
$ rpki-client -vvf rpkica.twnic.tw/rpki/TCSKY/1/3E6938BA00070CF3245F2491B7C88740A397A2D6.mft
File: 3E6938BA00070CF3245F2491B7C88740A397A2D6.mft (raw, json)
Hash identifier: EvLintLyVXLZlL6hej5z1hyvIvfy5L9SfswvFz976uw=
Subject key identifier: 66:BF:24:45:EF:47:C8:82:4E:D7:47:21:AF:3E:58:2C:DF:70:59:DB
Authority key identifier: 3E:69:38:BA:00:07:0C:F3:24:5F:24:91:B7:C8:87:40:A3:97:A2:D6
Certificate issuer: /CN=3E6938BA00070CF3245F2491B7C88740A397A2D6
Certificate serial: 4BA482DC93FE867AB7BCFA1396A9B3DD97F73574
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/3E6938BA00070CF3245F2491B7C88740A397A2D6.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TCSKY/1/3E6938BA00070CF3245F2491B7C88740A397A2D6.mft
Manifest number: 6A
Signing time: Tue 28 Jul 2026 19:19:45 +0000
Manifest this update: Tue 28 Jul 2026 19:14:45 +0000
Manifest next update: Wed 29 Jul 2026 21:15:45 +0000
Files and hashes: 1: 3136302e3139312e3230322e302f32332d3234203d3e203633393038.roa (hash: VL6yJyugn4Z1qBRj+96zRBJlpWCdeFWKLM0ISWuy9EE=)
2: 3E6938BA00070CF3245F2491B7C88740A397A2D6.crl (hash: OsftcJ1DxGUKv4Xsutr01mYrwLDrkR8T8G6YtxRplBg=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TCSKY/1/3E6938BA00070CF3245F2491B7C88740A397A2D6.crl
rsync://rpkica.twnic.tw/rpki/TCSKY/1/3E6938BA00070CF3245F2491B7C88740A397A2D6.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/3E6938BA00070CF3245F2491B7C88740A397A2D6.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 21:15:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:a4:82:dc:93:fe:86:7a:b7:bc:fa:13:96:a9:b3:dd:97:f7:35:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E6938BA00070CF3245F2491B7C88740A397A2D6
Validity
Not Before: Jul 28 19:14:45 2026 GMT
Not After : Jul 29 21:15:45 2026 GMT
Subject: CN=66BF2445EF47C8824ED74721AF3E582CDF7059DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:be:4d:83:f0:fc:84:78:6f:74:6f:f5:89:16:
dd:aa:29:21:9a:74:9b:98:ac:11:b9:ed:72:df:db:
bf:ab:df:4d:c7:ab:01:a6:53:b2:70:6d:b7:fc:76:
d7:bd:c6:6e:70:4d:93:d2:52:04:69:3b:15:a0:78:
27:dc:01:4c:3b:2d:5c:d6:d9:6f:0e:1b:e3:a0:a8:
b2:e8:e7:6b:39:d3:89:69:22:8e:f0:5b:c8:41:49:
f0:9a:5a:73:2e:99:e4:2a:9a:2f:9a:5e:47:fd:ac:
ca:cd:e8:3f:19:c6:5c:f0:a6:a0:f8:6c:34:f7:ab:
f9:6f:60:58:07:db:66:e8:70:cb:83:b4:c8:f2:8e:
88:55:5a:f4:b9:42:22:c9:e6:fb:d3:1e:8d:a7:63:
e0:ba:ad:d1:e5:5d:fb:27:b8:7a:3b:2d:ec:a3:7f:
12:d3:8d:03:25:f1:ba:cc:1f:f3:d0:02:a9:05:49:
0f:88:22:78:02:d5:f9:05:fb:18:02:c7:63:fa:f5:
43:13:fe:18:a2:bd:fe:b7:6a:62:c1:02:19:00:c9:
a5:36:4d:89:b9:50:5a:03:3a:d0:33:73:64:57:29:
dd:d0:64:2c:a0:2b:7b:3b:18:33:b9:64:4b:65:98:
2c:38:38:d5:69:67:87:8b:89:7a:fd:84:c9:23:aa:
d9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:BF:24:45:EF:47:C8:82:4E:D7:47:21:AF:3E:58:2C:DF:70:59:DB
X509v3 Authority Key Identifier:
keyid:3E:69:38:BA:00:07:0C:F3:24:5F:24:91:B7:C8:87:40:A3:97:A2:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TCSKY/1/3E6938BA00070CF3245F2491B7C88740A397A2D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/3E6938BA00070CF3245F2491B7C88740A397A2D6.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TCSKY/1/3E6938BA00070CF3245F2491B7C88740A397A2D6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:bf:ab:7d:9c:6e:4c:27:8b:0f:ef:28:57:a4:8f:90:9f:11:
d4:a4:5d:bb:90:8f:6e:53:86:00:15:94:ea:26:8d:1f:0c:f4:
bc:9a:90:5b:b2:39:4d:20:c5:3d:c8:da:29:84:ad:e6:79:71:
fc:7d:a6:0e:d4:1f:c3:eb:9d:60:5d:d7:42:4f:2d:1b:b3:ee:
b3:38:37:a3:89:7b:74:d4:15:9f:d6:67:a1:b3:9f:b9:a6:36:
2a:ee:38:80:0a:57:fb:3b:ef:61:42:72:23:67:a3:ff:b0:0a:
4c:09:11:03:fa:e1:f5:cc:2f:21:34:bd:77:c5:4b:29:24:c2:
b6:38:8d:7d:20:69:8b:63:15:56:24:d8:ac:26:64:ac:42:a7:
d0:88:a1:28:b2:5a:ec:3a:4f:26:06:46:6b:c8:54:7a:26:75:
ab:18:83:61:ae:fb:61:fd:08:8c:b5:a9:3a:f4:30:78:95:b4:
0e:09:1a:43:90:10:da:c1:e9:7b:9d:a9:b2:40:de:2d:e1:af:
33:16:e0:d1:20:9d:34:c8:8a:96:e6:9e:46:cd:9c:48:40:e1:
bb:5d:df:e4:8d:bb:19:ea:d8:6d:3f:d6:bf:69:5c:fb:4b:d4:
b0:c8:e6:e4:cd:75:9d:21:28:7c:9a:1c:3a:8a:1f:85:86:84:
13:92:1c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:50:42 2026 by rpki-client