Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/FPG/0/A0D42927AB9ABEBE41482F06D20E1FCEBC4EC623.mft
File:                     A0D42927AB9ABEBE41482F06D20E1FCEBC4EC623.mft (raw, json)
Hash identifier:          2eB2a6/6K3SLl1BPgSB2tNo/savmDvJFDM+9r1+8QAA=
Subject key identifier:   EC:FD:C4:D1:EE:1E:6A:1F:DA:6F:0E:18:E9:1D:39:C4:B5:1F:55:58
Authority key identifier: A0:D4:29:27:AB:9A:BE:BE:41:48:2F:06:D2:0E:1F:CE:BC:4E:C6:23
Certificate issuer:       /CN=A0D42927AB9ABEBE41482F06D20E1FCEBC4EC623
Certificate serial:       048CC644EFB3E1B3F73A33B4794853D2DFC50033
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A0D42927AB9ABEBE41482F06D20E1FCEBC4EC623.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/FPG/0/A0D42927AB9ABEBE41482F06D20E1FCEBC4EC623.mft
Manifest number:          B1
Signing time:             Sun 20 Sep 2026 21:59:32 +0000
Manifest this update:     Sun 20 Sep 2026 21:54:32 +0000
Manifest next update:     Tue 22 Sep 2026 01:12:32 +0000
Files and hashes:         1: A0D42927AB9ABEBE41482F06D20E1FCEBC4EC623.crl (hash: Nv6HX6tgnH9DBvuMIix229Wgf8iuwuKSUb49+0Da9Us=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/FPG/0/A0D42927AB9ABEBE41482F06D20E1FCEBC4EC623.crl
                          rsync://rpkica.twnic.tw/rpki/FPG/0/A0D42927AB9ABEBE41482F06D20E1FCEBC4EC623.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A0D42927AB9ABEBE41482F06D20E1FCEBC4EC623.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 01:12:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:8c:c6:44:ef:b3:e1:b3:f7:3a:33:b4:79:48:53:d2:df:c5:00:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0D42927AB9ABEBE41482F06D20E1FCEBC4EC623
        Validity
            Not Before: Sep 20 21:54:32 2026 GMT
            Not After : Sep 22 01:12:32 2026 GMT
        Subject: CN=ECFDC4D1EE1E6A1FDA6F0E18E91D39C4B51F5558
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:3b:61:1e:ae:a5:00:a2:41:62:b1:04:0f:31:
                    b5:6b:5c:2a:71:f7:8a:82:06:d9:dd:3f:3b:ff:e0:
                    20:5a:9d:40:71:db:59:a2:d8:c9:dc:78:6c:76:cd:
                    43:31:5d:5a:ba:a9:44:c8:be:b4:3f:b1:6d:a1:03:
                    69:8c:08:dc:77:2b:32:62:aa:0c:0f:ce:02:bf:40:
                    3d:6c:26:fd:47:5a:bc:4f:c0:b2:7c:2c:1b:ef:22:
                    75:7a:95:7d:23:83:1c:32:92:7b:c4:60:a4:66:f4:
                    cd:15:61:71:51:60:8a:b7:0a:48:a6:b1:49:f2:62:
                    66:ff:09:21:09:c6:7f:f6:4e:80:61:46:8e:c5:d1:
                    6f:cb:47:2e:31:a3:df:85:73:8a:e2:f4:02:d4:53:
                    1a:96:de:6c:60:0f:fb:f3:20:6f:22:4d:55:41:aa:
                    d1:6e:c7:61:a7:2e:b7:ad:75:bb:9d:fe:4d:7c:5d:
                    c6:41:9b:40:b4:65:11:79:b2:f3:9f:17:94:3b:70:
                    08:e4:0a:a9:1e:59:69:aa:70:fb:c7:50:94:81:e3:
                    46:eb:d6:df:22:cb:98:b9:d2:39:ff:f7:fe:5f:1a:
                    eb:4d:d5:5c:34:d6:e4:de:17:78:d1:c7:00:d1:ca:
                    78:1e:df:9d:c7:19:0f:d1:e6:75:f4:30:0b:55:91:
                    8e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:FD:C4:D1:EE:1E:6A:1F:DA:6F:0E:18:E9:1D:39:C4:B5:1F:55:58
            X509v3 Authority Key Identifier:
                keyid:A0:D4:29:27:AB:9A:BE:BE:41:48:2F:06:D2:0E:1F:CE:BC:4E:C6:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/FPG/0/A0D42927AB9ABEBE41482F06D20E1FCEBC4EC623.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A0D42927AB9ABEBE41482F06D20E1FCEBC4EC623.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/FPG/0/A0D42927AB9ABEBE41482F06D20E1FCEBC4EC623.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:d7:1b:b6:6f:e6:0a:29:79:f1:8b:86:a3:e5:fe:3d:1c:ff:
         40:80:d1:0d:43:a0:4e:a9:d3:c5:f4:32:62:8f:96:68:8e:6a:
         ca:6d:f2:73:85:11:10:ac:e6:c3:7b:01:a4:49:9f:0c:2d:27:
         f4:be:99:c2:e9:c1:dc:17:74:d8:ac:c8:8d:19:8b:e8:70:94:
         95:81:64:84:03:56:4c:aa:3e:09:8b:eb:6a:4f:66:7f:ed:ad:
         b5:7e:f7:19:ee:99:bf:60:55:a8:06:77:d9:43:20:fd:9a:7f:
         8e:20:cf:15:bd:02:3c:96:29:e7:9b:23:cc:92:26:7e:9a:06:
         8f:53:4a:f9:47:5b:a7:c8:11:61:a0:a0:a9:38:59:ed:cf:47:
         24:31:d6:a6:ff:77:d4:9e:b7:38:6f:d4:b7:91:3c:a1:9b:6f:
         1b:1f:28:9c:5c:03:a2:a4:2c:f8:49:48:a4:1e:9d:19:45:c1:
         d8:b6:4e:3d:28:af:12:ed:16:9a:d0:58:f0:ac:3f:db:86:02:
         8e:cd:8e:99:fd:3a:59:bf:ce:7d:ce:2e:32:f8:93:cc:01:5a:
         6c:ee:f2:77:6a:3b:f5:44:96:d0:83:69:b4:fa:70:50:a7:27:
         02:59:2c:91:82:e4:f5:16:a4:35:e0:90:57:2b:8e:5f:ed:c6:
         1a:38:e6:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:41:21 2026 by rpki-client