33372e352e302f32342d3234203d3e2039363738.roa (hash: vq7Kkz8vi0K2HzkGDtDsKnFEZtHIaVtYlOC9mpxUIrQ=)
3: 08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.crl (hash: 4+N3BTjUMfrqas5OA1WKafSaY0C8mxciE2yB2jPD+7g=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/SMTRTCH/0/08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.crl
rsync://rpkica.twnic.tw/rpki/SMTRTCH/0/08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 15 Nov 2026 15:30:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:bc:ca:b3:bd:45:f4:20:75:9e:ec:9e:e5:53:42:7f:36:c7:36:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE
Validity
Not Before: Nov 14 22:37:50 2026 GMT
Not After : Nov 15 22:44:50 2026 GMT
Subject: CN=93B91D1D35F09983F4B86550669C8CB4635A198F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2f:e6:86:c3:c8:da:24:eb:4e:cb:ed:ae:a1:
fb:ec:67:89:ce:fd:91:53:08:43:d0:10:89:79:50:
88:c0:44:b5:79:27:ad:7b:55:6a:dd:45:60:d7:a0:
81:99:31:e4:3c:e3:95:5b:1e:ad:bc:1c:78:d6:84:
cd:d6:02:25:f1:1c:58:3b:17:73:d0:1f:39:d2:3e:
60:65:df:a6:0f:67:75:a3:61:56:b8:6b:a4:14:20:
0d:4f:14:e7:78:e8:92:2f:f6:4b:09:c0:66:65:35:
f3:d3:58:b9:6c:ce:b4:b4:0e:b9:4e:1d:b2:bf:1b:
e9:6b:00:b6:ef:bf:ad:34:a4:79:3d:43:d5:76:7b:
dd:06:ef:d5:da:d7:eb:54:8d:31:ff:ad:aa:23:c3:
4c:f4:be:c0:26:e4:ec:78:86:43:ca:2c:51:02:36:
93:fe:31:b0:33:ff:5e:ae:a3:28:b0:27:f2:8b:08:
8e:28:b7:ba:87:aa:5d:8a:79:bf:cc:12:52:16:b7:
4b:ac:e8:f0:65:da:88:6d:56:be:68:a1:fb:97:a5:
f5:8f:8d:3b:5d:4a:cf:c2:dc:d5:fb:20:86:3e:b2:
28:89:44:e7:79:e9:63:09:7c:6b:57:ed:21:0b:da:
c2:69:48:c6:42:39:35:9e:0f:97:08:0a:cb:c7:06:
01:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:B9:1D:1D:35:F0:99:83:F4:B8:65:50:66:9C:8C:B4:63:5A:19:8F
X509v3 Authority Key Identifier:
keyid:08:A0:3C:F9:C1:D3:AF:93:CF:DB:0A:2C:1D:87:8D:A6:02:75:D4:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SMTRTCH/0/08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SMTRTCH/0/08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:30:3f:43:e6:e0:58:11:82:e1:7a:ff:9b:c5:b6:c9:a0:c7:
68:1d:8e:e4:59:5d:82:fe:2d:80:dd:ca:f7:5a:90:cb:7f:ce:
43:6d:08:62:c1:15:c0:5e:96:2c:a1:39:3d:42:e5:4a:46:95:
ce:21:26:2f:11:b9:ff:57:41:d6:33:3a:ae:d0:61:17:a0:d9:
d1:89:95:c0:de:1c:cf:d8:ed:37:3d:4f:07:58:18:27:17:af:
d8:99:c8:ea:d3:df:c5:da:da:39:ae:40:6c:54:ec:6c:39:28:
28:16:ad:88:c2:33:18:60:5d:4d:f7:e2:77:1a:85:6f:d3:20:
09:76:d2:84:64:19:06:1a:51:f3:fa:3d:78:d8:33:22:c3:c8:
75:9f:12:4d:77:65:df:ce:8b:d6:38:5a:3c:e6:69:ad:08:fc:
7d:50:93:c6:4e:f6:2a:33:29:1a:25:09:50:7a:c7:50:a5:34:
25:d1:8f:bc:2c:5d:53:d5:8b:17:69:4a:b1:05:cd:7b:47:f6:
1a:3b:d0:74:5a:06:88:d5:31:85:4f:de:38:49:b5:1b:62:5a:
49:68:bf:5b:f2:a0:2c:bf:78:e8:f9:1e:52:34:3c:ee:42:e7:
24:33:17:f1:f5:f6:f5:dc:06:f7:d6:76:c1:7d:1d:bb:cc:e7:
31:d8:00:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 08:39:55 2026 by rpki-client