
$ rpki-client -vvvf rpkica.twnic.tw/rpki/YUANCHENG/0/3C9AD02FB3CBE1E873D866420C38F09BFA7952B1.mft
File: 3C9AD02FB3CBE1E873D866420C38F09BFA7952B1.mft (raw, json)
Hash identifier: pYDm81JtXDZblD7pQ12DuyTaZIgDQavHoII2MSaoUlE=
Subject key identifier: 56:10:8C:E9:9C:3A:29:8C:37:F3:8C:BC:27:24:D5:30:5E:7D:8C:AB
Authority key identifier: 3C:9A:D0:2F:B3:CB:E1:E8:73:D8:66:42:0C:38:F0:9B:FA:79:52:B1
Certificate issuer: /CN=3C9AD02FB3CBE1E873D866420C38F09BFA7952B1
Certificate serial: 3FF619F9096EA38C81FF888D3FE332449392B9D1
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3C9AD02FB3CBE1E873D866420C38F09BFA7952B1.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/YUANCHENG/0/3C9AD02FB3CBE1E873D866420C38F09BFA7952B1.mft
Manifest number: B3
Signing time: Tue 22 Sep 2026 00:33:11 +0000
Manifest this update: Tue 22 Sep 2026 00:28:11 +0000
Manifest next update: Wed 23 Sep 2026 03:57:11 +0000
Files and hashes: 1: 3C9AD02FB3CBE1E873D866420C38F09BFA7952B1.crl (hash: 2uzcZSSszXUUuP/6mmAWIyQj5HkSsE91EiNGLo+X5Cs=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/YUANCHENG/0/3C9AD02FB3CBE1E873D866420C38F09BFA7952B1.crl
rsync://rpkica.twnic.tw/rpki/YUANCHENG/0/3C9AD02FB3CBE1E873D866420C38F09BFA7952B1.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3C9AD02FB3CBE1E873D866420C38F09BFA7952B1.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 22:16:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:f6:19:f9:09:6e:a3:8c:81:ff:88:8d:3f:e3:32:44:93:92:b9:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3C9AD02FB3CBE1E873D866420C38F09BFA7952B1
Validity
Not Before: Sep 22 00:28:11 2026 GMT
Not After : Sep 23 03:57:11 2026 GMT
Subject: CN=56108CE99C3A298C37F38CBC2724D5305E7D8CAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ff:ca:73:7c:76:4c:c5:74:71:bc:c3:a5:2c:
ec:01:0d:68:15:e5:95:ba:15:d3:6f:c3:ef:90:ab:
8d:81:b7:f9:f8:84:4d:50:49:88:d2:15:53:fd:df:
10:a7:ba:e4:74:ce:0b:05:e9:aa:37:99:59:4b:1e:
94:d2:81:ec:69:ae:6d:b5:45:96:5d:63:da:23:6b:
9f:73:bf:1d:78:c4:2e:16:a1:3c:e8:1d:52:9d:2c:
5c:97:bd:9e:83:41:72:3c:ab:b8:13:0b:09:27:99:
b8:43:2e:82:89:95:9a:b9:36:62:0f:6d:38:c3:90:
d0:ba:72:76:b2:9d:d1:79:16:8b:67:77:28:8b:ae:
d5:ff:73:ec:47:98:ba:ae:d6:86:56:09:0e:16:1d:
4b:d5:31:c7:dd:29:a0:30:37:54:fa:12:3e:14:67:
57:f4:1d:f9:c4:30:ec:91:26:34:e7:8a:21:7a:bf:
5e:58:37:b0:e6:ff:3d:de:4e:a4:02:40:15:7a:83:
e8:97:91:15:0c:94:f4:42:c3:65:96:75:85:64:44:
0b:ea:96:2b:de:76:4c:8c:a0:94:1d:9e:ad:0b:65:
37:36:db:f3:7f:64:39:0d:d3:8d:71:c3:9b:ec:6d:
79:a0:cb:38:f8:2c:83:23:b7:5c:30:1c:3c:b4:f1:
bc:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:10:8C:E9:9C:3A:29:8C:37:F3:8C:BC:27:24:D5:30:5E:7D:8C:AB
X509v3 Authority Key Identifier:
keyid:3C:9A:D0:2F:B3:CB:E1:E8:73:D8:66:42:0C:38:F0:9B:FA:79:52:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/YUANCHENG/0/3C9AD02FB3CBE1E873D866420C38F09BFA7952B1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3C9AD02FB3CBE1E873D866420C38F09BFA7952B1.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/YUANCHENG/0/3C9AD02FB3CBE1E873D866420C38F09BFA7952B1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:6c:80:dd:4b:33:49:03:59:61:9e:a1:7a:2c:50:8e:30:fa:
3b:84:38:58:b6:e9:3d:14:cd:1f:6a:ce:24:b3:8a:18:36:52:
a3:89:17:f0:1f:b7:67:77:4a:03:c9:c6:b8:1e:99:8e:f5:a8:
07:4d:6f:32:19:92:8a:6f:55:23:88:56:e0:dc:ec:f6:c2:32:
62:b2:95:28:44:e2:4f:52:08:0f:55:0a:c8:96:f4:6f:68:ed:
f1:a1:cb:0c:51:d2:38:5a:f5:02:30:be:aa:18:d3:c6:cf:eb:
65:24:1b:d2:6f:ee:f9:f4:25:18:74:99:50:de:fc:85:95:d2:
e1:86:da:66:3b:63:bc:25:8b:c3:d7:84:4b:12:d8:88:08:a6:
c7:0d:ee:2c:4e:79:17:a6:ba:80:e0:6d:bf:1c:18:b5:18:67:
7f:53:df:0c:e8:aa:8b:eb:f6:50:da:99:67:5e:90:a1:67:b8:
34:19:18:e3:cf:83:f8:a2:ac:70:c7:c4:da:a2:5d:6d:e0:bb:
72:2d:3b:a9:73:64:47:70:d2:0f:8c:8b:7e:a2:d5:1e:b5:b0:
8c:ae:c9:a5:d7:da:8a:5e:35:c5:fc:50:20:01:8c:db:81:49:
0c:89:b5:3b:95:60:c2:19:f5:67:15:da:d5:7d:28:91:0d:a3:
f2:02:74:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:56:51 2026 by rpki-client