
$ rpki-client -vvvf rpkica.twnic.tw/rpki/CLOUDNODE/0/E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.mft
File: E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.mft (raw, json)
Hash identifier: 8cIgXtTdd4pGCIC5UR2ScqEQmrTjObt/a/HUkHRn3Do=
Subject key identifier: A0:80:9F:BA:EF:49:DD:F5:BE:D3:C1:6D:D6:97:A0:44:5D:0E:CD:90
Authority key identifier: E3:82:3D:FE:A2:1F:EF:04:E3:26:9E:B9:AC:C3:BD:AC:1E:38:7E:CB
Certificate issuer: /CN=E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB
Certificate serial: 69AF4B94EA9AF6D58F4698D443F22C6F0FF62FA1
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CLOUDNODE/0/E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.mft
Manifest number: C4
Signing time: Fri 02 Oct 2026 00:44:44 +0000
Manifest this update: Fri 02 Oct 2026 00:39:44 +0000
Manifest next update: Sat 03 Oct 2026 02:04:44 +0000
Files and hashes: 1: 3232332e32362e31302e302f32332d3234203d3e2037343833.roa (hash: KY91dZeL6/YwGvfBK0FnKFAVL/6EOM1qXx3UNjlNsSo=)
2: E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.crl (hash: 2ncBQIuCW4ZwKE2UoxXxThjB9/VxLS+cn4X39zR6flc=)
3: 3232332e32362e31302e302f32332d3234203d3e203231383539.roa (hash: KeYIdvmIdFmXoaD7PfpE0neyX1HamQXTrD45lQIfHyQ=)
4: 3130332e3137352e3136362e302f32332d3234203d3e2037343833.roa (hash: M1t938UdIZV1R1GsREb23xynohkO0qzg0e3CIh+SGGk=)
5: 3232332e32362e31302e302f32332d3234203d3e2037353338.roa (hash: WltkBuqhKCJsRwS/4iiBwpBsyVQ3CFzN130wVvwvOIg=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/CLOUDNODE/0/E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.crl
rsync://rpkica.twnic.tw/rpki/CLOUDNODE/0/E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 02:04:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:af:4b:94:ea:9a:f6:d5:8f:46:98:d4:43:f2:2c:6f:0f:f6:2f:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB
Validity
Not Before: Oct 2 00:39:44 2026 GMT
Not After : Oct 3 02:04:44 2026 GMT
Subject: CN=A0809FBAEF49DDF5BED3C16DD697A0445D0ECD90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d8:8c:80:72:3b:00:80:13:c3:a7:52:92:04:
9b:e6:33:13:0b:73:bf:1e:3b:8e:be:fc:3a:77:7f:
2f:21:82:5f:c2:43:c7:b6:08:7a:c8:67:2e:ef:19:
b0:3d:9f:b3:8f:84:3d:ad:f3:55:6a:18:d0:36:43:
0f:92:21:64:79:eb:52:b4:87:40:71:c5:b5:63:fa:
bc:ab:26:f6:1b:ca:d4:ce:b9:11:8f:2b:b1:9c:e5:
ea:c9:e5:e2:f1:ea:c1:3a:25:51:02:4c:37:64:c2:
2f:b9:2f:04:8d:c0:63:b7:2f:7c:68:1f:b0:3f:b5:
fd:5d:a8:c2:da:1c:5b:64:c0:08:7e:5f:45:ef:5e:
b5:9d:cd:5e:98:76:d6:04:6a:e2:3e:48:ec:f0:99:
75:af:1b:c1:f3:93:32:a0:53:60:c1:5a:aa:61:2e:
dd:5b:a9:ac:c6:40:22:ff:82:84:e5:ae:41:a2:fd:
df:60:ae:c1:0e:f9:1c:34:26:eb:71:3f:c1:13:33:
81:29:36:08:43:57:61:07:92:7b:2c:28:87:6b:89:
0f:7a:4c:3d:cb:c4:c9:2a:bf:59:13:47:0c:d9:b0:
54:82:bc:a4:e7:9d:30:5e:c4:f0:fd:e9:01:d8:69:
56:40:95:86:1d:3d:6d:12:4b:dc:c5:05:72:c0:cf:
7b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:80:9F:BA:EF:49:DD:F5:BE:D3:C1:6D:D6:97:A0:44:5D:0E:CD:90
X509v3 Authority Key Identifier:
keyid:E3:82:3D:FE:A2:1F:EF:04:E3:26:9E:B9:AC:C3:BD:AC:1E:38:7E:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CLOUDNODE/0/E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CLOUDNODE/0/E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:37:92:27:cf:a2:13:b6:b6:62:af:a8:0e:18:52:92:4e:74:
44:fd:cc:19:21:c4:fa:ed:0c:48:46:ab:52:60:80:74:e2:e6:
8d:c1:9e:03:e8:4d:34:dc:42:b5:5d:b9:6f:39:a5:52:09:64:
a2:dc:c3:c4:ac:33:c0:d8:47:d2:99:aa:c3:de:88:c9:90:96:
f6:dd:e2:72:91:7a:24:c3:70:51:82:e0:ae:37:90:ef:66:52:
71:7f:ff:24:81:94:9b:4a:13:57:9b:67:1d:10:48:96:12:8d:
fe:f3:66:fd:f0:26:fa:cd:5c:51:96:1c:a3:c4:f4:c1:36:e2:
c6:1e:cb:c3:d3:c1:b7:98:50:2e:83:65:d1:e6:c7:f7:3d:6c:
7b:99:03:47:8b:42:ec:4a:95:f8:10:8d:01:b5:6c:d9:4c:13:
67:19:d7:98:ba:2f:21:4a:46:e9:e9:e4:98:10:f6:a0:ef:ef:
f1:7a:80:b4:af:17:a0:0e:f5:d9:cc:94:36:fe:95:fc:b3:7a:
60:77:4a:ca:96:21:75:10:f8:63:ce:f3:74:c6:90:5c:c0:3b:
8d:05:7a:88:80:f6:5b:45:e4:c3:5d:12:02:e6:89:38:69:98:
ea:ca:9e:4e:df:17:36:61:76:9c:56:ed:53:9c:f2:70:52:fa:
49:dc:06:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 18:41:16 2026 by rpki-client