
$ rpki-client -vvf rpkica.twnic.tw/rpki/SONET/0/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.mft
File: 3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.mft (raw, json)
Hash identifier: TGReM4I5LFFP4B2EwIZPTk/z/7Cks+pJGUjolNvUlLc=
Subject key identifier: 9B:49:62:0C:5A:E3:FC:76:BC:89:21:FB:A8:6B:25:EA:DA:60:12:AD
Authority key identifier: 3F:6D:33:C9:B3:9C:FC:95:0A:2D:3D:BC:78:13:1E:1A:AF:8C:C8:EF
Certificate issuer: /CN=3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF
Certificate serial: 195DCFE041E29296380653909564E7755194AEF6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SONET/0/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.mft
Manifest number: 78
Signing time: Thu 23 Jul 2026 15:28:05 +0000
Manifest this update: Thu 23 Jul 2026 15:23:05 +0000
Manifest next update: Fri 24 Jul 2026 16:06:05 +0000
Files and hashes: 1: 32372e3130352e302e302f31362d3234203d3e203138313832.roa (hash: LmAW7PeQcegNvt2M9HNQbyVlYetXrEvSkZVhVCt+ooY=)
2: 36312e35362e3132382e302f31392d3234203d3e203138313832.roa (hash: Wz4YbIAlDY3Rql9HeEh2BYj6+M1ftVPyXgPvQ2mi8EE=)
3: 36312e36342e36342e302f31382d3234203d3e203138313832.roa (hash: ZufTl96QJSTGjjHHnlV902JYYFFNTIDFxh070LDkULs=)
4: 33392e312e31362e302f32302d3234203d3e2039393232.roa (hash: o5tck8QLFY02tn9jNvUElQeuTpHy+ammIuF39TN/Cn4=)
5: 32372e3130352e38322e302f32342d3234203d3e203332373837.roa (hash: 1sg7Wk2e/ZdonH5PhiuzAv6jLByDCAyoVpPFtRuPk6A=)
6: 32372e3130352e3230362e302f32342d3234203d3e203435343734.roa (hash: 9Cuads8Xj/H3SUpgMMXmElqrysGMLgLQcPn8+WPxZaA=)
7: 36312e36322e302e302f31362d3234203d3e203138313832.roa (hash: ifIFQrYUhM297jse0mQ1w+HqkUSGHCWju3weIN7aUQs=)
8: 33392e312e39362e302f32302d3234203d3e203138343139.roa (hash: W4A9R2ruP8BpTxaCGm9udnAE3yQmyw/+pOzjhpIfz0Y=)
9: 33392e312e34372e302f32342d3234203d3e2039393232.roa (hash: Drtv5JpDCKBUTLlwm2QdYijdfjd//4f1UxcFzmvf4Yg=)
10: 33392e312e34302e302f32322d3234203d3e2039393232.roa (hash: z5CRvkmrV5KJFcdljtPbVmXZST0Ame/3ck3rEFg8aGM=)
11: 33392e312e33322e302f32312d3234203d3e2039393232.roa (hash: VNQcRXeOE/j/rdkFQwcA1LclvGgGVBSj6YxVH+Y+B5E=)
12: 33392e312e34352e302f32342d3234203d3e2039393232.roa (hash: ryqYKYb9ZEnNDprKt9KNFJe6hMX8qggWXnAtJIFQzic=)
13: 33392e312e34382e302f32302d3234203d3e2039393232.roa (hash: TTEoeJ1Nt73LCduyQM6y6wzx3+jdUSQumP9bhes2+UY=)
14: 36312e36342e3132382e302f31372d3234203d3e203138313832.roa (hash: AP04YgE4U4X0DbCKpFBdjCNZlauxNQuycSDnxfq2LBo=)
15: 33392e312e34362e302f32342d3234203d3e2039393232.roa (hash: onwq6khytNt8j9JeiESYQPMZkrctbzkf2UmQhqWpjYw=)
