Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/MAIFENGTW/0/4461702FD381CAC430A5B19A762A79E9CCBD8D09.mft
File:                     4461702FD381CAC430A5B19A762A79E9CCBD8D09.mft (raw, json)
Hash identifier:          dwtw8df0OFGURaXgqcowqfJTeOm3pSGGYIXb/vmRm9Y=
Subject key identifier:   5B:FC:FE:BD:DF:02:92:A9:66:9C:85:04:78:1E:6A:1B:A0:35:E1:01
Authority key identifier: 44:61:70:2F:D3:81:CA:C4:30:A5:B1:9A:76:2A:79:E9:CC:BD:8D:09
Certificate issuer:       /CN=4461702FD381CAC430A5B19A762A79E9CCBD8D09
Certificate serial:       3D091E5727D3E8F47101D773938BEBAEC930DD76
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4461702FD381CAC430A5B19A762A79E9CCBD8D09.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/MAIFENGTW/0/4461702FD381CAC430A5B19A762A79E9CCBD8D09.mft
Manifest number:          B5
Signing time:             Wed 23 Sep 2026 11:17:40 +0000
Manifest this update:     Wed 23 Sep 2026 11:12:40 +0000
Manifest next update:     Thu 24 Sep 2026 15:11:40 +0000
Files and hashes:         1: 4461702FD381CAC430A5B19A762A79E9CCBD8D09.crl (hash: gnbHGKejkmBHsGzHPXHsAh7aOFrRpWh59imp+f+F/Z8=)
                          2: 3130332e3138392e3130382e302f32332d3234203d3e2037353336.roa (hash: q17bFdqrhMBLjmohT4EXtTiiL79HGPyDIQggw2a0Oyc=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/MAIFENGTW/0/4461702FD381CAC430A5B19A762A79E9CCBD8D09.crl
                          rsync://rpkica.twnic.tw/rpki/MAIFENGTW/0/4461702FD381CAC430A5B19A762A79E9CCBD8D09.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4461702FD381CAC430A5B19A762A79E9CCBD8D09.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 08:30:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:09:1e:57:27:d3:e8:f4:71:01:d7:73:93:8b:eb:ae:c9:30:dd:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4461702FD381CAC430A5B19A762A79E9CCBD8D09
        Validity
            Not Before: Sep 23 11:12:40 2026 GMT
            Not After : Sep 24 15:11:40 2026 GMT
        Subject: CN=5BFCFEBDDF0292A9669C8504781E6A1BA035E101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b1:e3:d2:9d:95:2b:ea:24:c1:c3:bd:eb:f9:
                    9c:47:61:da:ef:7b:56:fd:da:4e:fd:e2:69:93:76:
                    40:03:c2:56:04:9e:2a:6a:f6:33:f0:9b:db:c6:54:
                    55:d4:ad:c7:59:22:4b:ef:bc:76:42:84:c9:a2:fb:
                    fc:b1:8a:ef:b8:9e:0f:71:91:85:4f:2c:5f:f8:cd:
                    e3:3f:38:6f:52:b7:c9:92:ac:df:51:db:d0:32:ea:
                    d0:88:ee:3d:90:04:69:ca:49:22:36:89:1c:20:c8:
                    88:fb:4b:f3:39:18:fa:ce:94:76:0a:2d:ab:6d:6c:
                    0a:e5:3a:90:93:83:58:b9:ba:f1:2a:bd:8a:b3:b5:
                    7b:90:85:14:bb:f0:ec:46:79:56:c5:27:2e:d6:f6:
                    dc:e7:5e:25:02:6a:a4:13:ab:8d:68:40:df:01:97:
                    8e:b8:dc:c7:9c:cc:5a:2d:39:6b:ef:b5:7d:56:1b:
                    ce:ef:99:0e:61:3f:ef:ad:7c:97:ee:c5:28:bd:80:
                    cd:c9:f0:3a:f1:1a:ec:0e:68:bb:7b:72:dc:09:4f:
                    5c:cd:20:6d:94:0d:f5:99:27:9e:5f:7a:8c:d9:f5:
                    8c:21:31:ea:39:c2:4a:c8:05:7e:7d:66:d2:a6:70:
                    12:b0:84:3f:78:14:29:b7:b8:4d:96:5d:80:90:c8:
                    3c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:FC:FE:BD:DF:02:92:A9:66:9C:85:04:78:1E:6A:1B:A0:35:E1:01
            X509v3 Authority Key Identifier:
                keyid:44:61:70:2F:D3:81:CA:C4:30:A5:B1:9A:76:2A:79:E9:CC:BD:8D:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/MAIFENGTW/0/4461702FD381CAC430A5B19A762A79E9CCBD8D09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4461702FD381CAC430A5B19A762A79E9CCBD8D09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MAIFENGTW/0/4461702FD381CAC430A5B19A762A79E9CCBD8D09.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:e4:b1:49:b0:6a:99:54:de:0d:72:67:17:82:4e:f5:ed:7b:
         ef:ac:b3:bc:c0:8f:5c:8b:9c:ba:76:32:db:7e:ba:91:61:ce:
         89:03:18:b7:98:a1:91:2d:f0:c5:0d:b5:2e:a5:67:90:01:e3:
         9a:78:6d:a3:7f:ce:bc:37:35:80:cb:f5:bf:87:72:38:28:aa:
         db:15:3e:75:7d:cc:83:e7:89:d6:ee:fb:99:4d:85:e4:53:40:
         c6:f2:32:6d:53:ea:c0:76:1c:2e:7b:44:21:ba:37:db:af:0b:
         97:81:b2:95:6b:21:03:68:32:9e:14:90:7d:51:3e:47:b5:39:
         97:f5:63:09:19:c4:b1:36:16:e3:c2:99:8f:89:00:8c:d2:aa:
         25:0b:10:0b:95:0f:a8:3b:4d:20:2c:51:d2:0e:fa:1b:26:61:
         72:f3:89:9e:aa:69:2b:3a:b7:10:c6:1f:e7:ae:95:dc:ce:c9:
         94:4e:7e:86:99:6e:21:cd:75:79:67:63:a3:3b:64:1e:64:46:
         4d:9c:ed:96:f3:1f:62:e1:4f:e1:e6:65:48:30:3d:e5:2c:ae:
         7c:5b:99:e5:84:18:e1:8a:ee:a3:1e:85:bd:f0:0b:13:0d:75:
         08:93:fb:8e:df:c2:60:ff:1a:52:7b:e7:45:34:b5:e9:45:27:
         0a:fc:39:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:20:17 2026 by rpki-client