Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/MAGICCUBE/0/707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.mft
File:                     707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.mft (raw, json)
Hash identifier:          frkyW7mJ9iCp4WwPppjOVubnIluAqBZhq2ujk0w9k8U=
Subject key identifier:   51:09:75:FB:D3:69:DC:24:54:74:F7:55:9B:70:91:3E:E3:83:5C:7B
Authority key identifier: 70:7C:05:DC:06:89:1E:B4:A2:BE:B1:86:A8:BB:61:C4:DC:D6:14:1D
Certificate issuer:       /CN=707C05DC06891EB4A2BEB186A8BB61C4DCD6141D
Certificate serial:       256A9DC1D1E338422BA1319463F04853C832A60F
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/MAGICCUBE/0/707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.mft
Manifest number:          B4
Signing time:             Mon 21 Sep 2026 01:59:58 +0000
Manifest this update:     Mon 21 Sep 2026 01:54:58 +0000
Manifest next update:     Tue 22 Sep 2026 05:02:58 +0000
Files and hashes:         1: 707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.crl (hash: jYsyAOdJoN9zAaSnDdYkUfnC5ew0U5lDwojZ8Dn7LGE=)
                          2: 3232332e32362e31342e302f32332d3234203d3e203231383539.roa (hash: BY1QUUCw56EnMeP3kjSRx3onJmeURrOTVkZdX+EuukE=)
                          3: 3130332e3137352e3139342e302f32332d3234203d3e2037343833.roa (hash: 5l2+J4Wo84X5+Yl5nqEN6UeiO9PszuY1Tb4AzIBJh3U=)
                          4: 3232332e32362e31342e302f32332d3234203d3e2037343833.roa (hash: EeYUqixDoPSEeN8sw/ZeQjCxnACjgv6gNGFQp+CTsoM=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/MAGICCUBE/0/707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.crl
                          rsync://rpkica.twnic.tw/rpki/MAGICCUBE/0/707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 03:47:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:6a:9d:c1:d1:e3:38:42:2b:a1:31:94:63:f0:48:53:c8:32:a6:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=707C05DC06891EB4A2BEB186A8BB61C4DCD6141D
        Validity
            Not Before: Sep 21 01:54:58 2026 GMT
            Not After : Sep 22 05:02:58 2026 GMT
        Subject: CN=510975FBD369DC245474F7559B70913EE3835C7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:81:80:ba:d3:69:23:ef:b2:59:8e:4a:9e:95:
                    56:42:ca:58:94:b7:f6:56:33:3d:31:5f:17:d7:6b:
                    60:07:fe:44:80:fc:4a:69:ef:a1:e3:e8:1f:17:4c:
                    4b:6b:80:e7:9c:41:44:2f:06:79:a2:c1:b8:b2:13:
                    2c:a8:a4:a0:4e:c1:74:f3:4c:cf:e2:fb:61:63:17:
                    dd:0f:aa:df:53:1a:11:b2:2b:75:c4:2d:c4:db:0c:
                    d6:3d:aa:cc:b6:9d:a1:1d:e2:94:98:c2:43:54:f7:
                    59:d0:bd:ff:65:d1:3d:62:bd:14:02:96:e2:ee:4d:
                    c9:fb:db:af:4b:ae:df:1d:bc:20:44:39:96:19:30:
                    ba:c5:68:f0:2d:05:0f:20:d2:e8:16:d3:11:e7:f3:
                    63:aa:cf:23:ed:8e:f9:6e:cc:23:71:a6:38:f8:58:
                    9f:a2:3d:6a:da:bd:16:7c:f6:08:d2:59:ed:cc:84:
                    7a:42:df:e1:6d:31:73:2f:bf:2a:25:a2:0f:10:65:
                    30:d3:b3:77:57:78:94:88:ac:ca:c2:eb:c4:df:97:
                    fb:5b:79:c6:69:d9:b5:c1:bc:b1:0b:58:ed:de:9d:
                    5b:ba:93:ba:b7:7c:80:5c:f5:83:42:e0:21:95:7a:
                    4e:e1:3a:0d:cc:ad:71:86:e1:e9:8d:ad:4d:2c:4a:
                    2e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:09:75:FB:D3:69:DC:24:54:74:F7:55:9B:70:91:3E:E3:83:5C:7B
            X509v3 Authority Key Identifier:
                keyid:70:7C:05:DC:06:89:1E:B4:A2:BE:B1:86:A8:BB:61:C4:DC:D6:14:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/MAGICCUBE/0/707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MAGICCUBE/0/707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:1d:46:c0:25:cf:f6:c8:b6:fc:4c:ee:1f:af:b8:be:b7:4a:
         52:9d:7f:cf:79:1a:81:56:5d:6c:a8:50:5e:05:67:ea:ff:d8:
         98:55:d1:56:12:1e:e9:0d:0e:10:4b:b5:f3:02:76:78:3f:b2:
         9c:be:01:00:b4:8b:a1:b5:4d:d4:b0:9e:55:c5:29:4a:60:11:
         08:48:da:85:cf:3a:c2:b0:93:85:71:82:34:3b:3e:09:ac:b7:
         d9:56:b6:f8:7c:eb:80:c4:cd:24:16:d8:32:c1:01:d5:5d:c3:
         98:68:05:14:d3:d2:b2:18:ca:ba:d6:fb:dc:7e:c2:7b:c2:ad:
         c6:37:f4:37:a1:d1:2c:51:50:51:41:c7:2c:31:2a:56:0c:9c:
         ab:7b:ba:1a:82:61:92:32:dc:63:78:cc:8b:27:76:51:2c:9c:
         e7:63:e9:67:eb:81:96:86:a8:58:40:b5:6a:a1:d6:73:ad:6b:
         06:9e:2b:78:66:c1:35:0a:16:c5:b3:63:a5:f9:39:88:14:1f:
         93:9d:fc:28:c3:a5:fa:21:2b:70:9b:3a:35:64:4e:c0:a1:7a:
         dd:c1:ff:04:cd:68:f6:b7:2a:15:06:10:b9:28:cd:63:ad:e7:
         ab:13:36:69:7a:d6:38:17:32:f4:6e:cf:77:ca:85:df:ac:b0:
         21:4b:8f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:39:07 2026 by rpki-client