
$ rpki-client -vvvf rpkica.twnic.tw/rpki/TCSKY/1/3E6938BA00070CF3245F2491B7C88740A397A2D6.mft
File: 3E6938BA00070CF3245F2491B7C88740A397A2D6.mft (raw, json)
Hash identifier: eEFAy8X8wdkWAHRUGmdlwhaUWcZypZ0tegHhcXJsCck=
Subject key identifier: 0F:66:71:64:39:3B:DC:39:DB:8E:E7:E0:EF:80:01:3C:63:C1:09:CB
Authority key identifier: 3E:69:38:BA:00:07:0C:F3:24:5F:24:91:B7:C8:87:40:A3:97:A2:D6
Certificate issuer: /CN=3E6938BA00070CF3245F2491B7C88740A397A2D6
Certificate serial: 629CEDA2ED8E8427AD1535F89411E0457FF36777
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/3E6938BA00070CF3245F2491B7C88740A397A2D6.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TCSKY/1/3E6938BA00070CF3245F2491B7C88740A397A2D6.mft
Manifest number: B7
Signing time: Wed 23 Sep 2026 23:54:15 +0000
Manifest this update: Wed 23 Sep 2026 23:49:15 +0000
Manifest next update: Fri 25 Sep 2026 03:15:15 +0000
Files and hashes: 1: 3E6938BA00070CF3245F2491B7C88740A397A2D6.crl (hash: A68mbDIemaBrHUARCHc67pdZSfvS7h9bd6Ff+g16teY=)
2: 3136302e3139312e3230322e302f32332d3234203d3e203633393038.roa (hash: VL6yJyugn4Z1qBRj+96zRBJlpWCdeFWKLM0ISWuy9EE=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TCSKY/1/3E6938BA00070CF3245F2491B7C88740A397A2D6.crl
rsync://rpkica.twnic.tw/rpki/TCSKY/1/3E6938BA00070CF3245F2491B7C88740A397A2D6.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/3E6938BA00070CF3245F2491B7C88740A397A2D6.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 02:24:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:9c:ed:a2:ed:8e:84:27:ad:15:35:f8:94:11:e0:45:7f:f3:67:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E6938BA00070CF3245F2491B7C88740A397A2D6
Validity
Not Before: Sep 23 23:49:15 2026 GMT
Not After : Sep 25 03:15:15 2026 GMT
Subject: CN=0F667164393BDC39DB8EE7E0EF80013C63C109CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:77:de:3b:7e:8d:f6:1a:50:d9:8e:ad:e5:58:
23:03:5b:a0:82:cf:c4:55:ab:14:7f:f3:b9:f2:17:
38:ad:51:36:b1:81:f1:be:29:bb:d4:1f:72:c9:95:
94:cd:d8:e7:72:a5:c2:02:3b:0d:1e:73:13:10:a0:
fc:b3:e8:84:01:a4:30:ac:9d:13:8e:1d:ac:01:17:
30:12:95:a7:36:ec:b7:85:d7:bf:0a:c6:42:34:03:
5f:20:9a:aa:9a:91:8e:d1:66:52:6c:fb:8e:10:4c:
76:44:d9:51:73:76:16:f5:86:b0:f2:2e:a8:52:b3:
ae:f1:dd:e5:85:4d:db:14:16:5f:dc:5f:cf:a1:36:
77:c8:ef:fa:07:55:47:91:0e:61:7e:53:90:9a:45:
5a:b1:95:7c:7f:24:5a:1d:7b:f3:6f:f5:f9:b3:5e:
b9:f5:66:05:89:97:f9:56:d2:12:96:24:76:97:82:
6c:bb:68:dc:fd:79:eb:0b:0e:c4:96:f0:39:6d:46:
b5:64:79:f5:2b:65:1e:e8:5f:db:20:13:b0:42:c8:
d4:e7:58:27:01:9d:6d:75:f1:ce:f4:e7:10:69:ed:
40:26:5f:d7:af:ae:ae:bd:32:a5:46:5d:77:fb:90:
8c:1e:93:78:c2:1f:8f:84:aa:2e:54:55:f5:1c:45:
f5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:66:71:64:39:3B:DC:39:DB:8E:E7:E0:EF:80:01:3C:63:C1:09:CB
X509v3 Authority Key Identifier:
keyid:3E:69:38:BA:00:07:0C:F3:24:5F:24:91:B7:C8:87:40:A3:97:A2:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TCSKY/1/3E6938BA00070CF3245F2491B7C88740A397A2D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/3E6938BA00070CF3245F2491B7C88740A397A2D6.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TCSKY/1/3E6938BA00070CF3245F2491B7C88740A397A2D6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:23:a7:17:80:ce:1d:71:d3:59:d6:15:48:c3:e9:58:41:76:
cb:3c:d0:5d:99:fc:51:2d:bd:46:23:86:13:8d:b4:60:9b:85:
9e:34:bc:ad:bc:08:d5:84:29:42:6f:c8:ab:5f:46:5b:8c:48:
43:e0:37:ad:08:c6:00:ca:ce:aa:72:8c:0e:6c:b7:25:70:95:
f2:4b:00:1e:a4:e4:98:e8:c6:02:32:d2:d1:dd:da:a1:d8:2e:
2a:89:ca:71:78:27:7f:68:8f:40:ed:b8:83:14:be:47:bf:bc:
f4:d2:2c:4c:a5:3e:d5:7d:36:bd:d4:cf:fb:b3:e1:3c:1f:cd:
98:f1:d0:30:f8:63:92:5a:7b:de:14:7e:a9:c0:55:53:77:de:
4c:79:c2:3d:e5:cb:a5:06:21:76:b1:8d:43:67:98:2a:1c:54:
62:dd:d4:8d:b8:7b:c3:3a:c9:ee:61:8a:60:7a:1f:e1:1d:b7:
92:86:e3:1f:9e:2e:7f:bc:54:18:31:59:b5:65:1b:2a:c4:16:
4d:8e:da:97:c2:71:6b:4f:c4:8a:19:9a:fd:5e:60:ca:5f:75:
27:bf:03:42:2c:88:17:f0:6b:df:33:7d:5f:05:08:6e:37:1b:
77:44:d7:91:c7:64:be:57:ed:8c:fa:cb:e3:a7:dd:83:90:11:
0d:7c:af:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:27:05 2026 by rpki-client