
$ rpki-client -vvvf rpkica.twnic.tw/rpki/TWNCTU/0/46AF3A717A403BC5489BF5532E8CB67721141841.mft
File: 46AF3A717A403BC5489BF5532E8CB67721141841.mft (raw, json)
Hash identifier: AOULyYHZhbbYtJ6paFLA4OCFEcnzzaHI0NIUo9UnPfA=
Subject key identifier: 15:2A:6F:2E:32:28:23:28:97:85:C6:2D:9D:E3:2C:B2:8E:60:A2:2A
Authority key identifier: 46:AF:3A:71:7A:40:3B:C5:48:9B:F5:53:2E:8C:B6:77:21:14:18:41
Certificate issuer: /CN=46AF3A717A403BC5489BF5532E8CB67721141841
Certificate serial: 40DA8220BF8C1CC2A3E1063C1299ADCCE6547405
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/46AF3A717A403BC5489BF5532E8CB67721141841.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNCTU/0/46AF3A717A403BC5489BF5532E8CB67721141841.mft
Manifest number: C3
Signing time: Fri 02 Oct 2026 18:48:34 +0000
Manifest this update: Fri 02 Oct 2026 18:43:34 +0000
Manifest next update: Sat 03 Oct 2026 21:53:34 +0000
Files and hashes: 1: 323030313a6631383a3a2f33322d3634203d3e2039393136.roa (hash: 4fzQlK7Do1Cwvcdk+e0kfmflXXnhAsZ2G8TwcC4Ef3A=)
2: 46AF3A717A403BC5489BF5532E8CB67721141841.crl (hash: X5Mb0LSjrU7jlUWxdO+jVeVcTi7cuv0UBvjxS5cfgwc=)
3: 3231312e37362e3234302e302f32302d3234203d3e203138313835.roa (hash: I1YE3+FdBKoKjsHXEupZh96Yo/8ldeKJYx6VAVq02Hc=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNCTU/0/46AF3A717A403BC5489BF5532E8CB67721141841.crl
rsync://rpkica.twnic.tw/rpki/TWNCTU/0/46AF3A717A403BC5489BF5532E8CB67721141841.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/46AF3A717A403BC5489BF5532E8CB67721141841.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 10:19:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:da:82:20:bf:8c:1c:c2:a3:e1:06:3c:12:99:ad:cc:e6:54:74:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46AF3A717A403BC5489BF5532E8CB67721141841
Validity
Not Before: Oct 2 18:43:34 2026 GMT
Not After : Oct 3 21:53:34 2026 GMT
Subject: CN=152A6F2E322823289785C62D9DE32CB28E60A22A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:55:0c:2b:86:95:74:c3:c5:a1:f2:37:e1:d6:
82:07:2b:57:d9:fb:db:23:2f:76:a8:29:05:12:cc:
c4:f6:82:68:1a:0c:0d:ff:ec:27:c4:77:e3:0d:32:
ac:34:19:d4:fa:8e:ea:79:46:50:df:5b:89:78:46:
38:07:cd:7b:59:b6:fc:4a:45:c8:11:34:fb:59:ed:
b7:e0:ad:f3:31:6c:3e:9a:84:e9:24:b6:cb:40:98:
a6:36:95:e2:ae:ed:53:b0:b0:3d:de:8b:7a:98:28:
e6:d8:01:f5:d6:d8:bb:f3:c6:5c:86:d9:8d:f5:18:
c3:79:83:a8:a1:89:35:e8:b0:07:ac:f8:0c:4d:41:
38:ba:2f:02:e9:68:25:0e:b0:09:24:54:78:df:99:
e7:c1:14:e4:25:91:72:67:f8:96:d6:f3:e2:ea:34:
1a:ac:34:0f:da:a2:06:2c:86:8e:d7:01:10:ab:ff:
a9:0f:a7:04:4c:55:84:89:1c:bf:51:60:61:37:a7:
13:8d:d2:b9:56:7e:83:4f:e2:e7:16:36:0b:2a:9b:
2e:2f:22:8e:1f:37:ed:b4:7c:10:ff:0b:2c:f8:c1:
18:ef:cd:dd:d8:ea:f5:aa:53:88:14:84:5f:33:ff:
ab:2a:f4:05:b5:60:e0:d4:d2:0a:91:8d:88:cb:8f:
f8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:2A:6F:2E:32:28:23:28:97:85:C6:2D:9D:E3:2C:B2:8E:60:A2:2A
X509v3 Authority Key Identifier:
keyid:46:AF:3A:71:7A:40:3B:C5:48:9B:F5:53:2E:8C:B6:77:21:14:18:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNCTU/0/46AF3A717A403BC5489BF5532E8CB67721141841.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/46AF3A717A403BC5489BF5532E8CB67721141841.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNCTU/0/46AF3A717A403BC5489BF5532E8CB67721141841.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:bc:5e:0d:4d:86:31:1a:1d:f4:14:99:2d:8f:1e:c9:b3:9c:
8e:6a:62:16:80:26:95:4f:4e:1f:81:6c:e3:f2:d0:9e:73:51:
a4:8c:48:91:44:0a:c2:64:3f:06:61:bb:50:18:0a:13:1a:04:
be:1e:6a:08:82:0e:d6:25:de:91:bb:a4:9d:e4:f0:33:64:8a:
34:a1:ca:17:82:f3:e3:7c:12:1c:b0:bd:ec:62:78:67:f7:cd:
09:24:42:a8:e2:6d:e5:ba:8f:7b:bd:fc:ab:e5:9b:85:4b:b5:
a3:72:5b:b7:2f:e6:62:2d:36:27:d9:9e:c5:63:41:cf:cf:14:
15:71:ab:dd:f5:91:78:b7:3a:ce:e8:c3:d0:e0:dd:65:58:cc:
a0:af:b4:00:c2:47:6a:84:5d:2a:f2:30:37:4e:49:97:95:bb:
77:8a:3c:c4:10:d5:d6:f0:c0:41:5e:ea:2a:47:dc:bd:3a:24:
aa:12:47:ac:57:ca:f2:50:f5:20:1b:02:ff:43:e6:69:83:5e:
4d:04:ae:cc:62:54:b0:d6:36:2d:fb:4a:08:8e:12:dc:49:d8:
a0:74:0c:6d:9a:50:bb:cb:97:ef:08:9f:fe:4a:1a:31:b6:cb:
05:73:a1:14:5c:aa:93:2b:fa:fa:70:ab:c9:02:11:5c:e4:24:
28:41:b7:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 01:39:02 2026 by rpki-client