Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/DWT/0/27CCE49F4A9C14852B3A304359D3CB1E4E332C3E.mft
File:                     27CCE49F4A9C14852B3A304359D3CB1E4E332C3E.mft (raw, json)
Hash identifier:          s2XkDm16kTJf7fidRm0uXtCjK/arplZjhVlIXtZsYzY=
Subject key identifier:   49:56:F8:75:17:8D:0A:A4:05:7C:2F:19:41:7D:BB:25:A7:99:16:E5
Authority key identifier: 27:CC:E4:9F:4A:9C:14:85:2B:3A:30:43:59:D3:CB:1E:4E:33:2C:3E
Certificate issuer:       /CN=27CCE49F4A9C14852B3A304359D3CB1E4E332C3E
Certificate serial:       10F3725CCFE2929AE9169E3CF2094BFE68E9CEF9
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/27CCE49F4A9C14852B3A304359D3CB1E4E332C3E.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/DWT/0/27CCE49F4A9C14852B3A304359D3CB1E4E332C3E.mft
Manifest number:          C3
Signing time:             Mon 21 Sep 2026 15:02:30 +0000
Manifest this update:     Mon 21 Sep 2026 14:57:30 +0000
Manifest next update:     Tue 22 Sep 2026 17:25:30 +0000
Files and hashes:         1: 323430343a386363303a3a2f33322d3332203d3e203138343234.roa (hash: 4gWScR61JgdW+DF1aY1dC9SjqQwbjRsFEvvKJ9OCgWM=)
                          2: 3130332e3133362e36302e302f32332d3234203d3e203138343234.roa (hash: S921sHM83532MrUOCNr9PKJiFCun7WT0K6Mp3+xNGBE=)
                          3: 3130332e3133362e36302e302f32342d3234203d3e203234313638.roa (hash: fQNhxMDWLDnn8SUDvgc9/vo2VAhhq+XCGKU2dHcNA3A=)
                          4: 323430343a386363303a3a2f33322d3332203d3e20313331363431.roa (hash: TTxEQWNw4Ylcg7PTpqG/OPT7xRY1c5reCSbYb5rmm9c=)
                          5: 3130332e3133362e36312e302f32342d3234203d3e203138343234.roa (hash: mhY/JRJ0/YX0OrKxHsLUUy0bcmIM/yooXtBwL5AGx3c=)
                          6: 3130332e3133362e36302e302f32342d3234203d3e203138343234.roa (hash: hgk6at1iO0OJQPTiKNm33gGTVo3C6Gz3XwxHFSkpavo=)
                          7: 3130332e3133362e36312e302f32342d3234203d3e203234313638.roa (hash: y3Xt2kjac8EpAGOfATQn6d93w3ExM+twBbRTIwfgi1c=)
                          8: 3130332e3133362e36302e302f32332d3233203d3e203138343234.roa (hash: 9tzMguaODHrN51jp69MVkTe6Zmx/Q7WM2PILsk7jODU=)
                          9: 3130332e3133362e36312e302f32342d3234203d3e20313331363431.roa (hash: zKjqpmwfLmC+jHeZ6wWe1xudZI1SfEQI0I7B0qhIuOU=)
                          10: 323430343a386363303a3a2f33322d3332203d3e203234313638.roa (hash: GFZcsrLoo/r07dkSVQFIiODF08z6N22aERXHcseplrA=)
                          11: 3130332e3133362e36302e302f32332d3233203d3e20313331363431.roa (hash: vXes8xrZ+4Wg2OUZG1FgUHljTo8YNNJsej6TrQvhSkU=)
                          12: 27CCE49F4A9C14852B3A304359D3CB1E4E332C3E.crl (hash: tjcWSlCbbgro2SzW6SjzefDJlEJ8zzfrxTGOeFBpmbY=)
                          13: 3130332e3133362e36302e302f32332d3233203d3e203234313638.roa (hash: 9Akwlu3YI82aKp9S0AwuGoVG6iftGvpu9+EFv6FDBv0=)
                          14: 3130332e3133362e36302e302f32332d3332203d3e203138343234.roa (hash: ErXO9J1JgRwsdgmmJ3JWL5TWTk2wTxPz+j37MLYy08A=)
                          15: 3130332e3133362e36302e302f32342d3234203d3e20313331363431.roa (hash: R18TzZ1IDWFwbtB1qOREfkakmZjht8pAzFUb/1BBUak=)
                          16: 3130332e3133362e36302e302f32332d3332203d3e203435343734.roa (hash: TkAkLvD8kDat4R/6a5lSAK8cYL1VM50G1zssF4Wpmkc=)
                          17: 3130332e3133362e36302e302f32332d3234203d3e203234313638.roa (hash: i9xoeZqsITjFacUzsjFLUNP6o3EUEn66cfFPr0mFRl8=)
                          18: 3130332e3133362e36302e302f32332d3332203d3e203234313638.roa (hash: 2p9fMHfPi2cu+TOvJt8lAO8Pe3CRCnoo8OFb8fl3iMc=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/DWT/0/27CCE49F4A9C14852B3A304359D3CB1E4E332C3E.crl
