
$ rpki-client -vvvf rpkica.twnic.tw/rpki/CCP1138480/0/46B3BED406C1C960F5CFACC01A7EE79C741FB3A3.mft
File: 46B3BED406C1C960F5CFACC01A7EE79C741FB3A3.mft (raw, json)
Hash identifier: lk6wEWGWZc44UkD3rzupwtWzUpZo2XYchOP5MeuwNOQ=
Subject key identifier: 1D:9D:6B:13:3C:81:38:86:03:F7:17:51:6C:B1:14:DE:C8:12:F7:AB
Authority key identifier: 46:B3:BE:D4:06:C1:C9:60:F5:CF:AC:C0:1A:7E:E7:9C:74:1F:B3:A3
Certificate issuer: /CN=46B3BED406C1C960F5CFACC01A7EE79C741FB3A3
Certificate serial: 72896C7FC08A920DE119DAA7AC3B8489589EE466
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/46B3BED406C1C960F5CFACC01A7EE79C741FB3A3.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CCP1138480/0/46B3BED406C1C960F5CFACC01A7EE79C741FB3A3.mft
Manifest number: F6
Signing time: Tue 10 Nov 2026 13:03:52 +0000
Manifest this update: Tue 10 Nov 2026 12:58:52 +0000
Manifest next update: Wed 11 Nov 2026 16:31:52 +0000
Files and hashes: 1: 46B3BED406C1C960F5CFACC01A7EE79C741FB3A3.crl (hash: HJaGstCAj4CraI25C8REhS3CK6L804wFbwd7A13j0ns=)
2: 323430303a353061303a3a2f33322d3634203d3e203633383933.roa (hash: TnjJryb+Qul3lN6BZH0PnHfwQC0HukNIzPm52sh0EhY=)
3: 3130332e3138302e31362e302f32332d3234203d3e203633383933.roa (hash: 5tICSwbzk1GhyxpTua1hBI7Pmc3s/aXZo1jpw+tiEn0=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/CCP1138480/0/46B3BED406C1C960F5CFACC01A7EE79C741FB3A3.crl
rsync://rpkica.twnic.tw/rpki/CCP1138480/0/46B3BED406C1C960F5CFACC01A7EE79C741FB3A3.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/46B3BED406C1C960F5CFACC01A7EE79C741FB3A3.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 11 Nov 2026 02:10:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:89:6c:7f:c0:8a:92:0d:e1:19:da:a7:ac:3b:84:89:58:9e:e4:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46B3BED406C1C960F5CFACC01A7EE79C741FB3A3
Validity
Not Before: Nov 10 12:58:52 2026 GMT
Not After : Nov 11 16:31:52 2026 GMT
Subject: CN=1D9D6B133C81388603F717516CB114DEC812F7AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:6b:b1:1d:e9:e8:6f:a1:a1:ca:f5:65:c0:f9:
75:93:23:8a:16:eb:1f:39:f2:84:72:1d:86:df:40:
fe:92:f1:f3:57:5f:3d:00:a6:4c:25:cf:6b:b0:1c:
e5:31:52:04:ac:a6:8e:49:18:8a:bb:76:41:47:82:
4e:82:9e:78:bc:b4:d7:81:9d:e0:2e:b4:a8:7b:55:
0b:7c:05:6d:e1:39:76:8c:e4:37:e0:49:74:b6:7a:
12:c0:62:9d:9e:7f:25:04:e5:d0:b6:8e:b7:f2:38:
df:6d:57:6c:a5:04:02:14:ae:fa:bc:c0:91:cb:01:
08:81:43:52:2e:53:41:24:c6:65:99:be:a7:23:cf:
13:bc:00:f0:dd:6d:33:8f:1a:9e:1c:31:38:b9:b3:
a0:66:92:84:8e:48:75:5d:4c:46:1e:53:b1:61:07:
7c:2e:38:7b:47:53:86:9c:00:a7:39:9d:71:89:de:
84:a7:04:bb:b6:d1:b4:4b:8b:1c:6f:25:78:67:04:
3d:2b:24:13:57:42:90:41:7a:b4:e6:9c:69:f1:91:
41:3c:ce:c2:bb:31:9b:87:79:85:f2:33:5d:e1:a2:
f0:e3:f2:d2:a6:be:25:24:f6:10:72:96:c5:d8:90:
77:a9:fd:38:98:2c:fa:a0:37:b4:bb:96:08:9e:71:
42:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:9D:6B:13:3C:81:38:86:03:F7:17:51:6C:B1:14:DE:C8:12:F7:AB
X509v3 Authority Key Identifier:
