
$ rpki-client -vvvf rpkica.twnic.tw/rpki/LUOSI/0/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.mft
File: 034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.mft (raw, json)
Hash identifier: FjJ5R/Bl+jr+CxgwYwKAbiXZ0oKrRHSgd54T2DapSyY=
Subject key identifier: 78:AB:64:38:58:24:11:FE:68:87:2D:3D:ED:C2:2B:4C:38:8E:C1:98
Authority key identifier: 03:4B:41:A1:3A:BB:0D:61:A1:54:AB:31:89:C9:BF:D2:DA:ED:4D:EA
Certificate issuer: /CN=034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA
Certificate serial: 723DECA91FDB430C92A79441201003594E1D5DD3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/LUOSI/0/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.mft
Manifest number: C0
Signing time: Thu 01 Oct 2026 04:46:56 +0000
Manifest this update: Thu 01 Oct 2026 04:41:56 +0000
Manifest next update: Fri 02 Oct 2026 08:28:56 +0000
Files and hashes: 1: 034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.crl (hash: kt+qGycxWUU72m5hR6PXfrZeY0fbk6cjF2ih9ZT5AAE=)
2: 3130332e3137362e35302e302f32332d3234203d3e203138303436.roa (hash: nI0+2spKrN4Xv9D36qIey0CsWmeOODfk2dYZVrt7wH8=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/LUOSI/0/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.crl
rsync://rpkica.twnic.tw/rpki/LUOSI/0/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 08:28:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:3d:ec:a9:1f:db:43:0c:92:a7:94:41:20:10:03:59:4e:1d:5d:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA
Validity
Not Before: Oct 1 04:41:56 2026 GMT
Not After : Oct 2 08:28:56 2026 GMT
Subject: CN=78AB6438582411FE68872D3DEDC22B4C388EC198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:31:f3:2f:42:44:62:68:66:c4:e0:a3:12:57:
6d:ed:4f:86:66:0e:41:73:51:55:da:b3:b0:96:09:
f5:8c:2e:cc:36:e7:47:27:c2:1e:ec:81:ca:87:7f:
d3:55:df:3c:1e:8a:f1:f7:c7:fe:b2:0f:83:03:04:
35:c5:98:c6:60:42:53:c9:f3:99:c9:07:1a:2f:41:
5d:69:a2:86:73:ea:10:79:aa:8c:7e:1d:a2:f8:a5:
9e:89:e4:87:8d:36:c1:b6:32:88:a4:71:0e:aa:af:
24:f5:29:42:5c:7e:a2:4c:1e:34:a6:35:e2:31:66:
54:b9:32:73:fa:32:f2:40:39:ba:7f:ab:28:7b:7e:
9b:b8:0d:02:bb:e3:d5:fe:c8:f9:f6:3b:52:18:1d:
1b:8e:07:57:d1:67:05:ed:f6:86:3e:9a:0e:5d:ce:
cc:14:97:07:4b:1b:3d:f1:0d:b8:cc:51:9f:05:b1:
09:5d:d6:7d:ee:b6:30:0b:bd:b3:9f:d4:00:8d:6b:
a2:d5:3e:e4:c6:c2:16:98:44:0b:c9:21:ff:d0:70:
07:f2:ee:3c:34:55:25:4b:16:7e:1d:e2:35:35:20:
18:04:f1:86:de:74:91:2c:3b:16:1b:32:e8:7f:25:
da:63:99:2c:5c:e4:5b:ea:6b:bb:33:4c:11:81:e1:
18:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:AB:64:38:58:24:11:FE:68:87:2D:3D:ED:C2:2B:4C:38:8E:C1:98
X509v3 Authority Key Identifier:
keyid:03:4B:41:A1:3A:BB:0D:61:A1:54:AB:31:89:C9:BF:D2:DA:ED:4D:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/LUOSI/0/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LUOSI/0/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:a1:88:88:d3:71:5f:7b:be:e2:cb:d3:6c:ee:c7:39:73:80:
2a:ed:85:5b:48:5c:04:da:8d:ef:fb:83:b9:4e:65:3f:5f:1e:
ef:20:84:51:b2:a4:13:97:2d:6f:60:f4:3b:9d:a6:49:c7:ca:
a7:67:88:05:a3:f7:90:27:33:24:1d:3b:5a:0d:fb:56:76:01:
63:49:b2:c1:9f:df:4d:61:e5:f0:64:05:e0:45:fd:ab:9b:5d:
a5:84:0d:ef:e4:b0:87:e3:4d:ec:ac:e3:4a:d4:01:0b:0f:34:
10:0b:45:44:06:4f:b7:8c:79:b8:4a:0e:7e:dc:7f:1e:ac:2b:
5b:26:cb:21:82:59:e2:42:d5:ad:d1:2a:ea:17:7a:c4:8f:ae:
97:4d:68:60:15:4f:1b:97:77:97:c7:4a:f6:a0:a5:b6:ad:0b:
ba:07:45:99:b9:d2:e6:14:94:37:1b:b0:dd:9f:24:c7:d0:21:
67:5c:14:ce:30:6b:f1:b7:69:08:75:2e:fc:85:05:3d:0c:c5:
af:29:97:db:cb:14:3a:90:93:22:4d:00:4c:b0:dd:cd:2a:80:
26:cb:67:46:3f:da:15:53:3c:6b:67:f2:12:4b:9f:c9:0a:d8:
c1:f0:0c:49:36:e8:c6:eb:f8:35:a6:12:98:4f:fe:7e:10:ab:
e4:58:ef:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 00:43:04 2026 by rpki-client