Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/KTCFE/0/4703E44596DFB4A93F400A7B57126B31D5EC4CDA.mft
File:                     4703E44596DFB4A93F400A7B57126B31D5EC4CDA.mft (raw, json)
Hash identifier:          TZ89quzNZw3OUiktXjdjp5bjsTiMrReXEPbCfy8sseA=
Subject key identifier:   F3:00:CE:99:66:80:B8:84:12:12:59:C6:B1:80:0C:32:D5:F2:8E:30
Authority key identifier: 47:03:E4:45:96:DF:B4:A9:3F:40:0A:7B:57:12:6B:31:D5:EC:4C:DA
Certificate issuer:       /CN=4703E44596DFB4A93F400A7B57126B31D5EC4CDA
Certificate serial:       63D41B8DEB9C56BCC2EEA8C256FB319359CAF25D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4703E44596DFB4A93F400A7B57126B31D5EC4CDA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/KTCFE/0/4703E44596DFB4A93F400A7B57126B31D5EC4CDA.mft
Manifest number:          FB
Signing time:             Sun 15 Nov 2026 16:09:51 +0000
Manifest this update:     Sun 15 Nov 2026 16:04:51 +0000
Manifest next update:     Mon 16 Nov 2026 17:53:51 +0000
Files and hashes:         1: 3130332e35392e3232302e302f32332d3233203d3e20313331353935.roa (hash: ig0nyTBRvQZ8trj2POEoB3J8GO7jvHOYrg7pgT6kYDE=)
                          2: 4703E44596DFB4A93F400A7B57126B31D5EC4CDA.crl (hash: aS+wFQTVdb7ZGV6c/xQrkE6kf3IHe7zd5+FrFSm60vI=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/KTCFE/0/4703E44596DFB4A93F400A7B57126B31D5EC4CDA.crl
                          rsync://rpkica.twnic.tw/rpki/KTCFE/0/4703E44596DFB4A93F400A7B57126B31D5EC4CDA.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4703E44596DFB4A93F400A7B57126B31D5EC4CDA.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 16 Nov 2026 08:45:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:d4:1b:8d:eb:9c:56:bc:c2:ee:a8:c2:56:fb:31:93:59:ca:f2:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4703E44596DFB4A93F400A7B57126B31D5EC4CDA
        Validity
            Not Before: Nov 15 16:04:51 2026 GMT
            Not After : Nov 16 17:53:51 2026 GMT
        Subject: CN=F300CE996680B884121259C6B1800C32D5F28E30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b1:36:3e:96:5d:66:3d:1e:79:dc:7c:35:cd:
                    c1:b4:c0:26:14:ff:07:db:e1:5c:da:c8:23:34:ee:
                    77:25:50:99:d2:b5:2f:f7:45:40:1b:40:51:b6:38:
                    ca:16:6d:d2:b2:54:3b:ef:17:df:81:82:aa:be:ea:
                    1c:75:f5:3a:62:2a:89:b2:35:9a:cb:6a:8e:70:84:
                    c4:3f:9d:fb:8c:c7:4c:62:e9:74:29:c0:f1:48:2e:
                    ba:36:57:24:82:c1:e8:54:c4:11:b6:cc:5b:f0:53:
                    b8:2f:d6:e8:75:01:da:85:25:ad:c5:33:d5:12:d4:
                    4d:5a:9b:e2:e8:56:29:b6:30:ac:ec:87:88:dc:a3:
                    1f:ba:a8:8f:33:fc:c8:6b:ec:e9:e4:b4:ed:0a:76:
                    d4:4c:7b:f3:e9:19:20:f0:d3:f3:29:b5:1e:fb:bb:
                    4d:09:cf:54:80:d4:54:3b:dd:17:19:af:26:5d:f1:
                    27:2b:86:97:fe:a3:96:2e:7b:4e:49:96:07:3d:cc:
                    4a:8b:bf:07:3c:b6:7c:23:7c:d8:e9:ad:90:1d:ac:
                    00:f6:80:e1:25:0b:50:7c:d3:ec:a4:83:c8:ac:d1:
                    1a:76:37:45:41:dc:1c:6a:35:01:4d:58:81:c4:13:
                    e7:1c:30:e7:dc:d5:8e:1b:2a:e6:55:22:94:29:80:
