Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/HCT/0/0887D67C493519D59AAE1BBED0303F38A26D0712.mft
File:                     0887D67C493519D59AAE1BBED0303F38A26D0712.mft (raw, json)
Hash identifier:          XjyIvoyHmxB9Dt8uXUnH2/xakPLVZf5+mlHvpa8OSII=
Subject key identifier:   52:EF:49:0C:C0:E2:E7:2E:A9:68:94:B9:D2:8E:D8:ED:7E:07:EF:40
Authority key identifier: 08:87:D6:7C:49:35:19:D5:9A:AE:1B:BE:D0:30:3F:38:A2:6D:07:12
Certificate issuer:       /CN=0887D67C493519D59AAE1BBED0303F38A26D0712
Certificate serial:       6F60B1870AA0005747834F02B6085029E406556A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0887D67C493519D59AAE1BBED0303F38A26D0712.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/HCT/0/0887D67C493519D59AAE1BBED0303F38A26D0712.mft
Manifest number:          B4
Signing time:             Tue 22 Sep 2026 09:20:54 +0000
Manifest this update:     Tue 22 Sep 2026 09:15:54 +0000
Manifest next update:     Wed 23 Sep 2026 09:21:54 +0000
Files and hashes:         1: 0887D67C493519D59AAE1BBED0303F38A26D0712.crl (hash: FjfYxAGD1KhaCVBKwzzfv+idBb+tBgL4lkCVuWzUX/M=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/HCT/0/0887D67C493519D59AAE1BBED0303F38A26D0712.crl
                          rsync://rpkica.twnic.tw/rpki/HCT/0/0887D67C493519D59AAE1BBED0303F38A26D0712.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0887D67C493519D59AAE1BBED0303F38A26D0712.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 23 Sep 2026 09:21:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:60:b1:87:0a:a0:00:57:47:83:4f:02:b6:08:50:29:e4:06:55:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0887D67C493519D59AAE1BBED0303F38A26D0712
        Validity
            Not Before: Sep 22 09:15:54 2026 GMT
            Not After : Sep 23 09:21:54 2026 GMT
        Subject: CN=52EF490CC0E2E72EA96894B9D28ED8ED7E07EF40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:35:42:01:d3:d2:2b:9c:55:fb:45:72:77:a7:
                    61:ca:23:a3:dd:de:54:20:9a:de:b5:f1:6d:a4:72:
                    90:e3:d3:86:83:ce:dd:07:e6:76:9e:65:5e:0e:95:
                    29:ba:d6:c7:fd:f7:33:f9:43:ab:53:92:49:a5:3c:
                    d5:e5:c9:40:c4:66:f1:97:df:d4:bb:3b:62:62:27:
                    d3:42:83:71:c5:df:74:54:28:6d:74:2c:a5:24:a9:
                    c9:f1:f1:e5:32:17:36:37:b7:4c:e1:d9:d2:12:e0:
                    28:ce:da:42:7b:36:ef:16:82:b1:56:3f:a1:b7:e7:
                    1f:82:a9:b2:cc:69:d0:db:64:43:d9:61:95:79:53:
                    1f:63:d4:17:3c:da:21:24:1b:08:03:b9:cc:07:79:
                    a3:08:69:5a:b7:dd:fc:f1:68:ce:34:1a:94:62:d4:
                    a3:67:7a:e3:9a:f7:c2:fe:1f:b2:cf:e1:03:92:dc:
                    d1:59:93:0d:8e:f8:df:05:01:58:fe:bb:ef:62:b1:
                    27:ea:02:f7:b6:6a:9d:7c:db:cf:9c:18:47:f1:b0:
                    a6:88:8c:01:d9:a7:d9:59:31:2f:4f:1b:96:50:93:
                    de:ff:13:e5:d7:62:53:8a:8d:e8:26:66:3e:2a:cc:
                    2c:7c:cd:3a:0a:73:f2:ec:bb:3f:fc:0e:f2:9a:b1:
                    c2:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:EF:49:0C:C0:E2:E7:2E:A9:68:94:B9:D2:8E:D8:ED:7E:07:EF:40
            X509v3 Authority Key Identifier:
                keyid:08:87:D6:7C:49:35:19:D5:9A:AE:1B:BE:D0:30:3F:38:A2:6D:07:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/HCT/0/0887D67C493519D59AAE1BBED0303F38A26D0712.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0887D67C493519D59AAE1BBED0303F38A26D0712.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HCT/0/0887D67C493519D59AAE1BBED0303F38A26D0712.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:8a:3f:36:31:93:fa:1b:52:bd:8e:de:44:00:7b:e2:9b:4d:
         89:fb:09:7f:97:b5:d6:c0:c9:7e:fe:db:1e:ba:2e:d5:49:54:
         f5:14:d5:3e:1a:7c:41:5e:13:c0:7c:fa:09:b9:5a:f4:18:10:
         4b:2f:ce:ea:57:33:27:87:32:1f:91:c8:70:46:12:aa:b8:6b:
         d0:34:23:4c:88:2b:57:fc:ee:56:d7:16:1e:9a:0d:88:a2:d9:
         6b:9e:07:f9:3b:4c:c5:31:62:a9:14:5c:42:0c:dd:a2:12:34:
         bb:90:0b:5f:1d:22:7a:42:22:19:d0:64:a7:a7:7f:d9:11:6d:
         b1:13:95:42:a1:8a:0d:a4:83:c8:26:9c:79:92:21:77:78:98:
         a7:fa:9c:66:d6:7b:8b:d4:5b:2a:31:8b:da:44:a7:7a:b8:28:
         43:ab:2a:cc:30:2e:58:12:0e:ea:1e:35:98:1d:9b:64:b7:da:
         92:5a:f6:2d:02:e1:2a:d6:5c:ea:3d:92:e0:f0:d4:1f:4f:20:
         fd:0e:3b:00:d5:67:3d:eb:42:8c:c6:42:dd:5c:bb:f8:99:89:
         d2:3e:85:6d:65:83:47:9a:86:4b:81:33:d8:ae:30:be:de:3c:
         a5:27:78:50:92:71:2e:37:39:74:aa:10:98:8f:f8:56:31:c7:
         e8:f8:59:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:12:52 2026 by rpki-client