Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/FET/0/71FA20FC269CE9805B2C67E59B357AA684246D10.mft
File:                     71FA20FC269CE9805B2C67E59B357AA684246D10.mft (raw, json)
Hash identifier:          YHlfTcLjtjdP8SDQFw8b6QlsU4oJ+KbIe/HYW1qRMI0=
Subject key identifier:   BF:F2:BE:8D:A1:15:D3:05:02:33:65:D2:83:27:DB:7F:07:72:F2:18
Authority key identifier: 71:FA:20:FC:26:9C:E9:80:5B:2C:67:E5:9B:35:7A:A6:84:24:6D:10
Certificate issuer:       /CN=71FA20FC269CE9805B2C67E59B357AA684246D10
Certificate serial:       4031F4EE3B91E406774ACC52F4F52D1170DB2CB5
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/71FA20FC269CE9805B2C67E59B357AA684246D10.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/FET/0/71FA20FC269CE9805B2C67E59B357AA684246D10.mft
Manifest number:          0208
Signing time:             Tue 22 Sep 2026 07:35:15 +0000
Manifest this update:     Tue 22 Sep 2026 07:30:15 +0000
Manifest next update:     Wed 23 Sep 2026 10:38:15 +0000
Files and hashes:         1: AS131602.roa (hash: bFVVVflXDjtPSgbd2kGD0xptDyu1BbSWXOBLoCefftU=)
                          2: AS4780.roa (hash: QQJXQiGkHNjYSpuZL3zRgm7fZG1sJGhbPjTUg8rFYY4=)
                          3: AS24154.roa (hash: 5d9AJsUf5IXX9W/gHPHz7U8Ox7RZTat1L8/CNPchahE=)
                          4: AS18419.roa (hash: ZCSuzYNR48mOflulSwJ+VbxIrexVtbA8N4ku0JnE5MM=)
                          5: AS131627.roa (hash: ibdv4KczlUiHuqdxTA5BtcOtsysjG6n663UL3tXWjXQ=)
                          6: AS9922.roa (hash: IvaQKEdOvWYDileFvmUMVBKXp3pAONy0KannjnRzngo=)
                          7: AS1131591.roa (hash: IauF2vAXzqx5+FLJ2cLeMJ1xdIINB1w640Q7FBxzL1w=)
                          8: AS38843.roa (hash: jM7g2m0zCuiB1qlWCZch8/MFHF41yFm0b+Reg/rCla4=)
                          9: AS18412.roa (hash: CE2zw8LAItHpE4fA47F43M9ZwSlBSQoJHpZ88RXQUI0=)
                          10: AS7539.roa (hash: lUFNDzGgGVAFEbEBGwiSfQup6Zafx2OuCvROzt5cEzs=)
                          11: AS9674.roa (hash: 9C5K47ndgW2seC4+CPiDYPqScyiQy8GU6bq7cU4Eugk=)
                          12: AS7482.roa (hash: bDpHLcVeEJ1yrwmPoAV0hOhONRWieRc4Sv7FCsbg4ec=)
                          13: AS131597.roa (hash: LsG9a5v2Mc0qNEqxwITDrgC+BMD5jh+oaM6a/pv0ARQ=)
                          14: AS131591.roa (hash: 2WVqmdm4VP88IWBjb6Gi5Fnp5mAxh+ckRSMyNK+QUJ4=)
                          15: AS22787.roa (hash: VUbSGazcGTcucPhizMbOyCoMALleK0c8ipJJWzpgI7M=)
                          16: AS9311.roa (hash: mHZvaMCozjD7f6DphdBIPuH3dfs0ge2AQcsBDnwptRU=)
                          17: AS24155.roa (hash: B6Wt7WZNXH4dszSEhiREgWBhCZgaFDS2V1pAm4aHp10=)
                          18: AS131584.roa (hash: 8KFDdQZFyVcMY2+NIJkef5bzRNRq/PwHNYJrezzuxZg=)
                          19: AS17709.roa (hash: mrpVzxZoxTygt2G+v0bD2ByN8qMV6ZAjQeyWiztjUws=)
                          20: AS9415.roa (hash: mKFpD5bUU8702FNsEGf/NSEUs3naus85mS1aXRB/EDM=)
                          21: AS16625.roa (hash: Uw6g+hlQZIZrMW4fK84JNXmuicKWw9wXXtylpvc6Qa4=)
                          22: AS131142.roa (hash: tweFci1Q2ZNgrPegbCYB4DWzZuIQBECyL1mmHV6V+D4=)
                          23: AS131601.roa (hash: GCaWtJY9VQL7/LVgzoKj6m7VZWgszoRurN0mGVKVBrM=)
                          24: AS18049.roa (hash: Bei2X31oyp7s9F9iVIOorTxmFiMUb3zaPgCFCKPZfMc=)
                          25: AS9919.roa (hash: eeag909kzwe+KHt+mHzcnGmEn6oKbwOTE6rnqH7qwZ8=)
                          26: 71FA20FC269CE9805B2C67E59B357AA684246D10.crl (hash: UOOmoKUEwkrBOaev4kZ0ZQQSogE+R0slRm35AmFlnuc=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/FET/0/71FA20FC269CE9805B2C67E59B357AA684246D10.crl
