
$ rpki-client -vvf rpkica.twnic.tw/rpki/LUOSI/0/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.mft
File: 034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.mft (raw, json)
Hash identifier: /TkyTGnLURl1wyxOL3zmB/mlh1hhQXKnYwzsA1tz3/c=
Subject key identifier: 26:83:D7:62:BF:FA:E2:A4:AD:95:E0:2B:C5:A2:F1:9E:7B:13:1F:6C
Authority key identifier: 03:4B:41:A1:3A:BB:0D:61:A1:54:AB:31:89:C9:BF:D2:DA:ED:4D:EA
Certificate issuer: /CN=034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA
Certificate serial: 1DB5737F6E03562D8DDB53961B839A380735F376
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/LUOSI/0/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.mft
Manifest number: 2C
Signing time: Fri 12 Jun 2026 17:57:35 +0000
Manifest this update: Fri 12 Jun 2026 17:52:35 +0000
Manifest next update: Sat 13 Jun 2026 18:01:35 +0000
Files and hashes: 1: 034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.crl (hash: Qs3U00k0J0LpO0zDeoSeuE4+2m0yQABH8vhR9PMr61A=)
2: 3130332e3137362e35302e302f32332d3234203d3e203138303436.roa (hash: nI0+2spKrN4Xv9D36qIey0CsWmeOODfk2dYZVrt7wH8=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/LUOSI/0/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.crl
rsync://rpkica.twnic.tw/rpki/LUOSI/0/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 18:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:b5:73:7f:6e:03:56:2d:8d:db:53:96:1b:83:9a:38:07:35:f3:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA
Validity
Not Before: Jun 12 17:52:35 2026 GMT
Not After : Jun 13 18:01:35 2026 GMT
Subject: CN=2683D762BFFAE2A4AD95E02BC5A2F19E7B131F6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7b:fc:67:0d:cb:6c:3b:0f:9c:7d:7f:f5:06:
fe:c8:2b:7e:13:3a:fd:93:c0:22:8f:c7:9d:88:42:
5f:86:ba:01:28:f9:9a:f4:ac:50:59:7b:3d:78:0b:
29:2d:fc:f7:b0:8c:f8:81:58:38:55:51:c7:25:1a:
d6:92:2d:06:a4:a6:a5:65:e0:d6:11:8f:07:b4:69:
25:5d:c7:e9:1a:25:0a:ea:93:0e:83:f2:63:20:dc:
1b:78:ba:d9:d9:cf:62:13:74:43:a3:79:67:e9:90:
08:68:cc:ba:a5:11:cd:f1:44:e3:ae:84:b0:f8:7f:
01:12:d7:ad:78:57:51:bc:c8:c1:2e:23:5d:16:a6:
0a:2f:35:dc:05:b8:05:d9:f7:2e:d2:d8:4b:d7:1c:
2c:2c:fd:a9:b9:d3:27:bc:ba:fb:6e:53:46:e5:7a:
ad:f2:97:63:5d:13:e4:9f:21:d4:5e:e1:f0:50:2b:
63:6e:e4:d5:87:83:79:e5:ac:00:82:eb:fe:a2:dc:
bf:24:7c:15:7e:9e:28:e4:e9:5e:4a:e6:22:8e:a2:
63:92:f3:62:95:6b:de:34:6d:e1:08:cd:e8:94:a9:
57:24:b5:c2:44:a1:fc:7e:8d:ae:28:ed:a6:4e:df:
77:7a:a1:4d:9b:1a:ea:26:83:6c:55:de:13:cd:6a:
e5:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:83:D7:62:BF:FA:E2:A4:AD:95:E0:2B:C5:A2:F1:9E:7B:13:1F:6C
X509v3 Authority Key Identifier:
keyid:03:4B:41:A1:3A:BB:0D:61:A1:54:AB:31:89:C9:BF:D2:DA:ED:4D:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/LUOSI/0/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LUOSI/0/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:79:f9:ec:41:ba:97:4d:91:49:0c:26:4f:1c:52:43:db:0e:
1e:06:81:c0:c1:e1:4c:78:03:3c:14:ee:df:3d:86:63:ea:6b:
2b:da:19:20:e9:69:bb:f9:57:7f:57:ca:74:0e:df:3c:fe:bd:
9f:91:2a:da:b7:6a:b0:61:fb:c0:b8:6e:03:20:da:56:b1:f9:
b1:42:e6:cc:1b:dd:0a:c2:6f:44:44:cf:af:b4:8c:48:f9:55:
73:ac:ee:7f:11:16:e3:38:eb:cc:a4:df:f9:4a:bc:2e:e6:01:
1c:00:f1:be:4a:7a:28:bd:22:e2:df:b5:db:e3:97:70:65:02:
58:65:17:3c:d7:42:83:e1:a2:28:27:4a:05:e6:c6:fa:da:e9:
17:e7:64:52:ef:a1:df:e9:57:3e:60:40:93:f3:ff:00:10:c3:
2b:8f:58:38:20:0e:32:2c:c3:6c:72:40:f5:72:68:b0:c1:03:
b7:f0:77:ea:0a:5b:d6:12:5e:1e:20:72:4d:5f:9e:da:44:c0:
5b:92:9f:cc:ff:e3:b2:a6:bd:cd:b3:d4:26:cc:93:75:14:a6:
08:2b:2c:00:1a:9c:ac:69:13:3a:a7:8e:fa:46:37:60:27:dd:
65:33:58:d4:1d:da:3d:5e:0d:cb:1d:56:84:65:58:8d:6e:a4:
20:91:40:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:16:22 2026 by rpki-client