Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/SHINENET/0/980832FF83BBFCD8BD442D9C3DDCD89764C1D101.mft
File:                     980832FF83BBFCD8BD442D9C3DDCD89764C1D101.mft (raw, json)
Hash identifier:          rsbFq9P4MANNXVCEX9v/ITgTW5DDG3xhgx509LObNxs=
Subject key identifier:   48:9B:1E:D7:32:7D:0D:E4:18:23:4B:EC:64:A2:69:E8:21:E1:FA:75
Authority key identifier: 98:08:32:FF:83:BB:FC:D8:BD:44:2D:9C:3D:DC:D8:97:64:C1:D1:01
Certificate issuer:       /CN=980832FF83BBFCD8BD442D9C3DDCD89764C1D101
Certificate serial:       20BA6C8C85CA82D2FC65EC8B579DA760DBC7FD44
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/980832FF83BBFCD8BD442D9C3DDCD89764C1D101.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SHINENET/0/980832FF83BBFCD8BD442D9C3DDCD89764C1D101.mft
Manifest number:          D4
Signing time:             Thu 15 Oct 2026 12:45:03 +0000
Manifest this update:     Thu 15 Oct 2026 12:40:03 +0000
Manifest next update:     Fri 16 Oct 2026 15:27:03 +0000
Files and hashes:         1: 3130332e3139372e3135382e302f32332d3234203d3e20313530373730.roa (hash: sfd0XACvVXb+UD6MWhg3l8P8g9Qo3omITYOEYKEM2cQ=)
                          2: 980832FF83BBFCD8BD442D9C3DDCD89764C1D101.crl (hash: 0ZmrhvUd0p6rbnwYIWKD3O/kxo5j6qjAEVu5Ht50Q5o=)
                          3: 323430303a666536303a3a2f33322d3634203d3e20313530373730.roa (hash: EhLj+m0MkuzmmwvkxkJNFTonhVd1K264TpTCs4vZ774=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SHINENET/0/980832FF83BBFCD8BD442D9C3DDCD89764C1D101.crl
                          rsync://rpkica.twnic.tw/rpki/SHINENET/0/980832FF83BBFCD8BD442D9C3DDCD89764C1D101.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/980832FF83BBFCD8BD442D9C3DDCD89764C1D101.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 03:42:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:ba:6c:8c:85:ca:82:d2:fc:65:ec:8b:57:9d:a7:60:db:c7:fd:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=980832FF83BBFCD8BD442D9C3DDCD89764C1D101
        Validity
            Not Before: Oct 15 12:40:03 2026 GMT
            Not After : Oct 16 15:27:03 2026 GMT
        Subject: CN=489B1ED7327D0DE418234BEC64A269E821E1FA75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6c:56:d0:54:d5:d0:c9:c0:24:0e:92:3d:5a:
                    21:d6:73:2c:d2:d0:41:16:99:62:91:16:d7:fc:ee:
                    c9:2b:0b:87:0b:b3:3a:d7:c5:25:f0:5b:43:24:53:
                    94:b0:cc:61:a0:06:a7:ee:13:68:23:cd:48:8c:8e:
                    86:1e:93:bb:4d:ab:b2:b9:b0:8a:d8:8d:51:ce:24:
                    c9:08:f2:ef:17:36:89:26:77:3e:44:75:6e:c1:5d:
                    35:65:23:2f:a4:b6:f5:1e:54:15:a7:cc:8d:6e:1e:
                    5a:2c:8f:cd:db:25:83:6f:a7:7c:73:6f:57:7c:3a:
                    6b:98:4c:12:a0:d9:7b:25:b3:77:dd:5f:d2:78:c1:
                    29:b9:09:cd:a5:14:03:a3:18:c1:c8:a4:e4:b4:08:
                    4e:be:ef:e3:43:bf:31:8b:eb:83:78:3f:d9:54:f7:
                    74:18:9c:93:51:17:15:20:85:4d:6a:f4:a9:9c:7c:
                    47:74:b7:fe:df:ce:59:db:d1:d7:21:17:33:5e:87:
                    1a:22:a9:ed:86:64:9b:f3:da:63:87:f0:4f:f5:ae:
                    c7:98:05:4c:e9:ce:03:ab:03:2c:a7:0a:36:5f:93:
                    28:23:ce:26:19:ef:20:fa:c9:2c:d5:44:c7:c0:1e:
                    9d:3c:f7:d7:b5:a1:31:c4:aa:4e:cd:1a:f4:b8:72:
                    f4:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:9B:1E:D7:32:7D:0D:E4:18:23:4B:EC:64:A2:69:E8:21:E1:FA:75
            X509v3 Authority Key Identifier:
                keyid:98:08:32:FF:83:BB:FC:D8:BD:44:2D:9C:3D:DC:D8:97:64:C1:D1:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SHINENET/0/980832FF83BBFCD8BD442D9C3DDCD89764C1D101.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/980832FF83BBFCD8BD442D9C3DDCD89764C1D101.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SHINENET/0/980832FF83BBFCD8BD442D9C3DDCD89764C1D101.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:b1:ad:4e:ee:a5:aa:56:6c:b1:0a:74:9b:a6:21:61:9e:2c:
         ed:d7:8e:03:6d:de:68:f8:ea:40:bb:93:d3:3a:71:d8:88:1a:
         ee:27:dc:b5:9e:75:dd:55:9f:54:85:67:0b:3c:11:3b:87:7b:
         4c:10:d4:49:f8:33:df:f3:38:db:72:75:94:d6:82:df:59:bf:
         1f:bd:75:31:0b:29:7a:ae:b0:05:96:f3:01:34:78:5b:9b:25:
         ab:83:09:ff:74:7d:ca:65:19:d0:c7:17:b7:25:10:cb:7e:cf:
         09:60:3a:49:59:e9:b6:84:15:69:2e:b6:f6:0d:ea:9d:ee:3e:
         f0:ed:d9:06:77:b1:ed:6b:e7:dc:47:bb:c6:70:33:1e:b1:0a:
         71:b9:44:ba:dc:cc:83:95:5a:68:4e:09:61:93:32:c6:d0:ac:
         6a:93:69:02:de:15:45:f5:6a:45:67:26:95:19:88:7f:39:73:
         56:e9:f3:3f:a2:21:ce:c7:6a:65:a4:53:fd:b2:c0:aa:4b:ea:
         ce:9a:d3:c0:2b:e6:67:eb:11:3f:a2:f8:7b:cb:aa:5c:8a:c1:
         fe:1f:c7:b7:61:90:fe:46:de:dc:4d:d1:b9:81:23:e9:89:f1:
         6b:42:8a:e6:f9:70:3b:8b:75:78:37:3a:5b:55:bb:7b:12:84:
         dc:0f:ed:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 19:14:05 2026 by rpki-client