
$ rpki-client -vvvf rpkica.twnic.tw/rpki/SMTRTCH/0/08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.mft
File: 08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.mft (raw, json)
Hash identifier: crpuhLxBUmXvl8bFJF45hP6mTRZxf8F+qeV5fmOYD0g=
Subject key identifier: 8C:D5:74:A5:14:25:F6:F6:23:9E:91:6F:86:A3:E8:15:5B:4D:5E:48
Authority key identifier: 08:A0:3C:F9:C1:D3:AF:93:CF:DB:0A:2C:1D:87:8D:A6:02:75:D4:FE
Certificate issuer: /CN=08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE
Certificate serial: 5EAA99FB06256F06CC00F9201410ABC793A55A1E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SMTRTCH/0/08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.mft
Manifest number: B8
Signing time: Thu 24 Sep 2026 03:56:22 +0000
Manifest this update: Thu 24 Sep 2026 03:51:22 +0000
Manifest next update: Fri 25 Sep 2026 07:20:22 +0000
Files and hashes: 1: 08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.crl (hash: Ax4N8ErKNGp95JGC+eijdaAavZ3LLBz8uP2JwJPRU+4=)
2: 3130332e33372e342e302f32342d3234203d3e2039363738.roa (hash: hQIZ2hKwplVh7xrppd5ykMhUFjuzMmmFpmHvfAwSwiU=)
3: 3130332e33372e352e302f32342d3234203d3e2039363738.roa (hash: vq7Kkz8vi0K2HzkGDtDsKnFEZtHIaVtYlOC9mpxUIrQ=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/SMTRTCH/0/08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.crl
rsync://rpkica.twnic.tw/rpki/SMTRTCH/0/08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 02:19:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:aa:99:fb:06:25:6f:06:cc:00:f9:20:14:10:ab:c7:93:a5:5a:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE
Validity
Not Before: Sep 24 03:51:22 2026 GMT
Not After : Sep 25 07:20:22 2026 GMT
Subject: CN=8CD574A51425F6F6239E916F86A3E8155B4D5E48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:dc:8b:2b:c3:b1:bc:eb:42:3b:4c:55:95:e3:
b8:7f:d3:4f:ff:1e:dd:1a:c1:5f:50:d3:c2:1d:49:
89:32:a7:84:60:ec:ba:06:8b:12:dc:e5:0f:cd:cb:
02:d7:e0:e8:71:df:77:03:da:e7:96:4c:4e:02:b0:
56:16:51:e9:b5:e0:8e:ec:8b:7c:a4:a6:3f:29:ee:
a6:7b:d9:a5:95:24:28:bc:65:5f:52:36:6a:01:8a:
ba:05:e8:61:15:db:5a:a1:0f:ee:8c:41:70:98:1b:
9f:ec:a1:6b:f0:28:c5:9f:2b:fa:5b:cd:dc:81:de:
10:a5:b8:69:48:15:86:b6:9d:61:a0:24:05:bb:39:
56:d5:83:ca:69:84:fd:f4:35:94:6a:e4:86:1b:67:
a1:af:ec:bb:86:7b:1e:1e:70:52:a6:32:e0:a3:d5:
56:8b:21:94:6a:c2:87:42:bd:f6:76:9d:83:30:69:
bf:cb:13:b7:64:ac:47:d6:39:ad:ce:23:0b:91:5e:
76:51:28:97:f6:ae:64:67:71:0d:d4:a4:38:49:ea:
a0:1c:a9:a6:54:21:4c:73:57:bd:38:3e:97:20:8e:
41:e5:58:29:b7:51:ff:8e:a6:f2:36:f3:41:46:01:
d0:a3:97:79:cd:56:58:fe:dc:f5:c0:e2:08:ed:97:
a2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:D5:74:A5:14:25:F6:F6:23:9E:91:6F:86:A3:E8:15:5B:4D:5E:48
X509v3 Authority Key Identifier:
keyid:08:A0:3C:F9:C1:D3:AF:93:CF:DB:0A:2C:1D:87:8D:A6:02:75:D4:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SMTRTCH/0/08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SMTRTCH/0/08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:6c:fc:41:0c:3d:fe:59:15:8f:93:3c:d5:59:fb:2d:89:2c:
03:36:3f:e9:66:5e:8d:c3:c4:2d:98:00:dc:d0:db:7d:0c:ff:
01:a9:ee:13:4c:5e:fb:77:34:7f:3c:62:b8:da:01:47:8d:06:
19:04:b8:50:01:a8:ad:20:d5:e4:77:b8:ed:42:7c:11:7e:9b:
03:25:30:96:04:d9:9d:ea:e6:31:6b:dc:8b:df:7d:58:83:b8:
fc:a6:b3:4e:f5:58:3d:f0:88:4c:cf:56:39:ac:46:e5:be:b9:
65:69:c7:9d:7c:b4:b0:97:d3:e4:31:4e:59:ab:97:c6:55:75:
e7:16:04:a2:ff:72:9f:cc:e5:30:ee:56:e8:d4:bc:bf:36:ff:
c7:c6:70:e0:87:62:5d:ea:db:1d:9f:a6:92:0b:6b:8f:a4:e7:
15:40:f3:d0:12:ec:10:a9:7d:63:d5:4f:fa:75:fc:89:3b:37:
39:f3:0d:7a:d4:ac:da:76:b4:b8:b1:41:2c:4a:3c:8f:61:a5:
62:ff:6e:07:de:01:5b:6a:f1:75:01:60:87:83:3c:24:19:b2:
52:ff:e6:4d:8f:96:b5:32:6f:21:e8:79:8a:b5:85:91:29:c2:
79:85:aa:f5:50:f2:c8:2d:06:dc:3c:0b:af:59:29:06:f1:30:
6e:6d:28:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:47:15 2026 by rpki-client