Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/SPUSER/0/164EB710D7AA83CB67EE2E709B4F195437239363.mft
File:                     164EB710D7AA83CB67EE2E709B4F195437239363.mft (raw, json)
Hash identifier:          5YZznPF227SJASudKpSgo/tNxJQj6Pi5dWNSpg5OcwM=
Subject key identifier:   C4:85:3E:2B:AE:77:0D:8B:B9:56:BD:A2:6E:9F:8F:12:6E:F6:41:0A
Authority key identifier: 16:4E:B7:10:D7:AA:83:CB:67:EE:2E:70:9B:4F:19:54:37:23:93:63
Certificate issuer:       /CN=164EB710D7AA83CB67EE2E709B4F195437239363
Certificate serial:       36DDEC6244FF054D95496455270F257336632667
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/164EB710D7AA83CB67EE2E709B4F195437239363.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SPUSER/0/164EB710D7AA83CB67EE2E709B4F195437239363.mft
Manifest number:          FC
Signing time:             Sun 15 Nov 2026 14:31:47 +0000
Manifest this update:     Sun 15 Nov 2026 14:26:47 +0000
Manifest next update:     Mon 16 Nov 2026 15:01:47 +0000
Files and hashes:         1: 323430363a3330303a3a2f33322d3332203d3e2033343632.roa (hash: Mx2hdpo1JSD9a9oOTPfRMGnVumGCxyTkbl1EN6cIp8s=)
                          2: 164EB710D7AA83CB67EE2E709B4F195437239363.crl (hash: 1bD6vzIbLde0G5gHXrYmmedjk6rlDlSkxybfLOW3M/Q=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SPUSER/0/164EB710D7AA83CB67EE2E709B4F195437239363.crl
                          rsync://rpkica.twnic.tw/rpki/SPUSER/0/164EB710D7AA83CB67EE2E709B4F195437239363.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/164EB710D7AA83CB67EE2E709B4F195437239363.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 16 Nov 2026 08:45:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:dd:ec:62:44:ff:05:4d:95:49:64:55:27:0f:25:73:36:63:26:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=164EB710D7AA83CB67EE2E709B4F195437239363
        Validity
            Not Before: Nov 15 14:26:47 2026 GMT
            Not After : Nov 16 15:01:47 2026 GMT
        Subject: CN=C4853E2BAE770D8BB956BDA26E9F8F126EF6410A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:35:4c:4a:26:95:62:3d:b2:7d:86:f5:d1:eb:
                    9e:5f:6b:bf:ad:3b:c2:ba:58:16:dd:cc:9e:bd:52:
                    fb:a6:8e:0b:50:71:ef:6a:a5:2f:91:ef:15:44:82:
                    04:23:d3:08:0f:07:26:0f:4f:15:a2:e1:14:55:63:
                    c4:5f:2f:69:10:68:7e:43:f7:d0:ca:89:37:7c:bd:
                    fb:16:fb:31:25:e1:67:8e:01:04:69:17:20:b0:b8:
                    c6:a9:45:21:1d:be:ab:00:11:e4:67:b1:75:e8:ac:
                    31:33:0e:85:6f:9a:5b:1b:20:f2:25:63:e2:93:91:
                    fe:82:d1:fe:55:0b:30:49:b3:24:b8:d9:82:02:e9:
                    78:a5:11:62:a6:82:98:a1:54:24:48:14:6d:8f:0a:
                    94:b3:73:65:6b:27:2f:dc:4e:e5:43:f9:7c:55:aa:
                    be:02:48:7b:b7:5d:f9:f6:19:53:ef:2c:bc:bd:ad:
                    53:bb:16:06:0a:84:20:d7:e2:12:0b:3f:26:dc:88:
                    7d:28:41:15:0d:1f:b9:44:23:c5:58:3e:78:56:bd:
                    dd:cc:fd:96:a7:ef:41:fa:2e:b7:e4:0d:74:93:9e:
                    a1:3f:c3:0b:1a:f5:2a:f8:59:ea:16:09:5a:31:48:
                    9d:08:4d:e3:70:9b:f8:ec:45:fd:c4:2b:da:30:d7:
                    28:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:85:3E:2B:AE:77:0D:8B:B9:56:BD:A2:6E:9F:8F:12:6E:F6:41:0A
