Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/BOT/0/E9B9CBDA4B73475323F26FDB02B755EC7AC58540.mft
File:                     E9B9CBDA4B73475323F26FDB02B755EC7AC58540.mft (raw, json)
Hash identifier:          DYlpDxdis5gDXmVLtkvgSXzR9G5uLUtQmpccTT4xqI8=
Subject key identifier:   57:38:7B:DB:6D:C1:DA:27:D2:63:64:2E:86:E3:C5:77:5F:60:EE:D6
Authority key identifier: E9:B9:CB:DA:4B:73:47:53:23:F2:6F:DB:02:B7:55:EC:7A:C5:85:40
Certificate issuer:       /CN=E9B9CBDA4B73475323F26FDB02B755EC7AC58540
Certificate serial:       7B7D2852299909DFBB9985216E9EF7331E00CC22
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E9B9CBDA4B73475323F26FDB02B755EC7AC58540.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/BOT/0/E9B9CBDA4B73475323F26FDB02B755EC7AC58540.mft
Manifest number:          B1
Signing time:             Mon 21 Sep 2026 03:05:36 +0000
Manifest this update:     Mon 21 Sep 2026 03:00:36 +0000
Manifest next update:     Tue 22 Sep 2026 05:07:36 +0000
Files and hashes:         1: E9B9CBDA4B73475323F26FDB02B755EC7AC58540.crl (hash: ejkkxuPE/QO7ziqnY4/Fz9s4MchnRvfYu1XvPDwoGgE=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/BOT/0/E9B9CBDA4B73475323F26FDB02B755EC7AC58540.crl
                          rsync://rpkica.twnic.tw/rpki/BOT/0/E9B9CBDA4B73475323F26FDB02B755EC7AC58540.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E9B9CBDA4B73475323F26FDB02B755EC7AC58540.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 03:47:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:7d:28:52:29:99:09:df:bb:99:85:21:6e:9e:f7:33:1e:00:cc:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9B9CBDA4B73475323F26FDB02B755EC7AC58540
        Validity
            Not Before: Sep 21 03:00:36 2026 GMT
            Not After : Sep 22 05:07:36 2026 GMT
        Subject: CN=57387BDB6DC1DA27D263642E86E3C5775F60EED6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d2:9c:88:1c:82:6f:5c:07:c9:25:39:c7:ab:
                    3b:1b:e4:59:e1:ce:f6:15:60:01:93:66:dd:ba:db:
                    8c:91:41:bf:3f:fa:e1:5e:4f:27:b6:cc:f2:93:06:
                    56:c4:94:18:ad:ce:20:92:9b:e3:3a:58:70:0f:cd:
                    dc:d7:c1:f0:1a:53:b3:63:62:97:3e:bf:77:a0:64:
                    bc:ea:89:3c:81:74:6e:36:c4:c0:4c:82:cc:27:08:
                    02:9d:0f:60:1a:23:68:b9:ae:d9:6b:16:71:3b:60:
                    b9:30:56:41:0c:21:4c:5c:5f:58:24:87:ff:9c:fd:
                    66:3c:d7:33:09:6d:d1:e7:11:6d:5c:3c:f4:f5:2b:
                    b7:62:f4:ef:de:62:5a:af:be:71:4a:49:b1:83:ae:
                    ed:f9:7f:f3:a8:29:48:46:a9:07:21:f3:6c:93:f6:
                    31:4c:44:3d:7b:b2:da:e9:b3:d5:69:66:c5:8f:a0:
                    e6:7c:d7:5b:e9:75:c5:85:3a:d4:11:a6:c5:e5:8f:
                    24:02:50:60:01:5c:9e:78:0b:a2:84:e1:81:80:c8:
                    a5:0f:37:01:7a:7a:26:04:98:de:ec:40:92:59:1b:
                    78:6c:24:4e:e7:15:ee:9f:e8:c4:c1:d3:0c:ff:68:
                    c3:b3:d0:98:2d:53:a4:5c:49:b7:12:ba:18:ea:50:
                    96:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:38:7B:DB:6D:C1:DA:27:D2:63:64:2E:86:E3:C5:77:5F:60:EE:D6
            X509v3 Authority Key Identifier:
                keyid:E9:B9:CB:DA:4B:73:47:53:23:F2:6F:DB:02:B7:55:EC:7A:C5:85:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/BOT/0/E9B9CBDA4B73475323F26FDB02B755EC7AC58540.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E9B9CBDA4B73475323F26FDB02B755EC7AC58540.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/BOT/0/E9B9CBDA4B73475323F26FDB02B755EC7AC58540.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:18:60:8a:bb:bb:78:47:8a:31:d7:da:45:b5:ae:7c:09:a5:
         df:32:78:40:bb:04:4d:33:85:1d:6f:55:9c:d1:96:9f:f2:bc:
         17:a9:6a:08:6e:be:1e:bb:48:0a:51:e6:3f:0e:7c:4d:08:12:
         c1:d8:b3:a7:4a:70:b5:eb:47:69:23:49:52:5d:92:f3:0e:e1:
         d3:29:3f:9b:21:cc:ea:7c:fb:2d:cd:b0:b3:3b:8f:08:72:54:
         a9:9e:80:00:62:2b:66:75:21:6d:c1:e2:29:75:d1:73:68:95:
         e6:08:8f:fe:a9:27:d8:53:31:d8:60:38:4c:37:6b:98:27:c9:
         3f:03:41:95:8c:be:89:f6:a8:71:49:8c:ab:a2:f4:a2:19:c8:
         47:f8:e0:55:67:0d:04:a3:1b:2c:01:2e:a6:50:3f:69:75:f2:
         04:53:db:fd:b7:77:a6:68:63:f0:e2:84:90:b6:f0:17:85:a3:
         0d:b7:d2:66:7b:c3:6e:bf:85:52:c2:db:7c:1b:b6:c4:af:52:
         56:12:ec:87:a4:71:37:1c:47:99:57:48:48:ee:30:32:50:41:
         87:e8:2c:96:89:29:ba:87:93:48:2e:6d:c6:92:49:ce:08:ad:
         b2:f2:ba:fc:45:c4:1b:cf:e7:d3:c3:39:6a:05:8f:6f:68:6d:
         67:bd:f4:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 08:56:18 2026 by rpki-client