Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/KKH/0/FB752D6E1A89A824BE6E04852D1F505F01ED185B.mft
File:                     FB752D6E1A89A824BE6E04852D1F505F01ED185B.mft (raw, json)
Hash identifier:          TLxRz38FTQQwWEq95AsHuUDNlQFZ+YfPM2KuMcUjhvk=
Subject key identifier:   29:4B:CA:93:53:A3:39:1D:F3:6D:26:C6:BC:3A:F6:E4:56:F2:C1:7D
Authority key identifier: FB:75:2D:6E:1A:89:A8:24:BE:6E:04:85:2D:1F:50:5F:01:ED:18:5B
Certificate issuer:       /CN=FB752D6E1A89A824BE6E04852D1F505F01ED185B
Certificate serial:       0A61806E9F62F3B134073A50506453901474A38F
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/FB752D6E1A89A824BE6E04852D1F505F01ED185B.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/KKH/0/FB752D6E1A89A824BE6E04852D1F505F01ED185B.mft
Manifest number:          B4
Signing time:             Mon 21 Sep 2026 22:02:54 +0000
Manifest this update:     Mon 21 Sep 2026 21:57:54 +0000
Manifest next update:     Wed 23 Sep 2026 00:53:54 +0000
Files and hashes:         1: FB752D6E1A89A824BE6E04852D1F505F01ED185B.crl (hash: oZRpHsBJaHAlTgTSzeNdt2FIr6glA+JufHtSCwJEAdU=)
                          2: 323430313a653736303a3a2f33322d3438203d3e20313331363435.roa (hash: 8YC3WhfA/JwpTpT4EA1dLfSVRzAraHz3m65LBo1nSas=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/KKH/0/FB752D6E1A89A824BE6E04852D1F505F01ED185B.crl
                          rsync://rpkica.twnic.tw/rpki/KKH/0/FB752D6E1A89A824BE6E04852D1F505F01ED185B.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/FB752D6E1A89A824BE6E04852D1F505F01ED185B.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 22:16:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:61:80:6e:9f:62:f3:b1:34:07:3a:50:50:64:53:90:14:74:a3:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB752D6E1A89A824BE6E04852D1F505F01ED185B
        Validity
            Not Before: Sep 21 21:57:54 2026 GMT
            Not After : Sep 23 00:53:54 2026 GMT
        Subject: CN=294BCA9353A3391DF36D26C6BC3AF6E456F2C17D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d7:be:65:00:d5:b1:84:40:5e:a0:70:af:db:
                    12:6d:85:cd:4a:94:b4:26:fc:44:c4:b4:11:e3:f0:
                    29:7a:73:6d:4b:a5:3a:b0:0f:8a:9a:94:0e:2c:a9:
                    7b:1b:79:0f:20:d3:9b:ac:d0:14:66:6f:f1:fc:21:
                    35:43:34:86:53:c1:aa:6f:16:16:cb:80:bb:91:4c:
                    d3:ca:89:2c:e0:c3:c6:f9:08:0d:b3:9c:41:31:c7:
                    9d:8b:58:f0:9d:6e:1a:81:96:8e:c6:0e:fa:e4:f1:
                    3e:d3:8a:c3:c1:81:e8:dc:4d:38:c5:1f:14:30:5c:
                    d8:04:bb:8b:de:e7:cc:03:5e:53:12:3e:8a:99:e7:
                    e5:ca:01:02:ca:cb:9e:5b:b3:df:dc:35:80:39:35:
                    df:27:c3:e6:db:02:97:94:43:39:7b:a2:44:07:70:
                    32:05:f7:e2:7c:22:87:24:bb:e4:63:d6:0e:03:ac:
                    e5:cf:ae:9b:6c:7f:3d:9c:0a:3f:93:ab:07:f0:d8:
                    1a:a4:17:38:44:5a:9c:10:a1:5d:80:04:5f:e9:56:
                    f2:a3:2d:15:a0:7f:87:73:a4:f4:70:dd:32:85:eb:
                    bf:93:30:8c:e4:c4:5b:bf:e4:56:78:d3:4a:68:22:
                    6d:ec:a5:72:46:c8:83:cb:0c:94:ea:0d:46:d8:dc:
                    be:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:4B:CA:93:53:A3:39:1D:F3:6D:26:C6:BC:3A:F6:E4:56:F2:C1:7D
