Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/SMTRTCH/0/08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.mft
File:                     08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.mft (raw, json)
Hash identifier:          E6qQmhMFnReEu72AG+pFJs99WYvUDyW5DcVKOcUMrtw=
Subject key identifier:   88:55:77:54:99:B8:6A:F3:5B:AD:9E:65:8D:00:36:14:94:A7:E6:B1
Authority key identifier: 08:A0:3C:F9:C1:D3:AF:93:CF:DB:0A:2C:1D:87:8D:A6:02:75:D4:FE
Certificate issuer:       /CN=08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE
Certificate serial:       13C9D23B83A5DCCC00FDC6BF2F88E47DA3351B8C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SMTRTCH/0/08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.mft
Manifest number:          B4
Signing time:             Mon 21 Sep 2026 02:04:58 +0000
Manifest this update:     Mon 21 Sep 2026 01:59:58 +0000
Manifest next update:     Tue 22 Sep 2026 04:55:58 +0000
Files and hashes:         1: 08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.crl (hash: TaPWnoQSr9bOvtVIMrZylVgyaAnSMJrr70qxU1QKPh4=)
                          2: 3130332e33372e352e302f32342d3234203d3e2039363738.roa (hash: vq7Kkz8vi0K2HzkGDtDsKnFEZtHIaVtYlOC9mpxUIrQ=)
                          3: 3130332e33372e342e302f32342d3234203d3e2039363738.roa (hash: hQIZ2hKwplVh7xrppd5ykMhUFjuzMmmFpmHvfAwSwiU=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SMTRTCH/0/08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.crl
                          rsync://rpkica.twnic.tw/rpki/SMTRTCH/0/08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 03:47:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:c9:d2:3b:83:a5:dc:cc:00:fd:c6:bf:2f:88:e4:7d:a3:35:1b:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE
        Validity
            Not Before: Sep 21 01:59:58 2026 GMT
            Not After : Sep 22 04:55:58 2026 GMT
        Subject: CN=8855775499B86AF35BAD9E658D00361494A7E6B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c0:d0:14:19:87:aa:98:5f:43:64:3e:7d:00:
                    78:95:aa:f3:d8:e9:e3:24:c5:f9:9a:19:bd:01:56:
                    62:f2:64:eb:31:cf:75:8a:cd:75:57:8d:a6:1f:80:
                    9a:19:55:0c:9e:74:76:2e:62:47:6c:8b:f1:d8:d0:
                    5d:88:67:ce:44:0b:26:b3:de:c9:6b:7b:64:77:b5:
                    03:1c:fc:67:cb:06:a1:56:5e:b5:9b:62:36:7e:53:
                    92:71:67:6f:7f:60:2a:e4:fb:e7:81:38:66:5e:15:
                    4e:84:d8:25:a9:d6:d6:b1:37:c7:9a:7c:0c:63:96:
                    05:5e:cd:96:cd:0a:3b:52:cd:34:c8:14:91:1e:84:
                    e6:c2:a4:e6:c5:45:13:84:20:b2:0c:ca:54:f8:65:
                    70:18:8d:79:74:b6:0f:b9:4b:a8:98:be:e8:ed:08:
                    25:c6:68:f7:99:5a:be:30:83:df:8e:a6:b2:1c:f1:
                    d5:ce:52:a0:48:38:00:2d:6e:3a:37:b3:f9:9b:d7:
                    a5:43:f6:d1:2b:b1:21:59:c6:f4:9c:f2:77:fd:bc:
                    11:7f:ed:5a:f9:6d:22:26:86:d5:90:27:63:86:3d:
                    23:1a:66:d5:aa:25:24:83:ec:6e:67:36:4c:3f:82:
                    f1:2c:5e:4c:03:d4:a6:7d:7e:8c:f0:f4:61:a6:37:
