Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/TISNET/1/2076FD1E205EAAA79648391917551245C47976BF.mft
File:                     2076FD1E205EAAA79648391917551245C47976BF.mft (raw, json)
Hash identifier:          G1pvvKzU4YLKRVdobIxbsn7aW6/3awhS/hEr5rZuoFw=
Subject key identifier:   D3:B0:22:BB:E1:6F:6E:E8:E4:50:19:FB:70:2E:EA:8C:2D:E8:7F:CE
Authority key identifier: 20:76:FD:1E:20:5E:AA:A7:96:48:39:19:17:55:12:45:C4:79:76:BF
Certificate issuer:       /CN=2076FD1E205EAAA79648391917551245C47976BF
Certificate serial:       432256995435460E5AFB2CF6A539EB14FDA0EF8C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/2076FD1E205EAAA79648391917551245C47976BF.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TISNET/1/2076FD1E205EAAA79648391917551245C47976BF.mft
Manifest number:          B3
Signing time:             Mon 21 Sep 2026 04:45:47 +0000
Manifest this update:     Mon 21 Sep 2026 04:40:47 +0000
Manifest next update:     Tue 22 Sep 2026 05:33:47 +0000
Files and hashes:         1: 3133392e3232332e302e302f31362d3234203d3e2037353335.roa (hash: 2M8Snc2Vnx2xHHe0U+3Y4YWbG6tGQcMbc/MaaHa9LV0=)
                          2: 2076FD1E205EAAA79648391917551245C47976BF.crl (hash: ejde+pH5AX9DDHAuXMKvHMsNSfq3OL4S64sDavKP6ao=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TISNET/1/2076FD1E205EAAA79648391917551245C47976BF.crl
                          rsync://rpkica.twnic.tw/rpki/TISNET/1/2076FD1E205EAAA79648391917551245C47976BF.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/2076FD1E205EAAA79648391917551245C47976BF.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 05:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:22:56:99:54:35:46:0e:5a:fb:2c:f6:a5:39:eb:14:fd:a0:ef:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2076FD1E205EAAA79648391917551245C47976BF
        Validity
            Not Before: Sep 21 04:40:47 2026 GMT
            Not After : Sep 22 05:33:47 2026 GMT
        Subject: CN=D3B022BBE16F6EE8E45019FB702EEA8C2DE87FCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:45:e6:09:37:b8:81:db:ce:42:c4:c1:e8:40:
                    7e:f9:f5:ec:0e:a3:6b:e7:26:87:8e:33:26:33:12:
                    89:db:ef:7a:14:87:f3:84:f8:02:fc:07:cd:0a:61:
                    df:a4:18:8c:15:a1:1b:5d:31:45:c8:40:56:e1:af:
                    aa:2c:db:dc:ac:cf:43:af:99:f8:ba:14:cf:f3:93:
                    e1:76:ab:48:6c:fb:15:7d:94:1a:1e:13:e3:0d:0c:
                    ba:be:f3:c5:e6:a3:b4:47:db:fd:5b:30:5f:34:3c:
                    71:61:2a:e3:a2:23:d1:45:09:04:7b:37:61:24:34:
                    89:af:a0:f2:f7:ab:65:a4:fa:92:7a:58:2c:f7:7c:
                    bb:1a:ad:7d:15:97:99:dd:c5:0f:09:0a:c7:d0:2a:
                    82:e4:77:fc:5b:b5:7c:1a:d3:fa:ef:90:2a:03:1f:
                    1c:68:ff:2d:33:e8:5f:c0:98:8a:c6:a7:c4:93:58:
                    86:02:18:d0:36:13:5a:48:5b:20:b2:89:25:4a:ab:
                    82:42:cb:24:e3:60:cb:0d:d5:23:3d:a0:ac:4d:23:
                    80:35:86:19:35:87:53:5a:9b:7e:92:a1:e1:18:ed:
                    cb:96:e0:c6:53:79:51:f4:31:a8:6c:b9:09:89:99:
                    c1:22:a8:96:da:24:e8:85:7d:63:6c:20:7c:27:ff:
                    a8:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:B0:22:BB:E1:6F:6E:E8:E4:50:19:FB:70:2E:EA:8C:2D:E8:7F:CE
            X509v3 Authority Key Identifier:
                keyid:20:76:FD:1E:20:5E:AA:A7:96:48:39:19:17:55:12:45:C4:79:76:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TISNET/1/2076FD1E205EAAA79648391917551245C47976BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/2076FD1E205EAAA79648391917551245C47976BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TISNET/1/2076FD1E205EAAA79648391917551245C47976BF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:46:dd:80:3e:ef:43:36:ce:93:de:4d:08:6e:6a:25:bb:77:
         12:ff:ee:52:dc:c8:bf:43:e1:7f:32:5a:53:11:c3:4b:22:76:
         ab:53:09:e3:61:d0:3a:2d:3e:41:7d:d9:c1:40:96:a4:70:c6:
         c0:38:81:9d:e9:42:f9:4c:9f:f1:05:3e:6f:6a:03:a2:9a:de:
         95:0c:16:ff:8f:9b:85:50:96:ed:71:be:85:93:b7:28:3d:55:
         45:29:88:ec:1b:56:ed:73:20:93:b7:bc:50:c0:c6:20:79:48:
         3a:53:e7:71:07:e8:24:b7:6e:b1:86:9d:69:5d:a1:e0:57:90:
         7b:d7:c1:8e:c1:b8:06:15:30:e6:e5:fc:09:9b:16:2e:17:a5:
         e6:b0:44:d8:73:60:af:12:5a:a4:7a:db:dd:28:70:11:63:74:
         95:8e:52:30:cd:58:68:80:ea:bd:ae:d4:c3:93:cf:38:41:7c:
         d5:e4:d1:37:95:20:34:f0:83:a8:e9:4c:d8:7c:d2:e7:f3:ff:
         4a:4c:10:b3:f2:b6:62:5e:77:91:e3:77:a1:c8:0e:51:a1:6a:
         51:f1:a2:a5:dd:2b:f2:d1:e8:3f:41:ab:d9:ac:ce:25:27:7f:
         16:cf:6a:9e:57:b8:c7:b9:40:e9:65:f8:4f:3c:f9:f9:92:b9:
         c5:31:6e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:25:00 2026 by rpki-client