
$ rpki-client -vvf rpkica.twnic.tw/rpki/CLOUDBASE/1/385249635956536ABAE4461A37AC4824F9DC8FD6.mft
File: 385249635956536ABAE4461A37AC4824F9DC8FD6.mft (raw, json)
Hash identifier: uRuwx1jUf1ZTJ727f0N3d6x7zQPmslXNSaU/rlFDa18=
Subject key identifier: 49:58:26:63:9E:15:98:8E:96:CD:97:4E:36:B6:90:17:A6:64:4D:B3
Authority key identifier: 38:52:49:63:59:56:53:6A:BA:E4:46:1A:37:AC:48:24:F9:DC:8F:D6
Certificate issuer: /CN=385249635956536ABAE4461A37AC4824F9DC8FD6
Certificate serial: 6D9E638E2C1B5D9B7471A693D2001F1F5D44FD94
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/385249635956536ABAE4461A37AC4824F9DC8FD6.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CLOUDBASE/1/385249635956536ABAE4461A37AC4824F9DC8FD6.mft
Manifest number: 34
Signing time: Fri 12 Jun 2026 16:07:15 +0000
Manifest this update: Fri 12 Jun 2026 16:02:15 +0000
Manifest next update: Sat 13 Jun 2026 19:35:15 +0000
Files and hashes: 1: 3136352e3130312e32382e302f32332d3234203d3e203231383539.roa (hash: R74xcd60wZBSfoy4K8X12x3wQEVRWzhx68AMGErwhDI=)
2: 3136352e3130312e32382e302f32332d3234203d3e20323133343330.roa (hash: 35okLdMHqqFwUJOW9E0osinYU4tPIsxaiWo2zlSSj84=)
3: 3136352e3130312e32382e302f32332d3234203d3e20313331363533.roa (hash: f8Wm++qXpNxVHGZKo201vAM9Z2Uy7/WdNvruK2l9Afw=)
4: 3136352e3130312e32382e302f32332d3234203d3e2037353336.roa (hash: MDQ0MQpqvOnP3tGAXbdXYndg5XorOFrBiv2BjsmWQz0=)
5: 385249635956536ABAE4461A37AC4824F9DC8FD6.crl (hash: XvEfYhRbd/08kBLYvsK5LjUJ8rXJX6BQLHMdtV7ON9k=)
6: 3136352e3130312e32382e302f32332d3234203d3e20313532363236.roa (hash: btNO8YG7Xa0kAdLaiC/xjh2pArbM9BSYgMB1cmgXBcM=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/CLOUDBASE/1/385249635956536ABAE4461A37AC4824F9DC8FD6.crl
rsync://rpkica.twnic.tw/rpki/CLOUDBASE/1/385249635956536ABAE4461A37AC4824F9DC8FD6.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/385249635956536ABAE4461A37AC4824F9DC8FD6.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 19:35:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:9e:63:8e:2c:1b:5d:9b:74:71:a6:93:d2:00:1f:1f:5d:44:fd:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=385249635956536ABAE4461A37AC4824F9DC8FD6
Validity
Not Before: Jun 12 16:02:15 2026 GMT
Not After : Jun 13 19:35:15 2026 GMT
Subject: CN=495826639E15988E96CD974E36B69017A6644DB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:51:c2:81:cb:bc:2b:92:51:2a:30:d1:d1:9e:
cf:a0:1d:86:45:74:05:40:22:82:7a:4e:b5:6a:c9:
b4:83:75:ab:70:31:86:4e:d4:86:11:f0:44:b5:16:
86:f2:21:db:5e:b4:36:29:df:d4:65:6d:fe:d6:13:
37:a6:5f:a6:a7:44:f0:ee:07:67:6d:08:6d:30:d0:
b5:39:a3:eb:be:25:36:aa:93:5d:87:2a:a7:6b:9a:
c7:3a:9a:e8:54:40:97:94:b2:4a:f6:90:ca:c0:2c:
eb:55:cb:82:f3:e0:07:48:64:42:3b:82:f2:6e:2d:
83:83:f9:2c:cc:64:d1:91:b3:f8:f1:58:52:8b:96:
67:11:b0:ef:01:21:68:c4:9c:79:a8:6f:96:00:2a:
7b:95:20:e7:1f:b2:07:d3:47:38:e6:d5:7e:28:9d:
99:36:01:d0:02:57:c0:51:fb:9d:6d:8a:87:89:1b:
46:83:79:d6:25:8f:9e:2d:3c:ed:15:4b:f0:fd:a1:
62:ae:c9:b6:8a:13:55:c4:e5:e5:d9:f2:3d:02:61:
05:2f:ef:a6:2a:c9:12:40:a5:09:38:2a:5d:72:21:
e4:43:dc:3a:a2:d5:0d:ca:52:ac:e6:ca:8c:3f:a3:
59:d7:7e:83:aa:73:cf:2a:46:3b:fc:8d:64:49:39:
21:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:58:26:63:9E:15:98:8E:96:CD:97:4E:36:B6:90:17:A6:64:4D:B3
X509v3 Authority Key Identifier:
keyid:38:52:49:63:59:56:53:6A:BA:E4:46:1A:37:AC:48:24:F9:DC:8F:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CLOUDBASE/1/385249635956536ABAE4461A37AC4824F9DC8FD6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/385249635956536ABAE4461A37AC4824F9DC8FD6.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CLOUDBASE/1/385249635956536ABAE4461A37AC4824F9DC8FD6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:cc:7b:29:b7:17:8a:95:28:a2:7c:ff:d0:d4:e5:5c:96:fc:
58:da:81:0b:2d:40:c7:b1:11:c8:8a:66:49:c1:b7:09:be:76:
b4:67:89:30:48:31:b8:df:b6:27:40:a3:ea:c0:88:76:dd:83:
51:9a:0e:38:c5:4b:e7:9f:5b:d7:7b:bb:ab:0f:82:1a:83:91:
68:70:03:4c:47:34:2b:87:53:d7:3a:f3:97:10:6b:35:88:39:
64:db:41:8c:3a:29:f4:ab:fb:2e:00:0f:81:34:55:7f:85:9f:
ee:64:ce:1b:3f:4a:85:73:65:dd:3e:47:0c:b0:00:fc:c1:9c:
a4:38:c0:37:63:59:c9:d5:22:2a:b1:9a:40:91:7b:c5:66:1b:
72:4e:6b:49:30:ea:5d:4f:bb:eb:ef:e4:92:cd:7b:21:cd:d4:
ab:9d:38:5f:a0:1c:76:c3:e0:8a:2f:f9:cf:1c:7f:1a:a9:a6:
fe:4b:e0:ef:88:db:fc:51:9e:08:71:d4:24:63:0e:15:90:b0:
5c:3d:11:d4:62:70:55:a9:bd:cd:46:a1:0d:98:31:d7:be:58:
50:8d:d5:49:9b:71:b7:ae:a7:ec:85:20:c2:b6:82:c5:15:ab:
25:80:6e:56:1c:c5:b1:57:29:81:62:9b:fd:8f:6d:35:78:19:
89:2d:2b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:38:08 2026 by rpki-client