Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/104IT/0/F8132DC534387893755F94AE2B0F8685BA7C8D6C.mft
File:                     F8132DC534387893755F94AE2B0F8685BA7C8D6C.mft (raw, json)
Hash identifier:          HtrUzK+WtDOiZwxPLntLd1Xj7i09hLGMD5EU8E8yjlg=
Subject key identifier:   8F:82:D8:D2:8F:17:9B:9C:94:DA:A5:9F:FC:81:1E:36:5E:AF:FA:51
Authority key identifier: F8:13:2D:C5:34:38:78:93:75:5F:94:AE:2B:0F:86:85:BA:7C:8D:6C
Certificate issuer:       /CN=F8132DC534387893755F94AE2B0F8685BA7C8D6C
Certificate serial:       03E8BA8350949EC7F629A74BBDD2E6A365098025
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F8132DC534387893755F94AE2B0F8685BA7C8D6C.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/104IT/0/F8132DC534387893755F94AE2B0F8685BA7C8D6C.mft
Manifest number:          B3
Signing time:             Mon 21 Sep 2026 16:37:39 +0000
Manifest this update:     Mon 21 Sep 2026 16:32:39 +0000
Manifest next update:     Tue 22 Sep 2026 18:43:39 +0000
Files and hashes:         1: F8132DC534387893755F94AE2B0F8685BA7C8D6C.crl (hash: WeUzFX/DYcbRfIH6bpR0Jg3kcGqhnNcV/myBaaDcA0o=)
                          2: 3230322e382e31342e302f32332d3234203d3e203138343130.roa (hash: tZyg6sWa2FgNEO9W1AtN8+txS3cqFlmDzyg2hHDPbYs=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/104IT/0/F8132DC534387893755F94AE2B0F8685BA7C8D6C.crl
                          rsync://rpkica.twnic.tw/rpki/104IT/0/F8132DC534387893755F94AE2B0F8685BA7C8D6C.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F8132DC534387893755F94AE2B0F8685BA7C8D6C.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 03:47:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:e8:ba:83:50:94:9e:c7:f6:29:a7:4b:bd:d2:e6:a3:65:09:80:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8132DC534387893755F94AE2B0F8685BA7C8D6C
        Validity
            Not Before: Sep 21 16:32:39 2026 GMT
            Not After : Sep 22 18:43:39 2026 GMT
        Subject: CN=8F82D8D28F179B9C94DAA59FFC811E365EAFFA51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c7:77:fe:94:da:6b:49:40:21:ba:6c:8a:ea:
                    02:01:10:0b:43:34:ff:e3:06:f4:0f:9e:d9:09:0d:
                    55:77:d1:76:37:5f:53:35:39:b9:bf:7c:5b:ed:df:
                    a7:a7:36:09:76:27:14:b0:ee:95:bd:08:9f:7d:b8:
                    c0:8a:18:4c:36:58:91:c8:f5:7a:9a:e3:19:8b:3e:
                    03:af:d0:ff:87:90:c3:54:47:9c:ad:34:99:66:63:
                    73:de:a4:63:2f:1a:ff:0c:0e:f7:89:c6:04:a1:89:
                    51:51:eb:7c:de:14:5f:d4:9c:67:a4:17:bf:9b:35:
                    2a:89:b2:63:a5:d1:a5:0d:37:a1:d3:e1:f4:3e:ff:
                    1e:72:b5:1e:a7:d0:d0:d4:67:26:84:2b:3e:8e:40:
                    63:b8:98:ef:3b:fb:b9:25:c3:d7:16:07:2f:9e:f9:
                    8b:8d:cb:18:23:e6:cd:62:24:d8:57:6f:2a:8c:c8:
                    52:1b:77:d3:08:62:7c:4a:db:73:35:39:34:83:a2:
                    00:7a:ae:d7:4b:db:fa:97:98:33:3d:28:97:67:66:
                    6a:6f:f5:85:e8:52:80:e3:a5:b6:1c:32:b7:6d:c5:
                    99:1f:25:94:e2:3c:00:c0:34:16:1b:ac:a2:1c:54:
                    3b:66:0f:9d:34:e4:13:19:32:f6:12:f7:0f:cb:64:
                    dd:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:82:D8:D2:8F:17:9B:9C:94:DA:A5:9F:FC:81:1E:36:5E:AF:FA:51
            X509v3 Authority Key Identifier:
                keyid:F8:13:2D:C5:34:38:78:93:75:5F:94:AE:2B:0F:86:85:BA:7C:8D:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/104IT/0/F8132DC534387893755F94AE2B0F8685BA7C8D6C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F8132DC534387893755F94AE2B0F8685BA7C8D6C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/104IT/0/F8132DC534387893755F94AE2B0F8685BA7C8D6C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:98:f1:6b:a8:56:43:9c:51:68:1d:64:65:1c:17:8f:b9:d8:
         92:da:20:b8:43:0d:66:f9:47:98:1a:4f:08:b5:4c:13:02:83:
         f0:8f:b4:ae:0e:a1:86:c7:34:35:65:80:85:81:4f:30:03:14:
         2c:d7:83:3c:a9:f0:e8:2d:1d:83:33:a0:19:bb:cd:cb:42:08:
         a2:19:3b:b2:c3:c0:14:11:19:a0:9f:9a:e2:d3:8c:fb:0f:74:
         e2:de:e1:c7:30:aa:ec:01:dd:4b:2d:0f:5c:f8:94:a3:06:78:
         b3:d8:75:d0:7f:d0:7f:52:19:f8:f4:f4:5a:11:9a:24:e1:66:
         8f:29:1e:23:5a:8c:8c:b6:ea:86:eb:0d:d7:a8:00:1a:4c:78:
         c7:01:e5:9c:6b:f2:b9:38:13:c7:3b:08:ef:24:b4:c0:cd:4a:
         f3:b0:68:2b:15:5a:c1:e7:78:f8:c5:f9:85:bc:1b:c4:6f:73:
         db:d4:3d:1e:21:84:67:78:7e:87:06:e9:62:b9:60:66:8a:c1:
         8c:aa:97:6b:93:d5:45:cf:1e:1d:7e:7c:9c:13:4c:c0:2b:fc:
         10:55:28:39:49:a5:ed:b9:2b:4c:4f:2d:42:17:b0:e8:a1:be:
         3e:19:91:e5:92:81:42:3b:c0:8c:eb:a1:9b:94:c7:05:01:c5:
         de:21:98:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:37:55 2026 by rpki-client