Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/NOT_TFN_CO/0/B665897BCB13562048E484EBEDAA534EA4DF9876.mft
File:                     B665897BCB13562048E484EBEDAA534EA4DF9876.mft (raw, json)
Hash identifier:          hozWx4NDEMaSKFrhRCKJP4YbQpdpe6me6XDbaAl/UFY=
Subject key identifier:   8E:D2:B9:89:94:12:99:C3:CC:D4:80:05:5C:B8:8B:74:DE:B3:D1:E1
Authority key identifier: B6:65:89:7B:CB:13:56:20:48:E4:84:EB:ED:AA:53:4E:A4:DF:98:76
Certificate issuer:       /CN=B665897BCB13562048E484EBEDAA534EA4DF9876
Certificate serial:       3B38ABD17DC11DDD61BC4CA875BC3FC32271162D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B665897BCB13562048E484EBEDAA534EA4DF9876.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/NOT_TFN_CO/0/B665897BCB13562048E484EBEDAA534EA4DF9876.mft
Manifest number:          B4
Signing time:             Mon 21 Sep 2026 21:22:13 +0000
Manifest this update:     Mon 21 Sep 2026 21:17:13 +0000
Manifest next update:     Wed 23 Sep 2026 01:09:13 +0000
Files and hashes:         1: B665897BCB13562048E484EBEDAA534EA4DF9876.crl (hash: /faiB7ZmVlZ1rlFiSVy7lkShOmFy29YjUscIPinXjy8=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/NOT_TFN_CO/0/B665897BCB13562048E484EBEDAA534EA4DF9876.crl
                          rsync://rpkica.twnic.tw/rpki/NOT_TFN_CO/0/B665897BCB13562048E484EBEDAA534EA4DF9876.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B665897BCB13562048E484EBEDAA534EA4DF9876.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 22:16:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:38:ab:d1:7d:c1:1d:dd:61:bc:4c:a8:75:bc:3f:c3:22:71:16:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B665897BCB13562048E484EBEDAA534EA4DF9876
        Validity
            Not Before: Sep 21 21:17:13 2026 GMT
            Not After : Sep 23 01:09:13 2026 GMT
        Subject: CN=8ED2B989941299C3CCD480055CB88B74DEB3D1E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:64:7b:c5:97:e1:95:25:32:59:26:e4:47:46:
                    b6:a9:48:3a:e5:4f:79:db:8a:51:91:46:b8:76:43:
                    b9:be:88:66:ff:a4:6a:de:31:68:20:54:bb:f7:2f:
                    e8:74:3d:04:84:22:cf:ac:d3:ea:5f:11:3c:43:62:
                    a8:e8:b5:58:6d:16:21:fa:a1:c8:b7:14:33:f7:22:
                    60:aa:73:33:cb:9a:e2:ad:7c:25:32:3c:30:e5:ba:
                    b5:0e:fe:b4:5b:1a:e7:1d:ca:f1:24:bb:a6:a6:e0:
                    4f:7c:1b:60:48:df:3c:24:49:34:d7:e7:e3:d5:b1:
                    2a:15:04:d2:15:ee:c8:06:74:d7:16:f7:ba:11:6e:
                    c3:e7:dc:b8:09:e9:cc:8d:4f:b8:2c:ea:fb:0c:3a:
                    94:24:c9:6a:6b:31:3a:11:24:19:ab:6a:5f:0e:1a:
                    51:37:e4:c5:cf:af:9a:3e:8b:c0:eb:dc:9c:22:d8:
                    c2:1a:fa:5f:2d:9f:c9:ef:a1:80:1d:70:52:b8:b3:
                    cd:b8:65:0d:41:6e:86:ea:d6:8a:6b:41:30:00:2a:
                    3c:b8:43:2f:1a:91:e0:9f:88:0a:f1:32:1a:e8:78:
                    af:09:74:3c:81:26:5a:6a:84:81:2d:51:c0:2b:b3:
                    f3:b0:41:75:19:dd:2d:81:9b:28:24:f0:39:f0:19:
                    8e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:D2:B9:89:94:12:99:C3:CC:D4:80:05:5C:B8:8B:74:DE:B3:D1:E1
            X509v3 Authority Key Identifier:
                keyid:B6:65:89:7B:CB:13:56:20:48:E4:84:EB:ED:AA:53:4E:A4:DF:98:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/NOT_TFN_CO/0/B665897BCB13562048E484EBEDAA534EA4DF9876.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B665897BCB13562048E484EBEDAA534EA4DF9876.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NOT_TFN_CO/0/B665897BCB13562048E484EBEDAA534EA4DF9876.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:94:97:75:20:18:b9:dd:70:81:69:53:db:f9:25:c8:24:12:
         6a:00:0d:54:91:1e:94:b3:65:f0:d1:83:b0:63:c6:1d:8f:1d:
         f3:2c:6a:80:89:f0:a5:17:a5:76:78:48:4e:4c:ad:f0:5b:2c:
         94:e7:02:0a:e3:b4:d9:34:00:f8:1e:29:5d:eb:b6:8c:74:45:
         13:c5:e5:81:20:d4:ae:d0:4e:19:a1:66:cf:42:9c:3b:d3:cc:
         1d:75:8c:a8:3a:65:90:00:5a:77:c6:38:6f:ce:7f:4a:65:78:
         89:d8:48:c9:cb:c6:af:e7:af:bf:21:cd:08:0d:90:bf:56:d4:
         09:6b:c5:0e:a7:52:d7:6c:5c:50:47:70:45:c7:bd:59:c5:a9:
         03:c8:66:e8:bc:b2:a9:50:34:aa:a2:ed:04:ae:88:7c:8a:ed:
         cd:a2:7a:df:0e:aa:27:b5:16:2d:c0:b7:97:88:66:11:7a:ff:
         dd:87:57:be:86:1e:ff:48:c0:c7:5a:51:b9:32:97:6e:46:64:
         03:85:9e:b6:a9:c9:6f:8a:b3:73:52:39:80:af:3f:02:59:dd:
         d6:43:01:f1:c3:b8:2c:e8:c5:25:81:2a:c1:b8:1d:17:1a:62:
         48:21:8d:58:02:cf:c8:c6:c0:d8:d3:ea:42:a4:21:97:ea:32:
         9a:9c:47:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:19:43 2026 by rpki-client