Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/QISDA/1/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.mft
File:                     5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.mft (raw, json)
Hash identifier:          PL9tOpRBXDJ5HYjka4ZkYxTDQv7AR6JRuIz2FN+o7IM=
Subject key identifier:   4F:A9:BD:94:15:E4:BC:F8:0D:95:50:E6:AB:72:2C:68:F9:15:44:30
Authority key identifier: 50:31:E6:5A:98:D8:27:3F:95:79:BF:A5:B8:FE:6C:A5:2D:01:C4:1B
Certificate issuer:       /CN=5031E65A98D8273F9579BFA5B8FE6CA52D01C41B
Certificate serial:       0E36F50804437118049B317E038EA5033E6E438D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/QISDA/1/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.mft
Manifest number:          B9
Signing time:             Fri 25 Sep 2026 17:13:41 +0000
Manifest this update:     Fri 25 Sep 2026 17:08:41 +0000
Manifest next update:     Sat 26 Sep 2026 20:15:41 +0000
Files and hashes:         1: 5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.crl (hash: WUUG3A6UDTPNO/y9THeeVxw3nLBf8lSdHqvtYSXpsEg=)
                          2: 3136352e39392e3131322e302f32332d3234203d3e20313331363831.roa (hash: WrYPkf0InVKyICQINH//KXuGgao1vX5GBqZA6/+9gHc=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/QISDA/1/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.crl
                          rsync://rpkica.twnic.tw/rpki/QISDA/1/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Sep 2026 20:15:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:36:f5:08:04:43:71:18:04:9b:31:7e:03:8e:a5:03:3e:6e:43:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5031E65A98D8273F9579BFA5B8FE6CA52D01C41B
        Validity
            Not Before: Sep 25 17:08:41 2026 GMT
            Not After : Sep 26 20:15:41 2026 GMT
        Subject: CN=4FA9BD9415E4BCF80D9550E6AB722C68F9154430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:05:a9:c0:e7:d3:79:75:5e:10:1a:ba:74:bc:
                    b7:e7:34:16:c0:e6:8e:0f:f3:c8:53:09:5c:82:46:
                    53:ac:c9:5f:eb:ac:14:00:5c:b1:e8:86:01:6a:88:
                    93:1e:a0:8a:d9:14:89:de:a6:54:ee:ab:2a:34:57:
                    e1:5c:0d:79:d9:ae:15:8e:e4:bf:a5:32:53:dd:c3:
                    98:a0:e5:61:4d:05:a8:b0:3a:3f:eb:69:d7:76:b4:
                    1f:90:c8:9b:e8:3c:2e:53:71:b0:4a:f2:48:8a:21:
                    43:c4:82:7d:e0:c2:2b:39:55:cc:69:cb:48:be:8f:
                    cd:56:34:b3:9f:cc:ec:d8:ef:da:3d:70:eb:ca:91:
                    cd:36:96:90:a7:4d:5b:64:35:37:e6:8a:f4:9a:a3:
                    6f:80:8c:7c:e9:77:03:2e:ef:55:eb:bc:e7:e7:d7:
                    ba:d1:13:6f:9a:68:3c:fb:2c:1a:4c:83:f8:0e:93:
                    e1:d0:86:e5:2d:1f:4e:e4:31:a8:46:67:40:65:48:
                    ff:d0:7b:d9:23:8c:31:7c:e9:d7:16:e7:3b:05:df:
                    57:c2:42:bd:c1:04:0e:07:b9:a9:c2:1a:35:71:fd:
                    1f:08:9b:ad:ae:83:13:6f:d4:33:71:aa:34:e7:73:
                    b9:2d:73:29:16:74:83:fa:44:2d:6c:bf:37:1e:a9:
