Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/SMTRTCH/0/08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.mft
File:                     08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.mft (raw, json)
Hash identifier:          scyeDMus6LAU6IO4YavhbvMkbxbDOyl3qQaagvhVb3U=
Subject key identifier:   FE:D7:79:05:C5:ED:84:65:12:02:F1:64:5F:C5:4F:A2:3C:12:17:81
Authority key identifier: 08:A0:3C:F9:C1:D3:AF:93:CF:DB:0A:2C:1D:87:8D:A6:02:75:D4:FE
Certificate issuer:       /CN=08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE
Certificate serial:       38D468F0914D2D5C53D72C67098F90803E6AC306
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SMTRTCH/0/08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.mft
Manifest number:          F5
Signing time:             Mon 09 Nov 2026 01:59:05 +0000
Manifest this update:     Mon 09 Nov 2026 01:54:05 +0000
Manifest next update:     Tue 10 Nov 2026 02:20:05 +0000
Files and hashes:         1: 08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.crl (hash: VtTksBM/Uy9iBv5S0rcpT4O/qVdNr6pLLcX/hVesgks=)
                          2: 3130332e33372e352e302f32342d3234203d3e2039363738.roa (hash: vq7Kkz8vi0K2HzkGDtDsKnFEZtHIaVtYlOC9mpxUIrQ=)
                          3: 3130332e33372e342e302f32342d3234203d3e2039363738.roa (hash: hQIZ2hKwplVh7xrppd5ykMhUFjuzMmmFpmHvfAwSwiU=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SMTRTCH/0/08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.crl
                          rsync://rpkica.twnic.tw/rpki/SMTRTCH/0/08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Nov 2026 02:20:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:d4:68:f0:91:4d:2d:5c:53:d7:2c:67:09:8f:90:80:3e:6a:c3:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE
        Validity
            Not Before: Nov  9 01:54:05 2026 GMT
            Not After : Nov 10 02:20:05 2026 GMT
        Subject: CN=FED77905C5ED84651202F1645FC54FA23C121781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:be:8a:18:fe:41:e9:d6:a1:20:98:40:3a:9c:
                    0f:df:be:7a:34:1c:de:95:02:97:1d:20:1b:31:48:
                    ce:06:79:99:b0:62:4f:48:e2:26:68:fe:7a:62:e2:
                    b9:2a:57:40:db:8a:51:0e:d6:67:75:20:b3:b4:71:
                    2a:f2:ee:80:c4:d5:6e:f5:8a:f9:4a:62:fe:19:78:
                    1d:c4:27:58:cb:4f:de:66:82:8e:2d:fd:74:b4:70:
                    90:ec:7b:7f:03:f6:50:37:cc:76:ac:91:90:c5:3a:
                    62:38:59:ef:9b:d1:2b:de:9a:6f:2e:99:fd:20:d5:
                    7c:0c:f9:39:fd:55:ff:e9:67:fd:c7:53:e6:58:b8:
                    0f:18:55:fd:f7:1b:68:ee:21:ba:c4:7b:01:c6:08:
                    96:9f:a0:ec:e5:1f:39:db:78:c6:f5:6a:6c:7b:2c:
                    5e:3d:dc:56:01:93:44:1c:4e:e5:c2:ba:1d:d4:69:
                    f2:5e:e5:3e:8c:26:e3:94:0d:11:59:7f:c2:6e:18:
                    cf:b5:02:2f:20:63:a9:ad:21:be:66:c0:82:98:b5:
                    2e:2f:b9:43:ce:f5:5d:00:d0:71:52:56:6c:58:2a:
                    3e:43:1f:f8:eb:4e:8b:68:47:ff:14:a1:e7:68:f9:
                    b5:34:6c:10:8c:a0:2d:7c:21:91:a9:87:1e:25:17:
