Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft
File:                     C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft (raw, json)
Hash identifier:          CXQNF/desV8KxfnEtYozAfZHxDZAKl/lVYBPZFpJK3w=
Subject key identifier:   16:04:7A:BF:AA:E9:9D:63:0C:42:CC:1C:6B:D9:4D:A4:C3:64:16:66
Authority key identifier: C4:9B:AE:24:30:BE:EC:35:4C:1B:14:F2:26:E7:61:FC:9B:DC:F0:05
Certificate issuer:       /CN=A91BDB290000/serialNumber=C49BAE2430BEEC354C1B14F226E761FC9BDCF005
Certificate serial:       4AEAACEAA05D91486C4D7CD24CC462EC3B9AC9B0
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft
Manifest number:          0293
Signing time:             Sun 20 Sep 2026 07:18:58 +0000
Manifest this update:     Sun 20 Sep 2026 07:13:58 +0000
Manifest next update:     Mon 21 Sep 2026 10:52:58 +0000
Files and hashes:         1: C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl (hash: Kv43mX4GFNyIUqmxN1YPwyfaxkr16mEpYW4GCdQdb7U=)
                          2: 71E534018547D77B65EBCD0FC4941DC8113FAEE3.cer (hash: e/12Bvs4XBSRwhh9g+zZp9qn/cEuRAq2sYTeeh5SElU=)
                          3: 5F225958DB67E3418BFBE293BFD25E6F6A9346B9.cer (hash: wYdtix/LDee8ZEJGiTxD5AqF7ZWjOoSZiL6WSmE5qzo=)
                          4: BDC7715D29F4E43198D59315B71674EE9F648F6D.cer (hash: mHwEYS1tNelL6RV/T7poIrm2xe//+2sBhpMulCadIwE=)
                          5: 1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.cer (hash: I5RrhNzkFBB9aTAVEwcT8m+Fq6yg/7jrMob8Rgy03bQ=)
                          6: BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.cer (hash: Wgiiza2OtZGJQUX76W3y7Jpru4jNxqcQx1dg64cWfx0=)
                          7: 138A054AE20232FE74DA41A7D1FB6684BFF8B631.cer (hash: Zo39dsWqNkolqaKhWzlf8458SfxFo6DnsdWakso6pqc=)
                          8: 9F397B838061280C2F2A887AC9D64012310492D8.cer (hash: AkAR+lSILTN1pLkO4LJRfr6uv+VMbaYKmt4kHAXjuR0=)
                          9: 061E60E9FDA5A25EDC961572A4CBA8C539D780AF.cer (hash: etK9ChY/67xJMPxpSS2bELv6+079wOhz5Owjed+7V9s=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 21 Sep 2026 10:52:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:ea:ac:ea:a0:5d:91:48:6c:4d:7c:d2:4c:c4:62:ec:3b:9a:c9:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000, serialNumber=C49BAE2430BEEC354C1B14F226E761FC9BDCF005
        Validity
            Not Before: Sep 20 07:13:58 2026 GMT
            Not After : Sep 21 10:52:58 2026 GMT
        Subject: CN=16047ABFAAE99D630C42CC1C6BD94DA4C3641666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:83:08:a1:4c:6d:78:58:2f:51:9b:16:d9:77:
                    99:da:63:5b:52:d5:1e:61:ab:7d:1e:9a:b1:59:f5:
                    9c:6a:41:4f:49:c1:16:c3:79:d0:bd:d7:47:7d:a1:
                    ea:0c:35:00:9f:54:86:ce:40:fc:15:e0:37:b7:89:
                    50:d0:24:62:a1:21:8d:47:6c:ca:40:cc:28:5a:29:
                    89:aa:bd:d6:1d:0b:10:02:6d:1c:b8:4c:a7:a6:2f:
                    6b:6c:96:33:b1:bb:7c:2e:57:a0:f9:9d:52:33:59:
                    1b:8a:74:60:f3:b7:82:eb:51:62:13:a5:aa:42:de:
                    1f:87:2a:ce:21:15:4f:71:2a:97:a6:fa:c8:cc:76:
                    cf:f5:fe:1f:5f:0b:81:bc:56:3d:7e:0c:6c:1f:04:
                    ec:4b:c7:7b:fb:e4:fc:f8:ae:95:40:9d:d2:4d:26:
                    d1:e1:a7:88:6f:f0:31:6e:73:0b:95:4a:1a:2d:99:
                    cd:49:df:48:a8:ef:43:08:ce:5e:0e:ad:81:88:7d:
                    08:6a:1f:8b:e3:95:68:d4:0c:ef:0f:e7:5b:42:84:
                    35:20:96:51:95:68:dc:85:c9:9f:8e:65:b9:00:94:
                    e5:48:f7:0c:c0:93:9e:83:02:df:ba:80:0f:4b:8e:
                    a9:06:c8:21:17:25:62:5b:59:e5:b5:a4:94:c5:6e:
                    de:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:04:7A:BF:AA:E9:9D:63:0C:42:CC:1C:6B:D9:4D:A4:C3:64:16:66
            X509v3 Authority Key Identifier:
                keyid:C4:9B:AE:24:30:BE:EC:35:4C:1B:14:F2:26:E7:61:FC:9B:DC:F0:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:e8:92:69:db:f7:fd:a0:41:32:34:02:75:fb:12:c6:ba:4c:
         5f:30:66:9c:d5:e8:21:be:76:2a:21:69:56:66:aa:db:c8:5c:
         57:15:31:38:40:02:ed:38:59:18:a3:fb:41:3a:3e:43:36:37:
         71:17:37:eb:80:bc:e2:a2:26:d6:d6:60:aa:f3:01:ef:43:fd:
         51:90:4c:af:2f:73:3c:a3:d2:e3:63:85:86:5b:5e:fb:fe:db:
         d9:82:84:e7:68:73:e9:cc:d2:53:e7:55:1e:67:2c:0c:0c:22:
         4a:36:69:b5:0d:50:59:fb:60:f3:23:84:a7:83:6b:06:cb:d7:
         11:f0:de:2a:a6:00:2b:24:58:0a:3f:2c:65:2b:a0:2b:32:75:
         7e:b0:5e:7c:50:f2:d5:e9:4d:18:3c:16:63:99:83:13:87:a8:
         f9:ea:de:ce:d6:22:9b:1b:6c:4a:44:3a:c4:12:09:f9:21:45:
         d5:78:27:83:76:dd:61:dd:28:d0:9a:27:4b:70:0a:1a:17:f4:
         46:9e:85:32:c8:54:08:54:fa:0a:32:ac:48:ea:d0:b7:7f:4e:
         e2:18:0e:2a:8c:40:81:a6:c3:30:1a:4e:6e:f7:44:1c:77:a7:
         1b:91:ef:7f:ce:4e:e0:51:e4:66:02:28:b2:03:65:31:dc:4e:
         31:68:f4:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 01:13:09 2026 by rpki-client