
$ rpki-client -vvf rpkica.twnic.tw/rpki/UNIGATE/0/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.mft
File: 3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.mft (raw, json)
Hash identifier: NK077cx9OmvH3GraY3ts97WKZkDar76sq5oOeOs2fpo=
Subject key identifier: 38:25:82:7E:5F:BA:E3:A7:CE:62:3D:1B:E9:78:61:26:35:1F:85:22
Authority key identifier: 34:42:A3:43:01:CC:61:0C:F2:72:F7:65:AB:BA:FC:9E:D1:F4:A9:BE
Certificate issuer: /CN=3442A34301CC610CF272F765ABBAFC9ED1F4A9BE
Certificate serial: 4457D0D4950772993A65F46EE9811B686AA457F9
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/UNIGATE/0/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.mft
Manifest number: 8F
Signing time: Fri 14 Aug 2026 14:42:05 +0000
Manifest this update: Fri 14 Aug 2026 14:37:05 +0000
Manifest next update: Sat 15 Aug 2026 14:43:05 +0000
Files and hashes: 1: 323430333a616434303a3a2f33322d3438203d3e203137343038.roa (hash: wJNtwVwWGV2Ew01tEuJttk+ffpjPnv9QiD0Qlhkb3gk=)
2: 3130332e3132332e3134302e302f32322d3234203d3e203137343038.roa (hash: AK+3PKMDVdG06X9V5wJGENZB5ww85T0dXxYb87LZIBM=)
3: 3130332e3132342e3134382e302f32342d3234203d3e20313331363136.roa (hash: E5kPA+xRb0WD5EZHBZjgrSgPglYWgXmCYwr3HzWV3pk=)
4: 3130332e3132342e34322e302f32332d3234203d3e20313331363237.roa (hash: ahzbTn0ryIxcgtgNPBswFdM5hAnHdiiLMvDKSEOceoQ=)
5: 323430333a613363303a3a2f33322d3438203d3e20313331363030.roa (hash: XCT7s3NCwXJ69S7zo+KJz8lVVlArsSIbihOeA7c8fho=)
6: 3130332e3132342e3135302e302f32332d3234203d3e203633313939.roa (hash: b2ZalweDzcakKyrLFwHtXt+tJpyBR6TY8NnJJnA3Zrc=)
7: 3130332e3133302e39322e302f32322d3234203d3e203138343139.roa (hash: mqMrdcKlCIt7VJ32GwiC+l4+/ZkUaeX/w0lvhAkww/M=)
8: 3130332e3133302e39362e302f32322d3234203d3e203138343139.roa (hash: jmiWW03d5gkshbGnGPU/JnRLFc/IWZsVf7gkk91c90A=)
9: 3130332e3132342e3134392e302f32342d3234203d3e203633313939.roa (hash: IHX6knBAbyoCMbNTiCX2cYkm03r5ZVJalgMfPgOlByo=)
10: 3130332e3132332e3235322e302f32322d3234203d3e203137343038.roa (hash: K11AKM5sK22jpCOO0qM2jx2kuIkROi3ckOE3FDdau4Q=)
11: 323430333a613363303a3a2f33322d3634203d3e20313331363030.roa (hash: YRy2uONSplRfIX6wYvcL6ju1JnuSbWlYj0VFYl1Cy7Y=)
12: 3130332e3132332e3134302e302f32342d3234203d3e203137343038.roa (hash: 9fFqGEZgCqmDZaHQYhGEG410naqEyxqFLnrF5q8mDOo=)
13: 3130332e3133302e302e302f32322d3234203d3e203137343038.roa (hash: MqUpOjYcs+DThs4PEdfgWe16ib+Pm8Uun845j7bvpQE=)
14: 3130332e3132342e34302e302f32332d3234203d3e20313331363036.roa (hash: kJ6HcU/Qq1IqXEBiPGlvzo0MYuVJktlWTrE9zqJ5X60=)
15: 3130332e3132342e3137362e302f32322d3234203d3e20313331363237.roa (hash: B76iUUauraI1kihuK+kvTleORdpwdo32DEFBdPbyoJw=)
