Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/HUSHENGXIN/0/2730CF9F132716F178F88FB1F268CE51CA264C9F.mft
File:                     2730CF9F132716F178F88FB1F268CE51CA264C9F.mft (raw, json)
Hash identifier:          ofTAE4ytHPLFfXfdNHsrS9FM4yJwlz1959jMj50A4JY=
Subject key identifier:   E6:68:A7:D8:23:1D:8F:7A:C1:EB:C3:08:25:C3:0F:38:0A:C5:0E:70
Authority key identifier: 27:30:CF:9F:13:27:16:F1:78:F8:8F:B1:F2:68:CE:51:CA:26:4C:9F
Certificate issuer:       /CN=2730CF9F132716F178F88FB1F268CE51CA264C9F
Certificate serial:       7BA6121CCD2F49A737336B008537385DA670CDEF
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2730CF9F132716F178F88FB1F268CE51CA264C9F.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/HUSHENGXIN/0/2730CF9F132716F178F88FB1F268CE51CA264C9F.mft
Manifest number:          B3
Signing time:             Mon 21 Sep 2026 23:33:03 +0000
Manifest this update:     Mon 21 Sep 2026 23:28:03 +0000
Manifest next update:     Wed 23 Sep 2026 01:39:03 +0000
Files and hashes:         1: 2730CF9F132716F178F88FB1F268CE51CA264C9F.crl (hash: +UzUtsyjhMydE6auh5YvCO2CLEyxQhmiZppOQzQN+3A=)
                          2: 3130332e3132372e3231362e302f32332d3332203d3e20313331363432.roa (hash: 9QLLKde7xB+44T3GJTEMGiTgMX83XZhXuc69+/0GzrU=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/HUSHENGXIN/0/2730CF9F132716F178F88FB1F268CE51CA264C9F.crl
                          rsync://rpkica.twnic.tw/rpki/HUSHENGXIN/0/2730CF9F132716F178F88FB1F268CE51CA264C9F.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2730CF9F132716F178F88FB1F268CE51CA264C9F.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 22:16:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:a6:12:1c:cd:2f:49:a7:37:33:6b:00:85:37:38:5d:a6:70:cd:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2730CF9F132716F178F88FB1F268CE51CA264C9F
        Validity
            Not Before: Sep 21 23:28:03 2026 GMT
            Not After : Sep 23 01:39:03 2026 GMT
        Subject: CN=E668A7D8231D8F7AC1EBC30825C30F380AC50E70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:40:28:85:8a:11:b8:fb:df:36:18:5e:51:2c:
                    2e:04:3e:bc:ac:26:8b:86:88:b4:d5:a2:46:72:6b:
                    65:d9:b6:d4:56:86:26:4a:37:b7:6f:88:76:f8:7a:
                    79:49:8e:a7:53:ee:da:ef:60:d2:a1:5b:6c:e8:76:
                    7d:eb:d9:cc:45:2e:7e:92:03:17:45:82:f2:72:95:
                    6b:86:f3:dc:80:ee:e2:08:de:62:74:81:fe:74:ff:
                    da:d5:e7:0e:4c:47:f0:b6:7d:d6:4d:5b:06:0a:49:
                    7c:5c:1b:a0:9d:37:da:7e:85:9f:37:aa:bf:93:f4:
                    31:e9:10:43:1d:83:31:57:99:f9:35:67:7b:bd:7e:
                    29:ad:45:da:f3:95:e1:46:05:68:8f:8c:49:51:41:
                    f2:da:7c:84:75:ae:cb:d0:97:26:6a:0f:6d:df:4a:
                    b7:da:a1:bd:bf:31:cd:d4:8a:9b:46:25:86:f0:0c:
                    52:18:2b:69:a9:e6:46:0e:47:16:b0:f0:ae:d3:5a:
                    6a:06:b9:0a:bf:3f:2b:99:06:cd:b5:da:39:68:2a:
                    cd:b3:8c:64:d6:65:fe:8f:f2:f9:ac:5b:bc:7b:70:
                    87:ee:cc:c2:63:78:00:92:8e:9a:3a:15:47:c9:88:
                    fa:57:8f:28:4a:99:21:80:b8:20:63:af:4a:be:0f:
