Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/VERYFAST/1/C3056C5F157A7E7512FC306EFEDEF92FD12C47F1.mft
File:                     C3056C5F157A7E7512FC306EFEDEF92FD12C47F1.mft (raw, json)
Hash identifier:          HgwN9n991YZccUs9bYr1I9Ki+rMkDwQ9DO2XyjbtZL8=
Subject key identifier:   83:CA:0A:53:B8:38:06:E3:62:0F:38:14:C3:1D:7D:9B:B4:83:29:75
Authority key identifier: C3:05:6C:5F:15:7A:7E:75:12:FC:30:6E:FE:DE:F9:2F:D1:2C:47:F1
Certificate issuer:       /CN=C3056C5F157A7E7512FC306EFEDEF92FD12C47F1
Certificate serial:       37E9F42F7DD104B6E5F072AF1A49395E27485DC8
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3056C5F157A7E7512FC306EFEDEF92FD12C47F1.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/VERYFAST/1/C3056C5F157A7E7512FC306EFEDEF92FD12C47F1.mft
Manifest number:          FB
Signing time:             Tue 10 Nov 2026 02:32:08 +0000
Manifest this update:     Tue 10 Nov 2026 02:27:08 +0000
Manifest next update:     Wed 11 Nov 2026 06:24:08 +0000
Files and hashes:         1: 3136312e3234382e34342e302f32332d3332203d3e20313532363139.roa (hash: 4MovYHgGqWQdyUO1Av8kBHVSUNdImBmxnWEFbBFEyVc=)
                          2: C3056C5F157A7E7512FC306EFEDEF92FD12C47F1.crl (hash: FHz5MnQoS4uAR3laSTwGhZe7MbQuHLWFrlcHM6IqmN0=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/VERYFAST/1/C3056C5F157A7E7512FC306EFEDEF92FD12C47F1.crl
                          rsync://rpkica.twnic.tw/rpki/VERYFAST/1/C3056C5F157A7E7512FC306EFEDEF92FD12C47F1.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3056C5F157A7E7512FC306EFEDEF92FD12C47F1.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 11 Nov 2026 06:24:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:e9:f4:2f:7d:d1:04:b6:e5:f0:72:af:1a:49:39:5e:27:48:5d:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3056C5F157A7E7512FC306EFEDEF92FD12C47F1
        Validity
            Not Before: Nov 10 02:27:08 2026 GMT
            Not After : Nov 11 06:24:08 2026 GMT
        Subject: CN=83CA0A53B83806E3620F3814C31D7D9BB4832975
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ce:de:0b:ec:27:71:80:79:0f:39:b2:8f:e7:
                    84:90:03:82:72:7b:97:03:bb:e9:44:48:01:f8:69:
                    1e:30:bc:53:bc:68:4a:7e:af:4e:d3:70:0c:dd:fe:
                    5c:8f:b8:77:12:82:54:ff:06:c4:49:c7:d8:f0:7e:
                    ee:5d:98:6c:12:3c:0d:1a:69:73:d7:52:9a:c8:7c:
                    76:c9:84:e7:2d:28:39:17:39:c1:db:22:3c:11:18:
                    4c:f1:cb:a2:b3:09:9a:39:24:2f:84:c6:59:91:ef:
                    e5:6d:2f:73:6b:18:0a:ad:20:02:bf:d2:4d:fa:82:
                    fd:16:85:13:81:e1:5d:0a:8d:34:b4:12:64:b4:4b:
                    c9:4b:60:8c:54:c5:a0:8f:c9:db:3b:41:f8:59:e5:
                    e3:e1:d9:6f:bc:23:ff:2d:64:65:82:fc:11:47:95:
                    1f:fa:c0:c9:0f:5e:6c:02:47:01:03:bd:21:19:de:
                    a6:2b:c1:e7:39:12:a9:7d:15:63:15:61:30:fb:cc:
                    b8:2c:0e:62:90:4e:20:91:68:bd:36:ab:81:3b:fb:
                    c2:c0:9f:2d:f8:17:5f:42:1d:34:80:c6:8d:e2:dc:
                    cf:d3:50:72:57:08:59:8e:1d:5e:22:4e:1f:9b:84:
                    31:23:a9:ee:37:4d:de:e0:f8:b8:8e:bc:1d:40:9f:
                    dd:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:CA:0A:53:B8:38:06:E3:62:0F:38:14:C3:1D:7D:9B:B4:83:29:75
            X509v3 Authority Key Identifier:
                keyid:C3:05:6C:5F:15:7A:7E:75:12:FC:30:6E:FE:DE:F9:2F:D1:2C:47:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/VERYFAST/1/C3056C5F157A7E7512FC306EFEDEF92FD12C47F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3056C5F157A7E7512FC306EFEDEF92FD12C47F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VERYFAST/1/C3056C5F157A7E7512FC306EFEDEF92FD12C47F1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:6e:d5:53:30:fa:a2:6d:c4:13:73:90:38:c9:dc:b9:29:f4:
         af:88:36:37:f7:20:34:94:ef:ed:0d:f9:3a:81:e8:a4:76:a3:
         6d:6c:81:c1:7c:7d:8c:16:17:17:cd:9e:ed:74:f7:fb:82:04:
         5f:16:b6:31:fc:07:fb:26:0c:ed:19:7b:5c:52:ea:cc:92:96:
         a4:9e:f6:bf:f7:cb:8e:20:cf:c3:b5:fb:5f:cc:cd:1d:0e:18:
         a9:11:57:a4:0f:17:38:4d:2a:b7:2e:2a:89:f6:fb:e7:2d:9b:
         c6:2c:eb:fc:c1:88:ab:00:4e:57:81:53:10:7d:e2:0d:06:66:
         69:20:a9:41:17:a7:1e:34:12:9d:41:28:d3:e9:d8:31:62:c2:
         fc:b2:bb:fb:eb:03:eb:fe:6c:dc:8f:bc:5c:b5:09:0d:a7:11:
         4c:ae:9f:b1:81:c4:82:0f:f3:3e:ed:1b:62:5b:14:85:aa:10:
         12:06:65:6e:4b:3d:b6:a5:6d:2c:b0:cf:89:70:6c:a9:e9:f7:
         a6:84:41:43:a9:45:f7:10:a5:31:f6:27:2b:44:09:17:46:92:
         d0:e8:ff:bf:e2:9f:ae:2d:3b:92:30:2e:a9:8c:84:71:f1:5b:
         97:2a:d1:5b:cb:65:a4:1f:d4:38:88:7d:1f:8b:d9:6d:e2:b3:
         a3:ae:f6:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 14:01:15 2026 by rpki-client