
$ rpki-client -vvf rpkica.twnic.tw/rpki/TCSKY/1/3E6938BA00070CF3245F2491B7C88740A397A2D6.mft
File: 3E6938BA00070CF3245F2491B7C88740A397A2D6.mft (raw, json)
Hash identifier: vRhIaDIoLOBN9hhV+2jlYGl0zTdRmc6N5pprpwHTk8A=
Subject key identifier: 8E:A5:C1:DE:A0:55:0C:70:87:12:B2:DD:4D:DA:DA:CE:88:51:29:B2
Authority key identifier: 3E:69:38:BA:00:07:0C:F3:24:5F:24:91:B7:C8:87:40:A3:97:A2:D6
Certificate issuer: /CN=3E6938BA00070CF3245F2491B7C88740A397A2D6
Certificate serial: 1FD5B713FD6EEAE3F239D55DD61B8863CFFF12EB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/3E6938BA00070CF3245F2491B7C88740A397A2D6.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TCSKY/1/3E6938BA00070CF3245F2491B7C88740A397A2D6.mft
Manifest number: 2E
Signing time: Sat 13 Jun 2026 12:20:03 +0000
Manifest this update: Sat 13 Jun 2026 12:15:03 +0000
Manifest next update: Sun 14 Jun 2026 15:12:03 +0000
Files and hashes: 1: 3136302e3139312e3230322e302f32332d3234203d3e203633393038.roa (hash: VL6yJyugn4Z1qBRj+96zRBJlpWCdeFWKLM0ISWuy9EE=)
2: 3E6938BA00070CF3245F2491B7C88740A397A2D6.crl (hash: w6c4ckNelDNSLIsmxvxSl2gWIPo0z3arF9o3Pjspk8A=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TCSKY/1/3E6938BA00070CF3245F2491B7C88740A397A2D6.crl
rsync://rpkica.twnic.tw/rpki/TCSKY/1/3E6938BA00070CF3245F2491B7C88740A397A2D6.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/3E6938BA00070CF3245F2491B7C88740A397A2D6.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 15:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:d5:b7:13:fd:6e:ea:e3:f2:39:d5:5d:d6:1b:88:63:cf:ff:12:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E6938BA00070CF3245F2491B7C88740A397A2D6
Validity
Not Before: Jun 13 12:15:03 2026 GMT
Not After : Jun 14 15:12:03 2026 GMT
Subject: CN=8EA5C1DEA0550C708712B2DD4DDADACE885129B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c4:af:84:d5:69:81:10:d6:66:f9:ec:9f:f8:
66:6c:41:bf:62:d3:63:c7:f3:f8:ec:0a:30:21:3f:
eb:cd:94:ef:e6:5d:ab:98:c9:25:55:b3:73:38:56:
28:af:5d:b3:8c:0f:5b:eb:2e:03:d4:7f:f3:2e:a5:
1d:31:09:85:bf:15:24:56:a3:0a:7c:39:b4:3f:07:
f0:0e:be:df:86:29:69:67:7e:f7:69:11:0c:e6:a9:
82:2e:06:4d:81:de:73:7a:bc:2c:33:c7:bd:70:89:
43:1b:e5:f8:b5:09:99:69:98:0d:6b:eb:3a:a6:24:
ec:84:36:5b:5e:54:c8:cb:55:ae:4a:80:ad:8f:19:
60:c0:99:f7:59:79:a4:bb:b7:94:ac:b1:65:23:9a:
47:34:20:3a:a2:c0:98:5a:1c:c5:da:be:ad:89:91:
1f:43:c9:c4:5c:81:11:70:ce:62:98:ee:d9:7f:d0:
4f:f3:ed:0e:2a:b4:0e:7d:31:b0:99:d9:f5:e2:75:
01:a9:80:64:a6:13:29:dc:d5:86:74:9f:7c:fe:b7:
44:73:c4:c7:4b:8b:b7:5b:ef:6d:fb:ad:9b:45:6a:
cc:ff:8d:89:47:09:a1:2b:d9:cb:f3:b0:09:c8:50:
a1:f6:c6:a4:18:c2:c7:41:13:99:10:c7:65:eb:ba:
ac:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:A5:C1:DE:A0:55:0C:70:87:12:B2:DD:4D:DA:DA:CE:88:51:29:B2
X509v3 Authority Key Identifier:
keyid:3E:69:38:BA:00:07:0C:F3:24:5F:24:91:B7:C8:87:40:A3:97:A2:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TCSKY/1/3E6938BA00070CF3245F2491B7C88740A397A2D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/3E6938BA00070CF3245F2491B7C88740A397A2D6.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TCSKY/1/3E6938BA00070CF3245F2491B7C88740A397A2D6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:ed:f5:e8:a4:eb:56:d6:7b:b0:4b:37:f9:6f:5e:29:c2:3d:
06:66:a2:cb:e9:07:26:54:5d:5d:0c:db:98:7a:e7:1c:73:fa:
e6:2e:de:45:b8:b9:b3:51:0d:c5:4a:a1:5a:58:ac:55:e0:fc:
ca:6a:5e:11:c4:90:87:27:6c:73:b8:43:b6:a5:0b:f4:b8:c6:
e7:dc:d3:13:29:28:9e:21:81:13:65:73:ed:a8:2a:c2:75:cf:
76:fa:c6:38:cd:ce:e0:5c:5e:16:19:40:ee:67:bb:fd:db:b9:
8d:50:3b:bb:d6:65:f7:b1:5c:84:72:57:5c:9b:6c:94:a0:03:
d3:07:9a:80:47:ff:74:ff:d0:43:59:e2:b6:e8:48:d0:41:ea:
5d:1a:a5:2d:26:69:5d:1b:f4:ce:4e:78:fb:97:85:32:07:cf:
0e:8c:1e:b0:b7:45:e5:77:24:fd:f5:08:b4:23:15:5a:ef:7f:
a5:5a:85:fa:f7:68:ca:fd:7b:e0:d1:80:3f:47:5e:b4:82:ee:
c3:c8:5d:8c:84:18:6a:e3:3c:8d:1a:3f:3a:e3:9d:30:ac:56:
ad:4f:e7:cb:34:6f:ca:53:5b:bc:60:7b:02:b8:03:9f:95:43:
dc:9e:33:8d:d6:c9:f5:eb:87:56:8f:ef:68:34:fa:c2:29:4d:
c9:90:cb:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:03:46 2026 by rpki-client