
$ rpki-client -vvvf rpkica.twnic.tw/rpki/IDT/0/35C866BE000DEAB870C97BED72D0A7807B829E4D.mft
File: 35C866BE000DEAB870C97BED72D0A7807B829E4D.mft (raw, json)
Hash identifier: bFCfX93AR/pw3IQtACG8niJDZUJtlvgkb9BrH8q9cJo=
Subject key identifier: 1E:A4:76:EB:C1:05:32:F2:43:97:4A:D7:C5:85:B6:AA:95:C3:DE:F0
Authority key identifier: 35:C8:66:BE:00:0D:EA:B8:70:C9:7B:ED:72:D0:A7:80:7B:82:9E:4D
Certificate issuer: /CN=35C866BE000DEAB870C97BED72D0A7807B829E4D
Certificate serial: 6815E935EFFA440DA41E08669EE6DAC73318117C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/35C866BE000DEAB870C97BED72D0A7807B829E4D.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/IDT/0/35C866BE000DEAB870C97BED72D0A7807B829E4D.mft
Manifest number: B6
Signing time: Mon 21 Sep 2026 19:32:01 +0000
Manifest this update: Mon 21 Sep 2026 19:27:01 +0000
Manifest next update: Tue 22 Sep 2026 22:47:01 +0000
Files and hashes: 1: 3230322e3134382e3231302e302f32332d3234203d3e20313532313739.roa (hash: w66ZmETlDQxyi38rji0gzk1176tFqIfyztFJ3VNSIbg=)
2: 3232332e32362e342e302f32332d3234203d3e20313532313739.roa (hash: 1KuxfqT20KEMU13K1PoNgkxwUh6tXjO/u8vuBPBbPvM=)
3: 3130332e3135322e3232302e302f32332d3234203d3e20313338393937.roa (hash: J/22PWUGVzLaEIWqIEkco35k7PiKuvioKGMBglelLtk=)
4: 323430363a326663303a3a2f33322d3332203d3e20313334383233.roa (hash: T6rxUJGmT1hptwoFyjautezkOkglfrNk05IrJlVztRE=)
5: 35C866BE000DEAB870C97BED72D0A7807B829E4D.crl (hash: eOS+JNdZZhgZewwwsGxE/3sdeDVEdKEEK4Eqb7zm+kM=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/IDT/0/35C866BE000DEAB870C97BED72D0A7807B829E4D.crl
rsync://rpkica.twnic.tw/rpki/IDT/0/35C866BE000DEAB870C97BED72D0A7807B829E4D.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/35C866BE000DEAB870C97BED72D0A7807B829E4D.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 22:16:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:15:e9:35:ef:fa:44:0d:a4:1e:08:66:9e:e6:da:c7:33:18:11:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35C866BE000DEAB870C97BED72D0A7807B829E4D
Validity
Not Before: Sep 21 19:27:01 2026 GMT
Not After : Sep 22 22:47:01 2026 GMT
Subject: CN=1EA476EBC10532F243974AD7C585B6AA95C3DEF0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b7:9f:b5:db:76:da:54:ba:41:91:f0:f8:29:
f6:54:5c:a4:e8:ba:5d:a1:1a:67:76:5f:3c:ec:f9:
5a:50:4e:31:c2:39:d6:06:4a:e7:91:06:74:e7:ed:
56:5e:aa:c4:f8:2c:33:68:24:41:e4:9c:2c:86:f1:
ae:b3:97:9f:88:eb:04:6e:1a:af:03:ec:62:54:74:
4b:c9:e1:aa:40:54:c4:6f:99:62:44:d8:2a:91:23:
9d:fa:0d:fb:1a:a7:9f:d2:07:6c:e4:26:0c:7f:be:
70:40:67:e6:1e:10:c7:d8:5c:45:0f:d1:92:e5:e8:
f0:49:fc:d8:8d:85:d8:51:09:0e:c7:69:dd:79:ba:
29:3e:c7:14:f6:1f:0b:62:f6:5a:b7:e2:26:fd:33:
b2:db:57:4a:1c:b6:ca:4f:12:df:fc:6c:68:7f:b2:
5a:02:47:4c:1c:c6:62:9d:ea:8c:d3:7b:14:3c:d1:
bb:6b:51:98:79:11:77:5e:9a:a5:61:4a:96:c6:0b:
da:ae:6d:b7:30:92:73:7a:f9:1b:38:5e:90:a6:9b:
63:e3:23:cc:d5:37:69:78:1e:5a:d8:5a:ee:d5:4c:
0b:e6:d3:af:f0:18:4a:43:87:c8:dd:a7:d8:53:3c:
26:f5:1d:62:a2:8a:64:e7:45:be:ef:af:c4:30:3a:
30:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:A4:76:EB:C1:05:32:F2:43:97:4A:D7:C5:85:B6:AA:95:C3:DE:F0