            X509v3 Authority Key Identifier:
                keyid:16:4E:B7:10:D7:AA:83:CB:67:EE:2E:70:9B:4F:19:54:37:23:93:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SPUSER/0/164EB710D7AA83CB67EE2E709B4F195437239363.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/164EB710D7AA83CB67EE2E709B4F195437239363.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SPUSER/0/164EB710D7AA83CB67EE2E709B4F195437239363.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:99:f0:03:53:2a:e1:a9:85:56:ca:cc:a8:37:0e:e8:4b:b2:
         df:ca:80:03:cc:d0:41:ed:92:14:f9:88:7f:b2:28:5c:5d:9c:
         b4:57:ca:f1:33:36:10:4f:c7:66:c4:55:5a:ea:35:5e:f0:7c:
         5a:ae:ee:35:0a:c9:56:01:6b:1a:50:3d:17:cc:75:36:ff:4d:
         2f:7f:21:15:1b:5f:08:a3:d3:4b:b1:c5:e5:4b:22:4f:8f:ee:
         0b:ef:eb:35:84:99:1b:36:0c:2f:9e:f6:81:26:8d:35:52:22:
         26:fc:d2:b0:89:ab:35:98:42:d9:98:6d:89:be:2b:a2:7e:a2:
         22:01:59:2f:2e:57:d6:ef:34:59:ac:6a:d5:b9:48:79:bb:6f:
         d0:c8:cc:77:55:0f:d3:d1:13:a5:2d:ed:3c:11:8b:ad:62:bf:
         ca:57:84:cd:a3:22:39:0b:57:54:a8:0a:22:6a:cf:b2:67:7d:
         61:df:02:3d:14:eb:10:61:9d:dd:6f:b9:cb:1c:35:4a:8f:d2:
         5f:1c:34:cb:d4:b2:9e:3d:41:30:48:82:a1:09:d1:91:ca:ab:
         12:02:37:12:d7:6c:fa:b6:54:f7:ea:a2:de:68:81:47:74:57:
         7e:e7:4b:47:12:55:b9:e3:96:26:8e:c8:67:e1:61:7e:e7:7e:
         d2:8e:b3:b3
-----BEGIN CERTIFICATE-----
MIIE5DCCA8ygAwIBAgIUNt3sYkT/BU2VSWRVJw8lczZjJmcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTY0RUI3MTBEN0FBODNDQjY3RUUyRTcwOUI0RjE5NTQz
NzIzOTM2MzAeFw0yNjExMTUxNDI2NDdaFw0yNjExMTYxNTAxNDdaMDMxMTAvBgNV
BAMTKEM0ODUzRTJCQUU3NzBEOEJCOTU2QkRBMjZFOUY4RjEyNkVGNjQxMEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7NUxKJpViPbJ9hvXR655fa7+t
O8K6WBbdzJ69UvumjgtQce9qpS+R7xVEggQj0wgPByYPTxWi4RRVY8RfL2kQaH5D
99DKiTd8vfsW+zEl4WeOAQRpFyCwuMapRSEdvqsAEeRnsXXorDEzDoVvmlsbIPIl
Y+KTkf6C0f5VCzBJsyS42YIC6XilEWKmgpihVCRIFG2PCpSzc2VrJy/cTuVD+XxV
qr4CSHu3Xfn2GVPvLLy9rVO7FgYKhCDX4hILPybciH0oQRUNH7lEI8VYPnhWvd3M
/Zan70H6LrfkDXSTnqE/wwsa9Sr4WeoWCVoxSJ0ITeNwm/jsRf3EK9ow1yiFAgMB
AAGjggHuMIIB6jAdBgNVHQ4EFgQUxIU+K653DYu5Vr2ibp+PEm72QQowHwYDVR0j
BBgwFoAUFk63ENeqg8tn7i5wm08ZVDcjk2MwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud
HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU1BVU0VS
LzAvMTY0RUI3MTBEN0FBODNDQjY3RUUyRTcwOUI0RjE5NTQzNzIzOTM2My5jcmww
bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p
Yy50dy9ycGtpL1RXTklDQ0EvMS8xNjRFQjcxMEQ3QUE4M0NCNjdFRTJFNzA5QjRG
MTk1NDM3MjM5MzYzLmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz
eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU1BVU0VSLzAvMTY0RUI3MTBEN0FB
ODNDQjY3RUUyRTcwOUI0RjE5NTQzNzIzOTM2My5tZnQwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG
CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBADeZ8ANTKuGp
hVbKzKg3DuhLst/KgAPM0EHtkhT5iH+yKFxdnLRXyvEzNhBPx2bEVVrqNV7wfFqu
7jUKyVYBaxpQPRfMdTb/TS9/IRUbXwij00uxxeVLIk+P7gvv6zWEmRs2DC+e9oEm
jTVSIib80rCJqzWYQtmYbYm+K6J+oiIBWS8uV9bvNFmsatW5SHm7b9DIzHdVD9PR
E6Ut7TwRi61iv8pXhM2jIjkLV1SoCiJqz7JnfWHfAj0U6xBhnd1vucscNUqP0l8c
NMvUsp49QTBIgqEJ0ZHKqxICNxLXbPq2VPfqot5ogUd0V37nS0cSVbnjliaOyGfh
YX7nftKOs7M=
-----END CERTIFICATE-----
Generated at Sun Nov 15 17:14:05 2026 by rpki-client