
$ rpki-client -vvvf rpkica.twnic.tw/rpki/APPIER/0/881BEE1F93D58BAEDFAC994B677AAAD03CC59C78.mft
File: 881BEE1F93D58BAEDFAC994B677AAAD03CC59C78.mft (raw, json)
Hash identifier: CzfOy3oHRoYP+YsabmnZ/MXHTdITnBvjHO7vqG8sgAE=
Subject key identifier: 4B:AD:EA:11:3F:AE:85:CA:2E:A1:1C:1F:55:E5:25:67:C1:74:21:28
Authority key identifier: 88:1B:EE:1F:93:D5:8B:AE:DF:AC:99:4B:67:7A:AA:D0:3C:C5:9C:78
Certificate issuer: /CN=881BEE1F93D58BAEDFAC994B677AAAD03CC59C78
Certificate serial: 33F82CDF5EA2538691925FEB471C62CE34B9530F
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/881BEE1F93D58BAEDFAC994B677AAAD03CC59C78.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/APPIER/0/881BEE1F93D58BAEDFAC994B677AAAD03CC59C78.mft
Manifest number: B3
Signing time: Mon 21 Sep 2026 01:49:57 +0000
Manifest this update: Mon 21 Sep 2026 01:44:57 +0000
Manifest next update: Tue 22 Sep 2026 02:27:57 +0000
Files and hashes: 1: 323430333a383634303a3a2f33322d3634203d3e20333936393832.roa (hash: Jm1SzTARAHpPF8XgcCqrOsbDyqd1bedbKKWEeTdyjNA=)
2: 3130332e3132322e31362e302f32322d3234203d3e20333936393832.roa (hash: /OS0f2NWDbFEXqirGqMoLUR1IHwnbDtbJ8lk1eeYlp4=)
3: 881BEE1F93D58BAEDFAC994B677AAAD03CC59C78.crl (hash: Z1zQbdM7Rew7HKjZzVoC1a31Q5GJKxSeqLvzWx6Ru4E=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/APPIER/0/881BEE1F93D58BAEDFAC994B677AAAD03CC59C78.crl
rsync://rpkica.twnic.tw/rpki/APPIER/0/881BEE1F93D58BAEDFAC994B677AAAD03CC59C78.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/881BEE1F93D58BAEDFAC994B677AAAD03CC59C78.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 02:27:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:f8:2c:df:5e:a2:53:86:91:92:5f:eb:47:1c:62:ce:34:b9:53:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=881BEE1F93D58BAEDFAC994B677AAAD03CC59C78
Validity
Not Before: Sep 21 01:44:57 2026 GMT
Not After : Sep 22 02:27:57 2026 GMT
Subject: CN=4BADEA113FAE85CA2EA11C1F55E52567C1742128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:85:30:2e:fa:0a:a5:91:58:4c:81:19:31:f1:
98:2c:25:a4:6e:ab:b7:99:70:db:14:f7:0b:16:39:
dc:65:cf:32:fd:f6:2a:4d:4d:60:df:0a:7d:9b:09:
2e:bd:3d:f3:68:31:73:61:ea:31:9f:ac:8e:c4:3f:
10:12:d3:22:98:78:24:d4:b3:1c:0a:d3:09:c3:98:
5e:0a:59:69:5a:09:e2:dd:8c:71:40:1b:80:97:b7:
10:e5:b8:b4:d7:62:07:07:3e:38:91:0b:f4:f6:e5:
66:d9:34:79:c6:44:76:8c:a6:91:96:62:83:18:2d:
a8:6f:d6:5d:f1:54:2c:58:61:bc:a1:22:0d:e9:c7:
b9:77:0c:09:be:54:3b:74:b8:2d:63:99:eb:72:66:
6e:a9:91:34:d7:ed:0d:e2:82:e4:3f:81:fa:c2:22:
4e:d7:e1:f7:0c:35:6f:1b:70:13:a3:26:98:d1:58:
e0:91:e0:10:ff:88:3d:86:e3:52:52:b6:f6:8d:3a:
92:39:15:40:a3:62:44:34:49:1a:71:bb:76:50:b9:
57:aa:56:b4:80:a3:10:c3:b7:60:74:6c:61:42:89:
a8:0a:7c:df:27:b5:cb:43:6b:0f:6d:1d:bd:b1:3c:
11:bf:32:cc:2d:f9:41:ac:00:30:2a:89:49:cb:a3:
12:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:AD:EA:11:3F:AE:85:CA:2E:A1:1C:1F:55:E5:25:67:C1:74:21:28
X509v3 Authority Key Identifier:
keyid:88:1B:EE:1F:93:D5:8B:AE:DF:AC:99:4B:67:7A:AA:D0:3C:C5:9C:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/APPIER/0/881BEE1F93D58BAEDFAC994B677AAAD03CC59C78.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/881BEE1F93D58BAEDFAC994B677AAAD03CC59C78.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/APPIER/0/881BEE1F93D58BAEDFAC994B677AAAD03CC59C78.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:9e:1b:8d:a9:4d:d4:b7:05:1d:60:58:ce:94:df:93:e6:2d:
71:16:19:1c:b2:59:b7:46:4b:b5:9c:4b:80:98:e3:4d:db:6b:
62:2d:8d:12:78:78:e3:00:82:fe:4f:84:92:f4:7d:4f:1a:75:
f0:76:87:4c:0d:0d:8b:4d:67:5e:88:2f:ce:12:b7:a7:40:39:
56:7a:c1:0a:fb:50:ec:2b:6b:d0:91:a4:37:c6:7e:74:0a:34:
18:39:9a:3d:49:4b:2d:d3:f5:78:5f:13:8c:8a:de:ac:a2:5a:
a9:95:e7:d7:c5:72:92:13:bc:e5:ea:53:98:21:6f:ce:59:a4:
1f:6b:44:59:67:b9:c2:2f:51:e2:4d:c7:67:c3:19:92:30:19:
01:fb:79:0f:9e:33:f5:c0:50:fd:23:0a:f6:58:e2:46:1b:9e:
1b:89:20:24:a2:97:89:f5:c5:24:1d:af:2b:27:bb:c7:cc:db:
8e:0d:a9:ca:d6:9b:a0:5f:b9:d4:78:15:4c:be:38:d2:1e:83:
79:0f:b1:2b:1b:fb:9e:35:48:aa:53:69:a4:2a:f2:72:0d:3e:
9e:eb:65:a4:eb:ca:9f:19:dc:6b:65:c9:5c:30:43:0f:b3:3b:
5c:a2:2e:66:3e:b9:bf:45:67:5a:1f:ba:02:87:8f:01:76:d1:
ff:a7:d0:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:18:05 2026 by rpki-client