X509v3 Authority Key Identifier:
keyid:35:C8:66:BE:00:0D:EA:B8:70:C9:7B:ED:72:D0:A7:80:7B:82:9E:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/IDT/0/35C866BE000DEAB870C97BED72D0A7807B829E4D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/35C866BE000DEAB870C97BED72D0A7807B829E4D.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/IDT/0/35C866BE000DEAB870C97BED72D0A7807B829E4D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:3e:09:b4:59:36:ea:00:e8:ef:ac:2c:b4:3d:5f:82:e5:06:
e3:86:ff:e8:b6:74:8f:f4:d5:fd:af:3f:23:4d:9f:af:d3:78:
1c:98:d2:93:5b:7f:56:bc:f2:e5:a7:79:cb:69:7f:e7:10:31:
fa:e0:f9:2a:b7:38:9f:ce:dc:4e:12:a3:59:fa:2a:85:eb:3c:
f8:5a:cf:9a:ce:b4:11:1f:ea:65:dd:58:89:72:f3:72:eb:15:
62:6f:d3:ec:69:ec:bd:a5:b0:b7:4c:9f:5f:8c:f5:6f:91:db:
99:45:cd:c1:8b:a1:c2:9c:e7:f2:33:b5:05:45:d5:19:43:76:
88:3e:f6:0b:c6:c7:52:8d:de:1c:44:35:7b:c7:fa:56:a3:71:
b2:3c:e0:e2:db:f3:0f:95:a5:d7:db:8b:c7:0e:e0:eb:d7:c2:
b5:03:fa:cf:40:57:3e:02:28:0b:60:d4:38:14:bb:fc:60:a4:
fa:29:9c:a9:61:04:2d:7e:b9:02:c2:7c:ec:91:22:0d:3c:94:
1f:46:f1:16:8f:f0:ac:4c:ac:3b:55:a0:3e:c8:77:78:6f:30:
be:3f:d9:70:7a:da:4c:21:e8:b2:4f:67:b9:24:a9:aa:2b:52:
16:f3:48:0c:e6:bf:27:4c:e9:11:03:89:34:70:ba:7b:ee:9e:
59:17:21:35
-----BEGIN CERTIFICATE-----
MIIE3jCCA8agAwIBAgIUaBXpNe/6RA2kHghmnubaxzMYEXwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzVDODY2QkUwMDBERUFCODcwQzk3QkVENzJEMEE3ODA3
QjgyOUU0RDAeFw0yNjA5MjExOTI3MDFaFw0yNjA5MjIyMjQ3MDFaMDMxMTAvBgNV
BAMTKDFFQTQ3NkVCQzEwNTMyRjI0Mzk3NEFEN0M1ODVCNkFBOTVDM0RFRjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQt5+123baVLpBkfD4KfZUXKTo
ul2hGmd2Xzzs+VpQTjHCOdYGSueRBnTn7VZeqsT4LDNoJEHknCyG8a6zl5+I6wRu
Gq8D7GJUdEvJ4apAVMRvmWJE2CqRI536Dfsap5/SB2zkJgx/vnBAZ+YeEMfYXEUP
0ZLl6PBJ/NiNhdhRCQ7Had15uik+xxT2Hwti9lq34ib9M7LbV0octspPEt/8bGh/
sloCR0wcxmKd6ozTexQ80btrUZh5EXdemqVhSpbGC9qubbcwknN6+Rs4XpCmm2Pj
I8zVN2l4HlrYWu7VTAvm06/wGEpDh8jdp9hTPCb1HWKiimTnRb7vr8QwOjAxAgMB
AAGjggHoMIIB5DAdBgNVHQ4EFgQUHqR268EFMvJDl0rXxYW2qpXD3vAwHwYDVR0j
BBgwFoAUNchmvgAN6rhwyXvtctCngHuCnk0wDgYDVR0PAQH/BAQDAgeAMGAGA1Ud
HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSURULzAv
MzVDODY2QkUwMDBERUFCODcwQzk3QkVENzJEMEE3ODA3QjgyOUU0RC5jcmwwbwYI
KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50
dy9ycGtpL1RXTklDQ0EvMS8zNUM4NjZCRTAwMERFQUI4NzBDOTdCRUQ3MkQwQTc4
MDdCODI5RTRELmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j
Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSURULzAvMzVDODY2QkUwMDBERUFCODcw
Qzk3QkVENzJEMEE3ODA3QjgyOUU0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF
BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAD8+CbRZNuoA6O+sLLQ9
X4LlBuOG/+i2dI/01f2vPyNNn6/TeByY0pNbf1a88uWnectpf+cQMfrg+Sq3OJ/O
3E4So1n6KoXrPPhaz5rOtBEf6mXdWIly83LrFWJv0+xp7L2lsLdMn1+M9W+R25lF
zcGLocKc5/IztQVF1RlDdog+9gvGx1KN3hxENXvH+lajcbI84OLb8w+Vpdfbi8cO
4OvXwrUD+s9AVz4CKAtg1DgUu/xgpPopnKlhBC1+uQLCfOyRIg08lB9G8RaP8KxM
rDtVoD7Id3hvML4/2XB62kwh6LJPZ7kkqaorUhbzSAzmvydM6REDiTRwunvunlkX
ITU=
-----END CERTIFICATE-----
Generated at Tue Sep 22 10:44:33 2026 by rpki-client