Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/VERYFAST/1/C3056C5F157A7E7512FC306EFEDEF92FD12C47F1.mft
File:                     C3056C5F157A7E7512FC306EFEDEF92FD12C47F1.mft (raw, json)
Hash identifier:          3P7vrgBnH/38ksZ9cGkoj8n5EtG+3nGlEFEYigxS54E=
Subject key identifier:   75:76:FA:7E:4F:6F:BA:CD:19:C1:66:3D:65:68:35:F8:D3:B1:E0:F0
Authority key identifier: C3:05:6C:5F:15:7A:7E:75:12:FC:30:6E:FE:DE:F9:2F:D1:2C:47:F1
Certificate issuer:       /CN=C3056C5F157A7E7512FC306EFEDEF92FD12C47F1
Certificate serial:       2FAF848C11A8A8127706333B616D9A6823FDC1A3
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3056C5F157A7E7512FC306EFEDEF92FD12C47F1.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/VERYFAST/1/C3056C5F157A7E7512FC306EFEDEF92FD12C47F1.mft
Manifest number:          B8
Signing time:             Sun 20 Sep 2026 23:34:39 +0000
Manifest this update:     Sun 20 Sep 2026 23:29:39 +0000
Manifest next update:     Tue 22 Sep 2026 01:14:39 +0000
Files and hashes:         1: C3056C5F157A7E7512FC306EFEDEF92FD12C47F1.crl (hash: HDEZfZPkdTg0KDqd0QQnu4pQXM15VLSMcMZP0B1uBZE=)
                          2: 3136312e3234382e34342e302f32332d3332203d3e20313532363139.roa (hash: 4MovYHgGqWQdyUO1Av8kBHVSUNdImBmxnWEFbBFEyVc=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/VERYFAST/1/C3056C5F157A7E7512FC306EFEDEF92FD12C47F1.crl
                          rsync://rpkica.twnic.tw/rpki/VERYFAST/1/C3056C5F157A7E7512FC306EFEDEF92FD12C47F1.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3056C5F157A7E7512FC306EFEDEF92FD12C47F1.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 01:14:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:af:84:8c:11:a8:a8:12:77:06:33:3b:61:6d:9a:68:23:fd:c1:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3056C5F157A7E7512FC306EFEDEF92FD12C47F1
        Validity
            Not Before: Sep 20 23:29:39 2026 GMT
            Not After : Sep 22 01:14:39 2026 GMT
        Subject: CN=7576FA7E4F6FBACD19C1663D656835F8D3B1E0F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:dc:c6:c0:9b:8b:00:f9:23:fe:8e:cb:e3:9f:
                    60:29:1e:4a:35:38:49:67:5f:85:68:26:77:c4:bb:
                    06:c2:e7:de:bd:c5:51:06:08:e1:7b:98:6d:d6:2f:
                    47:ae:8e:af:99:82:12:04:38:84:26:60:ad:84:b2:
                    0e:b3:e5:c7:65:fb:d0:8e:a9:82:d0:54:92:63:e2:
                    e4:c7:3e:7d:fd:d5:ab:fd:58:b4:48:3d:6d:6b:0d:
                    c6:48:b5:22:9b:a1:1d:6c:7c:06:d7:f7:d2:7c:09:
                    8f:c6:81:89:ce:85:6b:f0:eb:93:ed:de:f0:04:54:
                    97:8e:76:61:cb:b2:07:c6:91:ee:d8:d5:ea:42:e4:
                    6b:12:7a:28:15:e1:b4:92:96:55:96:0a:f9:e1:77:
                    f0:07:da:b7:46:cd:cf:02:1c:c3:99:ba:44:1d:c1:
                    23:94:02:50:3a:f2:0a:c1:1b:44:5f:ef:dc:0b:08:
                    b5:25:9b:48:da:21:0b:d8:bc:4d:18:27:c4:5d:04:
                    ae:09:ba:e8:9b:99:f2:c4:54:b5:b0:e6:eb:57:d4:
                    b8:fa:76:6a:97:e9:e9:b3:de:91:23:1a:51:60:b3:
                    7c:ea:dc:c8:2d:85:5e:26:f3:ea:35:3a:ce:67:cb:
                    9c:d0:2b:60:a8:df:7e:6b:cd:0b:f7:86:d3:3c:e2:
                    ff:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:76:FA:7E:4F:6F:BA:CD:19:C1:66:3D:65:68:35:F8:D3:B1:E0:F0