            X509v3 Authority Key Identifier:
                keyid:FB:75:2D:6E:1A:89:A8:24:BE:6E:04:85:2D:1F:50:5F:01:ED:18:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/KKH/0/FB752D6E1A89A824BE6E04852D1F505F01ED185B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/FB752D6E1A89A824BE6E04852D1F505F01ED185B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KKH/0/FB752D6E1A89A824BE6E04852D1F505F01ED185B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:de:d3:1b:12:0c:fe:28:80:58:92:30:a4:cf:13:7b:8a:2f:
         ef:b3:86:b4:3f:57:4c:22:15:fd:93:b1:5f:a3:85:27:0f:2c:
         22:84:fa:45:8a:69:70:cc:5f:12:f5:d7:2b:6f:83:25:d0:0b:
         4e:0c:66:00:d5:59:9a:0a:2d:ab:93:d4:86:6a:45:2e:8e:0a:
         98:0d:e8:5a:ad:29:ac:9b:89:1e:5d:f3:0d:bc:d3:67:b1:81:
         9c:67:5c:d5:dd:04:fc:c0:0b:a6:05:0d:f5:37:ce:e7:a7:15:
         9b:79:a3:6f:7d:de:b9:8b:59:5a:2c:bb:6a:19:2f:22:48:23:
         82:01:14:85:78:0a:3c:fb:cc:40:e4:8f:95:c1:e6:9a:64:a4:
         5b:a4:f7:03:9c:cc:01:ac:48:b3:59:e2:1f:2f:98:9e:c0:05:
         70:89:46:07:5d:b5:c6:cc:50:29:1f:56:eb:5e:8b:4a:e0:54:
         cd:2c:ed:ec:f2:5f:60:ce:d4:f1:6a:a9:32:99:c3:c3:32:9a:
         46:76:9c:cb:71:0b:0e:8c:00:d6:6c:67:18:cf:ae:d6:74:b0:
         c4:2a:39:af:4f:52:3a:89:e8:5c:05:5a:4a:56:d9:3b:00:5c:
         b2:6f:bd:e7:6b:90:3a:7b:8b:48:42:fd:ee:81:f3:d9:37:ab:
         21:b2:93:19
-----BEGIN CERTIFICATE-----
MIIE3jCCA8agAwIBAgIUCmGAbp9i87E0BzpQUGRTkBR0o48wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkI3NTJENkUxQTg5QTgyNEJFNkUwNDg1MkQxRjUwNUYw
MUVEMTg1QjAeFw0yNjA5MjEyMTU3NTRaFw0yNjA5MjMwMDUzNTRaMDMxMTAvBgNV
BAMTKDI5NEJDQTkzNTNBMzM5MURGMzZEMjZDNkJDM0FGNkU0NTZGMkMxN0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA175lANWxhEBeoHCv2xJthc1K
lLQm/ETEtBHj8Cl6c21LpTqwD4qalA4sqXsbeQ8g05us0BRmb/H8ITVDNIZTwapv
FhbLgLuRTNPKiSzgw8b5CA2znEExx52LWPCdbhqBlo7GDvrk8T7TisPBgejcTTjF
HxQwXNgEu4ve58wDXlMSPoqZ5+XKAQLKy55bs9/cNYA5Nd8nw+bbApeUQzl7okQH
cDIF9+J8Iocku+Rj1g4DrOXPrptsfz2cCj+Tqwfw2BqkFzhEWpwQoV2ABF/pVvKj
LRWgf4dzpPRw3TKF67+TMIzkxFu/5FZ400poIm3spXJGyIPLDJTqDUbY3L5nAgMB
AAGjggHoMIIB5DAdBgNVHQ4EFgQUKUvKk1OjOR3zbSbGvDr25FbywX0wHwYDVR0j
BBgwFoAU+3UtbhqJqCS+bgSFLR9QXwHtGFswDgYDVR0PAQH/BAQDAgeAMGAGA1Ud
HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0tILzAv
RkI3NTJENkUxQTg5QTgyNEJFNkUwNDg1MkQxRjUwNUYwMUVEMTg1Qi5jcmwwbwYI
KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50
dy9ycGtpL1RXTklDQ0EvMS9GQjc1MkQ2RTFBODlBODI0QkU2RTA0ODUyRDFGNTA1
RjAxRUQxODVCLmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j
Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0tILzAvRkI3NTJENkUxQTg5QTgyNEJF
NkUwNDg1MkQxRjUwNUYwMUVEMTg1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF
BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAH7e0xsSDP4ogFiSMKTP
E3uKL++zhrQ/V0wiFf2TsV+jhScPLCKE+kWKaXDMXxL11ytvgyXQC04MZgDVWZoK
LauT1IZqRS6OCpgN6FqtKaybiR5d8w2802exgZxnXNXdBPzAC6YFDfU3zuenFZt5
o2993rmLWVosu2oZLyJII4IBFIV4Cjz7zEDkj5XB5ppkpFuk9wOczAGsSLNZ4h8v
mJ7ABXCJRgddtcbMUCkfVutei0rgVM0s7ezyX2DO1PFqqTKZw8MymkZ2nMtxCw6M
ANZsZxjPrtZ0sMQqOa9PUjqJ6FwFWkpW2TsAXLJvvedrkDp7i0hC/e6B89k3qyGy
kxk=
-----END CERTIFICATE-----
Generated at Tue Sep 22 14:22:27 2026 by rpki-client