                    2d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:D7:79:05:C5:ED:84:65:12:02:F1:64:5F:C5:4F:A2:3C:12:17:81
            X509v3 Authority Key Identifier:
                keyid:08:A0:3C:F9:C1:D3:AF:93:CF:DB:0A:2C:1D:87:8D:A6:02:75:D4:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SMTRTCH/0/08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SMTRTCH/0/08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:97:87:25:6a:29:42:92:37:0c:96:5e:84:7f:99:69:09:6c:
         17:9d:3d:cf:b8:4e:37:21:cc:49:68:32:10:a6:b7:02:b0:e4:
         6a:b8:db:6f:19:e0:56:c6:ab:87:df:0e:bd:e3:8f:33:c8:52:
         80:31:fe:ce:6f:1d:90:f1:be:02:a1:94:54:90:12:e6:5e:7b:
         df:42:a5:5c:ce:92:10:9c:da:47:8e:dd:e1:1b:74:26:31:06:
         a2:aa:c1:89:12:83:b1:a7:f7:62:99:a2:ed:23:ef:90:d8:9f:
         43:e3:61:b4:01:30:c9:67:0b:54:ab:81:c0:5a:17:10:96:a2:
         72:97:9a:e0:63:c8:8c:19:ef:e0:e3:e3:26:6b:7b:4b:e2:cd:
         2e:6d:2a:77:de:01:62:d2:f8:7a:f1:92:e9:28:de:50:9c:9a:
         22:35:4d:9e:50:77:95:3f:db:25:85:44:12:5a:6a:38:d2:c7:
         e3:cb:eb:22:03:b9:3b:bd:2f:97:ed:f4:ee:f7:a0:b3:55:9d:
         a5:55:57:ee:69:87:6c:47:82:e5:fe:70:fb:6b:65:84:2e:ce:
         4a:bb:9a:eb:ba:f9:21:cd:64:09:f8:fb:3d:5e:19:bb:8d:ab:
         c7:3b:77:a7:e4:e0:28:85:8b:bf:39:e7:0c:3f:c5:be:74:b4:
         b9:84:44:91
-----BEGIN CERTIFICATE-----
MIIE5jCCA86gAwIBAgIUONRo8JFNLVxT1yxnCY+QgD5qwwYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDhBMDNDRjlDMUQzQUY5M0NGREIwQTJDMUQ4NzhEQTYw
Mjc1RDRGRTAeFw0yNjExMDkwMTU0MDVaFw0yNjExMTAwMjIwMDVaMDMxMTAvBgNV
BAMTKEZFRDc3OTA1QzVFRDg0NjUxMjAyRjE2NDVGQzU0RkEyM0MxMjE3ODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqvooY/kHp1qEgmEA6nA/fvno0
HN6VApcdIBsxSM4GeZmwYk9I4iZo/npi4rkqV0DbilEO1md1ILO0cSry7oDE1W71
ivlKYv4ZeB3EJ1jLT95mgo4t/XS0cJDse38D9lA3zHaskZDFOmI4We+b0Svemm8u
mf0g1XwM+Tn9Vf/pZ/3HU+ZYuA8YVf33G2juIbrEewHGCJafoOzlHznbeMb1amx7
LF493FYBk0QcTuXCuh3UafJe5T6MJuOUDRFZf8JuGM+1Ai8gY6mtIb5mwIKYtS4v
uUPO9V0A0HFSVmxYKj5DH/jrTotoR/8Uoedo+bU0bBCMoC18IZGphx4lFy2lAgMB
AAGjggHwMIIB7DAdBgNVHQ4EFgQU/td5BcXthGUSAvFkX8VPojwSF4EwHwYDVR0j
BBgwFoAUCKA8+cHTr5PP2wosHYeNpgJ11P4wDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU01UUlRD
SC8wLzA4QTAzQ0Y5QzFEM0FGOTNDRkRCMEEyQzFEODc4REE2MDI3NUQ0RkUuY3Js
MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu
aWMudHcvcnBraS9UV05JQ0NBLzEvMDhBMDNDRjlDMUQzQUY5M0NGREIwQTJDMUQ4
NzhEQTYwMjc1RDRGRS5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy
c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1NNVFJUQ0gvMC8wOEEwM0NGOUMx
RDNBRjkzQ0ZEQjBBMkMxRDg3OERBNjAyNzVENEZFLm1mdDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGpeHJWop
QpI3DJZehH+ZaQlsF509z7hONyHMSWgyEKa3ArDkarjbbxngVsarh98OveOPM8hS
gDH+zm8dkPG+AqGUVJAS5l5730KlXM6SEJzaR47d4Rt0JjEGoqrBiRKDsaf3Ypmi
7SPvkNifQ+NhtAEwyWcLVKuBwFoXEJaicpea4GPIjBnv4OPjJmt7S+LNLm0qd94B
YtL4evGS6SjeUJyaIjVNnlB3lT/bJYVEElpqONLH48vrIgO5O70vl+307vegs1Wd
pVVX7mmHbEeC5f5w+2tlhC7OSrua67r5Ic1kCfj7PV4Zu42rxzt3p+TgKIWLvznn
DD/FvnS0uYREkQ==
-----END CERTIFICATE-----
Generated at Mon Nov 9 10:01:25 2026 by rpki-client