
$ rpki-client -vvvf rpkica.twnic.tw/rpki/PNI/1/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.mft
File: 3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.mft (raw, json)
Hash identifier: gv3inDETVZZDRYLJma7AYETxxjHyjhKPmmoIMN1/Ipo=
Subject key identifier: E3:91:B1:AF:5D:49:11:9D:CF:2F:6F:49:A3:42:C1:22:43:9D:85:8E
Authority key identifier: 3C:21:92:63:F2:6B:99:E2:DB:37:5C:D0:CD:FE:5E:54:B5:7B:5C:26
Certificate issuer: /CN=3C219263F26B99E2DB375CD0CDFE5E54B57B5C26
Certificate serial: 71AFB53604A5CB5693FE2C4AEC1E6A947330FC42
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/2/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/PNI/1/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.mft
Manifest number: B3
Signing time: Wed 09 Sep 2026 22:32:19 +0000
Manifest this update: Wed 09 Sep 2026 22:27:19 +0000
Manifest next update: Thu 10 Sep 2026 23:23:19 +0000
Files and hashes: 1: 3138372e37392e3234302e302f32312d3332203d3e20313331363432.roa (hash: 3hkv3oIEXxYKcJ6+wpyKK8B+zNNvwWzz7gTiuX5XoeM=)
2: 3138372e37392e3234352e302f32342d3332203d3e20313530373638.roa (hash: Hs6nQhcgL92iGp+zVUZzGJBIRibLpPYWP2j8Qnvkw6Y=)
3: 3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.crl (hash: aHmlV5zXAXglmOrUPaefZf8NCZMP7fAyU0lgVdKOFLE=)
4: 3138372e37392e3234372e302f32342d3234203d3e203134383734.roa (hash: xrdOBfPyCEULsjixsbr/Px/rQubD5zMfCzYg1CD5bIk=)
5: 3138372e37392e3234342e302f32332d3332203d3e20313331363538.roa (hash: yumD0lxBQJ+80NWqiC1APAnKFuIvqRgJ6DwlCxndQ/c=)
6: 3138372e37392e3234362e302f32332d3234203d3e203138313738.roa (hash: lvDvOodv8M6LrOgAyDJTwNdJGzoBoLeykAhTF1kRzCI=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/PNI/1/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.crl
rsync://rpkica.twnic.tw/rpki/PNI/1/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/2/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 13:53:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:af:b5:36:04:a5:cb:56:93:fe:2c:4a:ec:1e:6a:94:73:30:fc:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3C219263F26B99E2DB375CD0CDFE5E54B57B5C26
Validity
Not Before: Sep 9 22:27:19 2026 GMT
Not After : Sep 10 23:23:19 2026 GMT
Subject: CN=E391B1AF5D49119DCF2F6F49A342C122439D858E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9e:dc:0d:c1:4e:fd:9f:69:8f:2b:83:5d:bc:
53:c2:b0:75:04:cd:18:f4:12:b4:c3:a7:0d:3a:af:
c9:7b:23:ff:d5:5f:d5:a4:14:04:c4:31:5a:3b:84:
4c:1d:4e:c9:dc:e4:30:a1:ba:4a:57:7d:1b:85:81:
a8:c2:d2:69:44:d7:97:72:e8:ee:6d:93:43:d1:9e:
d9:9d:06:36:be:2d:fc:99:37:5f:74:1c:b7:3d:d9:
87:9f:d1:f5:a6:c5:a3:2e:a7:53:df:0e:de:6a:9d:
ff:17:73:8a:2c:08:7e:31:70:c5:1e:7a:74:83:f3:
03:3f:c6:88:82:c8:5b:ac:fa:ef:d7:3b:90:21:63:
9a:59:fe:71:38:40:e7:15:4b:93:36:20:ee:35:d9:
86:84:7f:fc:34:b9:cc:ba:38:2c:14:de:29:d6:13:
59:bd:26:cd:24:51:21:f7:ea:24:da:6f:20:51:9b:
05:d9:bc:fa:78:5d:db:c1:12:ab:39:c7:ad:80:9f:
07:39:e5:b9:a8:91:38:e2:de:13:6d:a3:b2:ff:11:
60:07:9d:08:f4:62:5f:b9:8a:81:04:f6:4e:2f:85:
95:c6:36:3b:3d:db:cb:44:f4:64:a6:68:ed:8f:3c:
3c:56:67:f1:da:b6:be:2c:5b:7e:a2:2a:70:b3:45:
8e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:91:B1:AF:5D:49:11:9D:CF:2F:6F:49:A3:42:C1:22:43:9D:85:8E
X509v3 Authority Key Identifier:
keyid:3C:21:92:63:F2:6B:99:E2:DB:37:5C:D0:CD:FE:5E:54:B5:7B:5C:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/PNI/1/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PNI/1/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:be:8e:e2:c1:2d:3e:eb:ea:d2:70:11:e6:cc:95:13:83:89:
42:38:21:83:46:fc:ab:ff:7a:fb:d2:8e:4a:e1:b3:3c:64:c7:
35:fc:eb:e1:5c:9d:cc:6d:e4:72:64:6f:fd:03:93:a7:97:0a:
7a:11:66:aa:3c:5b:0e:cd:18:cc:9a:fa:2b:4d:3f:d7:a5:ea:
12:e3:4b:e8:f0:d9:e5:fd:14:29:23:3c:3f:5b:6c:9d:c3:99:
e0:03:a9:4e:0c:59:1f:4f:43:91:e2:40:88:26:d3:c0:36:96:
57:9e:ef:f2:d7:71:85:31:a7:1f:2e:ad:01:83:74:54:bb:ec:
b9:fa:62:22:b0:d9:08:5d:38:5b:c3:3f:d3:61:06:60:65:26:
5e:0d:9c:3e:f6:ea:f2:ad:85:6a:39:b4:48:3b:33:bc:38:d6:
eb:d8:bd:2b:57:3c:4f:5b:29:b9:49:8f:99:a9:05:07:bc:ec:
ce:69:6f:2a:3e:27:46:1e:3f:ec:22:92:57:c3:c2:58:df:24:
70:90:4d:b2:c4:19:60:72:a5:1b:18:f8:a5:97:bb:32:3d:00:
f7:55:53:14:90:bb:b6:29:6f:12:ab:ba:e5:84:0c:8a:71:f5:
25:e7:bb:3f:ad:30:8b:63:00:88:74:e7:d4:8a:a1:41:40:cf:
54:84:6f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 06:48:42 2026 by rpki-client