
$ rpki-client -vvvf rpkica.twnic.tw/rpki/UNIGATE/0/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.mft
File: 3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.mft (raw, json)
Hash identifier: 3KWTOZD5yDYZKLDrKigUjsW+pPSPxFQeFmUFm1Mbs0k=
Subject key identifier: 75:61:3E:59:4C:79:A9:48:B8:51:C1:64:A0:F1:D4:24:8A:B9:44:04
Authority key identifier: 34:42:A3:43:01:CC:61:0C:F2:72:F7:65:AB:BA:FC:9E:D1:F4:A9:BE
Certificate issuer: /CN=3442A34301CC610CF272F765ABBAFC9ED1F4A9BE
Certificate serial: 1FB85A8ADFA1D29AF9ACD5069F25A5D966BDEDA9
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/UNIGATE/0/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.mft
Manifest number: D0
Signing time: Fri 02 Oct 2026 01:24:47 +0000
Manifest this update: Fri 02 Oct 2026 01:19:47 +0000
Manifest next update: Sat 03 Oct 2026 04:28:47 +0000
Files and hashes: 1: 323430333a613363303a3a2f33322d3634203d3e20313331363030.roa (hash: YRy2uONSplRfIX6wYvcL6ju1JnuSbWlYj0VFYl1Cy7Y=)
2: 3130332e3132342e3135302e302f32332d3234203d3e203633313939.roa (hash: b2ZalweDzcakKyrLFwHtXt+tJpyBR6TY8NnJJnA3Zrc=)
3: 3130332e3133302e302e302f32322d3234203d3e203137343038.roa (hash: MqUpOjYcs+DThs4PEdfgWe16ib+Pm8Uun845j7bvpQE=)
4: 3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.crl (hash: 5hxnjF6iCY1WzIfvU+ZsIdinEz93RiXjIsxGjAXLU50=)
5: 3130332e3133302e39322e302f32322d3234203d3e203138343139.roa (hash: mqMrdcKlCIt7VJ32GwiC+l4+/ZkUaeX/w0lvhAkww/M=)
6: 3130332e3132342e3137362e302f32322d3234203d3e20313331363237.roa (hash: B76iUUauraI1kihuK+kvTleORdpwdo32DEFBdPbyoJw=)
7: 3130332e3132332e3134302e302f32322d3234203d3e203137343038.roa (hash: AK+3PKMDVdG06X9V5wJGENZB5ww85T0dXxYb87LZIBM=)
8: 3130332e3132342e3134382e302f32342d3234203d3e20313331363136.roa (hash: E5kPA+xRb0WD5EZHBZjgrSgPglYWgXmCYwr3HzWV3pk=)
9: 3130332e3132332e3235322e302f32322d3234203d3e203137343038.roa (hash: K11AKM5sK22jpCOO0qM2jx2kuIkROi3ckOE3FDdau4Q=)
10: 3130332e3132342e34302e302f32332d3234203d3e20313331363036.roa (hash: kJ6HcU/Qq1IqXEBiPGlvzo0MYuVJktlWTrE9zqJ5X60=)
11: 323430333a613363303a3a2f33322d3438203d3e20313331363030.roa (hash: XCT7s3NCwXJ69S7zo+KJz8lVVlArsSIbihOeA7c8fho=)
12: 323430333a616434303a3a2f33322d3438203d3e203137343038.roa (hash: wJNtwVwWGV2Ew01tEuJttk+ffpjPnv9QiD0Qlhkb3gk=)
13: 3130332e3132332e3134302e302f32342d3234203d3e203137343038.roa (hash: 9fFqGEZgCqmDZaHQYhGEG410naqEyxqFLnrF5q8mDOo=)
14: 3130332e3132342e3134392e302f32342d3234203d3e203633313939.roa (hash: IHX6knBAbyoCMbNTiCX2cYkm03r5ZVJalgMfPgOlByo=)
15: 3130332e3133302e39362e302f32322d3234203d3e203138343139.roa (hash: jmiWW03d5gkshbGnGPU/JnRLFc/IWZsVf7gkk91c90A=)