16: 33392e312e302e302f31362d3234203d3e203138313832.roa (hash: CffvCFfDEQybZwp62g5aXFZex+pvcH1gSZG/H/2FRO0=)
17: 33392e312e34342e302f32342d3234203d3e2039393232.roa (hash: dh03y3MeArVsb+oESUBRNDxrsrn5jbUmgM4ZXBS0tXU=)
18: 3231392e38352e302e302f31362d3234203d3e203138313832.roa (hash: TkTwJY6tgXdxY0w+yf0JfiJDrdGZLKSEjlzpI3ieJUU=)
19: 3231392e38342e302e302f31362d3234203d3e203138313832.roa (hash: 8fiqTkiu9MOMh1suF5MiCOJuDwIsVQ34W7YS4b6Ylb8=)
20: 33392e312e302e302f32302d3234203d3e2039393232.roa (hash: XsN+8OXikSiKwT554Z/8JtJMRKlDNFZ1zHxkg1sQLrI=)
21: 33392e312e36342e302f32302d3234203d3e2039393232.roa (hash: juMnZBysyILQxgKPuDDStLHZSQ2rmujkQS4MrnwwJ/s=)
22: 323430343a38303a3a2f32382d3438203d3e203138313832.roa (hash: gD1x4xXT4Z6eEJ+bwB2oDJNQCUbNjWpPyKuQClgUoNQ=)
23: 3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.crl (hash: qYepsW6C46WIWB45MLGcqJ+zD3pBXLfGb79WNw5KOwA=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/SONET/0/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.crl
rsync://rpkica.twnic.tw/rpki/SONET/0/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 13:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:5d:cf:e0:41:e2:92:96:38:06:53:90:95:64:e7:75:51:94:ae:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF
Validity
Not Before: Jul 23 15:23:05 2026 GMT
Not After : Jul 24 16:06:05 2026 GMT
Subject: CN=9B49620C5AE3FC76BC8921FBA86B25EADA6012AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:06:c3:88:30:72:6e:18:1f:52:9f:d3:f4:5a:
49:2e:e8:82:95:e2:25:13:61:ea:4f:a3:ae:0a:63:
10:f4:0f:69:3b:e2:0f:73:eb:5e:32:75:a8:0b:48:
19:62:16:60:a8:d9:b9:01:8f:25:eb:06:e5:cf:2b:
fd:02:a5:95:3e:63:7c:ba:36:79:40:86:b7:d4:eb:
ff:21:10:8d:b4:af:61:f9:05:01:1d:74:cb:a9:a8:
f0:ab:d2:fe:1f:2b:ce:55:28:d5:11:2d:93:a3:f6:
1a:f4:fb:44:57:1f:6b:b9:57:f6:dc:e6:04:6d:e2:
0e:ab:dd:3a:f0:cd:5f:71:a2:c3:24:c6:64:73:e2:
99:2d:89:6f:36:2a:1f:a6:d1:14:d5:7e:40:55:16:
91:fc:2a:19:d6:3f:58:57:11:65:b5:8d:01:44:05:
52:a9:93:11:9b:c0:b0:24:17:6c:41:3b:26:78:3b:
d8:9e:39:e5:0c:b3:05:12:c7:83:74:a3:8f:6a:88:
c1:9a:65:a2:f1:28:0c:6d:c0:91:b0:e3:2d:e3:1f:
6e:0b:3f:cd:bf:0b:ba:53:ec:81:6b:c6:a0:d6:d5:
10:b4:5b:c9:8c:ff:52:8d:ce:0a:a2:89:c1:33:50:
4b:ec:0f:50:8c:6e:de:3a:9e:f6:6a:b2:5b:3b:7b:
fd:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:49:62:0C:5A:E3:FC:76:BC:89:21:FB:A8:6B:25:EA:DA:60:12:AD
X509v3 Authority Key Identifier:
keyid:3F:6D:33:C9:B3:9C:FC:95:0A:2D:3D:BC:78:13:1E:1A:AF:8C:C8:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SONET/0/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SONET/0/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:11:59:48:e8:90:f5:b6:2c:29:0b:30:de:58:83:33:07:3b:
