
$ rpki-client -vvvf rpkica.twnic.tw/rpki/JDA/0/3E0842CB09173FD62797099AF95D837AFF05C8C1.mft
File: 3E0842CB09173FD62797099AF95D837AFF05C8C1.mft (raw, json)
Hash identifier: Pcs8TeXilWU1fhAqwQ3qskyGW3Dpu+g8+DFfb3racPg=
Subject key identifier: 18:12:5B:CC:BB:26:59:E1:2F:9D:47:85:76:84:70:B7:F6:9B:D4:EE
Authority key identifier: 3E:08:42:CB:09:17:3F:D6:27:97:09:9A:F9:5D:83:7A:FF:05:C8:C1
Certificate issuer: /CN=3E0842CB09173FD62797099AF95D837AFF05C8C1
Certificate serial: 50A24C455D9A23BDD41FEBA7C1EEF240DA5044DD
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3E0842CB09173FD62797099AF95D837AFF05C8C1.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/JDA/0/3E0842CB09173FD62797099AF95D837AFF05C8C1.mft
Manifest number: C6
Signing time: Sun 04 Oct 2026 02:43:57 +0000
Manifest this update: Sun 04 Oct 2026 02:38:57 +0000
Manifest next update: Mon 05 Oct 2026 06:36:57 +0000
Files and hashes: 1: 3231302e37392e3135342e302f32332d3234203d3e203138303431.roa (hash: 6gHJfiK63fKOqTCfE1ImEP6HSow+veqBLLBJ8NhAMVM=)
2: 323430313a353565303a3a2f33322d3332203d3e203138303431.roa (hash: qBti13dNoJJvS8VN2rEdP5+tGcjEGWujArPyCZdW53g=)
3: 3E0842CB09173FD62797099AF95D837AFF05C8C1.crl (hash: F2NNxq0+vFI0nM2c7iK2eku7eHU8pTp3YkMg7ZDSjL4=)
4: 3231302e37392e3135342e302f32332d3234203d3e203338313336.roa (hash: dBOQT7bQagPeeSG1nSOxtcaQ3wS6JFXvLy9ydXd5jHY=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/JDA/0/3E0842CB09173FD62797099AF95D837AFF05C8C1.crl
rsync://rpkica.twnic.tw/rpki/JDA/0/3E0842CB09173FD62797099AF95D837AFF05C8C1.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3E0842CB09173FD62797099AF95D837AFF05C8C1.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Oct 2026 06:36:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:a2:4c:45:5d:9a:23:bd:d4:1f:eb:a7:c1:ee:f2:40:da:50:44:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E0842CB09173FD62797099AF95D837AFF05C8C1
Validity
Not Before: Oct 4 02:38:57 2026 GMT
Not After : Oct 5 06:36:57 2026 GMT
Subject: CN=18125BCCBB2659E12F9D4785768470B7F69BD4EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e0:44:36:19:6a:2e:27:92:30:91:10:a1:1b:
83:f4:fb:af:7f:8b:44:82:4e:61:a2:f8:b5:db:cf:
34:04:e6:52:98:d8:00:9e:d5:7f:24:49:35:2a:78:
2d:c9:a7:1f:c1:7e:72:62:09:c9:36:ae:43:97:d0:
75:20:a1:82:fb:a6:75:31:a3:24:2c:1e:78:15:a9:
3c:31:4b:a4:f6:8a:1e:3f:fe:71:e9:39:91:9c:09:
7c:fe:a5:9b:69:36:df:d5:38:7c:32:1e:0f:51:f4:
6b:9c:45:b5:5b:d3:3f:81:e5:6e:26:9b:88:ac:77:
ca:31:e8:f6:a9:79:5d:02:f3:5f:82:90:d2:20:9e:
76:0f:08:ac:67:f9:b2:a4:6a:57:44:2f:67:28:69:
fc:d4:b0:07:7c:53:03:2a:b8:68:7d:87:bc:b2:c3:
a9:7b:09:58:15:ce:28:ed:96:5a:b5:0b:27:e1:40:
04:ae:19:8b:86:bd:87:9f:2c:de:10:7b:8b:29:21:
e9:59:07:8c:04:29:9c:76:61:f6:dd:f5:20:ac:5c:
5c:04:48:b4:86:e0:57:1c:0a:68:1c:a9:0c:d8:60:
89:4f:99:a3:b2:c1:2c:64:e1:ff:5a:9c:98:da:b9:
30:47:45:6c:26:41:7e:00:8e:38:d5:14:1f:aa:96:
4a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:12:5B:CC:BB:26:59:E1:2F:9D:47:85:76:84:70:B7:F6:9B:D4:EE
X509v3 Authority Key Identifier:
keyid:3E:08:42:CB:09:17:3F:D6:27:97:09:9A:F9:5D:83:7A:FF:05:C8:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/JDA/0/3E0842CB09173FD62797099AF95D837AFF05C8C1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3E0842CB09173FD62797099AF95D837AFF05C8C1.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/JDA/0/3E0842CB09173FD62797099AF95D837AFF05C8C1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:6c:70:50:0e:89:82:3f:1a:e5:3b:be:11:cd:13:a6:7b:9e:
44:ee:52:f6:68:f9:58:54:91:be:d7:e4:57:a2:6c:1f:15:12:
ba:72:3a:07:4c:fb:b1:33:57:09:94:a9:95:0b:31:89:ab:34:
47:52:51:03:bd:82:dd:9c:84:e7:6b:91:ad:6f:da:2d:3c:11:
dd:13:83:e4:26:8d:ef:69:81:25:16:fe:c1:a3:76:39:fe:97:
8b:c9:fc:04:5b:4e:78:5a:46:9a:88:04:00:6f:86:32:89:3d:
33:bf:54:e6:83:9b:8d:b9:c3:8d:5a:5b:34:43:00:61:67:3e:
34:36:ad:b5:1c:ff:4b:33:36:48:1d:d2:49:3e:9a:4b:92:46:
d1:81:e6:cc:51:74:ed:95:01:1c:97:3f:f1:44:11:45:04:fb:
4e:98:98:47:f7:8f:ad:94:10:5e:40:9d:61:fe:b6:4b:d6:c9:
53:37:f4:c1:ba:d0:4e:bb:8c:4d:30:cc:6c:84:89:b8:33:81:
4c:65:cc:8f:ab:4f:da:05:e5:b8:69:c1:96:31:ff:65:79:ca:
6b:0b:09:78:8a:03:34:33:c1:e4:f0:05:bf:e1:fc:3e:9b:ac:
3e:c1:15:07:56:17:de:eb:8f:26:dc:6a:d6:11:c6:95:53:e3:
6f:f1:ff:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 18:29:45 2026 by rpki-client