Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/SYSNET/0/EDE7389B6D9A335D6B6FDD4286DB79011F87554B.mft
File:                     EDE7389B6D9A335D6B6FDD4286DB79011F87554B.mft (raw, json)
Hash identifier:          QX8/NdELaodSA4XOyGSRXx9/0X3QnUXHI8Ld88RZClc=
Subject key identifier:   02:A2:DC:AB:B9:2A:A0:7D:5C:E8:C9:B2:8F:A5:D2:23:4E:04:E1:49
Authority key identifier: ED:E7:38:9B:6D:9A:33:5D:6B:6F:DD:42:86:DB:79:01:1F:87:55:4B
Certificate issuer:       /CN=EDE7389B6D9A335D6B6FDD4286DB79011F87554B
Certificate serial:       02187A70C0A9D6EBFEBECF7E661A207FAE7137D7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EDE7389B6D9A335D6B6FDD4286DB79011F87554B.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SYSNET/0/EDE7389B6D9A335D6B6FDD4286DB79011F87554B.mft
Manifest number:          BE
Signing time:             Sun 20 Sep 2026 01:03:07 +0000
Manifest this update:     Sun 20 Sep 2026 00:58:07 +0000
Manifest next update:     Mon 21 Sep 2026 03:47:07 +0000
Files and hashes:         1: 3231302e36332e302e302f31392d3234203d3e2034373833.roa (hash: qlDALeqbVpWwwXPI8oaegagYfsk3fuVfubVcHj5iuSo=)
                          2: 3231302e36372e3134302e302f32332d3234203d3e20323133343330.roa (hash: PWfagcGRVfc9vIBMRwdYrMzeVSU41TMRpQjvJE8vwJ4=)
                          3: 3231302e36372e3134302e302f32332d3234203d3e20313532363236.roa (hash: U41ACqKjqLv3A2k99iT0Zw/yVaptjAgUgR8Sqx4uySY=)
                          4: EDE7389B6D9A335D6B6FDD4286DB79011F87554B.crl (hash: 8W2XqZZIxVCy6hdm+stwhz2XkSpS+cBFvEwxHBgV+dU=)
                          5: 3230322e33392e39362e302f32302d3234203d3e2034373833.roa (hash: Olj5ogCJ+KENEHzp0UId7+1QWnhfQbZROWFWrZJLsV4=)
                          6: 3231302e36372e3134322e302f32332d3234203d3e20313532363236.roa (hash: COn+17kvcmBferjEo4apmiCxVD7ZgvXfzUS4qgKfAGM=)
                          7: 3231302e36372e31362e302f32302d3234203d3e2034373833.roa (hash: OOqyxUF2Eo0uwi9ygYamcvINthWEw9KhH9b8voFJxlo=)
                          8: 3231302e36372e3131322e302f32302d3234203d3e2034373833.roa (hash: BM8k9MBagiU8IsLNqTHPl5SkAPeVPuJgXWsdfYnE6C4=)
                          9: 3231302e36372e33322e302f31392d3234203d3e2034373833.roa (hash: R+3V0Ek3S/TEEqG6fzzq9tRHndjt0eO+HCUwIKRvy/g=)
                          10: 3231302e36332e33322e302f31392d3234203d3e2034373833.roa (hash: IOBRQRi5x1l7RkWh7H2TjOm1bcz8SF4MkljnqrXFDYE=)
                          11: 3231302e36372e3134322e302f32332d3234203d3e20323133343330.roa (hash: 8irft8AZ2L+yYQm7krEESN56CuIELN8EE5YzPMGirnE=)
                          12: 3231302e36372e3132382e302f32312d3234203d3e2034373833.roa (hash: P4roJwDVKM9TY4KBoWKPfagZ+CcKwN77hxj/5KRPjoY=)
                          13: 3231302e36372e302e302f32302d3234203d3e2034373833.roa (hash: wjwfBFHpMOaJa38KIrYl3Psjw0WhKS7Yo8OYk8jCybg=)
                          14: 323430353a6130303a3a2f33322d3332203d3e2034373833.roa (hash: w96CcK3EcuIT7W/c98Q79QR5Oc7Yp+VCg1caJCBvd0k=)
                          15: 3231302e36372e3133362e302f32322d3234203d3e2034373833.roa (hash: NxbEYku6+Yeb1boQaTVe2CO1V589t+LUg0puIeCsP4U=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SYSNET/0/EDE7389B6D9A335D6B6FDD4286DB79011F87554B.crl
