
$ rpki-client -vvvf rpkica.twnic.tw/rpki/COLIN/0/3135985A244571EE521F17A73A1F0D6341A35ED5.mft
File: 3135985A244571EE521F17A73A1F0D6341A35ED5.mft (raw, json)
Hash identifier: +2NwAewUSeqHTYx1uCRQdgVUIDOdq3fF6fIt+fE8hng=
Subject key identifier: 77:E6:F1:F2:D6:7D:B4:91:DC:CE:A8:AC:C7:47:A1:BB:47:1D:2F:18
Authority key identifier: 31:35:98:5A:24:45:71:EE:52:1F:17:A7:3A:1F:0D:63:41:A3:5E:D5
Certificate issuer: /CN=3135985A244571EE521F17A73A1F0D6341A35ED5
Certificate serial: 5C315FD0A77AF82C6F7D5D556C44E76A42174F59
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3135985A244571EE521F17A73A1F0D6341A35ED5.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/COLIN/0/3135985A244571EE521F17A73A1F0D6341A35ED5.mft
Manifest number: C3
Signing time: Sun 04 Oct 2026 04:54:13 +0000
Manifest this update: Sun 04 Oct 2026 04:49:13 +0000
Manifest next update: Mon 05 Oct 2026 07:46:13 +0000
Files and hashes: 1: 3130332e362e3132342e302f32332d3332203d3e20313530373638.roa (hash: 6vguh3CJd68lcmEK8FAHm7dq7zEm2fYFwl9UdWFuOJk=)
2: 3135985A244571EE521F17A73A1F0D6341A35ED5.crl (hash: R7fOjWkooJUGKFJtmEb1dYrDsi6jyF9A9+SjHFBbvE8=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/COLIN/0/3135985A244571EE521F17A73A1F0D6341A35ED5.crl
rsync://rpkica.twnic.tw/rpki/COLIN/0/3135985A244571EE521F17A73A1F0D6341A35ED5.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3135985A244571EE521F17A73A1F0D6341A35ED5.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Oct 2026 07:46:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:31:5f:d0:a7:7a:f8:2c:6f:7d:5d:55:6c:44:e7:6a:42:17:4f:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3135985A244571EE521F17A73A1F0D6341A35ED5
Validity
Not Before: Oct 4 04:49:13 2026 GMT
Not After : Oct 5 07:46:13 2026 GMT
Subject: CN=77E6F1F2D67DB491DCCEA8ACC747A1BB471D2F18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:64:39:0a:89:29:f6:ec:5b:46:9d:1b:ec:83:
7e:3a:56:f8:06:af:07:d4:f8:bd:57:10:38:3d:f8:
a6:f3:4d:6b:fe:7c:24:0f:01:62:fc:8a:00:6e:29:
9c:34:f4:e7:9e:5f:e4:43:92:e8:a8:45:f7:6b:f0:
91:9b:6f:58:f1:cb:88:3e:1c:c4:54:37:f7:4c:0e:
88:3c:4c:87:d9:b8:53:13:ff:2b:1e:0b:5b:31:83:
a0:dc:92:e8:f0:a0:b7:c1:cd:f8:f3:45:2e:c9:39:
2b:71:cf:c6:01:50:42:22:b8:97:9c:f4:56:4f:d3:
7a:70:cb:88:f4:06:7b:b0:c3:1f:45:11:11:5c:5b:
66:00:f9:da:b4:97:1a:76:5e:7c:3f:fb:13:8c:b3:
17:24:04:a4:19:6d:cd:27:08:bc:83:06:1a:78:76:
9a:86:0b:29:02:13:b9:f3:91:40:63:b5:fa:11:4f:
b7:ad:e6:f2:f6:48:f3:0d:1d:2d:5f:50:74:5c:9f:
4d:17:32:56:38:78:b5:68:79:53:ce:9b:1f:d4:d6:
ad:5e:0e:80:7d:66:98:c3:32:cb:88:fa:f6:e2:d6:
74:1e:8a:05:e6:36:17:5e:71:2d:55:22:66:78:63:
54:47:c3:06:40:3f:42:aa:c6:71:de:1c:ca:3c:b0:
ed:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:E6:F1:F2:D6:7D:B4:91:DC:CE:A8:AC:C7:47:A1:BB:47:1D:2F:18
X509v3 Authority Key Identifier:
keyid:31:35:98:5A:24:45:71:EE:52:1F:17:A7:3A:1F:0D:63:41:A3:5E:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/COLIN/0/3135985A244571EE521F17A73A1F0D6341A35ED5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3135985A244571EE521F17A73A1F0D6341A35ED5.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/COLIN/0/3135985A244571EE521F17A73A1F0D6341A35ED5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:d1:8b:23:71:22:a6:34:02:36:b4:9c:99:be:b4:b6:62:1b:
47:c6:16:85:eb:14:ee:9c:d2:bd:26:5a:01:ae:96:9c:6d:c6:
b5:06:da:c9:ea:ba:7f:ef:22:f4:d4:af:21:fe:6b:d0:42:33:
85:cb:b3:f3:e8:c9:b3:02:84:ec:98:94:2f:8c:27:69:ca:a8:
f4:16:9f:2d:ed:d2:3c:b7:f4:e9:f2:51:12:2c:97:59:2a:31:
8c:13:04:e8:99:b6:ae:34:a0:f1:67:9a:62:aa:b6:4e:f4:b4:
40:56:f8:7d:ec:70:4e:ed:92:7b:db:2d:c2:3b:04:b9:b2:24:
c5:e6:d8:09:44:c9:ac:d2:1a:5a:e0:a7:d7:77:04:08:79:fb:
72:fe:ea:9a:a4:aa:0d:2c:24:34:8c:74:e8:c0:33:e9:02:6e:
00:49:c9:3b:b9:59:b1:42:d9:d8:68:13:a5:51:30:54:b7:4b:
4d:ba:68:a7:a7:98:be:b7:eb:94:df:bd:1e:a6:98:85:22:b2:
74:76:73:29:49:c5:5c:42:d3:60:45:4a:8c:0d:77:2c:96:6f:
df:74:11:1f:cb:74:4d:1f:a9:8a:3d:91:94:3a:34:1e:6c:7e:
61:22:9b:25:be:fa:19:b7:e8:48:3c:25:59:b7:03:5b:7d:9e:
a2:88:57:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 18:01:14 2026 by rpki-client