16: 3130332e3132342e34322e302f32332d3234203d3e20313331363237.roa (hash: ahzbTn0ryIxcgtgNPBswFdM5hAnHdiiLMvDKSEOceoQ=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/UNIGATE/0/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.crl
rsync://rpkica.twnic.tw/rpki/UNIGATE/0/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 04:28:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:b8:5a:8a:df:a1:d2:9a:f9:ac:d5:06:9f:25:a5:d9:66:bd:ed:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3442A34301CC610CF272F765ABBAFC9ED1F4A9BE
Validity
Not Before: Oct 2 01:19:47 2026 GMT
Not After : Oct 3 04:28:47 2026 GMT
Subject: CN=75613E594C79A948B851C164A0F1D4248AB94404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:29:e7:f5:5f:4c:48:d0:e2:97:1b:a0:27:a7:
62:d1:6b:77:92:1a:fd:4b:10:d7:53:23:d2:89:aa:
1c:3c:35:d3:74:2e:22:13:c0:3a:79:30:28:7a:f6:
70:78:f6:9d:03:ef:09:44:33:15:20:de:03:30:37:
43:c3:06:c0:55:b9:aa:d1:aa:7d:76:93:03:0e:6f:
92:2d:35:c7:73:02:42:13:35:2e:56:b4:c4:5d:9b:
14:81:61:93:59:b8:a2:db:6c:b2:94:b2:28:cc:71:
71:0e:53:cb:06:f6:c0:57:e2:94:9f:f5:ee:65:b2:
90:31:a0:1f:df:bc:cb:50:c4:42:a0:08:2e:08:a3:
da:62:e4:52:d1:c6:ec:a2:f2:9a:fa:8b:ad:e1:f1:
bc:fb:e1:7e:bb:12:21:73:a4:06:8e:28:23:52:09:
1e:f0:e4:1e:3a:fb:bb:ee:b7:10:9d:cd:03:7a:07:
ba:85:bb:f2:04:30:35:01:49:08:f1:21:e4:6a:32:
9e:3e:58:71:81:b6:4f:01:b7:78:b4:ce:f9:51:db:
f5:05:ed:3c:31:ec:1d:ad:96:fb:7a:7a:22:dd:3c:
f0:d1:7e:cf:87:14:d7:25:3a:bc:8f:d1:89:63:b1:
09:85:98:cb:67:2f:7f:4a:ec:02:1e:bb:11:df:d8:
8f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:61:3E:59:4C:79:A9:48:B8:51:C1:64:A0:F1:D4:24:8A:B9:44:04
X509v3 Authority Key Identifier:
keyid:34:42:A3:43:01:CC:61:0C:F2:72:F7:65:AB:BA:FC:9E:D1:F4:A9:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/UNIGATE/0/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/UNIGATE/0/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:e1:e1:07:25:33:b0:74:72:16:7f:91:95:db:84:1e:3a:97:
9c:28:a5:cd:da:fe:c6:a7:4f:2f:e9:7e:34:ef:3f:b0:1b:86:
37:aa:56:46:de:6b:70:b1:56:69:b8:56:67:4f:e8:67:9e:da:
53:cb:a1:8c:d2:b5:1f:7e:a5:ba:09:40:02:9e:63:5a:c5:97:
eb:1c:94:dc:56:d9:db:4a:90:77:32:e8:25:02:81:54:31:b6:
ff:9b:b3:8b:fc:85:11:83:f8:09:54:db:9d:e7:0a:57:11:6e:
98:c8:3d:94:3f:0b:74:4d:ca:4a:4f:c9:36:e0:34:b6:ec:aa:
24:9f:a9:af:91:d3:d3:84:c1:a9:1b:bd:75:18:26:47:b9:e7:
b5:cc:24:a3:ac:b4:f8:da:65:1d:bd:9e:b6:0f:0b:d3:b1:03:
53:14:24:f0:5d:57:93:d7:3a:2d:05:44:d9:d4:3d:28:38:61:
ca:c9:b5:5c:15:f4:e0:18:8f:cc:94:26:fc:6a:be:44:1c:0c:
78:bb:41:0f:80:15:0e:9d:43:d0:b9:b9:42:06:53:2d:ed:a6:
f1:d0:22:49:14:36:73:6a:e3:d1:71:37:6c:65:92:83:a8:45:
f9:0f:6a:60:00:80:f5:85:f7:a0:09:d4:20:07:d4:fa:23:e5:
9e:05:7d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 14:54:57 2026 by rpki-client