                    a1:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:68:A7:D8:23:1D:8F:7A:C1:EB:C3:08:25:C3:0F:38:0A:C5:0E:70
            X509v3 Authority Key Identifier:
                keyid:27:30:CF:9F:13:27:16:F1:78:F8:8F:B1:F2:68:CE:51:CA:26:4C:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/HUSHENGXIN/0/2730CF9F132716F178F88FB1F268CE51CA264C9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2730CF9F132716F178F88FB1F268CE51CA264C9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HUSHENGXIN/0/2730CF9F132716F178F88FB1F268CE51CA264C9F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:c3:45:be:ab:3a:ad:e7:8a:4e:b5:83:d9:86:57:cb:b8:89:
         6c:c1:0a:12:ad:6a:97:ca:a3:66:76:e5:06:38:fd:99:1c:39:
         7a:6a:b3:c9:80:9e:82:d8:03:c7:98:be:1b:31:f2:9e:d0:d5:
         7c:22:21:46:04:c2:b1:b5:22:1b:35:0d:cc:0b:b7:e8:03:c2:
         0b:19:cd:4b:66:1b:ae:6f:04:68:2e:ee:14:c3:50:26:1a:f0:
         49:42:bb:2a:09:b3:f7:8d:55:eb:71:4b:2b:42:c9:d2:5d:00:
         79:72:b4:a7:23:84:f2:e9:e2:70:ce:57:c7:f3:c7:97:3e:90:
         e9:34:83:6f:ae:7a:40:c9:68:f7:81:53:e4:35:19:65:fd:6e:
         7b:de:ef:6a:a6:d8:e7:41:7a:d8:e7:a6:5a:dd:d0:6f:b8:a3:
         e0:85:f7:72:df:b9:6a:0f:f2:42:f5:18:65:04:b0:ed:91:96:
         9e:75:a5:23:73:74:8c:60:d7:e0:88:bb:5a:d2:45:04:cd:56:
         ba:36:d7:1a:8c:fe:30:9c:24:ff:c6:74:26:3f:01:b6:e3:51:
         40:88:b1:f6:99:5c:94:94:76:ea:6d:b5:00:8c:0a:9b:e9:22:
         e2:55:a9:8f:07:47:88:02:78:cb:32:75:18:ba:da:09:ea:69:
         5a:6a:34:07
-----BEGIN CERTIFICATE-----
MIIE7DCCA9SgAwIBAgIUe6YSHM0vSac3M2sAhTc4XaZwze8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjczMENGOUYxMzI3MTZGMTc4Rjg4RkIxRjI2OENFNTFD
QTI2NEM5RjAeFw0yNjA5MjEyMzI4MDNaFw0yNjA5MjMwMTM5MDNaMDMxMTAvBgNV
BAMTKEU2NjhBN0Q4MjMxRDhGN0FDMUVCQzMwODI1QzMwRjM4MEFDNTBFNzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrQCiFihG4+982GF5RLC4EPrys
JouGiLTVokZya2XZttRWhiZKN7dviHb4enlJjqdT7trvYNKhW2zodn3r2cxFLn6S
AxdFgvJylWuG89yA7uII3mJ0gf50/9rV5w5MR/C2fdZNWwYKSXxcG6CdN9p+hZ83
qr+T9DHpEEMdgzFXmfk1Z3u9fimtRdrzleFGBWiPjElRQfLafIR1rsvQlyZqD23f
Srfaob2/Mc3UiptGJYbwDFIYK2mp5kYORxaw8K7TWmoGuQq/PyuZBs212jloKs2z
jGTWZf6P8vmsW7x7cIfuzMJjeACSjpo6FUfJiPpXjyhKmSGAuCBjr0q+D6FBAgMB
AAGjggH2MIIB8jAdBgNVHQ4EFgQU5min2CMdj3rB68MIJcMPOArFDnAwHwYDVR0j
BBgwFoAUJzDPnxMnFvF4+I+x8mjOUcomTJ8wDgYDVR0PAQH/BAQDAgeAMGcGA1Ud
HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSFVTSEVO
R1hJTi8wLzI3MzBDRjlGMTMyNzE2RjE3OEY4OEZCMUYyNjhDRTUxQ0EyNjRDOUYu
Y3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBLzEvMjczMENGOUYxMzI3MTZGMTc4Rjg4RkIx
RjI2OENFNTFDQTI2NEM5Ri5jZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzAL
hlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0hVU0hFTkdYSU4vMC8yNzMw
Q0Y5RjEzMjcxNkYxNzhGODhGQjFGMjY4Q0U1MUNBMjY0QzlGLm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
aMNFvqs6reeKTrWD2YZXy7iJbMEKEq1ql8qjZnblBjj9mRw5emqzyYCegtgDx5i+
GzHyntDVfCIhRgTCsbUiGzUNzAu36APCCxnNS2Ybrm8EaC7uFMNQJhrwSUK7Kgmz
941V63FLK0LJ0l0AeXK0pyOE8unicM5Xx/PHlz6Q6TSDb656QMlo94FT5DUZZf1u
e97vaqbY50F62OemWt3Qb7ij4IX3ct+5ag/yQvUYZQSw7ZGWnnWlI3N0jGDX4Ii7
WtJFBM1WujbXGoz+MJwk/8Z0Jj8BtuNRQIix9plclJR26m21AIwKm+ki4lWpjwdH
iAJ4yzJ1GLraCeppWmo0Bw==
-----END CERTIFICATE-----
Generated at Tue Sep 22 05:37:39 2026 by rpki-client