Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/CLOUDNODE/0/E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.mft
File:                     E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.mft (raw, json)
Hash identifier:          5oGxiDYZMZW7T5+3saHNnEAVprDf02MpT8H3BG0zaDs=
Subject key identifier:   26:6D:42:48:61:DB:4D:BE:E0:65:68:EE:2D:5D:B8:9E:0B:CF:D9:0B
Authority key identifier: E3:82:3D:FE:A2:1F:EF:04:E3:26:9E:B9:AC:C3:BD:AC:1E:38:7E:CB
Certificate issuer:       /CN=E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB
Certificate serial:       0CE01342C443ED1F8AC8D6FA7192E003AD55F5F9
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CLOUDNODE/0/E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.mft
Manifest number:          FF
Signing time:             Sun 15 Nov 2026 01:49:08 +0000
Manifest this update:     Sun 15 Nov 2026 01:44:08 +0000
Manifest next update:     Mon 16 Nov 2026 05:01:08 +0000
Files and hashes:         1: 3130332e3137352e3136362e302f32332d3234203d3e2037343833.roa (hash: M1t938UdIZV1R1GsREb23xynohkO0qzg0e3CIh+SGGk=)
                          2: 3232332e32362e31302e302f32332d3234203d3e203231383539.roa (hash: KeYIdvmIdFmXoaD7PfpE0neyX1HamQXTrD45lQIfHyQ=)
                          3: 3232332e32362e31302e302f32332d3234203d3e2037353338.roa (hash: WltkBuqhKCJsRwS/4iiBwpBsyVQ3CFzN130wVvwvOIg=)
                          4: E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.crl (hash: LPsQh7eMPv2hpJEY9njwabAQhizY/IKQt0EAykHNOLQ=)
                          5: 3232332e32362e31302e302f32332d3234203d3e2037343833.roa (hash: KY91dZeL6/YwGvfBK0FnKFAVL/6EOM1qXx3UNjlNsSo=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CLOUDNODE/0/E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.crl
                          rsync://rpkica.twnic.tw/rpki/CLOUDNODE/0/E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 16 Nov 2026 05:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:e0:13:42:c4:43:ed:1f:8a:c8:d6:fa:71:92:e0:03:ad:55:f5:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB
        Validity
            Not Before: Nov 15 01:44:08 2026 GMT
            Not After : Nov 16 05:01:08 2026 GMT
        Subject: CN=266D424861DB4DBEE06568EE2D5DB89E0BCFD90B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:55:4f:78:91:a2:33:53:9b:34:02:bf:49:bf:
                    7c:51:de:3e:aa:8e:46:36:ac:ea:27:f9:3a:ef:65:
                    4e:9d:17:d4:dc:c6:0d:68:e2:22:43:e0:3b:5f:13:
                    e5:fb:08:a5:57:85:8f:4b:34:7e:86:98:ac:e0:5a:
                    1f:22:ee:56:06:66:6e:5e:15:a8:96:45:38:54:39:
                    86:58:79:0f:0c:9f:72:67:f9:34:4c:c2:35:b3:3f:
                    9e:b4:25:22:5d:51:5d:2c:da:a2:13:3f:aa:11:d8:
                    c9:b8:25:23:c9:c6:f1:9c:d9:0c:a1:74:70:da:a7:
                    ef:ca:f5:eb:1a:f6:5d:3d:e8:72:71:2e:2e:65:78:
                    40:28:f2:af:fd:98:b9:2e:24:93:a0:b6:6c:2c:f8:
                    de:3c:ab:a7:b4:c3:a6:74:59:6a:4b:94:87:80:01:
                    51:36:3f:ac:a8:de:36:42:9a:57:a3:4f:12:9f:55:
                    44:3c:6e:28:04:67:f0:d4:07:a0:80:10:14:1b:5f:
                    13:5b:a9:3a:36:0f:d2:75:03:24:12:af:da:69:8c:
                    5c:ea:d1:5e:76:6f:ea:82:5d:38:aa:1d:d9:6e:e4:
                    1a:a2:ce:58:df:73:3c:a8:ce:d7:e0:6b:73:f8:c5:
                    ca:e1:42:60:e0:ff:8b:ed:55:4e:e7:a9:f6:ec:11:
                    10:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:6D:42:48:61:DB:4D:BE:E0:65:68:EE:2D:5D:B8:9E:0B:CF:D9:0B
            X509v3 Authority Key Identifier:
                keyid:E3:82:3D:FE:A2:1F:EF:04:E3:26:9E:B9:AC:C3:BD:AC:1E:38:7E:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CLOUDNODE/0/E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CLOUDNODE/0/E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:01:ec:8e:02:02:39:fd:61:0b:ca:bd:32:99:aa:db:f0:19:
         52:dd:e1:65:ea:37:59:ff:c0:b9:25:f1:bc:4e:b6:b6:03:0b:
         16:8c:b0:ff:ab:41:b8:1a:e4:56:70:fb:71:34:1e:4d:1b:80:
         79:eb:c2:5a:96:2d:dc:8f:c8:73:1b:3a:f0:cb:76:48:11:c8:
         d9:92:c2:32:14:a9:44:56:51:d5:27:27:83:b5:68:ef:b0:c8:
         5b:e5:98:09:c3:46:ee:48:05:2c:d5:94:fa:5c:41:1b:70:db:
         e2:87:91:cb:1e:5c:b9:68:13:82:d2:21:44:e5:30:09:6f:cc:
         f4:92:3e:fb:0a:b6:ef:57:b0:7f:59:bb:cf:d6:6f:b0:7a:de:
         d0:ae:60:eb:6a:db:fe:91:c0:0e:29:f7:68:fe:5b:a7:fe:83:
         75:3e:a3:45:ac:fa:d2:4c:90:b6:33:3d:25:bf:a0:26:27:da:
         02:25:ef:8d:6b:95:6a:80:ce:8a:c0:e8:21:0c:e8:24:56:42:
         2b:59:3a:9a:7c:1b:ea:d4:99:ab:26:c9:4d:d8:91:66:06:10:
         41:57:29:9a:68:6d:10:24:9d:1c:52:57:db:19:c3:63:f5:39:
         6c:0e:d1:55:3b:83:80:4f:72:8c:10:8b:89:d5:72:ab:4b:d9:
         96:c3:c9:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:39:59 2026 by rpki-client