                    35:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:55:77:54:99:B8:6A:F3:5B:AD:9E:65:8D:00:36:14:94:A7:E6:B1
            X509v3 Authority Key Identifier:
                keyid:08:A0:3C:F9:C1:D3:AF:93:CF:DB:0A:2C:1D:87:8D:A6:02:75:D4:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SMTRTCH/0/08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SMTRTCH/0/08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:28:d5:8d:23:0a:7f:02:79:14:91:43:7a:d3:d4:0e:8c:b0:
         5f:b5:17:a1:e6:b9:e7:50:a4:0f:c1:36:6d:a5:ce:cc:63:4d:
         72:d5:0b:cb:0f:18:1f:8c:c8:19:16:8a:12:79:af:07:03:02:
         ad:39:4d:c0:b3:3a:c8:1d:88:2b:bc:68:43:04:22:b3:33:c7:
         f8:71:0a:50:1d:8d:ed:3e:3d:03:81:6f:6e:7f:14:5d:d5:99:
         ed:53:c1:35:9d:5f:1a:25:f8:be:5d:52:23:6b:73:8a:4a:45:
         58:8c:b4:c5:76:44:06:78:bb:ee:56:dc:be:1c:37:63:68:34:
         fe:cf:fc:f1:e6:d8:77:18:d7:a5:ed:7d:e9:f4:7e:1d:9d:4d:
         fb:8e:aa:34:f7:5d:c9:6a:b9:ad:76:42:50:65:ea:54:a6:6f:
         31:f7:6e:58:37:95:3c:bc:22:44:1c:61:58:58:8e:bc:40:df:
         0d:64:44:30:57:16:89:25:9f:91:39:0c:3f:05:ac:c5:b2:53:
         14:cc:d1:83:34:10:d1:aa:50:56:ed:b1:e1:cb:bd:dc:24:b9:
         d2:4d:72:4f:71:6e:74:6b:24:33:fb:40:ac:3d:41:36:70:c2:
         88:e1:c1:ea:17:a3:3c:90:d1:b5:b7:ab:da:55:a2:50:92:87:
         6a:92:fa:33
-----BEGIN CERTIFICATE-----
MIIE5jCCA86gAwIBAgIUE8nSO4Ol3MwA/ca/L4jkfaM1G4wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDhBMDNDRjlDMUQzQUY5M0NGREIwQTJDMUQ4NzhEQTYw
Mjc1RDRGRTAeFw0yNjA5MjEwMTU5NThaFw0yNjA5MjIwNDU1NThaMDMxMTAvBgNV
BAMTKDg4NTU3NzU0OTlCODZBRjM1QkFEOUU2NThEMDAzNjE0OTRBN0U2QjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUwNAUGYeqmF9DZD59AHiVqvPY
6eMkxfmaGb0BVmLyZOsxz3WKzXVXjaYfgJoZVQyedHYuYkdsi/HY0F2IZ85ECyaz
3slre2R3tQMc/GfLBqFWXrWbYjZ+U5JxZ29/YCrk++eBOGZeFU6E2CWp1taxN8ea
fAxjlgVezZbNCjtSzTTIFJEehObCpObFRROEILIMylT4ZXAYjXl0tg+5S6iYvujt
CCXGaPeZWr4wg9+OprIc8dXOUqBIOAAtbjo3s/mb16VD9tErsSFZxvSc8nf9vBF/
7Vr5bSImhtWQJ2OGPSMaZtWqJSSD7G5nNkw/gvEsXkwD1KZ9fozw9GGmNzXXAgMB
AAGjggHwMIIB7DAdBgNVHQ4EFgQUiFV3VJm4avNbrZ5ljQA2FJSn5rEwHwYDVR0j
BBgwFoAUCKA8+cHTr5PP2wosHYeNpgJ11P4wDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU01UUlRD
SC8wLzA4QTAzQ0Y5QzFEM0FGOTNDRkRCMEEyQzFEODc4REE2MDI3NUQ0RkUuY3Js
MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu
aWMudHcvcnBraS9UV05JQ0NBLzEvMDhBMDNDRjlDMUQzQUY5M0NGREIwQTJDMUQ4
NzhEQTYwMjc1RDRGRS5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy
c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1NNVFJUQ0gvMC8wOEEwM0NGOUMx
RDNBRjkzQ0ZEQjBBMkMxRDg3OERBNjAyNzVENEZFLm1mdDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhCjVjSMK
fwJ5FJFDetPUDoywX7UXoea551CkD8E2baXOzGNNctULyw8YH4zIGRaKEnmvBwMC
rTlNwLM6yB2IK7xoQwQiszPH+HEKUB2N7T49A4Fvbn8UXdWZ7VPBNZ1fGiX4vl1S
I2tzikpFWIy0xXZEBni77lbcvhw3Y2g0/s/88ebYdxjXpe196fR+HZ1N+46qNPdd
yWq5rXZCUGXqVKZvMfduWDeVPLwiRBxhWFiOvEDfDWREMFcWiSWfkTkMPwWsxbJT
FMzRgzQQ0apQVu2x4cu93CS50k1yT3FudGskM/tArD1BNnDCiOHB6hejPJDRtber
2lWiUJKHapL6Mw==
-----END CERTIFICATE-----
Generated at Mon Sep 21 12:23:50 2026 by rpki-client