
$ rpki-client -vvf rpkica.twnic.tw/rpki/GSN/0/C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.mft
File: C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.mft (raw, json)
Hash identifier: pItqrAjkLnQmGRbu6bYVFQaTvNqFgjt49YaJtoBIcwE=
Subject key identifier: 33:A1:75:12:88:56:0C:41:50:DC:37:99:09:C3:1A:1D:D8:44:8D:2C
Authority key identifier: C0:34:BD:9C:72:35:DC:2D:2C:C1:FD:7E:21:D4:3D:D0:6A:FD:C3:51
Certificate issuer: /CN=C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351
Certificate serial: 1311A74A9A3143C8868C03F1EC232B288662D989
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/GSN/0/C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.mft
Manifest number: 8E
Signing time: Fri 14 Aug 2026 12:16:46 +0000
Manifest this update: Fri 14 Aug 2026 12:11:46 +0000
Manifest next update: Sat 15 Aug 2026 16:12:46 +0000
Files and hashes: 1: 36312e36372e36342e302f31392d3139203d3e2034373832.roa (hash: hP1Ce0puK87bnBkuUoZR08dKEnokYQB4baKFChuzk+E=)
2: 3132342e3139392e36342e302f31392d3139203d3e2034373832.roa (hash: WuXDtugnIouFSIQBa95DW12JV+9YmfPeEhQ2M/9bHLw=)
3: 36312e35372e33322e302f31392d3139203d3e2034373832.roa (hash: aqyU1VbOW0v1AFwJhVg9uuI3iSWv7CEHxJprPdp3Meo=)
4: C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.crl (hash: llM4tnFHA/BpX8IxiNBTxT36l7pxxsPDqAYLwkv+UEQ=)
5: 3231302e3234312e302e302f31372d3137203d3e2034373832.roa (hash: KmWKCTE0ohasfgtfRxTrbUHfQbw/Y7nPMFINp2KhTpA=)
6: 3231302e36392e3233342e302f32342d3234203d3e2034373832.roa (hash: 1EDOB0BRp1H67cx5ce4EUm7AGvO1r28WnpZQ75ZC5MM=)
7: 323030313a343432303a3a2f33322d3332203d3e2034373832.roa (hash: gE5uEPlvoHn4YAIcNC7yJMhL4DCCYf0nlEOkebni8Us=)
8: 3231312e37392e3132382e302f31392d3139203d3e2034373832.roa (hash: /QiJMlPs1/pxye04spLNZHzDsoGhtgiX4yfIqbEq1wY=)
9: 3231302e36392e302e302f31362d3136203d3e2034373832.roa (hash: rzzN/S5reVNYW1kngDJ9waaxaT8cnwfi4WPnhHzUC7w=)
10: 3232332e3230302e302e302f31362d3136203d3e2034373832.roa (hash: MA9+ajK8aX1uKUtp2sxtKQhYTLC2td1kAHyxBVTGWcc=)
11: 3136332e32392e302e302f31362d3136203d3e2034373832.roa (hash: pGK5XkceqKAh4/7agsjC+GWpznd78YLbOQwpm2jcRiA=)
12: 36312e36302e302e302f31372d3137203d3e2034373832.roa (hash: RxtL1JrL62KxxH9+j1ZECsfg+3xXdkmccPO6Ql29WBI=)
13: 36312e35362e302e302f32302d3234203d3e203138313833.roa (hash: Z8hYEPWVHSTXdVxKiYoHCeRE+yhXuCK4vUjrYBstEPs=)
14: 3131372e35362e302e302f31382d3138203d3e2034373832.roa (hash: 8DMQSxYkXT39Wjc0+DxN6goaO03iNCXQLyzqirPMqAs=)
15: 3231312e37392e3136302e302f31392d3139203d3e2034373832.roa (hash: 1/SOl/bxT6+nXe2zhXDM2dmH5RkEj7//86PgvjmPKFQ=)
16: 3132342e3139392e39362e302f32302d3230203d3e2034373832.roa (hash: 7acpyK5V9E2LR1y17/549QCIrRIx//QUMCroyuhMnD8=)
