Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/SIMPLE/1/273D80570A6F8C43816FAC4F615749C9D6D98E96.mft
File:                     273D80570A6F8C43816FAC4F615749C9D6D98E96.mft (raw, json)
Hash identifier:          1C6tOPAbtC4fpLw7+SSy703brNzZ81dE1R0f5R6FIUQ=
Subject key identifier:   B8:72:A5:2E:04:0F:D8:6C:2D:80:4E:67:EA:07:3F:34:75:C8:2A:D4
Authority key identifier: 27:3D:80:57:0A:6F:8C:43:81:6F:AC:4F:61:57:49:C9:D6:D9:8E:96
Certificate issuer:       /CN=273D80570A6F8C43816FAC4F615749C9D6D98E96
Certificate serial:       2407B0F9CEAE9307F26F589B4BBCE87BEF6D50D0
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/273D80570A6F8C43816FAC4F615749C9D6D98E96.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SIMPLE/1/273D80570A6F8C43816FAC4F615749C9D6D98E96.mft
Manifest number:          B8
Signing time:             Mon 21 Sep 2026 17:36:44 +0000
Manifest this update:     Mon 21 Sep 2026 17:31:44 +0000
Manifest next update:     Tue 22 Sep 2026 18:17:44 +0000
Files and hashes:         1: 3136302e33302e39382e302f32332d3332203d3e2039393233.roa (hash: 6wVkWs3UMXulNaDAPYa/WT6uRUSwCi/nQxDrgmXkwdo=)
                          2: 273D80570A6F8C43816FAC4F615749C9D6D98E96.crl (hash: G+aWvr/qNs0YmCTAaWGYdp6SBZV5AJWg+6LxwquP0N8=)
                          3: 3136302e33302e39382e302f32332d3332203d3e203332353935.roa (hash: sI8LAtdu8OdYUfd6YrN2QIv70x44wmscxxxuHtT0n54=)
                          4: 3136302e33302e39392e302f32342d3234203d3e20313331363330.roa (hash: U460426ViJjLThyGT9vAizXPCxksDkIxAw3jEOYoAM4=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SIMPLE/1/273D80570A6F8C43816FAC4F615749C9D6D98E96.crl
                          rsync://rpkica.twnic.tw/rpki/SIMPLE/1/273D80570A6F8C43816FAC4F615749C9D6D98E96.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/273D80570A6F8C43816FAC4F615749C9D6D98E96.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 18:17:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:07:b0:f9:ce:ae:93:07:f2:6f:58:9b:4b:bc:e8:7b:ef:6d:50:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=273D80570A6F8C43816FAC4F615749C9D6D98E96
        Validity
            Not Before: Sep 21 17:31:44 2026 GMT
            Not After : Sep 22 18:17:44 2026 GMT
        Subject: CN=B872A52E040FD86C2D804E67EA073F3475C82AD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:1e:7b:1e:7d:9f:01:a1:93:b4:f7:40:eb:33:
                    a0:61:d6:d5:50:c6:10:29:79:2c:28:d6:4c:99:b4:
                    22:29:55:f3:38:7b:e3:03:c7:1b:6b:33:41:d5:d0:
                    5e:56:8b:dc:70:b9:b2:41:d9:11:8a:79:d9:3f:c0:
                    6b:dd:39:37:d2:10:48:63:ce:ee:96:7a:5d:2a:66:
                    57:69:58:e5:dc:2f:da:3d:9b:e4:41:d9:4a:1b:e7:
                    d4:75:f9:04:01:7e:bf:0f:0f:6a:a8:09:91:06:ef:
                    33:04:d0:50:2d:ef:e9:37:54:41:69:aa:df:9c:9f:
                    20:f4:bc:83:25:df:2b:85:71:1d:e2:9c:b2:be:a2:
                    32:68:06:3c:a3:bd:63:b4:55:47:29:5e:ce:0a:f2:
                    6f:7b:af:ec:9d:e9:53:65:72:4e:86:68:1b:03:a9:
                    bd:74:43:e9:ef:36:14:24:c7:88:58:61:ff:41:0a:
                    7c:c3:54:4a:0b:9b:14:c3:50:76:a9:11:fe:61:15:
                    b7:28:32:45:2f:cf:55:e2:76:c7:4a:66:39:1f:53:
                    e7:13:72:69:5e:9b:d7:89:31:be:97:53:73:d3:34:
                    7d:5b:75:22:6d:8a:77:4b:4f:f4:ec:19:6a:1c:ff:
                    6e:db:77:d3:5f:b4:6b:bc:4f:c5:c9:d7:5b:ea:b5:
                    66:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:72:A5:2E:04:0F:D8:6C:2D:80:4E:67:EA:07:3F:34:75:C8:2A:D4
            X509v3 Authority Key Identifier:
                keyid:27:3D:80:57:0A:6F:8C:43:81:6F:AC:4F:61:57:49:C9:D6:D9:8E:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SIMPLE/1/273D80570A6F8C43816FAC4F615749C9D6D98E96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/273D80570A6F8C43816FAC4F615749C9D6D98E96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SIMPLE/1/273D80570A6F8C43816FAC4F615749C9D6D98E96.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:b4:5e:29:70:4c:a8:e8:14:b8:1f:b8:af:10:d6:07:7a:8d:
         0d:97:1a:b1:f8:1f:80:b0:61:d0:4b:9d:22:ac:f8:8a:f2:fa:
         e2:d2:bc:0f:e2:54:ca:f5:29:47:d6:df:75:86:10:4a:b5:47:
         e4:b2:e8:36:d3:c5:c8:63:a6:bf:b7:89:b4:3c:48:32:a2:21:
         18:5c:08:d9:56:dc:08:c9:d4:ec:4c:0a:99:9c:9d:02:88:1a:
         7b:83:e2:b4:0b:08:f4:cd:ff:53:7f:d3:d1:1e:c7:1b:9a:3f:
         c0:6e:3d:ef:cb:0c:54:cb:b5:9e:e2:4c:62:0c:b8:16:5d:c9:
         38:65:93:0f:85:be:20:41:61:9f:42:1e:5e:e8:e3:2b:73:15:
         fc:c7:e8:97:b6:1b:1b:02:bf:4e:6f:20:06:f4:fa:34:4c:a3:
         f7:eb:41:52:8e:18:06:9b:f6:8c:d9:c8:26:33:68:ad:4e:fc:
         34:77:de:a7:76:4a:ee:50:df:98:72:e5:ab:a5:73:78:fa:f5:
         07:fa:4b:c8:3c:cc:ef:23:85:68:cf:34:f4:b3:f6:79:bb:9f:
         ee:b1:ea:1a:98:52:2c:b7:7d:fd:ad:cf:4a:cc:e4:1d:d0:f2:
         6b:11:ec:1c:08:cd:c3:87:67:46:dd:77:39:c7:f0:a4:8d:76:
         1b:f7:84:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:43:43 2026 by rpki-client