2f:c2:c8:f9:54:07:e4:d5:98:a0:d1:ba:be:95:00:38:15:3c:
d6:77:40:ea:98:d6:e3:8f:03:7b:f4:58:cb:74:4a:5c:46:08:
8f:78:7f:2b:12:ce:23:a5:4e:40:ac:27:87:fb:79:f1:26:87:
3c:1d:1f:23:bb:ce:ca:db:51:07:24:9a:2c:9a:25:e8:55:34:
60:40:e0:44:49:52:9d:49:6e:98:4b:c6:ee:8d:7b:fc:e4:98:
87:cd:fc:ac:5e:a4:a9:6c:36:02:ae:58:be:07:3f:95:b2:e9:
49:d1:83:0f:81:fa:77:2b:00:08:9a:c2:f6:52:70:6d:94:4e:
cd:62:97:dd:ef:f2:70:cc:0a:e4:03:12:34:0b:6e:84:7e:65:
3a:42:b4:c7:b2:77:f3:35:ae:5c:4c:b2:a5:83:90:4e:9c:9a:
8b:33:57:24:4b:5b:09:6b:8f:56:4a:69:68:0d:fc:52:5e:6a:
08:08:87:2a:b7:a7:2d:55:ea:3c:df:e7:a1:e5:48:61:c3:dd:
cd:b2:61:e8:59:d8:68:3a:1b:f1:1c:5f:b0:1d:9e:18:3a:73:
c3:2c:0f:05:44:f7:11:2e:4e:05:0c:e5:0f:9e:b9:81:cb:36:
fc:45:7f:f7
-----BEGIN CERTIFICATE-----
MIIE4jCCA8qgAwIBAgIUGV3P4EHikpY4BlOQlWTndVGUrvYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0Y2RDMzQzlCMzlDRkM5NTBBMkQzREJDNzgxMzFFMUFB
RjhDQzhFRjAeFw0yNjA3MjMxNTIzMDVaFw0yNjA3MjQxNjA2MDVaMDMxMTAvBgNV
BAMTKDlCNDk2MjBDNUFFM0ZDNzZCQzg5MjFGQkE4NkIyNUVBREE2MDEyQUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqBsOIMHJuGB9Sn9P0Wkku6IKV
4iUTYepPo64KYxD0D2k74g9z614ydagLSBliFmCo2bkBjyXrBuXPK/0CpZU+Y3y6
NnlAhrfU6/8hEI20r2H5BQEddMupqPCr0v4fK85VKNURLZOj9hr0+0RXH2u5V/bc
5gRt4g6r3TrwzV9xosMkxmRz4pktiW82Kh+m0RTVfkBVFpH8KhnWP1hXEWW1jQFE
BVKpkxGbwLAkF2xBOyZ4O9ieOeUMswUSx4N0o49qiMGaZaLxKAxtwJGw4y3jH24L
P82/C7pT7IFrxqDW1RC0W8mM/1KNzgqiicEzUEvsD1CMbt46nvZqsls7e/0VAgMB
AAGjggHsMIIB6DAdBgNVHQ4EFgQUm0liDFrj/Ha8iSH7qGsl6tpgEq0wHwYDVR0j
BBgwFoAUP20zybOc/JUKLT28eBMeGq+MyO8wDgYDVR0PAQH/BAQDAgeAMGIGA1Ud
HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU09ORVQv
MC8zRjZEMzNDOUIzOUNGQzk1MEEyRDNEQkM3ODEzMUUxQUFGOENDOEVGLmNybDBv
BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS8xLzNGNkQzM0M5QjM5Q0ZDOTUwQTJEM0RCQzc4MTMx
RTFBQUY4Q0M4RUYuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5
bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9TT05FVC8wLzNGNkQzM0M5QjM5Q0ZD
OTUwQTJEM0RCQzc4MTMxRTFBQUY4Q0M4RUYubWZ0MBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAQEVlI6JD1tiwp
CzDeWIMzBzsvwsj5VAfk1Zig0bq+lQA4FTzWd0DqmNbjjwN79FjLdEpcRgiPeH8r
Es4jpU5ArCeH+3nxJoc8HR8ju87K21EHJJosmiXoVTRgQOBESVKdSW6YS8bujXv8
5JiHzfysXqSpbDYCrli+Bz+VsulJ0YMPgfp3KwAImsL2UnBtlE7NYpfd7/JwzArk
AxI0C26EfmU6QrTHsnfzNa5cTLKlg5BOnJqLM1ckS1sJa49WSmloDfxSXmoICIcq
t6ctVeo83+eh5Uhhw93NsmHoWdhoOhvxHF+wHZ4YOnPDLA8FRPcRLk4FDOUPnrmB
yzb8RX/3
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:02:17 2026 by rpki-client