
$ rpki-client -vvvf rpkica.twnic.tw/rpki/SYVC/0/3F3E6E8DF4F46DDFE048F71C5AEC8616FDD7D737.mft
File: 3F3E6E8DF4F46DDFE048F71C5AEC8616FDD7D737.mft (raw, json)
Hash identifier: axgTviRJuZMIhVNnU4tTxvYBpfr2qgrQU1eTc94WJrc=
Subject key identifier: 97:EE:A4:60:79:64:F2:E2:A8:E9:06:35:9D:B5:05:54:17:BD:C5:AE
Authority key identifier: 3F:3E:6E:8D:F4:F4:6D:DF:E0:48:F7:1C:5A:EC:86:16:FD:D7:D7:37
Certificate issuer: /CN=3F3E6E8DF4F46DDFE048F71C5AEC8616FDD7D737
Certificate serial: 22EA584435FE3524E1C0CC036425F6500B8B6FA2
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F3E6E8DF4F46DDFE048F71C5AEC8616FDD7D737.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SYVC/0/3F3E6E8DF4F46DDFE048F71C5AEC8616FDD7D737.mft
Manifest number: B1
Signing time: Sun 20 Sep 2026 17:53:59 +0000
Manifest this update: Sun 20 Sep 2026 17:48:59 +0000
Manifest next update: Mon 21 Sep 2026 18:17:59 +0000
Files and hashes: 1: 3F3E6E8DF4F46DDFE048F71C5AEC8616FDD7D737.crl (hash: 6Pv06nIbIAyG1gywfjvvdK7/V1XtgHo4ba2y8+y/l1M=)
2: 323430303a363365303a3a2f33322d3438203d3e2037343833.roa (hash: rHuxaTKbxFOG3QVLxlmDpVGC4VQ2hgu+8e9CRQbtD+o=)
3: 3130332e3138332e3139382e302f32332d3234203d3e2037343833.roa (hash: QxmoSLkHm5UR5jJGq6GVgmM8tmoMrY7IxvQLIUDlgG8=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/SYVC/0/3F3E6E8DF4F46DDFE048F71C5AEC8616FDD7D737.crl
rsync://rpkica.twnic.tw/rpki/SYVC/0/3F3E6E8DF4F46DDFE048F71C5AEC8616FDD7D737.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F3E6E8DF4F46DDFE048F71C5AEC8616FDD7D737.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 21 Sep 2026 08:58:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:ea:58:44:35:fe:35:24:e1:c0:cc:03:64:25:f6:50:0b:8b:6f:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3F3E6E8DF4F46DDFE048F71C5AEC8616FDD7D737
Validity
Not Before: Sep 20 17:48:59 2026 GMT
Not After : Sep 21 18:17:59 2026 GMT
Subject: CN=97EEA4607964F2E2A8E906359DB5055417BDC5AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:91:1d:ed:37:7e:df:ef:09:1f:a7:5d:96:57:
48:57:56:84:6b:71:3b:68:f0:2d:ab:e2:9b:a0:08:
4c:0c:26:e3:ba:ee:fa:e3:ff:98:0c:80:bd:8b:8d:
0d:a1:7f:0a:95:ca:cd:0f:57:63:cd:b8:56:f6:01:
76:13:7e:31:26:1f:08:ce:f4:d5:62:f4:9a:d0:16:
c3:86:e1:22:22:e7:a7:47:b9:43:05:1d:70:d2:15:
17:05:ce:bf:17:da:7b:a3:9d:8a:4c:f1:69:7e:c9:
73:5d:86:e9:c7:ed:0b:41:8c:63:b5:34:6a:3a:70:
66:2e:46:3e:6f:31:60:08:10:ab:36:f8:17:80:f8:
48:fd:00:2c:85:d0:b2:5c:de:fc:93:e8:8f:31:c7:
5d:c7:a3:c1:96:17:b1:cf:b9:60:12:37:35:ff:8f:
a1:61:db:df:c9:14:e6:4a:0a:88:3d:0a:e7:8c:1c:
50:dc:07:64:bb:a5:fd:89:3a:14:8c:70:7b:10:88:
61:fd:f5:8b:94:e4:d9:ce:d4:41:dd:b7:3a:79:a8:
82:97:6d:11:6e:0c:59:14:91:0c:b1:2f:b0:81:49:
5d:3c:f3:a9:35:42:5e:ec:f8:f0:85:98:ec:40:d9:
63:d6:bf:ea:57:05:7d:2d:5e:ce:6c:b4:0a:e9:28:
bc:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:EE:A4:60:79:64:F2:E2:A8:E9:06:35:9D:B5:05:54:17:BD:C5:AE
X509v3 Authority Key Identifier:
keyid:3F:3E:6E:8D:F4:F4:6D:DF:E0:48:F7:1C:5A:EC:86:16:FD:D7:D7:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SYVC/0/3F3E6E8DF4F46DDFE048F71C5AEC8616FDD7D737.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F3E6E8DF4F46DDFE048F71C5AEC8616FDD7D737.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SYVC/0/3F3E6E8DF4F46DDFE048F71C5AEC8616FDD7D737.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:3a:2b:23:40:4c:b0:ea:bb:1f:8c:35:07:a2:a5:e4:07:70:
d0:85:36:16:77:ff:04:0a:8d:0d:0c:3b:bf:2d:03:ea:42:97:
1a:80:be:40:1b:76:e1:fb:28:c9:76:00:7c:fd:c8:48:71:49:
cb:d5:59:d3:72:ba:e1:05:01:59:90:24:6c:e0:2a:36:81:04:
16:49:91:f7:09:3f:c0:ee:64:ed:89:5e:66:a3:bc:67:fc:60:
52:46:d9:7f:84:a1:cc:84:87:25:07:0d:4c:85:b6:5d:02:82:
ba:57:5b:26:01:2d:62:e4:e5:73:ae:2c:0e:00:b3:6b:64:49:
0f:b9:6d:be:08:d8:63:85:b5:17:43:ff:55:fb:5d:12:96:17:
a3:9c:a7:3c:02:9d:7f:a0:88:7e:f5:29:89:6c:5f:3f:9f:8a:
b5:23:f6:9f:6d:b8:da:db:40:43:f0:22:0f:14:f2:ea:24:85:
44:58:a1:93:23:96:d1:51:af:39:b7:0e:fd:7c:bc:02:cc:cf:
76:d0:52:e6:ee:d1:a8:38:28:02:b3:bd:6d:a1:fc:8e:03:a3:
07:c7:a9:cf:98:90:d7:bc:83:6c:ec:d0:69:f1:a0:dd:34:08:
a1:f7:fb:42:11:fb:37:03:02:7a:78:3d:79:c1:4c:86:0f:a8:
bc:43:f5:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 03:13:01 2026 by rpki-client