Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/HCCG_HCEB/1/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.mft
File:                     59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.mft (raw, json)
Hash identifier:          ahM2+3l1tV5U/f7vSIvNj5sUC2tOOZvA9ybLhksQnHQ=
Subject key identifier:   7A:AC:1D:E9:3A:3F:58:C6:36:0E:65:74:77:F3:0F:3C:80:F9:32:8E
Authority key identifier: 59:D9:8E:8C:BB:AB:DC:DF:7B:22:2D:A5:00:F5:CD:E6:3F:F2:DA:0C
Certificate issuer:       /CN=59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C
Certificate serial:       71E818FA8545450E175843DDC1AABF9BE0A19C9D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/HCCG_HCEB/1/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.mft
Manifest number:          B3
Signing time:             Mon 21 Sep 2026 03:15:38 +0000
Manifest this update:     Mon 21 Sep 2026 03:10:38 +0000
Manifest next update:     Tue 22 Sep 2026 06:56:38 +0000
Files and hashes:         1: 59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.crl (hash: ZQJtpdnUjYocLsgNkQhWd1HQ+/BhGyxlu9Du7/ovw5E=)
                          2: 3134342e37392e36362e302f32332d3234203d3e203138303433.roa (hash: I/nH3WfH4w3frC/mXwjMQ3leEpW2mw7DOz5WWS1+97M=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/HCCG_HCEB/1/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.crl
                          rsync://rpkica.twnic.tw/rpki/HCCG_HCEB/1/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 06:56:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:e8:18:fa:85:45:45:0e:17:58:43:dd:c1:aa:bf:9b:e0:a1:9c:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C
        Validity
            Not Before: Sep 21 03:10:38 2026 GMT
            Not After : Sep 22 06:56:38 2026 GMT
        Subject: CN=7AAC1DE93A3F58C6360E657477F30F3C80F9328E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9e:78:d2:12:a3:e0:7e:a8:d7:3a:6e:a2:25:
                    4f:9f:d3:fc:a5:00:a9:cf:63:0a:72:fa:88:f8:91:
                    01:98:09:df:57:cd:10:93:11:42:6c:97:34:39:d4:
                    53:d7:b3:ef:47:e4:59:03:fd:1d:05:c2:ec:c9:65:
                    bb:70:5c:05:68:ef:de:c5:5a:11:2c:c8:7f:fe:15:
                    29:0f:4f:35:92:4d:3f:a2:59:5f:97:85:e6:8f:8f:
                    79:af:5d:31:c8:11:d8:66:3f:d9:c5:57:6c:ef:86:
                    38:31:ea:77:2e:40:a4:3b:ed:a5:5d:2a:c3:6c:15:
                    1c:a6:65:1a:f2:3a:ab:5c:7d:71:48:2d:9b:0b:65:
                    94:c6:c1:8d:40:94:60:16:b7:be:5e:a0:45:5d:ab:
                    49:8d:93:a2:0b:13:3f:51:22:80:8e:c4:ea:da:85:
                    bf:0f:1b:0a:73:24:a3:59:ba:9f:b9:4c:c2:90:60:
                    b4:bf:06:9a:81:8a:b6:6c:dd:f9:4c:9c:82:82:3c:
                    a5:6d:e4:8e:81:29:ab:80:13:30:c9:19:b0:e8:b0:
                    f6:eb:67:29:7d:e7:3f:24:8e:8e:be:bc:43:ac:6a:
                    df:ce:a7:42:39:a2:50:eb:d5:7f:a4:33:23:e4:bf:
                    7c:02:96:e4:cb:88:32:14:94:88:90:2e:39:75:05:
                    b6:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:AC:1D:E9:3A:3F:58:C6:36:0E:65:74:77:F3:0F:3C:80:F9:32:8E
            X509v3 Authority Key Identifier:
                keyid:59:D9:8E:8C:BB:AB:DC:DF:7B:22:2D:A5:00:F5:CD:E6:3F:F2:DA:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/HCCG_HCEB/1/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HCCG_HCEB/1/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:60:f7:c3:f8:45:73:eb:80:4e:a9:2f:6c:ab:8b:7b:28:70:
         ed:33:15:3c:b0:c4:07:c1:59:55:a6:9c:d5:b5:72:96:6f:ed:
         ba:8a:ea:37:9f:3d:9c:12:b3:aa:19:4d:eb:14:c1:13:5d:24:
         a0:72:f8:95:49:a2:57:2b:bb:e9:f4:82:7c:a4:51:00:53:f5:
         5f:e5:b5:4a:a2:b1:b0:38:cb:53:24:4c:ba:c2:c7:dd:4d:4b:
         34:f6:cb:19:1d:f8:50:fe:3d:15:c8:f8:32:41:0d:51:fd:d6:
         e2:c8:1b:db:48:9c:0f:57:f5:b7:2e:67:e6:82:1c:da:ef:ba:
         b6:45:00:df:9c:e8:53:ab:9e:39:30:b9:63:08:f9:9a:43:c2:
         36:6a:c7:bd:81:cd:c6:ad:65:97:84:b7:64:8b:99:06:22:e5:
         e5:66:f6:7d:75:be:83:4b:3e:0d:64:24:ef:60:b8:1c:73:76:
         e1:68:d5:a6:97:88:7c:a2:6d:11:e3:ee:3e:1f:10:45:4a:c4:
         db:9c:fb:59:5c:1b:46:c3:06:d1:cc:3e:ad:ac:43:1b:a1:56:
         36:05:72:9a:da:43:25:26:0b:ae:0b:be:2c:28:f6:6a:13:29:
         33:1c:96:8d:c6:a3:be:74:7f:87:86:06:00:08:92:dd:37:26:
         36:4c:8c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:39:03 2026 by rpki-client