
$ rpki-client -vvvf rpkica.twnic.tw/rpki/TWNCTU/0/46AF3A717A403BC5489BF5532E8CB67721141841.mft
File: 46AF3A717A403BC5489BF5532E8CB67721141841.mft (raw, json)
Hash identifier: W/CBRlBwf3Mr/7uszaTYTlBvYkCsonVlWTetNIE/nLQ=
Subject key identifier: 35:56:2E:08:98:CB:77:7F:74:88:C0:4D:41:ED:55:86:FC:92:6A:6A
Authority key identifier: 46:AF:3A:71:7A:40:3B:C5:48:9B:F5:53:2E:8C:B6:77:21:14:18:41
Certificate issuer: /CN=46AF3A717A403BC5489BF5532E8CB67721141841
Certificate serial: 201CCA79108919DF115957AE78BE643C4C319FC5
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/46AF3A717A403BC5489BF5532E8CB67721141841.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNCTU/0/46AF3A717A403BC5489BF5532E8CB67721141841.mft
Manifest number: B8
Signing time: Thu 24 Sep 2026 15:40:29 +0000
Manifest this update: Thu 24 Sep 2026 15:35:29 +0000
Manifest next update: Fri 25 Sep 2026 18:16:29 +0000
Files and hashes: 1: 46AF3A717A403BC5489BF5532E8CB67721141841.crl (hash: txVQM431a7H3uht8dyktE3KsMQ/rOBhwOoeOgh36dI0=)
2: 3231312e37362e3234302e302f32302d3234203d3e203138313835.roa (hash: I1YE3+FdBKoKjsHXEupZh96Yo/8ldeKJYx6VAVq02Hc=)
3: 323030313a6631383a3a2f33322d3634203d3e2039393136.roa (hash: 4fzQlK7Do1Cwvcdk+e0kfmflXXnhAsZ2G8TwcC4Ef3A=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNCTU/0/46AF3A717A403BC5489BF5532E8CB67721141841.crl
rsync://rpkica.twnic.tw/rpki/TWNCTU/0/46AF3A717A403BC5489BF5532E8CB67721141841.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/46AF3A717A403BC5489BF5532E8CB67721141841.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 18:16:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:1c:ca:79:10:89:19:df:11:59:57:ae:78:be:64:3c:4c:31:9f:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46AF3A717A403BC5489BF5532E8CB67721141841
Validity
Not Before: Sep 24 15:35:29 2026 GMT
Not After : Sep 25 18:16:29 2026 GMT
Subject: CN=35562E0898CB777F7488C04D41ED5586FC926A6A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1e:6b:c4:d2:93:ee:72:f9:74:13:6b:3a:64:
db:4c:15:35:10:60:1f:24:a2:0c:e9:db:5a:30:a5:
70:c6:be:6e:ad:6b:77:8c:97:48:63:12:b6:50:53:
b9:ba:4a:ed:c0:6a:01:45:96:43:2e:99:58:7e:61:
42:e6:69:52:9a:60:d9:4a:8a:14:3d:a5:ce:21:3f:
6e:09:e2:10:3f:e3:52:10:ac:11:33:a3:28:98:ad:
1d:2f:f3:e6:4c:9d:5b:e3:47:c7:be:d4:59:8b:20:
a4:1c:d6:dc:ba:ac:0b:0e:ea:66:c0:a3:8c:e7:6f:
06:0b:45:3b:72:33:d1:7b:56:37:c9:c5:91:c2:38:
64:35:0d:33:4a:90:91:10:70:2c:cd:1e:b3:ef:d9:
11:b2:88:86:62:68:92:7d:01:64:51:3f:9d:86:ad:
aa:70:cd:c8:8b:ec:65:13:13:23:d2:f1:70:49:0b:
2f:de:15:e1:af:96:5f:78:1d:9d:e6:34:57:06:87:
4d:21:99:89:a0:78:34:cf:82:e3:65:a2:a6:21:e1:
fe:3d:00:0c:e0:72:26:88:1c:ad:fc:c1:36:94:d8:
bd:66:17:8b:58:dd:c1:1e:f7:a8:9a:07:06:78:fb:
8f:64:83:a1:16:3d:79:50:40:e6:25:b4:5e:c3:04:
9c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:56:2E:08:98:CB:77:7F:74:88:C0:4D:41:ED:55:86:FC:92:6A:6A
X509v3 Authority Key Identifier:
keyid:46:AF:3A:71:7A:40:3B:C5:48:9B:F5:53:2E:8C:B6:77:21:14:18:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNCTU/0/46AF3A717A403BC5489BF5532E8CB67721141841.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/46AF3A717A403BC5489BF5532E8CB67721141841.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNCTU/0/46AF3A717A403BC5489BF5532E8CB67721141841.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:89:54:c1:02:47:2a:de:b1:0e:79:81:5e:06:d9:2b:ad:42:
fd:0b:fc:b3:25:b7:a1:6c:e3:aa:43:fb:74:74:b3:18:30:13:
4c:83:49:87:a6:6f:2d:d0:a0:b1:bc:27:34:41:1f:cc:58:8b:
44:81:33:7e:c0:f6:df:ad:07:df:51:a0:b3:e6:41:92:a7:69:
37:23:0a:e4:69:31:3f:cd:27:6f:0c:47:72:a8:3d:7a:a3:62:
02:d3:7f:b2:71:d4:e1:6c:37:3d:60:d5:60:9c:23:c5:cb:e3:
b5:34:84:d1:4b:91:a1:da:06:41:d4:22:8b:10:4a:ed:db:db:
fa:bb:4a:8c:20:cf:e5:57:03:8e:66:91:22:7d:78:dd:87:29:
75:f5:27:d7:5d:07:9d:d9:8c:60:7e:3a:82:88:29:a9:61:cd:
80:e7:12:a6:5d:40:fa:21:58:bc:90:71:69:b7:59:55:b5:2a:
c8:86:2e:5a:8b:67:39:de:bc:90:bb:c0:ce:2e:45:99:46:32:
5e:39:d2:8b:91:9d:9c:33:cf:df:9f:f8:c1:07:72:8f:fc:2b:
8c:b4:7f:b5:c5:5d:d7:68:a7:2c:c4:1b:8e:4e:9b:bb:92:fb:
21:87:d3:98:96:e9:6d:43:f2:1f:d3:74:dd:a4:a1:c9:9b:3a:
25:b9:61:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:35:15 2026 by rpki-client