Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/CALEBTECH/0/8F16D2DC7D12A845A503D07215FF9D320CBB5BAB.mft
File:                     8F16D2DC7D12A845A503D07215FF9D320CBB5BAB.mft (raw, json)
Hash identifier:          zmQc1V/V6Uc43oKFV7huzfbdkFCzlLlLb3j7shbNPfk=
Subject key identifier:   C7:75:54:AC:87:BB:DB:14:B9:A7:CD:78:27:62:C2:4F:A1:55:B0:DC
Authority key identifier: 8F:16:D2:DC:7D:12:A8:45:A5:03:D0:72:15:FF:9D:32:0C:BB:5B:AB
Certificate issuer:       /CN=8F16D2DC7D12A845A503D07215FF9D320CBB5BAB
Certificate serial:       712F84223DEAA46C708699AAD052A8DFE5E071C5
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8F16D2DC7D12A845A503D07215FF9D320CBB5BAB.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CALEBTECH/0/8F16D2DC7D12A845A503D07215FF9D320CBB5BAB.mft
Manifest number:          B5
Signing time:             Mon 21 Sep 2026 09:46:50 +0000
Manifest this update:     Mon 21 Sep 2026 09:41:50 +0000
Manifest next update:     Tue 22 Sep 2026 12:35:50 +0000
Files and hashes:         1: 3136332e3132382e3137322e302f32332d3234203d3e2037353338.roa (hash: 76RD3PmOiizKI22CSgQ9dTiLJ8WL3ONkwXT5okUfmeg=)
                          2: 3136332e3132382e3137332e302f32342d3234203d3e2037353338.roa (hash: lN0c+zrFUM9A+yATR6PI6urDIFbSXfGahlIg9B4NXNw=)
                          3: 3136332e3132382e3137322e302f32342d3234203d3e2037353338.roa (hash: A4fXLq8miS4G/8CbEaXF5/ip5/2biJF6BwCxn18qXtg=)
                          4: 8F16D2DC7D12A845A503D07215FF9D320CBB5BAB.crl (hash: 9kZipS2FSbLOBTHgLL1VSj4BB5eio3yehlzC1FdtDmw=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CALEBTECH/0/8F16D2DC7D12A845A503D07215FF9D320CBB5BAB.crl
                          rsync://rpkica.twnic.tw/rpki/CALEBTECH/0/8F16D2DC7D12A845A503D07215FF9D320CBB5BAB.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8F16D2DC7D12A845A503D07215FF9D320CBB5BAB.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 03:47:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:2f:84:22:3d:ea:a4:6c:70:86:99:aa:d0:52:a8:df:e5:e0:71:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F16D2DC7D12A845A503D07215FF9D320CBB5BAB
        Validity
            Not Before: Sep 21 09:41:50 2026 GMT
            Not After : Sep 22 12:35:50 2026 GMT
        Subject: CN=C77554AC87BBDB14B9A7CD782762C24FA155B0DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:dc:7c:96:fd:f4:3f:82:5d:0c:46:fd:6e:6e:
                    7a:c4:25:f2:57:aa:2a:92:33:d7:28:e6:e4:cf:5a:
                    ad:56:1b:b5:3a:9a:53:bc:d4:8b:ab:8b:a3:6f:52:
                    f4:3d:78:1d:6b:55:b2:99:0c:48:81:72:29:a4:26:
                    7c:3f:27:63:08:48:f8:94:79:b6:a4:c7:87:59:87:
                    40:08:44:ba:99:09:b8:85:46:26:79:31:8f:16:d1:
                    31:fa:77:53:c3:cf:96:b2:ad:9c:b1:a1:00:0b:d2:
                    d3:bc:0a:2f:a0:52:3c:ba:d2:56:46:b8:de:43:2f:
                    57:ed:62:10:3d:cb:79:f8:98:b8:fb:1e:d7:37:39:
                    f9:1e:c1:b1:f0:ec:35:df:bf:e2:dc:58:ef:d7:89:
                    01:c6:e4:c0:0d:06:a0:b7:5f:79:b5:b7:a7:d5:db:
                    d3:ca:20:f5:98:54:23:7f:2a:eb:78:2f:5c:60:85:
                    88:c8:9d:a9:63:dc:2e:4c:38:ed:81:10:89:fc:b4:
                    a1:e1:cb:dd:c4:61:61:94:ba:45:46:c8:dc:5e:aa:
                    e7:4b:03:16:a7:dd:d8:8f:e0:77:ea:79:6f:57:de:
                    80:5f:56:39:4e:21:b3:f6:65:76:1e:16:2e:8a:84:
