
$ rpki-client -vvvf rpkica.twnic.tw/rpki/SYVC/0/3F3E6E8DF4F46DDFE048F71C5AEC8616FDD7D737.mft
File: 3F3E6E8DF4F46DDFE048F71C5AEC8616FDD7D737.mft (raw, json)
Hash identifier: 04gM/2sDSXNqSHMXbo9tBeax18OyQW8xdHoRDxewIVo=
Subject key identifier: D5:E6:01:A0:9C:92:00:1C:C6:53:42:59:F0:FF:67:39:E5:4E:DE:03
Authority key identifier: 3F:3E:6E:8D:F4:F4:6D:DF:E0:48:F7:1C:5A:EC:86:16:FD:D7:D7:37
Certificate issuer: /CN=3F3E6E8DF4F46DDFE048F71C5AEC8616FDD7D737
Certificate serial: 01F927B1EE01D03802FB62155F73FB5878B797D4
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F3E6E8DF4F46DDFE048F71C5AEC8616FDD7D737.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SYVC/0/3F3E6E8DF4F46DDFE048F71C5AEC8616FDD7D737.mft
Manifest number: B5
Signing time: Wed 23 Sep 2026 17:16:50 +0000
Manifest this update: Wed 23 Sep 2026 17:11:50 +0000
Manifest next update: Thu 24 Sep 2026 17:52:50 +0000
Files and hashes: 1: 3130332e3138332e3139382e302f32332d3234203d3e2037343833.roa (hash: QxmoSLkHm5UR5jJGq6GVgmM8tmoMrY7IxvQLIUDlgG8=)
2: 3F3E6E8DF4F46DDFE048F71C5AEC8616FDD7D737.crl (hash: 5ziG0H1XSiuo0ndtKIHHlas12l6DipMZ3Dqoz5w9MKc=)
3: 323430303a363365303a3a2f33322d3438203d3e2037343833.roa (hash: rHuxaTKbxFOG3QVLxlmDpVGC4VQ2hgu+8e9CRQbtD+o=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/SYVC/0/3F3E6E8DF4F46DDFE048F71C5AEC8616FDD7D737.crl
rsync://rpkica.twnic.tw/rpki/SYVC/0/3F3E6E8DF4F46DDFE048F71C5AEC8616FDD7D737.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F3E6E8DF4F46DDFE048F71C5AEC8616FDD7D737.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 17:52:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:f9:27:b1:ee:01:d0:38:02:fb:62:15:5f:73:fb:58:78:b7:97:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3F3E6E8DF4F46DDFE048F71C5AEC8616FDD7D737
Validity
Not Before: Sep 23 17:11:50 2026 GMT
Not After : Sep 24 17:52:50 2026 GMT
Subject: CN=D5E601A09C92001CC6534259F0FF6739E54EDE03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:9d:25:9f:12:8c:c1:02:e4:c4:2b:19:b7:b9:
0a:19:81:93:f1:83:aa:2d:df:c8:2e:6d:0f:33:97:
25:d1:8d:ea:b1:2a:1d:37:71:1e:47:db:0e:d6:16:
ef:c3:d6:c4:8d:77:db:4e:82:00:21:c7:dd:e3:1d:
dd:19:53:0d:a6:f8:d0:e1:eb:86:1f:bc:56:d6:5a:
78:31:f7:8a:28:ab:4b:f0:20:64:bf:6e:fb:5e:9a:
67:38:a4:66:49:c5:ae:4c:f5:52:df:3b:5c:83:10:
e8:fa:8b:52:31:b0:4e:af:b4:40:e7:8a:4d:35:4c:
9f:35:6b:ab:8b:b5:8d:6d:65:06:a7:44:45:57:cd:
6d:49:e2:9c:c9:3b:1c:09:23:2a:51:06:b9:de:a7:
93:a6:95:3e:f7:b3:22:36:06:aa:09:8f:d3:b8:71:
f7:80:0f:6d:8a:22:dd:a4:02:5e:1a:d5:3c:d8:52:
75:d0:3f:11:b8:58:5d:e2:f6:74:e9:23:c7:71:d8:
bd:26:af:7e:19:fd:65:f4:4c:a2:38:1f:1d:9a:8f:
26:49:4d:db:7c:99:6f:25:61:49:03:30:5e:4b:a4:
6d:fd:9d:71:7f:04:60:cc:39:b5:c9:d6:15:5c:5e:
fc:da:93:3b:1f:95:2e:b5:08:28:94:50:0d:b9:e1:
93:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E6:01:A0:9C:92:00:1C:C6:53:42:59:F0:FF:67:39:E5:4E:DE:03
X509v3 Authority Key Identifier:
keyid:3F:3E:6E:8D:F4:F4:6D:DF:E0:48:F7:1C:5A:EC:86:16:FD:D7:D7:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SYVC/0/3F3E6E8DF4F46DDFE048F71C5AEC8616FDD7D737.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F3E6E8DF4F46DDFE048F71C5AEC8616FDD7D737.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SYVC/0/3F3E6E8DF4F46DDFE048F71C5AEC8616FDD7D737.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:c7:c0:8f:72:2f:e8:78:d8:97:fe:76:73:a0:91:39:89:af:
05:e2:4f:fc:2b:bd:47:41:e0:2f:a0:62:0f:93:76:16:5d:bc:
08:78:e3:e8:c1:06:cb:23:e2:8e:72:76:7b:07:9e:e0:59:42:
aa:a2:10:93:c9:72:1f:6b:6d:9e:4c:79:c4:e8:db:8e:f6:e1:
7a:57:70:aa:de:43:e1:6e:b0:b0:ca:01:e5:f2:c1:2d:cb:61:
86:e2:81:20:4b:c8:03:2a:60:24:70:53:1d:0c:7f:e0:ea:50:
ee:91:0e:8b:0e:04:b0:db:e8:30:09:84:b3:7a:43:c9:54:f3:
16:4b:99:1e:51:ac:e3:66:85:b2:7b:3c:df:ce:5c:23:91:b2:
1f:c1:d1:24:55:19:53:6b:22:b5:39:da:00:84:aa:a7:73:15:
03:24:5d:f5:7a:1e:2a:38:76:b0:f4:2b:b5:07:5e:2f:89:1a:
f8:20:27:cc:39:79:a9:69:6e:55:a6:48:ea:d6:5d:40:27:ed:
58:c3:d7:73:13:6d:6d:45:1f:46:f3:1f:4d:90:6d:5d:1c:b1:
8f:07:48:48:15:55:36:9c:c9:b0:aa:20:6b:59:68:ec:5d:1d:
ea:22:7a:34:e9:c7:5e:24:04:44:83:75:c0:81:43:55:45:08:
b5:73:93:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:24:06 2026 by rpki-client