
$ rpki-client -vvvf rpkica.twnic.tw/rpki/CATHDD/1/8242A39E0577E8E82BF863D0124FF5AF2F53C9C8.mft
File: 8242A39E0577E8E82BF863D0124FF5AF2F53C9C8.mft (raw, json)
Hash identifier: knvUgJLqtBlqWBS65LoFPhEsmP/G/YMIvwQfpNbPxHU=
Subject key identifier: F4:C4:8D:2D:07:7D:9C:D6:EB:3F:A8:A6:F1:4C:D8:AF:42:0D:01:C9
Authority key identifier: 82:42:A3:9E:05:77:E8:E8:2B:F8:63:D0:12:4F:F5:AF:2F:53:C9:C8
Certificate issuer: /CN=8242A39E0577E8E82BF863D0124FF5AF2F53C9C8
Certificate serial: 4B168BD196B5D6C725A7A7D8DC79867672E86B69
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/8242A39E0577E8E82BF863D0124FF5AF2F53C9C8.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CATHDD/1/8242A39E0577E8E82BF863D0124FF5AF2F53C9C8.mft
Manifest number: CC
Signing time: Wed 07 Oct 2026 06:42:12 +0000
Manifest this update: Wed 07 Oct 2026 06:37:12 +0000
Manifest next update: Thu 08 Oct 2026 09:52:12 +0000
Files and hashes: 1: 8242A39E0577E8E82BF863D0124FF5AF2F53C9C8.crl (hash: m9qXTqfMeBSlGSHlqusnziWhaoWSOsC+pMmnuoUasE4=)
2: 3136302e3139312e382e302f32342d3234203d3e20313530373636.roa (hash: 23kEX/05VYapgUwuItpshBmqk2zUM39bNJvI89JH27Y=)
3: 3136302e3139312e392e302f32342d3332203d3e20313530373636.roa (hash: iobSCigwHPXsmKPAiv0Cm9wPrYmBsLfhPZWAEKgfxoc=)
4: 3136302e3139312e382e302f32342d3332203d3e20313530373636.roa (hash: rnSZ0yRJQ87LO3K66pUprLSWzMYNldm6q1qbJoiJRVA=)
5: 3136302e3139312e382e302f32332d3234203d3e20313530373636.roa (hash: BxOTrJ4kAeU/jIshca7/vnqFH5T34oiHpb989w5ilgs=)
6: 3136302e3139312e392e302f32342d3234203d3e20313530373636.roa (hash: Fdjjfm1fJnNWkVxu2u3fwQcxaiitdeQENtBg51jTLAs=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/CATHDD/1/8242A39E0577E8E82BF863D0124FF5AF2F53C9C8.crl
rsync://rpkica.twnic.tw/rpki/CATHDD/1/8242A39E0577E8E82BF863D0124FF5AF2F53C9C8.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/8242A39E0577E8E82BF863D0124FF5AF2F53C9C8.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 08 Oct 2026 09:52:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:16:8b:d1:96:b5:d6:c7:25:a7:a7:d8:dc:79:86:76:72:e8:6b:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8242A39E0577E8E82BF863D0124FF5AF2F53C9C8
Validity
Not Before: Oct 7 06:37:12 2026 GMT
Not After : Oct 8 09:52:12 2026 GMT
Subject: CN=F4C48D2D077D9CD6EB3FA8A6F14CD8AF420D01C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5e:a5:72:ed:07:e7:f3:26:29:52:e6:a1:c8:
07:7c:30:75:b4:00:07:64:a7:dc:2a:ba:d4:35:57:
d5:9a:54:30:df:80:d7:83:ff:66:b1:88:fb:e5:df:
c9:80:7e:a6:ff:2e:69:b2:ce:25:92:db:68:b4:df:
d5:27:6f:59:f6:99:a4:46:c2:f1:e2:bb:c2:a3:05:
d5:71:7d:d5:39:40:6f:42:1e:99:e3:e7:e0:d2:2a:
88:18:28:fe:8c:f9:c6:ec:6f:3f:3a:eb:d0:b1:95:
6f:dd:7b:86:e1:f5:6e:16:62:91:fa:e4:de:d3:9e:
39:7f:c2:ea:3a:3d:ac:11:62:c4:99:5d:27:7a:1b:
19:c1:f3:af:a1:85:b8:dd:88:2a:9b:ad:98:1d:fe:
47:a4:63:2a:6e:b5:ea:ca:55:11:ca:d7:86:f8:55:
b2:63:16:d5:ea:14:0d:c2:75:73:c7:32:ca:2a:b9:
1c:fc:fc:ba:09:63:4a:7f:e3:db:13:82:25:f6:c5:
78:0f:98:dc:44:70:5f:fd:9e:c5:29:73:aa:b8:60:
8e:d0:ae:e8:73:3e:8b:e6:02:26:d2:4d:8f:88:02:
f7:ff:49:6b:d7:41:00:3c:8d:f1:9c:a6:49:71:c4:
20:ba:7f:ce:ad:34:5c:ff:da:73:c6:15:ba:0e:06:
62:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:C4:8D:2D:07:7D:9C:D6:EB:3F:A8:A6:F1:4C:D8:AF:42:0D:01:C9
X509v3 Authority Key Identifier:
keyid:82:42:A3:9E:05:77:E8:E8:2B:F8:63:D0:12:4F:F5:AF:2F:53:C9:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CATHDD/1/8242A39E0577E8E82BF863D0124FF5AF2F53C9C8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/8242A39E0577E8E82BF863D0124FF5AF2F53C9C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CATHDD/1/8242A39E0577E8E82BF863D0124FF5AF2F53C9C8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:2f:e5:2f:f1:19:0c:5b:6b:3f:91:cb:55:cd:15:2f:c2:f0:
34:dd:bc:cd:a8:e7:36:46:74:70:2a:39:4d:3c:79:5d:e7:77:
3f:e3:2f:dc:76:88:7c:8b:46:29:3e:b6:e8:a8:43:1b:51:23:
93:c7:ab:28:ab:26:db:a0:e7:80:69:c5:4b:76:e8:85:3d:72:
62:3b:a7:0d:b9:07:d7:08:54:c9:16:65:07:8f:2d:99:06:24:
db:c8:1b:a3:8c:0a:08:29:65:0f:af:fb:b1:cc:d9:28:4c:92:
a5:b1:86:1b:14:a1:a0:1d:8b:0c:76:64:66:74:78:cc:6a:5f:
43:8e:74:cd:97:74:b0:65:f1:15:38:fa:99:ff:87:cc:76:56:
6a:d3:fb:1d:87:cc:ed:a0:95:cc:9e:8f:af:e3:05:1e:de:55:
f5:c8:38:27:f6:7f:7d:30:da:a4:8c:cb:b0:0b:15:bf:4b:20:
07:20:78:91:0c:b8:91:d1:28:ec:4e:15:e4:42:d5:bc:1e:8e:
7a:2f:a7:1c:8a:71:8f:cb:00:8f:50:5f:83:1f:0f:09:a7:e3:
5d:5d:be:51:eb:6c:ca:6f:d8:e7:d1:09:b0:4b:e6:ea:58:15:
87:f0:9b:e1:72:04:e5:3f:e9:4d:63:34:15:da:97:49:52:31:
02:8d:15:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 22:28:27 2026 by rpki-client