                    b6:a3:2f:89:77:a7:b0:00:9a:f7:ab:d3:61:e4:dd:
                    00:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:75:54:AC:87:BB:DB:14:B9:A7:CD:78:27:62:C2:4F:A1:55:B0:DC
            X509v3 Authority Key Identifier:
                keyid:8F:16:D2:DC:7D:12:A8:45:A5:03:D0:72:15:FF:9D:32:0C:BB:5B:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CALEBTECH/0/8F16D2DC7D12A845A503D07215FF9D320CBB5BAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8F16D2DC7D12A845A503D07215FF9D320CBB5BAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CALEBTECH/0/8F16D2DC7D12A845A503D07215FF9D320CBB5BAB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:ac:a1:61:a6:73:39:83:5e:2e:10:4f:60:e7:f5:92:f7:bc:
         6e:a7:42:72:33:b5:e2:6c:98:f4:cb:f1:d3:9c:5e:93:3f:22:
         b7:48:68:60:19:0a:26:3e:06:f6:18:c9:d6:d5:d8:0b:c3:d5:
         a2:56:73:b7:ea:24:22:d6:6e:86:53:b5:23:b2:40:06:0f:da:
         0e:e7:ca:20:a0:b3:28:ee:fa:9c:a6:4e:e5:54:9c:24:0d:97:
         5f:6e:2e:c1:96:29:97:94:7f:4f:d1:de:ed:bd:24:ee:c9:fc:
         15:f4:29:83:c6:ba:aa:9a:83:da:a3:4a:a2:ed:ac:fb:d6:6b:
         db:81:1c:ab:81:1e:45:61:ea:ac:cd:13:97:d3:e5:cc:ad:2f:
         1f:36:ae:d5:9c:ca:38:95:70:bb:67:17:0d:a2:90:85:f4:1c:
         24:82:d4:3c:37:8e:05:d5:31:49:e3:f0:9e:55:70:0a:ed:ba:
         9f:ef:64:44:6a:aa:61:bc:ee:c7:08:e0:5e:de:ca:f5:cf:9d:
         ff:c0:61:d8:a3:d6:08:80:3e:bd:0d:02:5e:1e:da:98:91:e6:
         82:dc:b4:75:68:f3:bd:06:58:33:e5:88:de:b9:f9:18:28:f4:
         2e:22:86:0d:f8:46:ef:11:f4:d8:e0:e5:81:2d:eb:1b:c7:b3:
         19:ec:78:b6
-----BEGIN CERTIFICATE-----
MIIE6jCCA9KgAwIBAgIUcS+EIj3qpGxwhpmq0FKo3+XgccUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEYxNkQyREM3RDEyQTg0NUE1MDNEMDcyMTVGRjlEMzIw
Q0JCNUJBQjAeFw0yNjA5MjEwOTQxNTBaFw0yNjA5MjIxMjM1NTBaMDMxMTAvBgNV
BAMTKEM3NzU1NEFDODdCQkRCMTRCOUE3Q0Q3ODI3NjJDMjRGQTE1NUIwREMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCS3HyW/fQ/gl0MRv1ubnrEJfJX
qiqSM9co5uTPWq1WG7U6mlO81Iuri6NvUvQ9eB1rVbKZDEiBcimkJnw/J2MISPiU
ebakx4dZh0AIRLqZCbiFRiZ5MY8W0TH6d1PDz5ayrZyxoQAL0tO8Ci+gUjy60lZG
uN5DL1ftYhA9y3n4mLj7Htc3OfkewbHw7DXfv+LcWO/XiQHG5MANBqC3X3m1t6fV
29PKIPWYVCN/Kut4L1xghYjInalj3C5MOO2BEIn8tKHhy93EYWGUukVGyNxequdL
Axan3diP4HfqeW9X3oBfVjlOIbP2ZXYeFi6KhLajL4l3p7AAmver02Hk3QDXAgMB
AAGjggH0MIIB8DAdBgNVHQ4EFgQUx3VUrIe72xS5p814J2LCT6FVsNwwHwYDVR0j
BBgwFoAUjxbS3H0SqEWlA9ByFf+dMgy7W6swDgYDVR0PAQH/BAQDAgeAMGYGA1Ud
HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0FMRUJU
RUNILzAvOEYxNkQyREM3RDEyQTg0NUE1MDNEMDcyMTVGRjlEMzIwQ0JCNUJBQi5j
cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvMS84RjE2RDJEQzdEMTJBODQ1QTUwM0QwNzIx
NUZGOUQzMjBDQkI1QkFCLmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG
VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0FMRUJURUNILzAvOEYxNkQy
REM3RDEyQTg0NUE1MDNEMDcyMTVGRjlEMzIwQ0JCNUJBQi5tZnQwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAAqs
oWGmczmDXi4QT2Dn9ZL3vG6nQnIzteJsmPTL8dOcXpM/IrdIaGAZCiY+BvYYydbV
2AvD1aJWc7fqJCLWboZTtSOyQAYP2g7nyiCgsyju+pymTuVUnCQNl19uLsGWKZeU
f0/R3u29JO7J/BX0KYPGuqqag9qjSqLtrPvWa9uBHKuBHkVh6qzNE5fT5cytLx82
rtWcyjiVcLtnFw2ikIX0HCSC1Dw3jgXVMUnj8J5VcArtup/vZERqqmG87scI4F7e
yvXPnf/AYdij1giAPr0NAl4e2piR5oLctHVo870GWDPliN65+Rgo9C4ihg34Ru8R
9Njg5YEt6xvHsxnseLY=
-----END CERTIFICATE-----
Generated at Mon Sep 21 19:43:42 2026 by rpki-client