
$ rpki-client -vvvf rpkica.twnic.tw/rpki/SDTV/0/3E0AB786AB86C4D25A7BE864DDD140760CC02EEA.mft
File: 3E0AB786AB86C4D25A7BE864DDD140760CC02EEA.mft (raw, json)
Hash identifier: 5kP+FrlGc00onKcdmF6tD4ZjpKD2UJGVLCtjkWjVMzY=
Subject key identifier: 75:78:A9:E0:80:E2:76:5B:9F:E9:2D:BE:B2:49:FA:C3:09:A0:FB:38
Authority key identifier: 3E:0A:B7:86:AB:86:C4:D2:5A:7B:E8:64:DD:D1:40:76:0C:C0:2E:EA
Certificate issuer: /CN=3E0AB786AB86C4D25A7BE864DDD140760CC02EEA
Certificate serial: 448F3C855E238793F3D35D6ED24D53BB88B3C9EC
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3E0AB786AB86C4D25A7BE864DDD140760CC02EEA.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SDTV/0/3E0AB786AB86C4D25A7BE864DDD140760CC02EEA.mft
Manifest number: C5
Signing time: Mon 05 Oct 2026 16:54:40 +0000
Manifest this update: Mon 05 Oct 2026 16:49:40 +0000
Manifest next update: Tue 06 Oct 2026 17:34:40 +0000
Files and hashes: 1: 3E0AB786AB86C4D25A7BE864DDD140760CC02EEA.crl (hash: Spi12lsXK6xOFKj6PteidkUmVoj38tApwlsPw1wwY38=)
2: 3130332e3130302e3136342e302f32322d3232203d3e20313331363131.roa (hash: LqxzSENA6MQT2gEkGTBGcnDvqFZoJ6iXojpLB0vT1ng=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/SDTV/0/3E0AB786AB86C4D25A7BE864DDD140760CC02EEA.crl
rsync://rpkica.twnic.tw/rpki/SDTV/0/3E0AB786AB86C4D25A7BE864DDD140760CC02EEA.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3E0AB786AB86C4D25A7BE864DDD140760CC02EEA.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 06 Oct 2026 09:57:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:8f:3c:85:5e:23:87:93:f3:d3:5d:6e:d2:4d:53:bb:88:b3:c9:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E0AB786AB86C4D25A7BE864DDD140760CC02EEA
Validity
Not Before: Oct 5 16:49:40 2026 GMT
Not After : Oct 6 17:34:40 2026 GMT
Subject: CN=7578A9E080E2765B9FE92DBEB249FAC309A0FB38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:37:9a:b2:7b:d6:37:05:7b:b9:5f:d9:82:d3:
a9:58:ba:10:90:5a:bd:be:96:f6:6c:ec:3d:1f:f3:
68:70:0c:4b:e5:7f:a8:4b:48:bb:d3:aa:84:1e:37:
2b:d4:85:b6:b1:7c:03:47:d8:ce:04:5c:81:c7:0b:
ce:8c:f9:4f:c2:24:1e:df:52:50:8d:53:3f:d7:7a:
2c:2b:be:6b:25:35:22:71:38:1f:b7:30:28:56:c7:
05:04:9f:14:61:ff:b8:37:56:24:18:7c:22:34:53:
86:d1:58:9b:5a:89:78:ce:74:b6:67:93:61:8b:72:
89:2a:2d:ad:85:1b:5a:76:b5:45:b9:8a:0e:a8:23:
85:9d:54:fb:a5:77:a9:ee:c4:c4:d2:9c:a2:8f:a5:
c9:19:8c:06:f3:59:73:38:61:94:64:68:d1:9b:40:
d8:29:83:47:6b:59:fa:a3:d2:95:f1:23:47:d9:59:
28:ff:97:d4:f2:22:eb:2a:9a:71:46:63:d4:38:40:
6c:ef:20:10:26:7a:2f:92:88:db:27:4c:32:dd:28:
ff:66:ec:a6:c9:0c:f9:96:6e:c9:f7:42:05:56:5f:
5a:77:47:81:ab:c6:c0:92:ce:a1:5f:2f:83:a1:9a:
8a:b7:dc:4b:14:fd:02:e6:3a:d3:61:7d:29:9c:79:
a6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:78:A9:E0:80:E2:76:5B:9F:E9:2D:BE:B2:49:FA:C3:09:A0:FB:38
X509v3 Authority Key Identifier:
keyid:3E:0A:B7:86:AB:86:C4:D2:5A:7B:E8:64:DD:D1:40:76:0C:C0:2E:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SDTV/0/3E0AB786AB86C4D25A7BE864DDD140760CC02EEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3E0AB786AB86C4D25A7BE864DDD140760CC02EEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SDTV/0/3E0AB786AB86C4D25A7BE864DDD140760CC02EEA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:bd:38:3d:e0:80:58:41:b8:a8:42:cf:68:d8:66:a4:27:0d:
0c:9c:e4:c4:46:60:59:ff:e8:66:89:03:85:9b:3a:36:36:ea:
4c:9b:54:2c:85:2e:7b:de:12:b0:dc:c0:93:68:d5:7f:0c:49:
b1:1e:1b:4e:17:5d:08:03:27:dd:1f:17:18:5c:92:17:1b:fb:
61:9e:bc:f4:06:09:25:8d:5e:fb:68:97:79:65:89:cb:49:99:
aa:60:98:8e:0f:32:fe:c6:aa:53:10:e6:f7:b1:fa:d4:92:05:
96:92:d1:a2:f0:35:df:6c:cf:cd:6d:22:07:fc:9f:8b:02:e7:
23:f2:aa:50:97:a3:44:3a:ea:7c:66:e8:7c:2d:a4:d5:af:6b:
e9:e1:7a:4a:72:bc:16:25:b0:d3:5c:e6:f1:3c:0b:09:6b:94:
c9:66:b2:ad:77:b5:1d:92:83:f1:47:98:f5:96:82:15:a1:a0:
cd:cd:88:9e:d5:da:02:5d:29:19:10:96:37:80:bd:d5:44:eb:
fc:b2:8a:f1:41:88:b1:15:46:08:18:6c:91:f2:7e:64:bc:68:
de:ab:5d:b2:77:d7:14:50:67:c9:68:38:ef:03:61:e3:cd:c2:
18:17:43:a2:d0:78:7d:4c:98:78:26:3a:29:ed:cf:4c:55:a6:
39:2f:86:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 01:26:11 2026 by rpki-client