Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/ERAY/0/19C24D64A5637F1F6837D06BA77F1000FF9E54D3.mft
File:                     19C24D64A5637F1F6837D06BA77F1000FF9E54D3.mft (raw, json)
Hash identifier:          EBTaF5P+7wHTzoE+gY6pwZ1GiAODfqBthW/iByxRUYU=
Subject key identifier:   35:3F:AA:BD:90:54:52:4F:C8:8E:1C:69:80:F5:51:73:E9:04:BB:10
Authority key identifier: 19:C2:4D:64:A5:63:7F:1F:68:37:D0:6B:A7:7F:10:00:FF:9E:54:D3
Certificate issuer:       /CN=19C24D64A5637F1F6837D06BA77F1000FF9E54D3
Certificate serial:       076720AB42A447522903E6D7F3B39068B47F1974
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/19C24D64A5637F1F6837D06BA77F1000FF9E54D3.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/ERAY/0/19C24D64A5637F1F6837D06BA77F1000FF9E54D3.mft
Manifest number:          B1
Signing time:             Sun 20 Sep 2026 21:49:29 +0000
Manifest this update:     Sun 20 Sep 2026 21:44:29 +0000
Manifest next update:     Mon 21 Sep 2026 23:45:29 +0000
Files and hashes:         1: 19C24D64A5637F1F6837D06BA77F1000FF9E54D3.crl (hash: dOgQdanDv97JNYSEAkZABVgacV0T+P+rDJevtzuQP38=)
                          2: 3130332e3235352e3230362e302f32332d3332203d3e20313331313439.roa (hash: Q23OYg/snKDMZT/GrhFuy0UWILnudHwqtr4/Nhp9Yqo=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/ERAY/0/19C24D64A5637F1F6837D06BA77F1000FF9E54D3.crl
                          rsync://rpkica.twnic.tw/rpki/ERAY/0/19C24D64A5637F1F6837D06BA77F1000FF9E54D3.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/19C24D64A5637F1F6837D06BA77F1000FF9E54D3.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 21 Sep 2026 23:45:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:67:20:ab:42:a4:47:52:29:03:e6:d7:f3:b3:90:68:b4:7f:19:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19C24D64A5637F1F6837D06BA77F1000FF9E54D3
        Validity
            Not Before: Sep 20 21:44:29 2026 GMT
            Not After : Sep 21 23:45:29 2026 GMT
        Subject: CN=353FAABD9054524FC88E1C6980F55173E904BB10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:45:1b:0c:59:99:72:d6:e7:8a:b9:be:dd:aa:
                    67:76:91:64:24:b8:d9:76:af:b7:88:a4:24:15:b2:
                    ca:72:7f:a6:66:20:19:bc:a7:bb:62:29:3a:96:be:
                    7b:06:b6:61:49:22:2c:aa:6f:f2:cd:81:ff:3a:c5:
                    02:c2:fb:19:56:00:c0:69:80:d2:01:3e:d4:f6:bc:
                    7e:3a:01:29:ac:31:08:fb:94:5b:ce:a2:d5:b0:a8:
                    10:32:f9:8f:72:87:d6:ac:0b:26:7a:51:28:15:e5:
                    d8:43:e0:a2:94:45:c8:ef:d9:84:9b:be:53:0b:54:
                    83:08:a5:f1:ee:23:9e:12:13:0d:0e:e4:ba:b9:84:
                    aa:8d:61:8c:d9:92:0a:ad:0b:1b:8e:b3:5f:9c:57:
                    1b:40:08:ea:56:bb:29:13:d1:e8:51:ea:75:05:2c:
                    21:6b:07:b8:b7:20:18:ba:26:eb:b3:60:61:6a:15:
                    a4:2e:fe:b8:76:fe:69:cd:f2:b8:61:21:3a:69:86:
                    fb:dc:5f:54:e1:e0:3d:41:20:62:d4:64:98:91:94:
                    4e:2d:65:92:58:a0:d8:02:2f:25:11:14:21:ac:19:
                    9d:9c:3c:10:6a:76:7a:51:1d:32:0c:18:8e:77:4b:
                    72:c3:c2:ed:48:43:03:1e:3f:bc:98:1e:58:de:19:
                    df:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:3F:AA:BD:90:54:52:4F:C8:8E:1C:69:80:F5:51:73:E9:04:BB:10
            X509v3 Authority Key Identifier:
                keyid:19:C2:4D:64:A5:63:7F:1F:68:37:D0:6B:A7:7F:10:00:FF:9E:54:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/ERAY/0/19C24D64A5637F1F6837D06BA77F1000FF9E54D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/19C24D64A5637F1F6837D06BA77F1000FF9E54D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ERAY/0/19C24D64A5637F1F6837D06BA77F1000FF9E54D3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:e8:82:8b:e4:61:64:b6:27:09:76:d1:9d:34:69:d7:95:cf:
         84:92:df:29:87:95:28:d2:5a:9c:ce:00:66:bf:40:07:1e:09:
         bf:5a:00:c2:c9:00:ea:70:c5:5e:d9:79:2d:56:28:73:87:f7:
         f8:c8:2d:a7:40:b0:f4:11:cd:2c:3c:dc:93:94:23:d9:60:4f:
         f2:9f:93:9f:32:b6:2d:af:21:04:8c:0e:ec:c7:73:05:05:04:
         52:64:41:bb:78:7a:fa:d3:23:bb:5e:8c:83:16:fc:80:70:e1:
         09:45:1e:a5:97:0f:35:7e:c6:a9:a3:9a:fc:79:39:c7:78:8e:
         ad:e5:a8:15:a5:41:7f:fb:d0:41:10:fc:c2:2a:7f:eb:aa:88:
         21:2d:c3:df:3e:b7:ff:4e:ff:c2:48:c6:67:e5:15:21:ff:4e:
         b8:ae:79:d5:90:a9:7e:7d:6c:76:13:1c:d8:76:a0:ad:86:31:
         cc:32:ac:a5:2d:b4:43:99:ca:dc:68:89:5b:ee:89:d9:84:27:
         74:23:cd:ff:29:ef:c1:d1:94:46:2d:4e:0d:49:2a:46:76:84:
         fd:03:3e:ff:ea:e6:e3:b2:c4:ae:78:4f:4b:49:6b:0b:2a:69:
         06:57:7a:79:0b:c4:9b:2a:6f:99:60:10:2e:f0:06:a6:d3:9b:
         f7:90:27:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:46:19 2026 by rpki-client