            X509v3 Authority Key Identifier:
                keyid:C3:05:6C:5F:15:7A:7E:75:12:FC:30:6E:FE:DE:F9:2F:D1:2C:47:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/VERYFAST/1/C3056C5F157A7E7512FC306EFEDEF92FD12C47F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3056C5F157A7E7512FC306EFEDEF92FD12C47F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VERYFAST/1/C3056C5F157A7E7512FC306EFEDEF92FD12C47F1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:e3:e1:8b:54:65:3c:f3:5f:96:f3:a5:9e:85:39:01:0e:17:
         10:d4:98:58:f5:23:b1:44:47:9f:d4:64:e4:40:bd:3a:00:f5:
         d6:a5:7f:98:9e:55:99:23:e7:4b:e0:37:9a:24:8f:6a:bf:fb:
         f5:e0:ce:e2:f0:91:58:bb:56:5e:04:0a:c6:8a:2d:4e:65:ea:
         b1:34:56:b3:29:08:87:dc:4e:a6:b0:2b:a5:26:f5:31:7b:af:
         3b:b6:bf:ee:1d:8d:d5:50:b4:1b:94:00:c2:b4:43:77:16:62:
         b7:88:2b:1c:7d:db:a1:e1:89:3d:a8:e4:d9:7b:98:6d:6d:ae:
         87:d8:d6:d0:31:da:eb:c0:f5:0a:5f:ac:4c:17:c1:8e:a6:af:
         a5:6c:51:e0:2c:ce:17:02:26:09:7d:2a:b8:05:f0:c7:ca:5f:
         e2:17:c5:59:88:f2:00:f2:a9:6b:5c:2a:56:03:9d:74:e0:b2:
         9a:e3:39:ea:1d:44:a6:65:95:e2:09:27:66:0a:0d:1e:66:17:
         cb:e7:dd:e3:c7:90:a5:35:06:43:d5:bb:b1:99:55:eb:39:fd:
         3a:eb:78:b1:23:81:99:b0:22:20:2a:5a:97:d1:96:6d:48:46:
         b6:a4:83:3e:d0:63:31:f9:77:9f:a0:0e:ea:f0:32:fd:25:3d:
         7f:9a:55:12
-----BEGIN CERTIFICATE-----
MIIE6DCCA9CgAwIBAgIUL6+EjBGoqBJ3BjM7YW2aaCP9waMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzMwNTZDNUYxNTdBN0U3NTEyRkMzMDZFRkVERUY5MkZE
MTJDNDdGMTAeFw0yNjA5MjAyMzI5MzlaFw0yNjA5MjIwMTE0MzlaMDMxMTAvBgNV
BAMTKDc1NzZGQTdFNEY2RkJBQ0QxOUMxNjYzRDY1NjgzNUY4RDNCMUUwRjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk3MbAm4sA+SP+jsvjn2ApHko1
OElnX4VoJnfEuwbC5969xVEGCOF7mG3WL0eujq+ZghIEOIQmYK2Esg6z5cdl+9CO
qYLQVJJj4uTHPn391av9WLRIPW1rDcZItSKboR1sfAbX99J8CY/GgYnOhWvw65Pt
3vAEVJeOdmHLsgfGke7Y1epC5GsSeigV4bSSllWWCvnhd/AH2rdGzc8CHMOZukQd
wSOUAlA68grBG0Rf79wLCLUlm0jaIQvYvE0YJ8RdBK4JuuibmfLEVLWw5utX1Lj6
dmqX6emz3pEjGlFgs3zq3MgthV4m8+o1Os5ny5zQK2Co335rzQv3htM84v+fAgMB
AAGjggHyMIIB7jAdBgNVHQ4EFgQUdXb6fk9vus0ZwWY9ZWg1+NOx4PAwHwYDVR0j
BBgwFoAUwwVsXxV6fnUS/DBu/t75L9EsR/EwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud
HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVkVSWUZB
U1QvMS9DMzA1NkM1RjE1N0E3RTc1MTJGQzMwNkVGRURFRjkyRkQxMkM0N0YxLmNy
bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3
bmljLnR3L3Jwa2kvVFdOSUNDQS8wL0MzMDU2QzVGMTU3QTdFNzUxMkZDMzA2RUZF
REVGOTJGRDEyQzQ3RjEuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU
cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9WRVJZRkFTVC8xL0MzMDU2QzVG
MTU3QTdFNzUxMkZDMzA2RUZFREVGOTJGRDEyQzQ3RjEubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCY4+GL
VGU881+W86WehTkBDhcQ1JhY9SOxREef1GTkQL06APXWpX+YnlWZI+dL4DeaJI9q
v/v14M7i8JFYu1ZeBArGii1OZeqxNFazKQiH3E6msCulJvUxe687tr/uHY3VULQb
lADCtEN3FmK3iCscfduh4Yk9qOTZe5htba6H2NbQMdrrwPUKX6xMF8GOpq+lbFHg
LM4XAiYJfSq4BfDHyl/iF8VZiPIA8qlrXCpWA5104LKa4znqHUSmZZXiCSdmCg0e
ZhfL593jx5ClNQZD1buxmVXrOf0663ixI4GZsCIgKlqX0ZZtSEa2pIM+0GMx+Xef
oA7q8DL9JT1/mlUS
-----END CERTIFICATE-----
Generated at Mon Sep 21 16:18:51 2026 by rpki-client