17: 3131372e35362e302e302f31362d3136203d3e2034373832.roa (hash: MFCSbHbqKYuWPiPCKMVh2kx7z7XCHdm/WXFRairBaN0=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/GSN/0/C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.crl
rsync://rpkica.twnic.tw/rpki/GSN/0/C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 15 Aug 2026 16:12:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:11:a7:4a:9a:31:43:c8:86:8c:03:f1:ec:23:2b:28:86:62:d9:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351
Validity
Not Before: Aug 14 12:11:46 2026 GMT
Not After : Aug 15 16:12:46 2026 GMT
Subject: CN=33A1751288560C4150DC379909C31A1DD8448D2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:96:99:7b:b6:85:d8:5a:6c:af:4e:31:5e:8d:
26:30:3f:33:2e:06:3e:1a:f6:8f:b8:fd:70:43:73:
01:38:70:bd:0f:77:d1:83:5c:e4:82:81:9a:d5:69:
dd:0e:8e:1c:89:72:ec:22:22:90:60:be:d5:b3:39:
ac:18:b7:24:ef:0c:5f:08:20:3c:92:e3:f7:b3:5c:
6d:26:ca:dd:fd:6f:85:cb:8d:24:2e:05:72:2c:3f:
37:46:e7:a6:e7:4a:b5:42:be:b5:55:61:92:dc:53:
68:e7:11:9e:5b:f5:4b:8f:ba:f9:df:07:3c:55:7d:
a7:95:f1:cf:6a:09:6e:8b:3c:ae:25:c0:d6:01:63:
7d:47:68:8c:39:97:be:0b:84:7c:90:09:d3:25:c0:
f0:05:ec:84:48:f5:43:e8:e1:17:72:47:f2:6f:7b:
15:4a:3e:1f:fb:aa:76:8f:1a:44:11:8b:75:a2:24:
c0:82:04:3d:c2:ee:12:7a:c0:1d:00:45:ea:5c:40:
63:04:36:ec:2e:d6:66:f3:26:7c:65:78:6a:23:38:
b0:22:8a:6c:50:a3:15:b3:e0:53:56:63:cb:4f:d0:
2b:39:72:6a:b3:f3:98:8d:69:89:ab:21:45:38:e3:
4b:e1:d5:94:7f:09:07:de:44:2d:d6:f1:68:99:17:
25:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:A1:75:12:88:56:0C:41:50:DC:37:99:09:C3:1A:1D:D8:44:8D:2C
X509v3 Authority Key Identifier:
keyid:C0:34:BD:9C:72:35:DC:2D:2C:C1:FD:7E:21:D4:3D:D0:6A:FD:C3:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/GSN/0/C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/GSN/0/C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:db:a9:c3:74:e4:e5:30:ca:c5:37:ea:cd:b5:a8:05:2a:9e:
0f:7d:b3:01:a3:6f:92:fd:12:ae:ba:2d:d0:60:72:6c:59:f9:
f3:db:f6:17:b4:ff:16:be:d7:14:af:af:68:3b:07:37:b2:de:
b1:dd:c0:2e:18:c8:a8:1d:7a:f6:01:e1:04:57:0a:55:a1:e5:
07:88:8e:9f:33:cf:65:08:aa:0e:87:92:7e:c3:25:8e:01:77:
e2:9d:38:54:cb:d0:5b:64:2b:44:b4:4f:16:b9:2e:e2:4f:a5:
38:32:05:ac:5c:2a:a4:81:25:e8:21:47:62:39:38:a4:04:3b:
ff:31:aa:14:72:7e:71:21:d9:8b:bc:b7:d8:cd:07:ea:8f:16:
85:4f:44:e9:97:55:f3:09:01:c0:df:bc:4d:2d:01:f3:b5:47:
d2:4f:34:68:49:99:68:80:0b:64:b8:68:56:65:a9:aa:e6:9d:
43:28:6b:29:5c:bf:08:94:13:7d:88:7d:fe:62:14:66:da:ba:
19:8d:4c:64:2d:50:d1:dc:97:53:ac:03:9b:e4:c3:d8:9a:7c:
26:9d:7d:63:5f:61:ad:75:14:5e:17:70:af:7a:c0:84:c6:7d:
c9:e7:54:be:86:d9:1e:c9:50:43:ec:15:0c:c1:b1:71:9f:a9:
fb:09:d3:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:20:40 2026 by rpki-client