                    28:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:00:CE:99:66:80:B8:84:12:12:59:C6:B1:80:0C:32:D5:F2:8E:30
            X509v3 Authority Key Identifier:
                keyid:47:03:E4:45:96:DF:B4:A9:3F:40:0A:7B:57:12:6B:31:D5:EC:4C:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/KTCFE/0/4703E44596DFB4A93F400A7B57126B31D5EC4CDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4703E44596DFB4A93F400A7B57126B31D5EC4CDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KTCFE/0/4703E44596DFB4A93F400A7B57126B31D5EC4CDA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:92:a7:74:46:85:57:9e:94:8c:64:4e:86:4b:d0:88:db:95:
         20:b5:c8:64:e6:d6:a6:48:2c:05:c6:fb:f1:1b:9d:b2:13:17:
         8c:81:c9:52:08:3a:c8:c9:d2:e6:40:d0:02:0b:0a:9b:9e:eb:
         db:3b:f2:3e:de:ef:66:ab:9b:cf:10:86:f6:c6:03:1a:39:12:
         23:a6:d2:05:1b:6e:f9:75:e3:0b:3b:ee:f2:7c:89:d6:f5:7f:
         db:93:bc:63:b1:b6:d0:19:9e:ff:4a:a6:e6:18:be:b9:7c:3e:
         8a:f3:b3:a2:53:eb:7e:f0:08:dd:6b:e5:2e:e0:87:2f:1b:23:
         87:a1:e2:5f:c1:15:1e:8f:cf:52:d1:e1:08:54:b1:42:6b:54:
         f2:2d:7d:fe:42:eb:54:62:b8:dc:ba:2f:cb:a4:91:9f:83:c6:
         a9:8a:ee:9d:d0:e3:53:a1:12:7a:a0:28:b3:98:68:1a:c8:0d:
         44:20:c7:d3:66:90:83:a4:27:d1:b1:65:e6:2e:aa:52:f6:9f:
         dc:80:0b:36:ca:10:0a:7c:53:8f:ed:27:5a:00:f4:d2:2c:1d:
         78:d7:2c:7f:8b:dc:91:a4:3e:87:a5:86:a5:2f:a2:13:98:dd:
         7c:16:d2:80:ab:da:b5:aa:38:dd:05:b6:63:4b:4e:88:66:1a:
         87:eb:c7:74
-----BEGIN CERTIFICATE-----
MIIE4jCCA8qgAwIBAgIUY9QbjeucVrzC7qjCVvsxk1nK8l0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDcwM0U0NDU5NkRGQjRBOTNGNDAwQTdCNTcxMjZCMzFE
NUVDNENEQTAeFw0yNjExMTUxNjA0NTFaFw0yNjExMTYxNzUzNTFaMDMxMTAvBgNV
BAMTKEYzMDBDRTk5NjY4MEI4ODQxMjEyNTlDNkIxODAwQzMyRDVGMjhFMzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGsTY+ll1mPR553Hw1zcG0wCYU
/wfb4VzayCM07nclUJnStS/3RUAbQFG2OMoWbdKyVDvvF9+Bgqq+6hx19TpiKomy
NZrLao5whMQ/nfuMx0xi6XQpwPFILro2VySCwehUxBG2zFvwU7gv1uh1AdqFJa3F
M9US1E1am+LoVim2MKzsh4jcox+6qI8z/Mhr7OnktO0KdtRMe/PpGSDw0/MptR77
u00Jz1SA1FQ73RcZryZd8Scrhpf+o5Yue05Jlgc9zEqLvwc8tnwjfNjprZAdrAD2
gOElC1B80+ykg8is0Rp2N0VB3BxqNQFNWIHEE+ccMOfc1Y4bKuZVIpQpgChrAgMB
AAGjggHsMIIB6DAdBgNVHQ4EFgQU8wDOmWaAuIQSElnGsYAMMtXyjjAwHwYDVR0j
BBgwFoAURwPkRZbftKk/QAp7VxJrMdXsTNowDgYDVR0PAQH/BAQDAgeAMGIGA1Ud
HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS1RDRkUv
MC80NzAzRTQ0NTk2REZCNEE5M0Y0MDBBN0I1NzEyNkIzMUQ1RUM0Q0RBLmNybDBv
BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS8xLzQ3MDNFNDQ1OTZERkI0QTkzRjQwMEE3QjU3MTI2
QjMxRDVFQzRDREEuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5
bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9LVENGRS8wLzQ3MDNFNDQ1OTZERkI0
QTkzRjQwMEE3QjU3MTI2QjMxRDVFQzRDREEubWZ0MBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBikqd0RoVXnpSM
ZE6GS9CI25Ugtchk5tamSCwFxvvxG52yExeMgclSCDrIydLmQNACCwqbnuvbO/I+
3u9mq5vPEIb2xgMaORIjptIFG275deMLO+7yfInW9X/bk7xjsbbQGZ7/SqbmGL65
fD6K87OiU+t+8Ajda+Uu4IcvGyOHoeJfwRUej89S0eEIVLFCa1TyLX3+QutUYrjc
ui/LpJGfg8apiu6d0ONToRJ6oCizmGgayA1EIMfTZpCDpCfRsWXmLqpS9p/cgAs2
yhAKfFOP7SdaAPTSLB141yx/i9yRpD6HpYalL6ITmN18FtKAq9q1qjjdBbZjS06I
ZhqH68d0
-----END CERTIFICATE-----
Generated at Sun Nov 15 21:08:33 2026 by rpki-client