
$ rpki-client -vvf rpkica.twnic.tw/rpki/TCSKY/1/3E6938BA00070CF3245F2491B7C88740A397A2D6.mft
File: 3E6938BA00070CF3245F2491B7C88740A397A2D6.mft (raw, json)
Hash identifier: 63Xl1X3a0yUXr2QEoHOfmqXIb/q65nyu2sOAbrD2C6I=
Subject key identifier: BF:5E:A9:2D:20:9D:FE:C7:37:49:2E:F6:98:55:40:99:67:D2:EB:D5
Authority key identifier: 3E:69:38:BA:00:07:0C:F3:24:5F:24:91:B7:C8:87:40:A3:97:A2:D6
Certificate issuer: /CN=3E6938BA00070CF3245F2491B7C88740A397A2D6
Certificate serial: 05B727D6B17B63D9C61D2A660C2E4229F90EA81B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/3E6938BA00070CF3245F2491B7C88740A397A2D6.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TCSKY/1/3E6938BA00070CF3245F2491B7C88740A397A2D6.mft
Manifest number: 81
Signing time: Sat 15 Aug 2026 00:43:56 +0000
Manifest this update: Sat 15 Aug 2026 00:38:56 +0000
Manifest next update: Sun 16 Aug 2026 01:16:56 +0000
Files and hashes: 1: 3136302e3139312e3230322e302f32332d3234203d3e203633393038.roa (hash: VL6yJyugn4Z1qBRj+96zRBJlpWCdeFWKLM0ISWuy9EE=)
2: 3E6938BA00070CF3245F2491B7C88740A397A2D6.crl (hash: 4XOQDYRi4Qqvb4DOVfWubTkIhG1desNEuxGTZ6jJFF4=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TCSKY/1/3E6938BA00070CF3245F2491B7C88740A397A2D6.crl
rsync://rpkica.twnic.tw/rpki/TCSKY/1/3E6938BA00070CF3245F2491B7C88740A397A2D6.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/3E6938BA00070CF3245F2491B7C88740A397A2D6.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 16 Aug 2026 01:16:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:b7:27:d6:b1:7b:63:d9:c6:1d:2a:66:0c:2e:42:29:f9:0e:a8:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E6938BA00070CF3245F2491B7C88740A397A2D6
Validity
Not Before: Aug 15 00:38:56 2026 GMT
Not After : Aug 16 01:16:56 2026 GMT
Subject: CN=BF5EA92D209DFEC737492EF69855409967D2EBD5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:90:fd:40:e6:f8:53:ab:bb:00:c1:03:da:84:
85:97:df:4d:07:37:a6:ce:2c:ba:40:90:7b:28:2a:
fd:8e:88:bc:49:3f:fd:2e:66:65:fd:cf:6a:d6:33:
6f:5a:37:f8:c4:bb:15:bc:21:c9:95:3e:4c:99:8b:
9e:53:43:41:09:8f:54:69:25:80:99:83:1f:ba:ac:
3b:b1:e1:95:51:03:29:21:b7:d1:e7:26:a2:6d:ed:
ca:d4:09:5b:7f:36:37:b3:aa:90:6d:a4:1e:2e:5c:
c2:b2:f1:14:b3:61:7c:f3:5c:1d:1c:63:a0:03:0c:
0a:09:0f:cf:2e:65:1e:ca:74:1a:f3:83:27:66:2e:
cf:0b:23:57:66:74:d0:7d:4c:cf:b3:37:bc:99:31:
85:e2:e3:43:05:f1:d5:81:3c:b9:cc:fb:e3:c4:ca:
78:c2:0b:1a:b2:e0:c5:f3:3b:57:a9:4b:b4:36:a2:
19:ed:2a:c7:e9:12:1e:cd:02:69:94:0b:2a:0e:66:
eb:ed:83:15:2f:98:54:aa:eb:79:31:f3:81:b5:67:
30:29:a6:12:88:a0:bf:03:63:35:30:b3:91:a9:bc:
51:05:ce:d7:fc:05:90:81:01:be:cc:e4:4e:56:6c:
1f:39:12:6e:69:59:3f:f7:17:16:26:6b:fa:b2:04:
40:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:5E:A9:2D:20:9D:FE:C7:37:49:2E:F6:98:55:40:99:67:D2:EB:D5
X509v3 Authority Key Identifier:
keyid:3E:69:38:BA:00:07:0C:F3:24:5F:24:91:B7:C8:87:40:A3:97:A2:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TCSKY/1/3E6938BA00070CF3245F2491B7C88740A397A2D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/3E6938BA00070CF3245F2491B7C88740A397A2D6.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TCSKY/1/3E6938BA00070CF3245F2491B7C88740A397A2D6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:cc:c4:aa:03:fd:f1:3d:8b:48:95:c0:66:8f:cd:0b:62:7f:
c8:4b:e4:e3:79:3e:e7:98:c4:84:7d:94:dd:dd:51:66:07:a3:
51:06:44:e0:76:d9:a8:3a:6f:6b:de:db:b7:93:c7:bc:7b:7a:
30:41:d1:53:4a:f6:50:5c:1b:37:a2:7d:30:79:80:ed:15:83:
14:16:81:ab:86:13:42:da:48:00:b4:04:bc:e1:fa:f7:b6:74:
02:36:45:2c:1b:2a:40:d2:61:56:4c:19:5b:b1:67:24:3f:30:
dc:cb:0a:22:02:3b:ac:3d:42:ca:9d:b1:e5:c3:7a:71:97:11:
0c:9f:0a:39:bb:be:85:1c:eb:b9:4c:84:d4:a2:52:c9:04:40:
a3:e5:b6:5f:fd:f5:b4:7d:0e:46:c3:f8:86:5c:57:25:00:76:
b4:83:1a:ed:a1:37:e2:97:de:7b:04:5b:00:e5:72:03:2a:eb:
a3:c6:29:b3:92:fd:79:05:ec:c8:f9:c9:35:eb:cd:d4:4d:30:
62:c7:4a:95:12:55:c2:e8:75:13:7c:0f:f9:85:25:a4:ef:45:
fd:7e:0e:11:68:58:29:18:ee:62:a3:74:5f:43:36:ce:52:8d:
f5:ee:cf:8a:ac:67:cb:47:c2:37:ea:9e:12:02:87:58:24:45:
97:02:3c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 10:23:21 2026 by rpki-client