16: 3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.crl (hash: g7mzJaZGGqlncYFe+HADST6m6p15JxG5hvAciCSf3Wc=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/UNIGATE/0/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.crl
rsync://rpkica.twnic.tw/rpki/UNIGATE/0/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 15 Aug 2026 14:43:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:57:d0:d4:95:07:72:99:3a:65:f4:6e:e9:81:1b:68:6a:a4:57:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3442A34301CC610CF272F765ABBAFC9ED1F4A9BE
Validity
Not Before: Aug 14 14:37:05 2026 GMT
Not After : Aug 15 14:43:05 2026 GMT
Subject: CN=3825827E5FBAE3A7CE623D1BE9786126351F8522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ff:ef:e9:bd:ce:07:7b:21:ce:a6:a2:93:3e:
93:60:ee:b2:8b:a7:37:7c:e4:8f:37:13:cc:87:3b:
c7:2c:06:19:84:a7:d8:7d:c8:02:43:68:c8:a5:2a:
35:cc:bc:50:f3:ea:e3:17:01:f7:c3:58:45:2b:7a:
1b:ac:62:1f:bd:4f:d0:54:21:26:5a:54:57:f0:99:
b1:4d:c3:e2:a7:34:ef:cf:dd:da:bb:ad:03:ea:81:
87:cf:80:0d:bb:1a:97:99:c7:7b:34:cb:cc:4f:d1:
a1:46:0f:ce:f4:71:09:c2:33:8a:1e:d9:b7:f0:83:
f5:9a:b9:7a:8a:06:08:64:29:1a:fc:2e:a8:dc:ea:
79:85:5c:3d:b7:69:c1:10:90:be:af:dc:a9:69:0b:
85:9f:9b:df:70:77:d8:c6:30:8b:5e:1d:be:a8:69:
08:24:48:bd:08:9c:4a:78:d0:8d:12:71:ac:fd:ab:
b3:09:28:20:ab:ef:63:cc:5a:f3:df:fc:0b:ff:cb:
29:eb:09:b1:8d:83:71:f8:7c:72:55:65:90:64:dd:
50:b9:21:96:6b:b8:16:44:f9:fc:63:01:45:cf:0a:
e6:d4:0c:2e:44:81:e5:45:47:5b:6d:4e:53:66:4b:
9e:b2:f8:c0:c6:5f:d8:a9:99:67:9c:97:27:f7:1e:
b8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:25:82:7E:5F:BA:E3:A7:CE:62:3D:1B:E9:78:61:26:35:1F:85:22
X509v3 Authority Key Identifier:
keyid:34:42:A3:43:01:CC:61:0C:F2:72:F7:65:AB:BA:FC:9E:D1:F4:A9:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/UNIGATE/0/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/UNIGATE/0/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
de:c7:0e:7c:35:8a:10:a3:09:f3:28:c9:c0:b6:27:dd:57:ae:
e8:b1:76:cb:05:66:5b:a2:41:40:35:85:3b:02:1e:16:89:12:
75:2d:05:b7:f1:79:f1:bd:47:2b:e4:9c:f1:20:7e:a1:52:1b:
77:48:aa:f2:78:17:db:a8:ea:ad:31:8f:ac:99:2a:7c:6a:ca:
37:4d:e0:59:e9:95:bb:26:26:1d:02:b4:ba:3a:a9:8e:95:e2:
c8:18:e5:06:db:3e:05:4a:a6:55:ce:7a:d5:ad:9e:16:0b:34:
cd:8c:90:91:e4:f3:28:92:56:cf:0d:47:fd:d7:e0:1d:0d:1a:
86:d8:3e:69:b9:d7:88:3a:3c:32:50:db:a6:9e:cb:c8:b4:c7:
d2:7c:52:a6:9d:47:c4:1c:1b:c3:89:45:93:46:6c:2f:d7:6a:
e2:e1:d7:f3:3a:63:95:bc:26:94:4e:7a:ba:d7:0f:c7:d2:f1:
80:34:74:8d:a2:d6:36:4c:a9:c2:57:65:5b:72:01:1d:06:67:
8a:dc:08:e7:7d:a1:92:5f:b8:99:6d:26:c7:f0:9d:c5:11:9d:
16:c2:58:33:9e:fc:58:84:ff:80:87:a2:67:8d:5c:bb:c6:57:
b1:cb:49:9c:7b:86:1f:2b:b3:a4:c9:2c:ca:05:fc:ee:28:a3:
3a:b9:60:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:21:40 2026 by rpki-client