Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/M2NIM/0/E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.mft
File:                     E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.mft (raw, json)
Hash identifier:          7iQOLgs2yAPf+bZAUfGF7hh+7W6Zi+R6V6k+2M7wSl8=
Subject key identifier:   81:0A:43:4F:72:5A:27:2C:5C:6D:28:6B:95:93:61:D6:F0:6D:69:AC
Authority key identifier: E5:AA:3B:0F:9F:58:C9:34:21:C6:48:20:4A:B4:31:A4:AD:C4:B0:CB
Certificate issuer:       /CN=E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB
Certificate serial:       1C3BC3B76CD242DBD5AA901183B4F81D23E8A246
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/M2NIM/0/E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.mft
Manifest number:          B8
Signing time:             Mon 21 Sep 2026 22:22:57 +0000
Manifest this update:     Mon 21 Sep 2026 22:17:57 +0000
Manifest next update:     Wed 23 Sep 2026 01:24:57 +0000
Files and hashes:         1: 323430313a383432303a3a2f33322d3438203d3e2039393233.roa (hash: mAMCDxxdS5D0xlBjJmg5NjQv1GONdD1Fp7YNezXC9T8=)
                          2: 323430313a383432303a3a2f33322d3438203d3e203332353935.roa (hash: 7IK6gvzs6uMwoViSpBOdjJrk5WxLH5pe447RiZaITJY=)
                          3: E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.crl (hash: AEOIDM/fzNtqiiMC/TmsLYSjZPVc0tME7XC83/BeusM=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/M2NIM/0/E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.crl
                          rsync://rpkica.twnic.tw/rpki/M2NIM/0/E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 23 Sep 2026 01:24:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:3b:c3:b7:6c:d2:42:db:d5:aa:90:11:83:b4:f8:1d:23:e8:a2:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB
        Validity
            Not Before: Sep 21 22:17:57 2026 GMT
            Not After : Sep 23 01:24:57 2026 GMT
        Subject: CN=810A434F725A272C5C6D286B959361D6F06D69AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:24:e7:0a:c6:64:b2:dc:6c:f1:f2:1f:75:51:
                    57:79:c8:32:4f:60:49:f1:2a:23:23:75:a0:39:cd:
                    93:d9:89:c7:a4:43:4e:fa:e4:b8:19:49:11:36:e6:
                    80:68:91:73:0e:0b:f4:fe:ad:3b:f6:05:07:a2:3d:
                    f3:09:dc:fe:54:fc:42:54:58:d8:4f:88:81:2d:6f:
                    8d:38:ff:54:7c:d7:5d:2d:5d:67:86:c6:f6:54:c1:
                    4a:73:ae:71:3e:15:5b:c5:85:00:27:c7:a5:26:96:
                    13:ce:f7:8e:48:e9:47:8e:84:88:88:c4:c3:e0:2c:
                    94:9c:f3:6a:7a:a4:31:a4:3d:48:3a:a1:bd:dc:c4:
                    f0:9a:91:2f:46:5c:ca:a8:7e:ed:b2:d9:ae:28:9f:
                    b7:12:5d:17:cd:76:7d:1a:11:19:aa:98:99:04:dc:
                    a1:33:28:68:be:be:cf:2d:70:c4:32:d0:e6:39:83:
                    2f:d5:01:36:4d:df:aa:20:81:55:03:f1:07:70:1a:
                    e9:75:56:24:77:6d:91:cb:7c:f8:6c:1a:07:78:f2:
                    f8:3e:e9:9d:b2:9c:4f:36:13:e8:8b:4d:10:9a:40:
                    e5:91:a1:93:aa:2c:0b:0f:43:81:bb:a9:c9:6e:a6:
                    65:a6:62:ca:e8:a5:5b:ac:d9:2c:36:78:29:ce:e8:
                    65:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:0A:43:4F:72:5A:27:2C:5C:6D:28:6B:95:93:61:D6:F0:6D:69:AC
            X509v3 Authority Key Identifier:
                keyid:E5:AA:3B:0F:9F:58:C9:34:21:C6:48:20:4A:B4:31:A4:AD:C4:B0:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/M2NIM/0/E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/M2NIM/0/E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:4d:87:89:88:6c:6e:74:bc:dd:5b:2a:56:51:13:e0:47:21:
         aa:e7:f3:dd:60:de:2a:4f:50:07:2c:8a:31:08:0a:ce:09:53:
         e8:15:48:16:b7:7c:b0:b3:87:53:4b:22:25:bb:0a:a1:4d:b3:
         8c:b5:84:fa:0d:cf:93:fa:5e:ca:cd:f5:5e:6c:28:bd:8c:e8:
         03:76:e0:0e:04:8c:8e:01:b1:a9:3d:c5:d8:9b:16:15:0e:4f:
         26:90:60:1b:93:74:eb:fb:51:bf:94:33:73:ba:32:a0:38:8d:
         12:34:b6:20:bd:0e:18:7f:41:b6:1d:5e:16:2b:c8:ba:f8:a0:
         74:e6:5f:9c:bf:91:fd:18:d3:fa:37:e2:fc:db:9a:8e:90:64:
         9f:c5:a6:97:c4:9f:16:16:3a:7f:61:19:f6:85:b7:47:22:d0:
         77:9f:f0:25:cc:5b:0c:47:05:2a:6c:10:7e:d2:05:24:a2:af:
         ae:7a:32:6e:3a:ab:9d:05:4d:8c:b4:bc:f1:fe:27:c4:4e:63:
         ea:61:4b:de:31:c1:64:3e:09:85:cb:aa:e7:22:8b:a4:07:69:
         8d:53:b8:40:d3:b5:f7:67:e8:fe:85:b3:6b:12:32:4c:9f:24:
         e6:e8:c7:3e:b1:35:74:61:dd:36:de:1a:4e:59:35:6b:7c:e9:
         05:7b:78:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:11:27 2026 by rpki-client