Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/CJME/1/809400EAA50A7EB3BAC78EED2B98CD40B809FE9E.mft
File:                     809400EAA50A7EB3BAC78EED2B98CD40B809FE9E.mft (raw, json)
Hash identifier:          lQeh43tlYIcGa5gnWqCqehq1+aVEH+c3+y6ancjBHYo=
Subject key identifier:   A0:C5:19:19:7E:8D:B4:25:14:8F:19:0D:EB:87:14:FE:94:EC:AC:B1
Authority key identifier: 80:94:00:EA:A5:0A:7E:B3:BA:C7:8E:ED:2B:98:CD:40:B8:09:FE:9E
Certificate issuer:       /CN=809400EAA50A7EB3BAC78EED2B98CD40B809FE9E
Certificate serial:       66B48327C52FC8486BA24EF5DD4EEFEFE96CEADA
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/809400EAA50A7EB3BAC78EED2B98CD40B809FE9E.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CJME/1/809400EAA50A7EB3BAC78EED2B98CD40B809FE9E.mft
Manifest number:          B2
Signing time:             Mon 21 Sep 2026 02:40:03 +0000
Manifest this update:     Mon 21 Sep 2026 02:35:03 +0000
Manifest next update:     Tue 22 Sep 2026 05:47:03 +0000
Files and hashes:         1: 3135372e32302e3139392e302f32342d3234203d3e203633383937.roa (hash: MfbOWwd7Hn558DgriVzN99X3bjQPD3CS9r1j+Tc4hjs=)
                          2: 809400EAA50A7EB3BAC78EED2B98CD40B809FE9E.crl (hash: FOF98+UZ93m+dJ2v6mHQVNLhtjBsN9a24wJH09SeJSU=)
                          3: 3135372e32302e3139382e302f32342d3234203d3e20313430323134.roa (hash: sra5TL/z+TPl4yH11V9uosS6My/3wmncjZTTFXrHtmI=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CJME/1/809400EAA50A7EB3BAC78EED2B98CD40B809FE9E.crl
                          rsync://rpkica.twnic.tw/rpki/CJME/1/809400EAA50A7EB3BAC78EED2B98CD40B809FE9E.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/809400EAA50A7EB3BAC78EED2B98CD40B809FE9E.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 05:47:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:b4:83:27:c5:2f:c8:48:6b:a2:4e:f5:dd:4e:ef:ef:e9:6c:ea:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=809400EAA50A7EB3BAC78EED2B98CD40B809FE9E
        Validity
            Not Before: Sep 21 02:35:03 2026 GMT
            Not After : Sep 22 05:47:03 2026 GMT
        Subject: CN=A0C519197E8DB425148F190DEB8714FE94ECACB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:3f:54:ff:ea:e8:06:49:1c:5f:ea:80:a7:8d:
                    05:73:db:1a:4a:01:45:2a:e5:78:03:4b:06:10:ae:
                    7f:3d:b5:7d:5c:c0:a5:0e:c6:f5:ef:12:56:db:b4:
                    86:58:7c:9b:1c:38:d8:78:ac:5d:02:1b:12:7a:39:
                    0a:f8:72:f4:0c:39:3e:58:b7:b6:cd:bc:54:11:fa:
                    8c:37:66:80:e4:a2:fc:18:8d:39:dd:82:00:1a:bc:
                    a2:6c:47:5d:c0:85:35:12:77:f9:91:30:cf:8b:7c:
                    e4:4f:9c:c7:d5:c2:8a:65:84:a1:43:e0:b8:23:be:
                    eb:61:e4:82:f0:f5:b1:5b:d4:cb:db:71:40:5e:ad:
                    34:ab:0a:5f:25:1d:e6:85:75:5f:29:8d:fb:a4:06:
                    c5:6c:66:45:7a:df:d8:e7:30:d8:e1:03:00:ca:bb:
                    de:fb:ba:e7:f7:0a:80:ed:38:b1:0d:64:71:10:d6:
                    cb:d0:36:f6:6e:26:9f:87:1f:d1:8b:e0:49:07:dc:
                    36:a2:75:36:8e:70:eb:67:0d:cd:25:56:41:9f:7f:
                    0d:61:7f:92:37:b8:d6:2b:e0:8d:4e:4f:6b:4a:92:
                    c2:0b:30:10:1e:ae:c0:5a:ca:50:f7:84:87:25:c4:
                    45:28:f1:03:35:fa:d8:e6:69:69:30:20:6f:e8:22:
                    42:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:C5:19:19:7E:8D:B4:25:14:8F:19:0D:EB:87:14:FE:94:EC:AC:B1
            X509v3 Authority Key Identifier:
                keyid:80:94:00:EA:A5:0A:7E:B3:BA:C7:8E:ED:2B:98:CD:40:B8:09:FE:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CJME/1/809400EAA50A7EB3BAC78EED2B98CD40B809FE9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/809400EAA50A7EB3BAC78EED2B98CD40B809FE9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CJME/1/809400EAA50A7EB3BAC78EED2B98CD40B809FE9E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:cb:30:ef:0a:f3:7a:dc:95:4b:33:65:13:05:21:22:6c:77:
         f0:84:42:df:7f:0e:f4:b3:3b:a3:fe:39:ab:ae:50:51:c6:af:
         21:8a:51:4f:a7:c4:8f:bc:fb:5f:e9:b0:a4:07:11:f7:41:fb:
         76:56:da:1c:64:68:bf:17:61:b3:46:58:ca:c5:ad:31:47:2b:
         69:ef:39:61:19:32:90:ca:8c:3c:18:01:a9:0c:28:c4:e3:d3:
         8e:c3:21:d3:88:df:9b:27:85:63:2d:a3:6b:f2:ad:74:c5:12:
         4a:db:62:a2:ef:6e:2f:5f:61:1d:31:ca:9d:d6:35:8f:4d:ff:
         1e:bc:f3:06:d9:f5:a0:a5:1e:51:8f:41:ec:23:18:80:ef:f0:
         6f:b1:ec:68:5b:6c:bb:b4:e6:b2:86:0d:71:6a:14:a8:5f:78:
         d0:6c:cd:0a:d3:21:d3:1a:39:78:7a:87:58:3a:a5:d6:16:cd:
         9a:e1:df:79:e2:6b:79:61:1f:08:ea:c7:d5:30:21:5d:5d:57:
         9a:21:0d:71:bd:00:9d:a4:27:69:44:d8:89:b2:2d:04:1e:f7:
         de:41:92:81:a1:48:ea:6c:75:e5:4f:ad:f4:e7:3d:0e:f8:f5:
         09:90:1d:20:72:c5:80:2c:e9:2d:28:c0:7c:1b:04:ee:03:70:
         1f:02:69:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:26:15 2026 by rpki-client