Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/CHUMMYTECH/0/E41CA6D6B740DAA6C89671809353E36E2765E6F8.mft
File:                     E41CA6D6B740DAA6C89671809353E36E2765E6F8.mft (raw, json)
Hash identifier:          ihe4QofyP/SrHimTqZOcSsb6jxLhnTSqmcuTqRcS75s=
Subject key identifier:   F9:16:44:D9:11:55:87:C8:6B:28:42:58:0B:1E:BB:38:B8:F4:20:D2
Authority key identifier: E4:1C:A6:D6:B7:40:DA:A6:C8:96:71:80:93:53:E3:6E:27:65:E6:F8
Certificate issuer:       /CN=E41CA6D6B740DAA6C89671809353E36E2765E6F8
Certificate serial:       294D89A4A4BA3A397421A1CABD8800AFCB197D50
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E41CA6D6B740DAA6C89671809353E36E2765E6F8.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CHUMMYTECH/0/E41CA6D6B740DAA6C89671809353E36E2765E6F8.mft
Manifest number:          B4
Signing time:             Mon 21 Sep 2026 12:57:14 +0000
Manifest this update:     Mon 21 Sep 2026 12:52:14 +0000
Manifest next update:     Tue 22 Sep 2026 13:52:14 +0000
Files and hashes:         1: E41CA6D6B740DAA6C89671809353E36E2765E6F8.crl (hash: 27f62AHMDp8aHyfMgZ4H1gWH0s46yNnhnvYNpVdMlgk=)
                          2: 323430313a636161303a3a2f33322d3438203d3e20313532363135.roa (hash: P28MxJti37VJz6VYqUkBb8iwJMFlwOgG9cGDLBFqQ5o=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CHUMMYTECH/0/E41CA6D6B740DAA6C89671809353E36E2765E6F8.crl
                          rsync://rpkica.twnic.tw/rpki/CHUMMYTECH/0/E41CA6D6B740DAA6C89671809353E36E2765E6F8.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E41CA6D6B740DAA6C89671809353E36E2765E6F8.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 13:52:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:4d:89:a4:a4:ba:3a:39:74:21:a1:ca:bd:88:00:af:cb:19:7d:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E41CA6D6B740DAA6C89671809353E36E2765E6F8
        Validity
            Not Before: Sep 21 12:52:14 2026 GMT
            Not After : Sep 22 13:52:14 2026 GMT
        Subject: CN=F91644D9115587C86B2842580B1EBB38B8F420D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9a:07:8b:46:70:65:e4:e0:80:f7:53:af:af:
                    88:88:75:04:42:d2:35:1a:2a:9d:95:c0:3f:98:27:
                    fb:69:43:47:63:f8:23:e4:35:2a:d3:a1:3c:6e:1f:
                    20:23:f0:dc:69:36:70:2c:3b:18:a6:f6:ea:ae:b9:
                    de:f9:ba:77:37:5c:8d:a2:5c:d5:13:cc:35:3e:6e:
                    c1:82:d4:14:d0:6d:65:bc:f8:b2:ca:9d:a3:db:0c:
                    88:a0:3b:16:ee:7f:0a:26:57:35:53:09:a3:9b:1c:
                    df:de:a4:a9:21:f5:92:86:9d:23:91:ee:fd:3f:4f:
                    08:34:1e:2f:e9:9c:5a:e0:98:88:5b:98:74:24:80:
                    40:d8:0a:38:91:74:b4:fa:5f:40:80:7a:81:86:ee:
                    db:a0:ae:97:96:60:c9:b1:01:95:96:fc:46:aa:09:
                    7c:64:0e:b5:a2:d8:4d:3e:b6:0c:9b:2c:9f:24:3a:
                    57:ab:88:57:be:3f:40:ce:bb:03:0b:f7:6e:91:eb:
                    a9:29:84:06:a1:79:16:ec:6e:46:f2:da:f4:2c:db:
                    58:ec:ec:7d:a0:e8:d2:69:9f:ca:1e:b9:62:de:fa:
                    07:88:70:d7:5f:30:b5:2a:40:94:26:be:fe:7d:27:
                    3e:6b:af:f0:59:97:a0:0b:f5:2b:58:17:8c:30:f6:
                    2f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:16:44:D9:11:55:87:C8:6B:28:42:58:0B:1E:BB:38:B8:F4:20:D2
            X509v3 Authority Key Identifier:
                keyid:E4:1C:A6:D6:B7:40:DA:A6:C8:96:71:80:93:53:E3:6E:27:65:E6:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CHUMMYTECH/0/E41CA6D6B740DAA6C89671809353E36E2765E6F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E41CA6D6B740DAA6C89671809353E36E2765E6F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHUMMYTECH/0/E41CA6D6B740DAA6C89671809353E36E2765E6F8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:2b:95:5c:c0:83:41:a5:f2:8d:20:1b:62:a5:61:4d:64:c3:
         2d:96:48:29:24:dd:4a:63:3f:24:3f:ab:29:f0:0b:60:7a:58:
         fe:30:0c:4b:50:63:17:28:64:68:26:57:d2:aa:45:f9:3d:69:
         84:dc:93:77:84:4e:f6:a8:83:74:db:06:5c:e3:0f:5c:55:d6:
         f7:41:ea:1b:40:5c:01:62:b0:21:0a:76:26:28:ce:13:38:19:
         ef:2b:f8:83:66:c9:25:4d:f6:65:8d:3d:34:d1:f0:1b:1b:a7:
         98:22:35:8f:ba:93:7c:06:2a:c6:fd:6c:40:9b:6d:15:41:c2:
         f3:ea:af:9d:b0:8b:8d:5f:4a:a7:05:5a:49:e6:c5:e2:f2:68:
         f2:03:08:00:0e:24:64:60:27:c2:da:38:64:f5:2b:b3:af:fe:
         0e:47:c5:0a:1e:e5:25:7f:c4:fa:b1:a6:d3:9b:87:fd:0e:a5:
         59:25:8a:84:14:7d:5c:f0:aa:fe:eb:87:c9:0a:53:c4:9e:4f:
         df:46:02:0a:22:84:aa:bd:7f:7f:d3:d7:be:0e:f7:b6:c8:cd:
         23:aa:21:83:55:6a:23:a1:c3:6f:40:fb:d3:5e:40:2b:9f:0a:
         9e:44:a4:77:9d:f7:1b:60:58:94:e3:49:a1:c9:53:f7:5c:5e:
         a1:a4:41:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:06:53 2026 by rpki-client