Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/KTCFE/0/4703E44596DFB4A93F400A7B57126B31D5EC4CDA.mft
File:                     4703E44596DFB4A93F400A7B57126B31D5EC4CDA.mft (raw, json)
Hash identifier:          ibzgl3KrY9yUCvV1w9y0mT4n/ABTMpxfexgJyGstBXw=
Subject key identifier:   29:BC:CB:51:8C:3F:E1:8A:33:CE:41:68:88:08:4C:DA:6B:04:F0:51
Authority key identifier: 47:03:E4:45:96:DF:B4:A9:3F:40:0A:7B:57:12:6B:31:D5:EC:4C:DA
Certificate issuer:       /CN=4703E44596DFB4A93F400A7B57126B31D5EC4CDA
Certificate serial:       03AB269864393FEF34547A13DDE126DA06117F58
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4703E44596DFB4A93F400A7B57126B31D5EC4CDA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/KTCFE/0/4703E44596DFB4A93F400A7B57126B31D5EC4CDA.mft
Manifest number:          B1
Signing time:             Sun 20 Sep 2026 23:14:38 +0000
Manifest this update:     Sun 20 Sep 2026 23:09:38 +0000
Manifest next update:     Mon 21 Sep 2026 23:51:38 +0000
Files and hashes:         1: 3130332e35392e3232302e302f32332d3233203d3e20313331353935.roa (hash: ig0nyTBRvQZ8trj2POEoB3J8GO7jvHOYrg7pgT6kYDE=)
                          2: 4703E44596DFB4A93F400A7B57126B31D5EC4CDA.crl (hash: exp+E+MoDqnIv3s4OVzL6E8v+6k00nYg9/+pnakNpxg=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/KTCFE/0/4703E44596DFB4A93F400A7B57126B31D5EC4CDA.crl
                          rsync://rpkica.twnic.tw/rpki/KTCFE/0/4703E44596DFB4A93F400A7B57126B31D5EC4CDA.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4703E44596DFB4A93F400A7B57126B31D5EC4CDA.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 21 Sep 2026 23:51:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:ab:26:98:64:39:3f:ef:34:54:7a:13:dd:e1:26:da:06:11:7f:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4703E44596DFB4A93F400A7B57126B31D5EC4CDA
        Validity
            Not Before: Sep 20 23:09:38 2026 GMT
            Not After : Sep 21 23:51:38 2026 GMT
        Subject: CN=29BCCB518C3FE18A33CE416888084CDA6B04F051
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:51:e3:fe:e1:f9:7a:98:8d:88:59:f2:9b:43:
                    ce:63:54:69:ac:a0:bd:74:2b:1b:33:0d:1c:65:7b:
                    17:1a:46:47:ef:06:6c:36:b0:68:2d:1c:29:32:14:
                    67:88:9e:68:84:79:de:77:85:0a:b9:2f:3b:6d:61:
                    ed:f5:c3:d7:47:84:3a:d0:3f:b4:73:3a:26:70:58:
                    e2:ce:2f:23:ec:37:ba:eb:33:4d:97:01:6b:0b:c4:
                    09:bc:f2:78:64:a9:c5:5b:49:c2:7e:56:fb:88:a6:
                    19:9e:18:f1:ed:ed:72:f2:86:6b:df:11:03:90:b4:
                    1b:88:27:78:0b:71:1f:67:ed:33:1f:4d:98:d4:93:
                    19:88:77:bf:01:f2:df:60:93:ce:ce:e2:35:6f:32:
                    75:5b:ae:12:05:81:d6:f3:ad:76:12:26:46:92:ae:
                    7b:05:ca:4d:13:d7:60:a0:74:da:af:4c:a3:69:86:
                    71:21:ff:d1:16:7e:2c:0b:76:c7:53:ef:41:09:3a:
                    3d:b5:5d:6c:4b:7e:f8:23:51:4a:1b:d9:2a:d2:0b:
                    2b:41:64:85:c4:e7:e5:cd:1c:27:f9:d3:2c:20:db:
                    fc:25:1f:1e:0f:4d:9d:ea:7e:82:f8:15:7f:b0:00:
                    fd:db:e1:c0:19:37:0a:5d:2d:8b:d4:fd:8a:32:57:
                    9f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:BC:CB:51:8C:3F:E1:8A:33:CE:41:68:88:08:4C:DA:6B:04:F0:51
            X509v3 Authority Key Identifier:
                keyid:47:03:E4:45:96:DF:B4:A9:3F:40:0A:7B:57:12:6B:31:D5:EC:4C:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/KTCFE/0/4703E44596DFB4A93F400A7B57126B31D5EC4CDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4703E44596DFB4A93F400A7B57126B31D5EC4CDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KTCFE/0/4703E44596DFB4A93F400A7B57126B31D5EC4CDA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:bd:24:4e:ae:20:b2:8e:5c:77:b6:de:fc:c9:12:64:67:33:
         1a:86:15:8b:74:f6:ea:74:ad:f9:b5:91:b8:aa:ea:84:b3:f5:
         75:44:88:79:a9:18:12:b9:90:d9:d7:6e:b2:ba:f0:78:b8:12:
         e4:02:e5:12:4a:40:a9:b6:2a:15:f0:aa:0e:82:7a:0c:88:77:
         1d:12:07:5e:f8:83:46:50:28:d7:a9:26:79:07:a6:82:79:8f:
         5c:e5:6d:98:b6:3d:be:90:b5:6a:ef:c7:13:83:13:cc:e6:a3:
         e5:e5:67:ab:b7:28:76:ef:3d:b3:5f:66:8e:71:88:c4:01:9e:
         f5:d4:ac:51:02:80:5e:d9:b6:0d:f7:32:31:f4:28:37:42:ec:
         ce:96:89:91:a6:c8:25:84:96:22:24:d3:a2:c3:0c:32:78:68:
         96:ff:f7:41:36:99:5c:90:5b:08:6f:72:38:a2:6d:6f:9e:6e:
         a0:7e:52:7e:b1:e3:34:d2:9b:8b:e8:d2:79:2d:19:75:b7:60:
         6d:0b:ff:b9:d6:a1:ff:44:42:0e:b1:b8:e0:88:78:1d:c0:70:
         fb:72:64:ed:9e:c5:97:21:53:00:98:63:04:5d:a2:ee:45:19:
         69:c2:b2:2f:5a:9d:c4:37:72:0e:d3:56:79:fd:34:65:75:d4:
         f4:43:6a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 07:21:54 2026 by rpki-client