                    d0:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:A9:BD:94:15:E4:BC:F8:0D:95:50:E6:AB:72:2C:68:F9:15:44:30
            X509v3 Authority Key Identifier:
                keyid:50:31:E6:5A:98:D8:27:3F:95:79:BF:A5:B8:FE:6C:A5:2D:01:C4:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/QISDA/1/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/QISDA/1/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:93:ea:b1:e9:16:dd:1d:55:a7:18:7b:79:26:6d:7a:4a:89:
         ab:2e:aa:3c:c4:d8:f1:46:1c:af:90:51:7a:aa:09:c2:16:a6:
         5e:c5:fb:66:c9:89:0d:a8:b3:b8:75:fe:a2:96:64:cb:f3:e9:
         3e:0f:3f:14:1f:cc:a2:2d:3b:16:86:6c:d6:85:0e:31:64:31:
         0d:ca:3e:04:73:a7:75:49:91:76:fd:2a:56:12:62:2e:e5:32:
         ce:f4:57:10:3d:a0:4a:13:e6:1e:d7:9e:cd:e2:a5:4f:ad:a9:
         47:c1:ca:52:e5:b3:ab:87:e3:86:d5:e8:31:b3:65:05:a2:c7:
         5e:1a:e9:52:82:1c:8b:fc:7f:a4:b0:06:cd:af:50:cf:bc:5e:
         12:78:8b:e3:d7:e3:ba:be:bd:dc:17:c2:07:3b:20:98:35:97:
         07:3b:dd:01:b6:34:a8:a3:5e:71:fa:cc:71:b9:71:48:eb:c5:
         59:be:48:63:97:43:c5:1d:9c:eb:40:a8:69:44:fd:31:94:b5:
         42:2f:d4:c1:8c:a1:1a:2e:36:53:84:98:22:dc:1f:d6:2f:38:
         4f:40:6e:38:f0:57:c9:8d:76:c6:53:01:ee:cb:64:5c:a3:73:
         93:a9:9d:59:cd:10:58:e4:7c:7c:34:ef:6d:1e:6e:94:e7:d8:
         81:5e:f0:ec
-----BEGIN CERTIFICATE-----
MIIE4jCCA8qgAwIBAgIUDjb1CARDcRgEmzF+A46lAz5uQ40wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTAzMUU2NUE5OEQ4MjczRjk1NzlCRkE1QjhGRTZDQTUy
RDAxQzQxQjAeFw0yNjA5MjUxNzA4NDFaFw0yNjA5MjYyMDE1NDFaMDMxMTAvBgNV
BAMTKDRGQTlCRDk0MTVFNEJDRjgwRDk1NTBFNkFCNzIyQzY4RjkxNTQ0MzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwBanA59N5dV4QGrp0vLfnNBbA
5o4P88hTCVyCRlOsyV/rrBQAXLHohgFqiJMeoIrZFIneplTuqyo0V+FcDXnZrhWO
5L+lMlPdw5ig5WFNBaiwOj/radd2tB+QyJvoPC5TcbBK8kiKIUPEgn3gwis5Vcxp
y0i+j81WNLOfzOzY79o9cOvKkc02lpCnTVtkNTfmivSao2+AjHzpdwMu71XrvOfn
17rRE2+aaDz7LBpMg/gOk+HQhuUtH07kMahGZ0BlSP/Qe9kjjDF86dcW5zsF31fC
Qr3BBA4HuanCGjVx/R8Im62ugxNv1DNxqjTnc7ktcykWdIP6RC1svzceqdDjAgMB
AAGjggHsMIIB6DAdBgNVHQ4EFgQUT6m9lBXkvPgNlVDmq3IsaPkVRDAwHwYDVR0j
BBgwFoAUUDHmWpjYJz+Veb+luP5spS0BxBswDgYDVR0PAQH/BAQDAgeAMGIGA1Ud
HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvUUlTREEv
MS81MDMxRTY1QTk4RDgyNzNGOTU3OUJGQTVCOEZFNkNBNTJEMDFDNDFCLmNybDBv
BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS8wLzUwMzFFNjVBOThEODI3M0Y5NTc5QkZBNUI4RkU2
Q0E1MkQwMUM0MUIuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5
bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9RSVNEQS8xLzUwMzFFNjVBOThEODI3
M0Y5NTc5QkZBNUI4RkU2Q0E1MkQwMUM0MUIubWZ0MBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAak+qx6RbdHVWn
GHt5Jm16SomrLqo8xNjxRhyvkFF6qgnCFqZexftmyYkNqLO4df6ilmTL8+k+Dz8U
H8yiLTsWhmzWhQ4xZDENyj4Ec6d1SZF2/SpWEmIu5TLO9FcQPaBKE+Ye157N4qVP
ralHwcpS5bOrh+OG1egxs2UFosdeGulSghyL/H+ksAbNr1DPvF4SeIvj1+O6vr3c
F8IHOyCYNZcHO90BtjSoo15x+sxxuXFI68VZvkhjl0PFHZzrQKhpRP0xlLVCL9TB
jKEaLjZThJgi3B/WLzhPQG448FfJjXbGUwHuy2Rco3OTqZ1ZzRBY5Hx8NO9tHm6U
59iBXvDs
-----END CERTIFICATE-----
Generated at Sat Sep 26 06:09:29 2026 by rpki-client