                          rsync://rpkica.twnic.tw/rpki/SYSNET/0/EDE7389B6D9A335D6B6FDD4286DB79011F87554B.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EDE7389B6D9A335D6B6FDD4286DB79011F87554B.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 21 Sep 2026 03:47:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:18:7a:70:c0:a9:d6:eb:fe:be:cf:7e:66:1a:20:7f:ae:71:37:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDE7389B6D9A335D6B6FDD4286DB79011F87554B
        Validity
            Not Before: Sep 20 00:58:07 2026 GMT
            Not After : Sep 21 03:47:07 2026 GMT
        Subject: CN=02A2DCABB92AA07D5CE8C9B28FA5D2234E04E149
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:22:1c:cf:83:48:af:e2:58:89:3e:22:e0:82:
                    ce:1e:90:c1:10:dd:ee:dc:14:c4:31:a4:ec:33:62:
                    f9:5b:eb:f6:0d:df:4d:40:ab:ce:a7:27:45:ac:94:
                    c4:84:ba:8a:13:85:70:2f:22:08:0b:c3:84:51:3d:
                    c5:6d:e4:3f:61:9c:ba:53:52:7b:4e:77:0f:50:bf:
                    50:8f:6c:28:60:63:04:61:f4:56:10:00:9d:10:d3:
                    24:fe:64:e0:da:80:b6:d8:73:b8:b9:b7:96:e4:b0:
                    06:81:d6:3e:0e:fb:4b:d8:1d:23:b4:3b:27:67:75:
                    07:3b:d4:96:63:c3:44:c8:44:f8:f5:22:48:81:9f:
                    21:b3:20:ac:53:87:76:8a:b2:d7:d5:93:85:ea:05:
                    a1:04:4b:de:a5:0e:6e:e5:82:e7:21:86:44:77:c7:
                    0b:96:0a:c6:71:01:36:ff:62:73:49:fe:fc:41:90:
                    3d:6c:fe:18:02:27:45:5b:cb:62:41:c0:32:f3:dd:
                    a0:78:3f:86:de:80:da:48:c6:d4:38:00:78:77:7e:
                    a1:e4:81:e4:f2:d7:94:e3:74:43:66:af:97:a1:dd:
                    5e:9b:5c:f8:25:82:25:b1:94:b8:7d:a0:f9:c8:fd:
                    e9:dc:c7:58:fd:15:4c:5f:15:14:40:ea:8c:53:a8:
                    9d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:A2:DC:AB:B9:2A:A0:7D:5C:E8:C9:B2:8F:A5:D2:23:4E:04:E1:49
            X509v3 Authority Key Identifier:
                keyid:ED:E7:38:9B:6D:9A:33:5D:6B:6F:DD:42:86:DB:79:01:1F:87:55:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SYSNET/0/EDE7389B6D9A335D6B6FDD4286DB79011F87554B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EDE7389B6D9A335D6B6FDD4286DB79011F87554B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SYSNET/0/EDE7389B6D9A335D6B6FDD4286DB79011F87554B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:07:45:c2:57:c7:dd:fa:83:eb:e1:f4:70:4a:33:ee:fe:a7:
         31:3a:1d:1e:c8:d7:0d:76:45:72:2b:ca:14:85:67:0c:29:5f:
         de:f6:64:2f:46:8d:7f:9b:1e:45:3d:a6:46:83:e1:ef:bf:3c:
         20:7b:69:5f:be:19:85:48:18:7a:62:3d:ed:3b:87:a9:22:1d:
         aa:b6:5c:bd:04:58:2b:51:b8:7f:c4:42:f5:d6:08:3e:13:84:
         5e:73:53:ec:61:97:b3:a7:a3:fc:4d:ab:8b:0b:af:36:d9:fe:
         59:c9:2f:4f:3d:eb:74:5d:6f:f7:d4:9c:60:e4:16:1f:d7:f7:
         31:9a:38:08:43:2d:ba:44:59:86:31:77:af:af:83:45:d2:7a:
         a4:61:18:b3:32:c8:a8:e6:e0:49:72:17:32:8e:fc:e5:eb:2b:
         6e:ea:a5:13:b3:d5:1e:0f:d8:79:61:a9:46:a8:c5:d8:43:9a:
         2d:3f:ee:bc:4f:ad:ea:9e:bb:82:59:08:ca:31:c6:fd:c9:08:
         77:ce:3a:53:ee:4d:11:35:0f:e8:d8:a9:77:06:2f:da:2f:96:
         8d:cc:0f:1d:ab:7e:f9:d2:e7:72:d8:90:c2:89:60:28:bd:54:
         9a:9f:16:ee:7e:cb:1f:69:fb:24:69:8f:66:fe:72:e8:d7:e4:
         44:6e:14:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:11:47 2026 by rpki-client