Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/NTUSTCCADM/0/B469C8AF88F1417DF3E55E0BC5EECADA9250E5CB.mft
File:                     B469C8AF88F1417DF3E55E0BC5EECADA9250E5CB.mft (raw, json)
Hash identifier:          Xs7dvhTN1iVb39e4gD3TmhfdcE51AECORQkaxZdXqGg=
Subject key identifier:   70:30:2E:28:E4:29:87:78:C2:56:65:BB:9D:56:4E:C3:90:04:F7:82
Authority key identifier: B4:69:C8:AF:88:F1:41:7D:F3:E5:5E:0B:C5:EE:CA:DA:92:50:E5:CB
Certificate issuer:       /CN=B469C8AF88F1417DF3E55E0BC5EECADA9250E5CB
Certificate serial:       3CBA7F18ED4B9321DA46EA4321763A87D58417D5
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B469C8AF88F1417DF3E55E0BC5EECADA9250E5CB.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/NTUSTCCADM/0/B469C8AF88F1417DF3E55E0BC5EECADA9250E5CB.mft
Manifest number:          B3
Signing time:             Mon 21 Sep 2026 10:51:58 +0000
Manifest this update:     Mon 21 Sep 2026 10:46:58 +0000
Manifest next update:     Tue 22 Sep 2026 14:14:58 +0000
Files and hashes:         1: B469C8AF88F1417DF3E55E0BC5EECADA9250E5CB.crl (hash: GMNCyKy7k9TW2nqKxncYlZVbuohVUMOH6rPCFVpBVmA=)
                          2: 3130332e3139312e32322e302f32332d3234203d3e203633383939.roa (hash: 27hTm/nhNb00WioUC9L5MAuYLPzBS9aBOsaC8RsQYps=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/NTUSTCCADM/0/B469C8AF88F1417DF3E55E0BC5EECADA9250E5CB.crl
                          rsync://rpkica.twnic.tw/rpki/NTUSTCCADM/0/B469C8AF88F1417DF3E55E0BC5EECADA9250E5CB.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B469C8AF88F1417DF3E55E0BC5EECADA9250E5CB.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 03:47:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:ba:7f:18:ed:4b:93:21:da:46:ea:43:21:76:3a:87:d5:84:17:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B469C8AF88F1417DF3E55E0BC5EECADA9250E5CB
        Validity
            Not Before: Sep 21 10:46:58 2026 GMT
            Not After : Sep 22 14:14:58 2026 GMT
        Subject: CN=70302E28E4298778C25665BB9D564EC39004F782
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:65:fd:ff:ed:2d:1b:bd:db:47:7e:05:f5:96:
                    ac:c1:e9:ee:ec:3c:af:db:ce:22:fa:2a:25:7d:76:
                    c7:5b:3e:ec:1b:ba:ba:89:2f:0b:fd:33:e6:d9:08:
                    d6:08:b2:6a:26:1b:5f:36:73:7a:c3:e6:64:76:8b:
                    3e:a7:34:bb:31:ca:4d:53:eb:94:f8:5f:a6:d4:a7:
                    65:a9:f5:87:b3:4f:0c:9e:0e:1c:9a:ed:f1:05:b9:
                    11:53:5d:9f:08:ec:04:08:d8:58:dc:f4:ff:47:19:
                    cc:84:ab:7c:5e:a7:6c:21:8b:18:e9:cd:0e:b8:55:
                    44:83:96:40:0b:97:63:fa:72:4a:f0:7f:8b:c5:8a:
                    b3:2c:ad:47:81:d5:ac:1a:bd:ab:89:08:51:20:83:
                    4b:c6:e8:a2:36:df:1a:44:6b:c1:6e:2f:82:dd:83:
                    6c:22:3a:32:92:18:06:9f:9a:db:da:ca:21:a7:2d:
                    5d:d4:b7:1f:41:7e:31:a4:26:c4:80:f4:74:a5:03:
                    c1:1c:ba:4e:ad:1b:17:14:8a:a9:21:3f:38:95:e2:
                    ed:d2:65:69:81:1e:a4:1f:70:93:02:9a:40:ec:58:
                    4b:93:27:43:e9:77:76:d8:0c:06:af:5d:1f:8e:a0:
                    2e:d2:7c:ac:87:62:6a:47:16:9f:d6:8d:f2:93:2e:
                    6e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:30:2E:28:E4:29:87:78:C2:56:65:BB:9D:56:4E:C3:90:04:F7:82
            X509v3 Authority Key Identifier:
                keyid:B4:69:C8:AF:88:F1:41:7D:F3:E5:5E:0B:C5:EE:CA:DA:92:50:E5:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/NTUSTCCADM/0/B469C8AF88F1417DF3E55E0BC5EECADA9250E5CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B469C8AF88F1417DF3E55E0BC5EECADA9250E5CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NTUSTCCADM/0/B469C8AF88F1417DF3E55E0BC5EECADA9250E5CB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:16:d9:a1:d1:9c:62:00:72:95:bc:35:eb:e6:f3:58:78:de:
         0c:07:4d:6e:57:ed:90:59:e0:d8:d2:fb:0d:e5:c2:fd:fb:39:
         42:3e:0a:7c:a9:1f:aa:51:9e:a1:db:c5:cb:68:e5:9a:47:ab:
         84:43:4d:45:c1:ef:c7:f4:c5:b2:33:14:08:9f:13:48:b9:95:
         e5:cb:4f:71:a9:3d:f8:8b:01:67:da:52:ab:bd:93:d2:65:a4:
         8a:8e:9b:fb:b8:b0:43:fb:37:25:06:1a:16:4d:a3:73:28:2f:
         ce:a1:48:78:c3:86:b0:88:42:03:26:fe:47:77:5a:c6:2d:1b:
         dd:5a:06:55:3e:9d:b2:96:7e:ce:e9:20:bd:e7:c8:cd:57:93:
         e9:98:26:58:45:ce:46:39:c5:6f:d4:f9:46:49:6c:e0:1f:10:
         47:bb:38:2a:81:b5:c3:7c:08:10:0d:d7:c0:ba:de:80:34:56:
         d9:1b:57:de:0d:8e:3e:a5:d7:7b:8f:2b:04:f6:14:4e:42:72:
         3f:b6:c9:13:e4:a3:51:fb:17:e5:a7:a3:a5:ca:15:1b:54:75:
         ce:ac:12:c2:04:1f:2c:a7:fe:30:b2:04:57:dc:6c:68:05:2a:
         b6:3a:b2:9f:50:78:91:08:2c:99:1b:b7:cd:92:f9:c9:0d:ef:
         4f:37:1d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:00:54 2026 by rpki-client