                          rsync://rpkica.twnic.tw/rpki/DWT/0/27CCE49F4A9C14852B3A304359D3CB1E4E332C3E.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/27CCE49F4A9C14852B3A304359D3CB1E4E332C3E.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 17:25:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:f3:72:5c:cf:e2:92:9a:e9:16:9e:3c:f2:09:4b:fe:68:e9:ce:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27CCE49F4A9C14852B3A304359D3CB1E4E332C3E
        Validity
            Not Before: Sep 21 14:57:30 2026 GMT
            Not After : Sep 22 17:25:30 2026 GMT
        Subject: CN=4956F875178D0AA4057C2F19417DBB25A79916E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f4:80:1f:25:88:cc:6c:42:d2:7b:2c:6c:12:
                    39:55:9f:ba:57:9c:a4:5b:6e:f8:d4:fe:1d:af:1c:
                    df:06:55:18:7d:b7:22:60:c6:27:4d:b1:35:20:f5:
                    89:1c:3a:cb:87:9e:c9:48:1e:6b:30:69:28:1e:29:
                    11:d5:26:aa:0f:7c:a5:bf:8e:d8:5a:4c:21:0b:52:
                    c0:e3:d4:72:b3:d7:9c:6c:67:10:b7:c2:63:9f:ec:
                    a4:7c:6c:59:41:d3:18:26:27:a8:1e:3c:78:03:cc:
                    5f:eb:69:c5:49:f6:11:f1:9c:f5:6b:df:aa:26:6d:
                    bc:1a:a5:65:fe:66:8f:7d:81:2a:18:cd:5f:67:84:
                    7d:e6:07:c8:4d:fd:90:f4:ad:10:fe:c6:58:73:a1:
                    97:f4:f6:88:ec:d0:d5:34:c1:77:3e:5c:51:81:f7:
                    22:10:a7:11:62:3f:6f:f1:1e:6e:25:aa:64:d1:cf:
                    9d:02:d9:93:a2:a6:f8:59:4f:9e:03:50:c4:24:27:
                    6d:31:e7:43:3a:54:39:ea:c7:1d:84:fd:43:45:2e:
                    ff:5c:e5:06:7a:fa:02:bb:ae:91:10:74:5a:32:25:
                    35:cc:2b:fd:6f:dd:0e:90:c9:32:4a:9c:43:fa:05:
                    4d:b8:08:8e:53:8b:67:07:a7:74:25:a3:ff:93:eb:
                    a9:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:56:F8:75:17:8D:0A:A4:05:7C:2F:19:41:7D:BB:25:A7:99:16:E5
            X509v3 Authority Key Identifier:
                keyid:27:CC:E4:9F:4A:9C:14:85:2B:3A:30:43:59:D3:CB:1E:4E:33:2C:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/DWT/0/27CCE49F4A9C14852B3A304359D3CB1E4E332C3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/27CCE49F4A9C14852B3A304359D3CB1E4E332C3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DWT/0/27CCE49F4A9C14852B3A304359D3CB1E4E332C3E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:47:78:81:48:cc:6a:57:95:ac:68:b3:aa:45:85:3d:a5:52:
         17:48:17:4e:6b:20:5f:50:21:14:6c:fb:37:16:92:8f:ea:cb:
         8d:82:d0:12:c3:be:1f:ae:d4:b5:f3:79:18:d1:60:42:13:aa:
         38:af:8d:32:b2:1e:ff:de:7f:ad:96:ef:13:ab:c1:a9:bd:a3:
         b6:39:73:40:e9:c7:86:13:28:a7:e6:bc:7e:09:bb:de:be:32:
         71:aa:4f:b5:2a:9a:c6:63:ab:18:33:3b:6a:6a:5a:cb:a4:ea:
         f0:94:2a:4e:9c:d5:68:d0:b9:08:78:b1:19:d9:6d:e3:7b:f5:
         4f:a0:0f:70:00:7f:ff:08:93:06:c5:6b:dc:13:51:36:08:0e:
         14:5e:68:d1:db:cc:92:c5:ba:cf:93:e7:c2:d8:6c:fc:27:e8:
         54:86:1f:f3:4f:91:a1:32:9c:54:46:15:61:97:4a:09:1a:18:
         1b:3e:26:94:14:e7:19:cf:1b:53:00:64:7d:1b:bb:a8:1b:53:
         4e:ea:7e:39:72:f1:c0:f3:cb:a6:b6:18:87:d1:d6:56:53:97:
         a5:1c:71:07:d6:3e:39:88:8c:92:55:88:49:f2:22:5b:34:77:
         38:15:7c:29:62:41:c4:a8:c8:db:79:a9:82:81:08:14:f6:f2:
         9e:72:b8:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:46:43 2026 by rpki-client