keyid:46:B3:BE:D4:06:C1:C9:60:F5:CF:AC:C0:1A:7E:E7:9C:74:1F:B3:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CCP1138480/0/46B3BED406C1C960F5CFACC01A7EE79C741FB3A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/46B3BED406C1C960F5CFACC01A7EE79C741FB3A3.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CCP1138480/0/46B3BED406C1C960F5CFACC01A7EE79C741FB3A3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:38:cf:40:c1:09:a1:d5:59:d6:bc:df:7a:0f:9e:9d:e1:e0:
7a:fa:3a:45:cb:39:dd:19:3f:66:a0:9c:2b:f3:f1:7e:fb:ec:
24:8d:4b:e5:e7:78:51:43:56:6c:52:3c:e8:7d:63:6f:9a:7d:
fa:8f:49:33:e8:3d:6f:5c:fa:08:1e:23:d8:bd:30:64:08:0f:
aa:2c:c9:be:13:ab:92:f1:2c:d3:a6:0e:1d:6e:57:20:66:31:
03:f3:05:bf:7d:eb:6c:4b:8a:01:91:61:1a:81:28:11:0c:01:
94:3c:ca:7f:e5:3f:99:93:dc:70:89:7a:d0:1c:3a:79:b0:63:
fb:38:f4:a8:f7:36:7b:2d:a4:86:01:c1:be:1c:19:e2:99:2b:
48:28:af:5e:b8:76:80:d1:64:db:55:f2:c2:8d:d1:e6:f8:81:
9e:4f:77:3c:75:a2:67:ad:85:41:ed:5b:64:24:3f:ab:89:3b:
8b:12:3c:d5:54:f6:c4:75:72:74:3b:83:8f:a4:0b:ad:44:f8:
4a:54:a1:ff:4b:36:66:cc:39:bc:ba:50:52:47:e4:74:ec:d7:
2e:52:a4:ee:e8:4a:35:8d:34:b1:29:9e:a6:15:b6:ef:1a:61:
9c:96:cb:e7:87:0f:6f:97:bc:94:eb:c2:dc:de:08:9c:0c:1d:
9e:1d:5c:ba
-----BEGIN CERTIFICATE-----
MIIE7DCCA9SgAwIBAgIUcolsf8CKkg3hGdqnrDuEiVie5GYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDZCM0JFRDQwNkMxQzk2MEY1Q0ZBQ0MwMUE3RUU3OUM3
NDFGQjNBMzAeFw0yNjExMTAxMjU4NTJaFw0yNjExMTExNjMxNTJaMDMxMTAvBgNV
BAMTKDFEOUQ2QjEzM0M4MTM4ODYwM0Y3MTc1MTZDQjExNERFQzgxMkY3QUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJa7Ed6ehvoaHK9WXA+XWTI4oW
6x858oRyHYbfQP6S8fNXXz0Apkwlz2uwHOUxUgSspo5JGIq7dkFHgk6Cnni8tNeB
neAutKh7VQt8BW3hOXaM5DfgSXS2ehLAYp2efyUE5dC2jrfyON9tV2ylBAIUrvq8
wJHLAQiBQ1IuU0EkxmWZvqcjzxO8APDdbTOPGp4cMTi5s6BmkoSOSHVdTEYeU7Fh
B3wuOHtHU4acAKc5nXGJ3oSnBLu20bRLixxvJXhnBD0rJBNXQpBBerTmnGnxkUE8
zsK7MZuHeYXyM13hovDj8tKmviUk9hBylsXYkHep/TiYLPqgN7S7lgiecUKdAgMB
AAGjggH2MIIB8jAdBgNVHQ4EFgQUHZ1rEzyBOIYD9xdRbLEU3sgS96swHwYDVR0j
BBgwFoAURrO+1AbByWD1z6zAGn7nnHQfs6MwDgYDVR0PAQH/BAQDAgeAMGcGA1Ud
HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0NQMTEz
ODQ4MC8wLzQ2QjNCRUQ0MDZDMUM5NjBGNUNGQUNDMDFBN0VFNzlDNzQxRkIzQTMu
Y3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBLzEvNDZCM0JFRDQwNkMxQzk2MEY1Q0ZBQ0Mw
MUE3RUU3OUM3NDFGQjNBMy5jZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzAL
hlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0NDUDExMzg0ODAvMC80NkIz
QkVENDA2QzFDOTYwRjVDRkFDQzAxQTdFRTc5Qzc0MUZCM0EzLm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
gjjPQMEJodVZ1rzfeg+eneHgevo6Rcs53Rk/ZqCcK/PxfvvsJI1L5ed4UUNWbFI8
6H1jb5p9+o9JM+g9b1z6CB4j2L0wZAgPqizJvhOrkvEs06YOHW5XIGYxA/MFv33r
bEuKAZFhGoEoEQwBlDzKf+U/mZPccIl60Bw6ebBj+zj0qPc2ey2khgHBvhwZ4pkr
SCivXrh2gNFk21Xywo3R5viBnk93PHWiZ62FQe1bZCQ/q4k7ixI81VT2xHVydDuD
j6QLrUT4SlSh/0s2Zsw5vLpQUkfkdOzXLlKk7uhKNY00sSmephW27xphnJbL54cP
b5e8lOvC3N4InAwdnh1cug==
-----END CERTIFICATE-----
Generated at Tue Nov 10 16:52:23 2026 by rpki-client