
$ rpki-client -vvvf rpkica.twnic.tw/rpki/LUOSI/0/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.mft
File: 034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.mft (raw, json)
Hash identifier: mr1HG7i6SOAu2nyfszVng5o0kGDDS9kAHUXTSdRShQI=
Subject key identifier: C8:C0:39:60:12:E8:B5:9A:C8:35:6C:65:8B:D7:0B:12:B2:33:35:73
Authority key identifier: 03:4B:41:A1:3A:BB:0D:61:A1:54:AB:31:89:C9:BF:D2:DA:ED:4D:EA
Certificate issuer: /CN=034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA
Certificate serial: 278F04124C08EECC5938FA313CC2DF43484D7F8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/LUOSI/0/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.mft
Manifest number: FD
Signing time: Sun 15 Nov 2026 12:28:24 +0000
Manifest this update: Sun 15 Nov 2026 12:23:24 +0000
Manifest next update: Mon 16 Nov 2026 14:06:24 +0000
Files and hashes: 1: 034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.crl (hash: HGibfmvtFABJA6CgjUNoDvRpmjI0BCaoP+QgWUXpxiY=)
2: 3130332e3137362e35302e302f32332d3234203d3e203138303436.roa (hash: nI0+2spKrN4Xv9D36qIey0CsWmeOODfk2dYZVrt7wH8=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/LUOSI/0/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.crl
rsync://rpkica.twnic.tw/rpki/LUOSI/0/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 16 Nov 2026 08:45:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:8f:04:12:4c:08:ee:cc:59:38:fa:31:3c:c2:df:43:48:4d:7f:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA
Validity
Not Before: Nov 15 12:23:24 2026 GMT
Not After : Nov 16 14:06:24 2026 GMT
Subject: CN=C8C0396012E8B59AC8356C658BD70B12B2333573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:97:56:25:92:5e:e9:0c:b3:ef:e5:0d:5d:5b:
18:57:6f:94:84:0b:31:a1:bd:41:d7:94:ac:08:5d:
88:d4:c7:8b:8c:d0:8f:a5:90:0f:b7:b5:73:bd:67:
bc:0a:2c:77:4e:57:ac:48:a5:ca:e9:68:a7:61:90:
e1:f9:97:1e:f6:fc:2e:c3:2b:62:80:94:de:68:fd:
5d:6e:f6:5f:aa:bb:4c:d6:28:ad:e2:e3:42:bf:5a:
35:b7:17:2f:0b:8f:49:cc:4b:77:3c:99:df:e6:4c:
c6:da:3b:81:9f:6c:8d:c0:90:10:bd:bd:c4:8d:0b:
f8:91:02:54:e8:b7:23:c8:22:f1:66:94:6a:1d:27:
bc:1c:5a:f5:17:c9:54:ff:d7:62:16:ca:52:74:20:
fd:50:5c:e9:ef:43:f8:39:09:53:0f:95:71:40:5e:
f6:71:26:d3:3b:21:57:a6:d7:0a:54:a5:0b:2c:bd:
05:18:38:c8:91:87:7f:dc:45:20:ae:b9:dc:82:87:
81:14:c9:2c:bb:41:4f:3a:21:95:ba:e2:68:e5:21:
30:ad:f4:9d:dc:37:86:7e:0e:6b:eb:a8:7d:9e:ef:
9f:c4:a3:39:cf:91:fa:ef:4e:be:dc:47:db:0e:75:
9d:56:c9:57:04:b9:fa:da:f2:07:5e:db:3a:16:6e:
df:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:C0:39:60:12:E8:B5:9A:C8:35:6C:65:8B:D7:0B:12:B2:33:35:73
X509v3 Authority Key Identifier:
keyid:03:4B:41:A1:3A:BB:0D:61:A1:54:AB:31:89:C9:BF:D2:DA:ED:4D:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/LUOSI/0/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LUOSI/0/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:dc:11:13:6a:2d:29:ce:45:d1:2c:e2:02:eb:d6:8a:cf:8c:
f9:06:f8:2e:2a:8c:f6:c8:f9:46:fb:33:55:51:3a:0e:0b:24:
bd:5a:3a:bd:46:f3:af:31:96:04:c1:fe:63:62:ad:40:cd:c2:
8c:14:5e:f9:5f:f8:97:a1:49:72:76:1e:f6:89:66:c0:83:0d:
fc:7e:39:c5:46:08:77:57:31:10:5d:55:e8:05:16:2c:c4:37:
c8:a4:53:fb:12:54:36:2c:d6:20:47:ad:2c:6b:f2:a1:77:77:
e7:91:5f:ae:9e:42:dc:47:16:20:c2:ea:d9:d9:49:e5:9c:ab:
95:9d:b4:e8:de:90:61:18:55:20:9f:58:26:7d:70:0c:07:32:
cd:c2:41:7e:79:ef:32:2c:b4:9c:a7:26:97:c8:a9:59:51:18:
40:ae:94:e2:d0:ea:60:f5:46:df:30:ce:44:f4:8a:8a:d3:55:
39:67:fa:70:9b:43:a3:25:5c:b6:f3:e3:64:c2:bd:cb:5b:fe:
b2:9d:d7:95:b7:01:d5:6d:80:bf:1a:58:f1:62:0b:55:e1:04:
28:e5:a3:fa:a4:d4:c8:68:00:e5:29:4b:b8:1a:c6:fe:dd:7a:
4e:cc:f4:54:84:31:ad:b8:63:5d:d6:1c:fb:f7:59:31:be:f1:
f3:2a:ff:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:21:58 2026 by rpki-client