
$ rpki-client -vvf rpkica.twnic.tw/rpki/CCETECH/1/3BFFB675B95FCD73A993F3228774251092970E7B.mft
File: 3BFFB675B95FCD73A993F3228774251092970E7B.mft (raw, json)
Hash identifier: ht3HKFR9IweptJGXzkNiOLcVjngCaJyblPSMMHUEN4Q=
Subject key identifier: A3:84:65:61:03:B3:A2:26:E1:3D:5D:75:43:02:F3:F1:EB:A6:9D:B5
Authority key identifier: 3B:FF:B6:75:B9:5F:CD:73:A9:93:F3:22:87:74:25:10:92:97:0E:7B
Certificate issuer: /CN=3BFFB675B95FCD73A993F3228774251092970E7B
Certificate serial: 64241CA0FD41F445AF2F1F94C2E1E4903538048C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/3BFFB675B95FCD73A993F3228774251092970E7B.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CCETECH/1/3BFFB675B95FCD73A993F3228774251092970E7B.mft
Manifest number: 83
Signing time: Fri 14 Aug 2026 19:02:49 +0000
Manifest this update: Fri 14 Aug 2026 18:57:49 +0000
Manifest next update: Sat 15 Aug 2026 20:19:49 +0000
Files and hashes: 1: 3136302e32352e3130342e302f32332d3233203d3e20323038323233.roa (hash: 76EIdBl2ALW8D1iaU6elJyjtVPcLevkpSbCfYsK03xY=)
2: 3136302e32352e3130352e302f32342d3234203d3e20323038323233.roa (hash: YdBvwjNi4bXGDm/SLY5b1QLMeyyL4E2okhg4V5ia0DI=)
3: 3136302e32352e3130342e302f32342d3234203d3e20323038323233.roa (hash: /9BFFQzw0cKcAkYyhzrX90hfsn9yx3G5YlAAOT7vnaE=)
4: 3BFFB675B95FCD73A993F3228774251092970E7B.crl (hash: 1iudBLezVmVPXmJR9vuI/S062Xd07TE+h1aHAbxk9nQ=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/CCETECH/1/3BFFB675B95FCD73A993F3228774251092970E7B.crl
rsync://rpkica.twnic.tw/rpki/CCETECH/1/3BFFB675B95FCD73A993F3228774251092970E7B.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/3BFFB675B95FCD73A993F3228774251092970E7B.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 15 Aug 2026 20:19:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:24:1c:a0:fd:41:f4:45:af:2f:1f:94:c2:e1:e4:90:35:38:04:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3BFFB675B95FCD73A993F3228774251092970E7B
Validity
Not Before: Aug 14 18:57:49 2026 GMT
Not After : Aug 15 20:19:49 2026 GMT
Subject: CN=A384656103B3A226E13D5D754302F3F1EBA69DB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d0:eb:33:af:c7:73:a8:4b:e8:7d:1b:1e:5b:
14:e1:e5:87:07:09:2a:f0:ab:7f:11:2f:3f:b2:e1:
04:a5:ac:9a:26:fb:20:b0:67:5b:c3:7c:83:32:6c:
79:13:9e:ee:5b:6b:bd:ac:a9:04:e7:a4:b2:cc:db:
0c:02:c5:56:66:f5:d1:91:76:ed:ec:73:3a:4b:2b:
6f:22:b0:82:7b:a1:72:be:ba:9b:43:58:cf:fc:9c:
ad:94:18:a5:20:1b:f0:8b:64:28:1f:6f:57:33:7e:
1d:cf:16:c3:f2:a3:82:87:54:47:10:57:86:53:0a:
8f:6f:46:e2:47:4b:2a:6d:ab:58:c7:57:f7:fd:cb:
ac:43:70:be:09:39:ca:45:90:b0:f5:74:12:ab:2f:
bb:5a:c6:1a:e8:ff:b1:d2:d1:15:b7:1a:c2:ee:52:
4f:5d:bd:5f:49:d1:f2:67:17:aa:a9:df:d0:1a:b1:
00:b1:d6:4f:d7:53:d3:fd:ae:43:84:36:f0:d9:f9:
2a:79:c8:b5:86:1e:81:79:45:ba:e6:fd:58:6f:75:
89:d5:65:c0:d1:4a:01:3e:3e:82:7e:36:5a:9a:df:
ee:c7:47:fd:f8:b1:6a:f4:73:f4:ab:57:12:ea:8b:
11:a3:bb:2b:e0:26:67:8c:f4:5f:30:e0:c6:b6:29:
5d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:84:65:61:03:B3:A2:26:E1:3D:5D:75:43:02:F3:F1:EB:A6:9D:B5
X509v3 Authority Key Identifier:
keyid:3B:FF:B6:75:B9:5F:CD:73:A9:93:F3:22:87:74:25:10:92:97:0E:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CCETECH/1/3BFFB675B95FCD73A993F3228774251092970E7B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/3BFFB675B95FCD73A993F3228774251092970E7B.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CCETECH/1/3BFFB675B95FCD73A993F3228774251092970E7B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:a1:35:50:56:a7:2c:02:12:0f:5f:e8:e6:a4:c0:21:7b:38:
e7:8c:02:73:d6:7b:23:27:20:17:e9:6c:46:a7:29:56:92:7f:
9a:89:0a:3c:c9:2d:33:6d:57:5a:55:7a:e9:8d:fe:76:03:bd:
17:01:2e:d5:5a:07:b3:50:c9:42:88:2a:3f:2c:65:25:57:e5:
49:c9:88:a8:aa:bb:dd:c9:46:8e:44:47:8b:ff:37:53:b3:a4:
09:f5:7d:00:bb:1f:91:01:68:f5:32:32:0b:e3:6a:03:69:42:
ed:49:59:98:bb:0d:1d:54:e8:e8:a1:b9:ed:f1:dd:da:f4:ff:
ab:91:8f:1c:1a:7b:dc:3b:cb:5e:71:18:bd:88:5a:51:89:e5:
fe:c3:50:df:c5:1d:b7:19:e6:e3:ec:75:97:1c:d6:27:e0:83:
0c:30:7d:ac:66:0d:31:82:82:1f:6e:08:00:0c:50:6a:7a:c1:
45:9f:9d:80:88:9f:5f:f3:43:df:0b:77:1a:52:27:c5:5b:58:
54:16:2b:5e:4a:ad:7b:49:9a:cb:e8:c3:90:48:fe:a1:0e:3a:
b7:50:5e:9e:01:e3:59:46:e4:61:df:03:4d:50:0a:57:7e:96:
95:f6:f2:bd:c9:0f:69:b5:a4:24:3e:df:63:c0:71:d4:df:43:
d3:c9:00:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 10:25:51 2026 by rpki-client