                          rsync://rpkica.twnic.tw/rpki/FET/0/71FA20FC269CE9805B2C67E59B357AA684246D10.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/71FA20FC269CE9805B2C67E59B357AA684246D10.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 23 Sep 2026 10:38:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:31:f4:ee:3b:91:e4:06:77:4a:cc:52:f4:f5:2d:11:70:db:2c:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71FA20FC269CE9805B2C67E59B357AA684246D10
        Validity
            Not Before: Sep 22 07:30:15 2026 GMT
            Not After : Sep 23 10:38:15 2026 GMT
        Subject: CN=BFF2BE8DA115D305023365D28327DB7F0772F218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:36:be:b6:cb:e8:38:21:b8:c1:99:bc:1e:d9:
                    d5:89:26:b5:94:b2:ac:52:de:16:d9:79:54:71:5b:
                    b5:21:a2:14:89:d1:23:05:26:a1:5f:6e:d2:8e:0d:
                    e4:57:b6:ee:83:e2:23:2b:88:83:f5:6c:19:6c:fd:
                    b4:c4:d5:19:71:b0:50:45:4c:52:08:0e:7e:14:d2:
                    12:8a:75:2d:21:c1:d4:0c:73:b0:13:56:f2:09:88:
                    0e:6a:b0:42:f8:c8:d7:8d:56:7d:08:3a:94:8a:66:
                    0f:92:4e:96:43:16:5b:da:de:ad:e0:80:17:9f:9f:
                    af:71:a6:aa:7a:2c:24:77:e3:10:0e:a2:95:94:cc:
                    20:58:49:70:af:b7:f2:36:45:bf:ca:f9:6b:b8:c4:
                    14:6d:18:ae:fa:c1:a5:fb:1c:81:57:27:81:67:7b:
                    55:9b:d2:7c:b4:ef:25:30:f3:7a:b3:81:25:f2:51:
                    4e:07:87:42:06:30:f3:7d:50:89:d9:f7:57:6d:83:
                    49:c8:3c:32:6b:fb:28:17:74:55:0c:b8:12:dd:68:
                    51:ce:d5:df:61:e9:4d:f2:86:e7:9b:b0:42:e3:ed:
                    f9:1e:12:52:68:5f:3b:ee:42:8b:b5:a5:58:b5:50:
                    fe:31:ce:a6:82:c1:da:8b:d9:aa:c0:95:c8:38:4d:
                    cb:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:F2:BE:8D:A1:15:D3:05:02:33:65:D2:83:27:DB:7F:07:72:F2:18
            X509v3 Authority Key Identifier:
                keyid:71:FA:20:FC:26:9C:E9:80:5B:2C:67:E5:9B:35:7A:A6:84:24:6D:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/FET/0/71FA20FC269CE9805B2C67E59B357AA684246D10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/71FA20FC269CE9805B2C67E59B357AA684246D10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/FET/0/71FA20FC269CE9805B2C67E59B357AA684246D10.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:80:3f:aa:4b:3a:e4:e8:ac:6e:99:ca:ad:87:ba:44:0f:fe:
         9e:bf:a9:6e:e7:37:92:d4:cf:35:01:ae:31:de:23:4d:9c:5f:
         88:16:cd:42:50:2d:74:01:52:98:5f:e8:8f:8c:4a:ce:e4:8b:
         53:2c:fd:38:0b:b0:17:4b:5b:db:c6:ff:f5:be:af:64:e0:53:
         3f:a9:84:bb:ab:5e:d0:d9:69:41:c8:29:c9:04:b3:2b:49:99:
         16:7a:22:5a:7e:f3:2f:60:5d:78:fb:b8:84:e7:c6:04:d7:7a:
         98:b1:ad:b8:b5:2b:0c:3a:20:d3:8e:85:ff:3c:56:2a:fb:df:
         c6:69:f7:44:1f:b9:2b:09:1b:9b:10:bf:78:ae:d1:10:6a:f4:
         12:f6:66:7d:ec:5d:87:df:94:a8:82:af:b1:bf:1a:16:8b:93:
         c7:1b:1d:5e:69:d4:44:2e:e2:0b:31:8d:76:58:1d:e0:ff:58:
         0f:90:c0:35:9c:6d:92:2d:cd:74:83:64:43:41:27:35:2e:6c:
         75:95:a6:21:a6:18:ee:8e:13:fa:13:3d:f0:48:d9:63:69:17:
         25:ac:35:dc:7c:5c:9b:7d:c4:5a:a7:6e:17:21:93:fa:41:aa:
         21:2f:ca:56:ac:12:9e:fe:b5:5f:41:db:8e:c5:29:de:c6:98:
         10:0e:b3:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:59:15 2026 by rpki-client